etan39
/
cloudstack
mirror of https://github.com/apache/cloudstack.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
cloudstack/server
History
Pierre-Yves Ritschard bee99e5992 Use constant-time comparison functions when checking signatures 
This limits the likeliness of timing attacks against the API.
See http://codahale.com/a-lesson-in-timing-attacks/ for the
full rationale.

Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>

Conflicts:
	server/src/com/cloud/api/ApiServer.java
	server/src/com/cloud/user/AccountManagerImpl.java

(cherry picked from commit 9b4e39e837)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>

Conflicts:
	server/src/com/cloud/api/ApiServer.java
	server/src/com/cloud/user/AccountManagerImpl.java
 		2015-01-14 20:46:18 +05:30
..
conf Summary: Updated sudoers approved commands for cloud user 2013-10-23 13:42:16 -07:00
resources CLOUDSTACK-7144: No GSLB provider is available during assigning load 2014-11-25 19:50:37 +05:30
scripts License header updates for the server folder. 2012-08-03 09:41:27 -04:00
src Use constant-time comparison functions when checking signatures 2015-01-14 20:46:18 +05:30
test Fix build regression from 08e5993a45 2014-12-05 17:33:31 +05:30
pom.xml cloudstack: change version to 4.3.2 2014-12-11 19:08:36 +05:30