Is GSS_C_INTEG_FLAG required for calling gss_wrap/unwrap

Isaac Boukris iboukris at gmail.com
Fri Jun 26 07:57:16 EDT 2020


Hi,

According to RFC 2274, GSS_C_INTEG_FLAG:
True - Integrity service may be invoked by calling either gss_get_mic
or gss_wrap routines.

But per my testing even with GSS_KRB5_CRED_NO_CI_FLAGS_X and not
asking for GSS_C_INTEG_FLAG (integ/conf are false in ap-req), both
parties are able to call gss_wrap/unwrap (windows server), is that
expected?

Thanks


More information about the krbdev mailing list