From 77693b77a7c7ae09e340e3a609c0c310eeb68fa7 Mon Sep 17 00:00:00 2001
From: Joey Hess <joey@kitenet.net>
Date: Wed, 12 Mar 2014 21:21:10 -0400
Subject: webapp: Use securemem for constant time auth token comparisons.

Debian stable does not have securemem, but neither does it have warp-tls,
so just disable use of securemem when not building with https support.
---
 BuildFlags.hs | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'BuildFlags.hs')

diff --git a/BuildFlags.hs b/BuildFlags.hs
index d5c98aa4e..e36cf6a14 100644
--- a/BuildFlags.hs
+++ b/BuildFlags.hs
@@ -22,8 +22,8 @@ buildFlags = filter (not . null)
 #else
 #warning Building without the webapp. You probably need to install Yesod..
 #endif
-#ifdef WITH_WEBAPP_HTTPS
-	, "Webapp-https"
+#ifdef WITH_WEBAPP_SECURE
+	, "Webapp-secure"
 #endif
 #ifdef WITH_PAIRING
 	, "Pairing"
-- 
cgit v1.2.3