[krbdev.mit.edu #9108] git commit

[Greg Hudson via RT]

Fri Dec 01 15:09:08 2023: Request 9108 was acted upon.
 Transaction: Ticket created by ghudson at mit.edu
       Queue: krb5
     Subject: git commit
       Owner: ghudson at mit.edu
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9108 >



Remove PKINIT RSA support

RSA mode is no longer needed for interoperability.  Reduce the attack
surface of clients and KDCs by removing support for it.

https://github.com/krb5/krb5/commit/401f584526e501b68e7516c17d8e467883f8f210
Author: Greg Hudson <ghudson at mit.edu>
Commit: 401f584526e501b68e7516c17d8e467883f8f210
Branch: master
 doc/user/user_commands/kinit.rst                   |   4 -
 src/plugins/preauth/pkinit/pkinit.h                |   2 -
 src/plugins/preauth/pkinit/pkinit_clnt.c           | 235 +++-------
 src/plugins/preauth/pkinit/pkinit_crypto.h         |  39 --
 src/plugins/preauth/pkinit/pkinit_crypto_openssl.c | 504 ---------------------
 src/plugins/preauth/pkinit/pkinit_lib.c            |   2 -
 src/plugins/preauth/pkinit/pkinit_srv.c            | 208 +++------
 src/plugins/preauth/pkinit/pkinit_trace.h          |   9 -
 src/tests/t_pkinit.py                              |   7 -
 src/windows/leash/htmlhelp/html/KINIT.htm          |   3 -
 10 files changed, 131 insertions(+), 882 deletions(-)