Skip Menu |
 

From: ghudson@mit.edu
Subject: git commit

Remove PKINIT RSA support

RSA mode is no longer needed for interoperability. Reduce the attack
surface of clients and KDCs by removing support for it.

https://github.com/krb5/krb5/commit/401f584526e501b68e7516c17d8e467883f8f210
Author: Greg Hudson <ghudson@mit.edu>
Commit: 401f584526e501b68e7516c17d8e467883f8f210
Branch: master
doc/user/user_commands/kinit.rst | 4 -
src/plugins/preauth/pkinit/pkinit.h | 2 -
src/plugins/preauth/pkinit/pkinit_clnt.c | 235 +++-------
src/plugins/preauth/pkinit/pkinit_crypto.h | 39 --
src/plugins/preauth/pkinit/pkinit_crypto_openssl.c | 504 ---------------------
src/plugins/preauth/pkinit/pkinit_lib.c | 2 -
src/plugins/preauth/pkinit/pkinit_srv.c | 208 +++------
src/plugins/preauth/pkinit/pkinit_trace.h | 9 -
src/tests/t_pkinit.py | 7 -
src/windows/leash/htmlhelp/html/KINIT.htm | 3 -
10 files changed, 131 insertions(+), 882 deletions(-)