Uploaded image for project: 'mod_cluster'
  1. mod_cluster
  2. MODCLUSTER-338

Advertise adds a message digest even if security key is not configured

    Details

    • Type: Bug
    • Status: Resolved (View Workflow)
    • Priority: Major
    • Resolution: Done
    • Affects Version/s: 1.2.4.Final
    • Fix Version/s: 1.3.0.Final
    • Component/s: None
    • Labels:
      None

      Description

      As wireshark hints, the message digest is always included in the message even if the advertise security key is not configured.

      This would not be such a problem if the salt actually used wouldn't be random bits from the memory.

      This renders the digest completely useless since it can never be verified.

        Gliffy Diagrams

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  rhusar Radoslav Husar
                  Reporter:
                  rhusar Radoslav Husar
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  1 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: