Skip Menu |
 

From: tlyu@mit.edu
Subject: SVN Commit

Mark all single-DES enctypes as "weak", and create a new libdefaults
variable "allow_weak_crypto", which defaults to "false".

https://github.com/krb5/krb5/commit/95caf0d30ec2b4c1231c022335d5c6241e8c0d38
Commit By: tlyu
Revision: 21823
Changed Files:
U trunk/src/include/k5-int.h
U trunk/src/kadmin/testing/proto/krb5.conf.proto
U trunk/src/lib/crypto/etypes.c
U trunk/src/lib/crypto/etypes.h
U trunk/src/lib/crypto/libk5crypto.exports
U trunk/src/lib/crypto/valid_enctype.c
U trunk/src/lib/krb5/krb/init_ctx.c
U trunk/src/tests/dejagnu/config/default.exp
From: tlyu@mit.edu
Subject: SVN Commit

Default allow_weak_crypto=true for now. Default supported_enctypes to
exclude single-DES enctypes.

https://github.com/krb5/krb5/commit/f70d290faea0ed8a9e41553c56eb673bb1d08cb8
Commit By: tlyu
Revision: 21851
Changed Files:
U trunk/src/include/osconf.hin
U trunk/src/lib/kadm5/alt_prof.c
U trunk/src/lib/krb5/krb/init_ctx.c