[krbdev.mit.edu #6653] SVN Commit
Tom Yu via RT
rt-comment at krbdev.mit.edu
Mon Feb 8 15:55:32 EST 2010
pull up r23681 from trunk
------------------------------------------------------------------------
r23681 | tlyu | 2010-02-01 16:48:19 -0500 (Mon, 01 Feb 2010) | 15 lines
ticket: 6653
subject: set_default_enctype_var should filter not reject weak enctypes
tags: pullup
target_version: 1.8
With allow_weak_crypto=false, set_default_enctype_var() (helper
function for krb5_set_default_tgs_enctypes(), etc.) was rejecting any
application-provided enctype list that contained any weak enctype even
when valid strong enctypes were present. This broke some Samba
things. Filter the weak enctypes instead. Add test cases.
Reported to Debian by Holger Isenberg. (Debian bug #566977)
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=566977
Thanks to Simo Sorce for testing.
http://src.mit.edu/fisheye/changelog/krb5/?cs=23704
Commit By: tlyu
Revision: 23704
Changed Files:
U branches/krb5-1-8/src/lib/krb5/krb/init_ctx.c
U branches/krb5-1-8/src/lib/krb5/krb/t_etypes.c
More information about the krb5-bugs
mailing list