kgess-mirror/openstack-python-neutronclient
1
0
Fork 0
mirror of https://opendev.org/openstack/python-neutronclient.git synced 2026-01-16 23:12:23 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Use secure sha256 instead of sha1

Browse source 
Fix for bandit B303: Use of insecure MD2, MD4, MD5, or SHA1 hash function.

Change-Id: I00403d7bd3b40ae00420e6cddcf40f45488284a9
Partial-Bug: #1759250
This commit is contained in:
Oleg Bondarev 2019-08-13 18:10:49 +04:00
parent 1a8fdf355d
commit ab426a791a
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
neutronclient/common/utils.py
View file

@ -183,7 +183,7 @@ def http_log_req(_logger, args, kwargs):
for (key, value) in six.iteritems(kwargs['headers']):
if key in SENSITIVE_HEADERS:
v = value.encode('utf-8')
h = hashlib.sha1(v)
h = hashlib.sha256(v)
d = h.hexdigest()
value = "{SHA1}%s" % d
header = ' -H "%s: %s"' % (key, value)