[krbdev.mit.edu #7995] git commit

Tom Yu via RT rt-comment at krbdev.mit.edu
Mon Sep 8 22:39:57 EDT 2014


Re-encrypt preserved key data in new master key

When we are preserving old key data in kdb_cpw.c, ensure that it is
encrypted with the same master key as the new key data.  This ensures
that the KRB5_TL_MKVNO tl-data on the principal entry applies to all
of the key data, not just some of it.

(cherry picked from commit 32c9b8f1aa1b348388ed227394cc609e68ed833b)

https://github.com/krb5/krb5/commit/e56c0064823778affabc60f94e4b59c486448e2c
Author: Greg Hudson <ghudson at mit.edu>
Committer: Tom Yu <tlyu at mit.edu>
Commit: e56c0064823778affabc60f94e4b59c486448e2c
Branch: krb5-1.13
 src/lib/kdb/kdb_cpw.c |  197 +++++++++++++++++++++++++++++++------------------
 1 files changed, 126 insertions(+), 71 deletions(-)



More information about the krb5-bugs mailing list