use hmac_sha_256 for csrf token

Signed-off-by: Stoiko Ivanov <s.ivanov@proxmox.com>

diff --git a/src/PMG/Ticket.pm b/src/PMG/Ticket.pm
index c9cf096f93d859b56bf8139b560ab4c9b0c08dd1..b1408da417df0221b025d470b38a03ecb2c7f396 100644 (file)
--- a/src/PMG/Ticket.pm
+++ b/src/PMG/Ticket.pm
@@ -139,7 +139,7 @@ my $read_csrf_secret = sub {
 
    my $input = <$fh>;
 
-   return Digest::SHA::sha1_base64($input);
+   return Digest::SHA::hmac_sha256_base64($input);
 };
 
 PVE::INotify::register_file('csrf_secret', $pmg_csrf_key_fn,