KSSL

vj purpletech at gmail.com
Tue Oct 11 10:41:46 EDT 2005


I 've created a ssl security context using KSSL in my httpd [non
gssapi, non spnego] Could anyone give me any clue on how to use
SSLv3:KRB cipher suite with ANY browser ?

The server code goes like this :

...
  SSL_CTX_set_cipher_list(V_ctx_ptr,SSL3_TXT_KRB5_RC4_128_SHA);
  s_ssl=SSL_new(V_ctx_ptr);

	if (s_ssl  &&  s_ssl->kssl_ctx){
                char	localhost[255+2];

		if (gethostname(localhost, sizeof localhost-1) == 0){
			localhost[sizeof localhost-1]='\0';
			kssl_ctx_setstring(s_ssl->kssl_ctx, KSSL_SERVICE,"host");
			kssl_ctx_setstring(s_ssl->kssl_ctx, KSSL_SERVER,localhost);
			kssl_ctx_setstring(s_ssl->kssl_ctx, KSSL_KEYTAB,KRB5KEYTAB);
			}
		}
...

Thanks,
vj



More information about the Kerberos mailing list