| commit | 50309911ba90a0c5c3881f518e16a88d59abc879 | |
| author | Nicolas Williams <nico@cryptonector.com> | |
| Wed, 12 Oct 2011 06:15:13 +0000 (12 01:15 -0500) | ||
| committer | Jeffrey Altman <jaltman@secure-endpoints.com> | |
| Mon, 29 Jul 2013 21:59:17 +0000 (29 17:59 -0400) | ||
| tree | 5425bf1836237ff3c52356f9e98af2090f5f1488 | treesnapshot (tar.gz zip) |
| parent | 32baf75c3ec8aedf373ed68cc6dbd49fde664415 | commitdiff |
Fix check-des
The previous fix was incomplete. But it also finally uncovered an
old check-des problem that I'd had once and which may have gotten
papered over by changing the default of one of the *strongest* KDC
parameters. The old problem is that we were passing the wrong
enctype to _kdc_encode_reply(): we were passing the session key
enctype where the ticket enc-part key's enctype was expected.
The whole enctype being passed in is superfluous anyways. Let's
clean that up next.
The previous fix was incomplete. But it also finally uncovered an
old check-des problem that I'd had once and which may have gotten
papered over by changing the default of one of the *strongest* KDC
parameters. The old problem is that we were passing the wrong
enctype to _kdc_encode_reply(): we were passing the session key
enctype where the ticket enc-part key's enctype was expected.
The whole enctype being passed in is superfluous anyways. Let's
clean that up next.
| kdc/krb5tgs.c | diffblobblamehistory |