Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: binary X-RT-Interface: API Content-Disposition: inline X-Mailer: MIME-tools 5.507 (Entity 5.507) Subject: git commit MIME-Version: 1.0 From: ghudson@mit.edu X-RT-Original-Encoding: ascii RT-Message-ID: Content-Length: 740 Prevent use of invalid local TGT key Commit 570967e11bd5ea60a82fc8157ad7d07602402ebb took a shortcut in get_local_tgt() by using the first key data entry in the TGT principal entry. This is usually correct, but if the first key data entry has an invalid enctype (such as a single-DES enctype), we can select a key we can't use. Call krb5_dbe_find_enctype() instead. Reported by Leonard Peirce. (cherry picked from commit d7ed635e822e13b89fef93463d1d132b1e03b78f) https://github.com/krb5/krb5/commit/32f3659b836319112ed951371944ca50f19e9167 Author: Greg Hudson Commit: 32f3659b836319112ed951371944ca50f19e9167 Branch: krb5-1.18 src/kdc/kdc_util.c | 10 +++++----- 1 files changed, 5 insertions(+), 5 deletions(-)