From 2763218ce18fe83e90ee60809019ef25711a3121 Mon Sep 17 00:00:00 2001 From: nvazquez Date: Mon, 15 Aug 2022 11:43:24 -0300 Subject: [PATCH] Fix security hotspot --- .../java/com/cloud/consoleproxy/ConsoleAccessManagerImpl.java | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/server/src/main/java/com/cloud/consoleproxy/ConsoleAccessManagerImpl.java b/server/src/main/java/com/cloud/consoleproxy/ConsoleAccessManagerImpl.java index 1a485625f15..419dcfdbe8f 100644 --- a/server/src/main/java/com/cloud/consoleproxy/ConsoleAccessManagerImpl.java +++ b/server/src/main/java/com/cloud/consoleproxy/ConsoleAccessManagerImpl.java @@ -369,13 +369,13 @@ public class ConsoleAccessManagerImpl extends ManagerBase implements ConsoleAcce String params = "host=" + host + "&port=" + port + "&sid=" + sid + "&tag=" + tag + "&session=" + sessionUuid; try { - Mac mac = Mac.getInstance("HmacSHA1"); + Mac mac = Mac.getInstance("SHA-512"); long ts = normalizedHashTime.getTime(); ts = ts / 60000; // round up to 1 minute String secretKey = s_keysMgr.getHashKey(); - SecretKeySpec keySpec = new SecretKeySpec(secretKey.getBytes(), "HmacSHA1"); + SecretKeySpec keySpec = new SecretKeySpec(secretKey.getBytes(), mac.getAlgorithm()); mac.init(keySpec); mac.update(params.getBytes()); mac.update(String.valueOf(ts).getBytes());