Force bcrypt version 2a

Insecure, but 2b is not supported by IPS4 according to user reports. This manager needs to be changed to use the IPS4 API at some point anyway, so really a stop gap measure.
This commit is contained in:
Basraah 2017-02-20 12:10:15 +10:00 committed by GitHub
parent fd05eff5d4
commit f6ea9e0236

View File

@ -48,7 +48,7 @@ class Ips4Manager:
@staticmethod @staticmethod
def _gen_pwhash(password): def _gen_pwhash(password):
return bcrypt.encrypt(password.encode('utf-8'), rounds=13) return bcrypt.using(ident='2a').encrypt(password.encode('utf-8'), rounds=13)
@staticmethod @staticmethod
def _get_salt(pw_hash): def _get_salt(pw_hash):