diff --git a/modules/installed/lib/auth.py b/modules/installed/lib/auth.py index 4aa5be5c6..6e67fb8d5 100644 --- a/modules/installed/lib/auth.py +++ b/modules/installed/lib/auth.py @@ -28,7 +28,7 @@ def check_credentials(username, passphrase): u = cfg.users[username] - elif u is None: + if u is None: # hash the password whether the user exists, to foil timing # side-channel attacks hashlib.md5(passphrase).hexdigest()