Janek Bevendorff 247ebf5a35 Ensure challenge-response key buffer is properly cleared. ...

The challenge-response key buffer is explicitly cleared
before the key transformation if no such key is configured
to ensure one is never injected into the hash even if the
database had a challenge-response key previously.

This patch also adds extensive tests for verifying that a
key change will not add any expired key material to the hash.

Fixes #4146

2020-01-11 11:16:03 +01:00

37 KiB

Raw Blame History

View Raw