admin/Facilitor
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

FSN#37544 HMAC bepaling voortaan door de DLL in plaats van sha1.wsc

Browse Source 
svn path=/Website/trunk/; revision=30493
This commit is contained in:
Jos Groot Lipman
2016-09-01 10:10:57 +00:00
parent f6598887a0
commit 319a1bff8c
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
APPL/Shared/Shared.inc
View File

@@ -1070,7 +1070,8 @@ var protectHMAC =
__Log("hmacdata: " + data);
//__Log("sleutel: "+ params.sleutel);
var oCrypto = new ActiveXObject("SLNKDWF.Crypto");
var hmac = oCrypto.b64_hmac_sha1(params.sleutel, data);
var sig = oCrypto.hex_hmac_sha1(params.sleutel, data);
var hmac = oCrypto.hex2base64(sig, false, true); // no padding, urlsafe
oCrypto = null; // Caching klinkt leuk maar Oracle sessies blijven langer hangen?
return ts+":"+hmac;
},
@@ -1104,7 +1105,8 @@ var protectHMAC =
params.sleutel = params.sleutel || protectHMAC.getProtectSecret();
//__Log("testing sleutel: "+ params.sleutel);
var oCrypto = new ActiveXObject("SLNKDWF.Crypto");
var should_hmac = oCrypto.b64_hmac_sha1(params.sleutel, hmacArr[0] + ":" + str);
var sig = oCrypto.hex_hmac_sha1(params.sleutel, hmacArr[0] + ":" + str);
var should_hmac = oCrypto.hex2base64(sig, false, true); // no padding, urlsafe
oCrypto = null;
if (hmacArr[1] != should_hmac)