Re: [Openvpn-devel] [PATCH 1/8] Make management password check constant time

2022-12-15 Thread Gert Doering
Hi, On Thu, Dec 15, 2022 at 08:01:36PM +0100, Arne Schwabe wrote: > This changes the password check on the management interface to be constant > time. Normally the management port should not be exposed in a way that allows > an attacker to even interact with it but making the check constant time a

[Openvpn-devel] [PATCH 1/8] Make management password check constant time

2022-12-15 Thread Arne Schwabe
This changes the password check on the management interface to be constant time. Normally the management port should not be exposed in a way that allows an attacker to even interact with it but making the check constant time as an additional layer of security is always good. Reported-by: Connor Ed