]> source.dussan.org Git - jgit.git/commit
Use a secure random generator to seed nonce for digest authentication 76/122476/1
authorMatthias Sohn <matthias.sohn@sap.com>
Fri, 11 May 2018 12:06:53 +0000 (14:06 +0200)
committerMatthias Sohn <matthias.sohn@sap.com>
Fri, 11 May 2018 12:06:53 +0000 (14:06 +0200)
commit78db9bd17545186a6cb320f5846069d5ece7baba
tree04c751521345c0d43d449307de8557508ba06fb0
parent81fa158e7c4b1946327fb270015cd1f60f508237
Use a secure random generator to seed nonce for digest authentication

https://tools.ietf.org/html/rfc7616 says:

5.12.  Parameter Randomness

The security of this protocol is critically dependent on the
randomness of the randomly chosen parameters, such as client and
server nonces.  These should be generated by a strong random or
properly seeded pseudorandom source (see [RFC4086]).

Change-Id: I4da5316cb1eb3f59ae06c070ce1c3335e9ee87d6
Signed-off-by: Matthias Sohn <matthias.sohn@sap.com>
org.eclipse.jgit/src/org/eclipse/jgit/transport/HttpAuthMethod.java