diff --git service/src/java/org/apache/hive/service/CookieSigner.java service/src/java/org/apache/hive/service/CookieSigner.java index ec741edcc2..c4d88de4d8 100644 --- service/src/java/org/apache/hive/service/CookieSigner.java +++ service/src/java/org/apache/hive/service/CookieSigner.java @@ -81,7 +81,7 @@ public String verifyAndExtract(String signedStr) { if (LOG.isDebugEnabled()) { LOG.debug("Signature generated for " + rawValue + " inside verify is " + currentSignature); } - if (!originalSignature.equals(currentSignature)) { + if (!MessageDigest.isEqual(originalSignature.getBytes(), currentSignature.getBytes())) { throw new IllegalArgumentException("Invalid sign, original = " + originalSignature + " current = " + currentSignature); }