Skip to content

Commit 45fbe6b

Browse files
committed
fix message
1 parent 2a5b1f8 commit 45fbe6b

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

tools/espota.py

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -173,7 +173,7 @@ def authenticate(remote_addr, remote_port, password, use_md5_password, use_old_p
173173
# The password can be hashed with either MD5 or SHA256
174174
if use_md5_password:
175175
# Use MD5 for password hash (for devices that stored MD5 hashes)
176-
logging.warning("Using insecure MD5 hash for password due to legacy device support. Please upgrade devices if possible.")
176+
logging.warning("Using insecure MD5 hash for password due to legacy device support. Please upgrade devices to ESP32 Arduino Core 3.3.1+ for improved security.")
177177
password_hash = hashlib.md5(password.encode()).hexdigest()
178178
else:
179179
# Use SHA256 for password hash (recommended)
@@ -324,8 +324,8 @@ def serve(
324324
logging.warning("====================================================================")
325325
logging.warning("WARNING: Device authenticated with MD5 password hash (deprecated)")
326326
logging.warning("MD5 is cryptographically broken and should not be used.")
327-
logging.warning("Please update your sketch to use setPassword() instead of")
328-
logging.warning("setPasswordHash() with MD5, then upload again to migrate to SHA256.")
327+
logging.warning("Please update your sketch to use either setPassword() or setPasswordHash()")
328+
logging.warning("with SHA256, then upload again to migrate to the new secure SHA256 protocol.")
329329
logging.warning("======================================================================")
330330

331331
if not auth_success:

0 commit comments

Comments
 (0)