]> git.ipfire.org Git - thirdparty/krb5.git/commit
In KDC, assume all services support aes256-sha1
authorGreg Hudson <ghudson@mit.edu>
Wed, 14 Dec 2022 18:20:46 +0000 (13:20 -0500)
committerGreg Hudson <ghudson@mit.edu>
Mon, 23 Jan 2023 23:41:09 +0000 (18:41 -0500)
commit2cbd847e0e92bc4e219b65c770ae33f851b22afc
tree6e87d90dbd0cd9d50d2499223ef88ff29c5bb22e
parentfc922496edbc73cd47b812c92c61b2544d317198
In KDC, assume all services support aes256-sha1

To facilitate negotiating session keys with acceptable security,
assume that services support aes256-cts-hmac-sha1 unless a
session_enctypes string attribute says otherwise.

ticket: 9075
src/kdc/kdc_util.c
src/tests/t_keyrollover.py