From f6ea9e0236c030f40ae72fe5d5d3fb1d42080de6 Mon Sep 17 00:00:00 2001 From: Basraah Date: Mon, 20 Feb 2017 12:10:15 +1000 Subject: [PATCH] Force bcrypt version 2a Insecure, but 2b is not supported by IPS4 according to user reports. This manager needs to be changed to use the IPS4 API at some point anyway, so really a stop gap measure. --- services/modules/ips4/manager.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/modules/ips4/manager.py b/services/modules/ips4/manager.py index 2e7468c6..bcda4d44 100644 --- a/services/modules/ips4/manager.py +++ b/services/modules/ips4/manager.py @@ -48,7 +48,7 @@ class Ips4Manager: @staticmethod def _gen_pwhash(password): - return bcrypt.encrypt(password.encode('utf-8'), rounds=13) + return bcrypt.using(ident='2a').encrypt(password.encode('utf-8'), rounds=13) @staticmethod def _get_salt(pw_hash):