Default Camellia Encryption Support in Build

[Benjamin Kaduk]

On Mon, 24 Jun 2013, Arpit Srivastava wrote:

> Thanks Nate AND Tom.
>
> 1. Can you tell me which version of OpenSSL has been integrated in Krb5
> 1.11.3.

The whole point of the --with-crypto-impl=openssl option to configure is 
that the crypto implementation is not tied to the krb5 source -- krb5 will 
try to use whatever version of openssl is currently installed on the 
system.  You should send us the output of "openssl version" on the system 
in question for us to be able to help.

> 2. If I replace the /lib/crypto folder of Krb5 1.11.3 with the /lib/crypto
> of Krb5 1.10.6, the build is successful. Will "Krb5 1.11.3 library" built
> with "old crypto source files" be stable ?

This is not a supported operation.  It might work if certain circumstances 
are met, but I have neither enumerated these circumstances nor verified 
that they are correct.  I cannot recommend that you deploy such a 
configuration.

-Ben Kaduk