add_enctype needs to set the kvno of the keys it adds!
commitdae01950a21a46548af60282c170605057610095
authorNicolas Williams <nico@cryptonector.com>
Thu, 21 Jul 2011 20:39:22 +0000 (21 15:39 -0500)
committerNicolas Williams <nico@cryptonector.com>
Fri, 22 Jul 2011 21:07:10 +0000 (22 16:07 -0500)
treecad21256686ad3eda187a0deea303a2a5176478e
parent1edc2cee4531b7d1b887ef6671b78bf9a8953ec6
add_enctype needs to set the kvno of the keys it adds!

add_enctype() was not fetching the kvno of the principal it was
modifying, and it was not setting the kvno of the new keys (instead it
set it to 0).  This worked fine before multi-kvno, but broke then.  The
fix is to fetch the kvno and set the new keys' kvno to that.

I'm thinking of adding a new kadmin command to prune old kvnos by date
or kvno differential...
kadmin/add_enctype.c