[krbdev.mit.edu #8808] git commit

Greg Hudson via RT rt-comment at KRBDEV-PROD-APP-1.mit.edu
Tue May 28 15:00:57 EDT 2019


Remove support for single-DES and CRC

Single-DES removal brings us closer to compliance with RFC 6649.
Single-DES was disabled by default starting in release 1.8, and
user-visible deprecation warnings were issued starting in release
1.17.

https://github.com/krb5/krb5/commit/fb2dada5eb89c4cd4e39dedd6dbb7dbd5e94f8b8
Author: Robbie Harwood <rharwood at redhat.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: fb2dada5eb89c4cd4e39dedd6dbb7dbd5e94f8b8
Branch: master
 .gitignore                                         |    1 -
 doc/admin/advanced/retiring-des.rst                |    5 +
 doc/admin/conf_files/kdc_conf.rst                  |   17 +-
 doc/admin/conf_files/krb5_conf.rst                 |   17 +-
 doc/admin/enctypes.rst                             |   38 +-
 doc/appdev/refs/macros/index.rst                   |    1 +
 doc/conf.py                                        |    2 +-
 doc/mitK5features.rst                              |    2 +-
 src/include/k5-int.h                               |    1 -
 src/include/krb5/krb5.hin                          |   10 +-
 src/include/win-mac.h                              |   12 -
 src/kdc/kdc_util.c                                 |   14 -
 src/kdc/main.c                                     |    6 -
 src/kdc/realm_data.h                               |    1 -
 src/lib/crypto/builtin/des/des_int.h               |    1 -
 src/lib/crypto/builtin/enc_provider/Makefile.in    |    3 -
 src/lib/crypto/builtin/enc_provider/deps           |   12 -
 src/lib/crypto/builtin/enc_provider/des.c          |  120 ----
 src/lib/crypto/builtin/hash_provider/Makefile.in   |    7 +-
 src/lib/crypto/builtin/hash_provider/deps          |   13 -
 src/lib/crypto/builtin/hash_provider/hash_crc32.c  |   56 --
 src/lib/crypto/krb/Makefile.in                     |    9 -
 src/lib/crypto/krb/cksumtypes.c                    |   24 -
 src/lib/crypto/krb/combine_keys.c                  |    3 -
 src/lib/crypto/krb/crc32.c                         |  165 -----
 src/lib/crypto/krb/crypto_int.h                    |   16 -
 src/lib/crypto/krb/default_state.c                 |    4 -
 src/lib/crypto/krb/deps                            |   36 -
 src/lib/crypto/krb/enc_old.c                       |  181 -----
 src/lib/crypto/krb/etypes.c                        |   46 --
 src/lib/crypto/krb/s2k_des.c                       |  691 --------------------
 src/lib/crypto/libk5crypto.exports                 |    1 -
 src/lib/crypto/openssl/enc_provider/Makefile.in    |    3 -
 src/lib/crypto/openssl/enc_provider/deps           |   11 -
 src/lib/crypto/openssl/enc_provider/des.c          |  218 ------
 src/lib/crypto/openssl/hash_provider/Makefile.in   |   10 +-
 src/lib/crypto/openssl/hash_provider/deps          |   12 -
 src/lib/crypto/openssl/hash_provider/hash_crc32.c  |   56 --
 src/lib/gssapi/krb5/accept_sec_context.c           |    3 -
 src/lib/gssapi/krb5/gssapiP_krb5.h                 |   20 +-
 src/lib/gssapi/krb5/k5seal.c                       |   28 +-
 src/lib/gssapi/krb5/k5sealiov.c                    |   20 -
 src/lib/gssapi/krb5/k5unseal.c                     |  112 ----
 src/lib/gssapi/krb5/k5unsealiov.c                  |   34 +-
 src/lib/gssapi/krb5/util_crypt.c                   |   41 --
 src/lib/kadm5/kadm_rpc_xdr.c                       |   10 -
 src/lib/krb5/ccache/cc_mslsa.c                     |   11 +-
 src/lib/krb5/krb/auth_con.c                        |   23 +-
 src/lib/krb5/krb/gic_keytab.c                      |    4 -
 src/lib/krb5/krb/init_ctx.c                        |    9 -
 src/lib/krb5/krb/mk_req_ext.c                      |   43 +--
 src/lib/krb5/krb/s4u_creds.c                       |    3 -
 src/lib/krb5/krb/ser_ctx.c                         |    2 +-
 src/man/kdc.conf.man                               |   47 +--
 src/man/krb5.conf.man                              |    6 +-
 .../leash/htmlhelp/html/Encryption_Types.htm       |   14 +-
 56 files changed, 74 insertions(+), 2181 deletions(-)



More information about the krb5-bugs mailing list