[mod_cluster-issues] [JBoss JIRA] (MODCLUSTER-338) Advertize adds a message digest even if security key is not configured
Radoslav Husar (JIRA)
jira-events at lists.jboss.org
Fri Aug 30 11:04:03 EDT 2013
[ https://issues.jboss.org/browse/MODCLUSTER-338?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Radoslav Husar updated MODCLUSTER-338:
--------------------------------------
Status: Resolved (was: Pull Request Sent)
Resolution: Done
Merged.
> Advertize adds a message digest even if security key is not configured
> ----------------------------------------------------------------------
>
> Key: MODCLUSTER-338
> URL: https://issues.jboss.org/browse/MODCLUSTER-338
> Project: mod_cluster
> Issue Type: Bug
> Affects Versions: 1.2.4.Final
> Reporter: Radoslav Husar
> Assignee: Radoslav Husar
> Fix For: 1.3.0.Alpha1
>
>
> As wireshark hints, the message digest is always included in the message even if the advertise security key is not configured.
> This would not be such a problem if the salt actually used wouldn't be random bits from the memory.
> This renders the digest completely useless since it can never be verified.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
More information about the mod_cluster-issues
mailing list