Remove HMAC-SHA1 from Authentication/Integrity Alg
Reason: For security reason- HMAC-SHA1 is deprecated.
Plesae note: Use latest ipmitool or ipmitool v1.8.18.177.g7ccea28 later
Tested :
ipmitool -H <BMCIP> -I lanplus -U <username> -P <password> -C 3 raw 6 1
Error in open session response message : invalid authentication algorithm
Error: Unable to establish IPMI v2 / RMCP+ session
ipmitool -H <BMCIP> -I lanplus -U <username> -P <password> -C 17 raw 6 1
23 00 00 40 02 bf 57 01 00 91 00 0d 62 04 f5
Signed-off-by: Suryakanth Sekar <suryakanth.sekar@linux.intel.com>
Change-Id: I8226c06a248ec601d848c1e2dd7eb129a272c503
diff --git a/auth_algo.hpp b/auth_algo.hpp
index f4e3c49..6ed0b47 100644
--- a/auth_algo.hpp
+++ b/auth_algo.hpp
@@ -105,8 +105,7 @@
*/
static bool isAlgorithmSupported(Algorithms algo)
{
- if (algo == Algorithms::RAKP_HMAC_SHA1 ||
- algo == Algorithms::RAKP_HMAC_SHA256)
+ if (algo == Algorithms::RAKP_HMAC_SHA256)
{
return true;
}
diff --git a/integrity_algo.hpp b/integrity_algo.hpp
index 6c8460f..0dd4a91 100644
--- a/integrity_algo.hpp
+++ b/integrity_algo.hpp
@@ -92,8 +92,7 @@
*/
static bool isAlgorithmSupported(Algorithms algo)
{
- if (algo == Algorithms::HMAC_SHA1_96 ||
- algo == Algorithms::HMAC_SHA256_128)
+ if (algo == Algorithms::HMAC_SHA256_128)
{
return true;
}