]> git.ipfire.org Git - thirdparty/krb5.git/commit
projects / thirdparty / krb5.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 56f7b1b) | patch
Don't set ctime in KDC error replies 697/head
authorGreg Hudson <ghudson@mit.edu>
Tue, 29 Aug 2017 15:19:36 +0000 (11:19 -0400)
committerGreg Hudson <ghudson@mit.edu>
Tue, 29 Aug 2017 15:19:36 +0000 (11:19 -0400)
commitaff489766e8541bee59d0aa7b9cc7e62f5ca8232
treeb90461dffb46949de43f86df83728734dd81c419tree
parent56f7b1bc95a2a3eeb420e069e7655fb181ade5cfcommit | diff
Don't set ctime in KDC error replies

Setting the error ctime field to the client nonce assumes that the
client used its system time as the nonce, which is not recommended by
RFC 1510 and is prohibited by RFC 4120.  Omit the field instead, by
setting the structure field to 0.

ticket: 8610 (new)
src/kdc/do_as_req.c diff | blob | blame | history
src/kdc/do_tgs_req.c diff | blob | blame | history
Mirror of https://github.com/krb5/krb5.git