[krbdev.mit.edu #5840] Prevent kadm5_decrypt_key() from coercing the keytype if the requested ktype == -1

Tom Yu via RT rt-comment at krbdev.mit.edu
Fri Nov 9 15:44:19 EST 2007


>>>>> "jaltman" == Jeffrey Altman via RT <rt-comment at krbdev.mit.edu> writes:

jaltman> +    if (ktype == -1)
jaltman> +        keyblock->enctype = ktype;

Isn't this backwards if you want -1 to mean the enctype doesn't get
coerced?




More information about the krb5-bugs mailing list