From: Scott Cantor <cantor.2@osu.edu>
Date: Mon, 27 Dec 2010 15:43:20 +0000 (+0000)
Subject: https://issues.shibboleth.net/jira/browse/SSPCPP-329
X-Git-Tag: 2.4.1~7
X-Git-Url: http://www.project-moonshot.org/gitweb/?p=shibboleth%2Fcpp-sp.git;a=commitdiff_plain;h=58f6aaa999c4a245170adf9fa5052bb626b64ab6

https://issues.shibboleth.net/jira/browse/SSPCPP-329
---

diff --git a/shibsp/handler/impl/AbstractHandler.cpp b/shibsp/handler/impl/AbstractHandler.cpp
index a27b5ce..38c7d92 100644
--- a/shibsp/handler/impl/AbstractHandler.cpp
+++ b/shibsp/handler/impl/AbstractHandler.cpp
@@ -225,7 +225,7 @@ void Handler::preserveRelayState(const Application& application, HTTPResponse& r
                     StorageService* storage = application.getServiceProvider().getStorageService(mech.second);
                     if (storage) {
                         string rsKey;
-                        generateRandomHex(rsKey,5);
+                        generateRandomHex(rsKey,32);
                         if (!storage->createString("RelayState", rsKey.c_str(), relayState.c_str(), time(nullptr) + 600))
                             throw IOException("Attempted to insert duplicate storage key.");
                         relayState = string(mech.second-3) + ':' + rsKey;