Is GSS_C_INTEG_FLAG required for calling gss_wrap/unwrap

Isaac Boukris iboukris at
Fri Jun 26 07:57:16 EDT 2020


According to RFC 2274, GSS_C_INTEG_FLAG:
True - Integrity service may be invoked by calling either gss_get_mic
or gss_wrap routines.

But per my testing even with GSS_KRB5_CRED_NO_CI_FLAGS_X and not
asking for GSS_C_INTEG_FLAG (integ/conf are false in ap-req), both
parties are able to call gss_wrap/unwrap (windows server), is that


More information about the krbdev mailing list