Is GSS_C_INTEG_FLAG required for calling gss_wrap/unwrap
Isaac Boukris
iboukris at gmail.com
Fri Jun 26 07:57:16 EDT 2020
Hi,
According to RFC 2274, GSS_C_INTEG_FLAG:
True - Integrity service may be invoked by calling either gss_get_mic
or gss_wrap routines.
But per my testing even with GSS_KRB5_CRED_NO_CI_FLAGS_X and not
asking for GSS_C_INTEG_FLAG (integ/conf are false in ap-req), both
parties are able to call gss_wrap/unwrap (windows server), is that
expected?
Thanks
More information about the krbdev
mailing list