etan39
/
cloudstack
mirror of https://github.com/apache/cloudstack.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
cloudstack/server
History
Pierre-Yves Ritschard 7f45df3593 Use constant-time comparison functions when checking signatures 
This limits the likeliness of timing attacks against the API.
See http://codahale.com/a-lesson-in-timing-attacks/ for the
full rationale.

Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>

Conflicts:
	server/src/com/cloud/api/ApiServer.java
	server/src/com/cloud/user/AccountManagerImpl.java

(cherry picked from commit 9b4e39e837)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
 		2015-01-14 20:40:30 +05:30
..
conf CLOUDSTACK-7702 added keytool to sudoers modification specs 2014-10-14 10:05:43 +02:00
resources CLOUDSTACK-7144: No GSLB provider is available during assigning load 2014-12-11 20:40:13 +05:30
scripts License header updates for the server folder. 2012-08-03 09:41:27 -04:00
src Use constant-time comparison functions when checking signatures 2015-01-14 20:40:30 +05:30
test CLOUDSTACK-7144: No GSLB provider is available during assigning load 2014-12-11 20:40:13 +05:30
pom.xml Updating pom.xml version numbers for release 4.4.3-SNAPSHOT 2014-11-25 15:36:02 +01:00