[krbdev.mit.edu #8808] git commit
Greg Hudson via RT
rt-comment at KRBDEV-PROD-APP-1.mit.edu
Tue May 28 15:00:57 EDT 2019
Remove support for single-DES and CRC
Single-DES removal brings us closer to compliance with RFC 6649.
Single-DES was disabled by default starting in release 1.8, and
user-visible deprecation warnings were issued starting in release
1.17.
https://github.com/krb5/krb5/commit/fb2dada5eb89c4cd4e39dedd6dbb7dbd5e94f8b8
Author: Robbie Harwood <rharwood at redhat.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: fb2dada5eb89c4cd4e39dedd6dbb7dbd5e94f8b8
Branch: master
.gitignore | 1 -
doc/admin/advanced/retiring-des.rst | 5 +
doc/admin/conf_files/kdc_conf.rst | 17 +-
doc/admin/conf_files/krb5_conf.rst | 17 +-
doc/admin/enctypes.rst | 38 +-
doc/appdev/refs/macros/index.rst | 1 +
doc/conf.py | 2 +-
doc/mitK5features.rst | 2 +-
src/include/k5-int.h | 1 -
src/include/krb5/krb5.hin | 10 +-
src/include/win-mac.h | 12 -
src/kdc/kdc_util.c | 14 -
src/kdc/main.c | 6 -
src/kdc/realm_data.h | 1 -
src/lib/crypto/builtin/des/des_int.h | 1 -
src/lib/crypto/builtin/enc_provider/Makefile.in | 3 -
src/lib/crypto/builtin/enc_provider/deps | 12 -
src/lib/crypto/builtin/enc_provider/des.c | 120 ----
src/lib/crypto/builtin/hash_provider/Makefile.in | 7 +-
src/lib/crypto/builtin/hash_provider/deps | 13 -
src/lib/crypto/builtin/hash_provider/hash_crc32.c | 56 --
src/lib/crypto/krb/Makefile.in | 9 -
src/lib/crypto/krb/cksumtypes.c | 24 -
src/lib/crypto/krb/combine_keys.c | 3 -
src/lib/crypto/krb/crc32.c | 165 -----
src/lib/crypto/krb/crypto_int.h | 16 -
src/lib/crypto/krb/default_state.c | 4 -
src/lib/crypto/krb/deps | 36 -
src/lib/crypto/krb/enc_old.c | 181 -----
src/lib/crypto/krb/etypes.c | 46 --
src/lib/crypto/krb/s2k_des.c | 691 --------------------
src/lib/crypto/libk5crypto.exports | 1 -
src/lib/crypto/openssl/enc_provider/Makefile.in | 3 -
src/lib/crypto/openssl/enc_provider/deps | 11 -
src/lib/crypto/openssl/enc_provider/des.c | 218 ------
src/lib/crypto/openssl/hash_provider/Makefile.in | 10 +-
src/lib/crypto/openssl/hash_provider/deps | 12 -
src/lib/crypto/openssl/hash_provider/hash_crc32.c | 56 --
src/lib/gssapi/krb5/accept_sec_context.c | 3 -
src/lib/gssapi/krb5/gssapiP_krb5.h | 20 +-
src/lib/gssapi/krb5/k5seal.c | 28 +-
src/lib/gssapi/krb5/k5sealiov.c | 20 -
src/lib/gssapi/krb5/k5unseal.c | 112 ----
src/lib/gssapi/krb5/k5unsealiov.c | 34 +-
src/lib/gssapi/krb5/util_crypt.c | 41 --
src/lib/kadm5/kadm_rpc_xdr.c | 10 -
src/lib/krb5/ccache/cc_mslsa.c | 11 +-
src/lib/krb5/krb/auth_con.c | 23 +-
src/lib/krb5/krb/gic_keytab.c | 4 -
src/lib/krb5/krb/init_ctx.c | 9 -
src/lib/krb5/krb/mk_req_ext.c | 43 +--
src/lib/krb5/krb/s4u_creds.c | 3 -
src/lib/krb5/krb/ser_ctx.c | 2 +-
src/man/kdc.conf.man | 47 +--
src/man/krb5.conf.man | 6 +-
.../leash/htmlhelp/html/Encryption_Types.htm | 14 +-
56 files changed, 74 insertions(+), 2181 deletions(-)
More information about the krb5-bugs
mailing list