fix #1181: digestmod parameter is now required since Python 3.8

1 files changed, 2 insertions, 2 deletions

diff --git a/bottle.py b/bottle.py
index 9850abb..92a577e 100644
--- a/bottle.py
+++ b/bottle.py
@@ -2597,7 +2597,7 @@ def _lscmp(a, b):
 def cookie_encode(data, key):
     ''' Encode and sign a pickle-able object. Return a (byte) string '''
     msg = base64.b64encode(pickle.dumps(data, -1))
-    sig = base64.b64encode(hmac.new(tob(key), msg).digest())
+    sig = base64.b64encode(hmac.new(tob(key), msg, digestmod="md5").digest())
     return tob('!') + sig + tob('?') + msg
 
 
@@ -2606,7 +2606,7 @@ def cookie_decode(data, key):
     data = tob(data)
     if cookie_is_encoded(data):
         sig, msg = data.split(tob('?'), 1)
-        if _lscmp(sig[1:], base64.b64encode(hmac.new(tob(key), msg).digest())):
+        if _lscmp(sig[1:], base64.b64encode(hmac.new(tob(key), msg, digestmod="md5").digest())):
             return pickle.loads(base64.b64decode(msg))
     return None