[sling-org-apache-sling-auth-saml2] branch master updated: Clear security hotspot updating SHA to SHA-256

[cr...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

cris pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/sling-org-apache-sling-auth-saml2.git


The following commit(s) were added to refs/heads/master by this push:
     new fcc51ff  Clear security hotspot updating SHA to SHA-256
fcc51ff is described below

commit fcc51ff93bb6939477eaf8dcf5b1161c5a4393fc
Author: Cris Rockwell <cm...@umich.edu>
AuthorDate: Tue Jun 29 10:34:59 2021 -0400

    Clear security hotspot updating SHA to SHA-256
---
 src/main/java/org/apache/sling/auth/saml2/impl/TokenStore.java | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/main/java/org/apache/sling/auth/saml2/impl/TokenStore.java b/src/main/java/org/apache/sling/auth/saml2/impl/TokenStore.java
index c80a86e..8661d40 100644
--- a/src/main/java/org/apache/sling/auth/saml2/impl/TokenStore.java
+++ b/src/main/java/org/apache/sling/auth/saml2/impl/TokenStore.java
@@ -405,7 +405,7 @@ class TokenStore {
         final MessageDigest md;
 
         try {
-            md = MessageDigest.getInstance("SHA");
+            md = MessageDigest.getInstance("SHA-256");
         } catch (NoSuchAlgorithmException nsae) {
             throw new InternalError("internal error: SHA-1 not available.");
         }