]> git.ipfire.org Git - thirdparty/krb5.git/commit
Don't error on invalid enctypes in keytab 952/head
authorRobbie Harwood <rharwood@redhat.com>
Wed, 10 Jul 2019 21:10:16 +0000 (17:10 -0400)
committerGreg Hudson <ghudson@mit.edu>
Fri, 12 Jul 2019 04:34:37 +0000 (00:34 -0400)
commit38be1a0a31a6104cdf8c8d72828905775f6d6636
treee718960bc4d5612e35c814e946363e252eb14534
parent881b5312f85216f27a2a2f2560edc4e81a0d939a
Don't error on invalid enctypes in keytab

krb5_ktfile_get_entry() used krb5_c_enctype_compare() to compare
enctypes, in order to share keys between single-DES enctypes.  As
key-sharing between enctypes is no longer done and single-DES support
has been removed, use a simple equality test to match the enctype.
This fixes a bug where krb5_kt_get_entry() would error out if the
keytab contained any entries with invalid enctypes (include single-DES
entries, after commit fb2dada5eb89c4cd4e39dedd6dbb7dbd5e94f8b8) even
if a matching entry is found.

[ghudson@mit.edu: rewrote commit message]

ticket: 8808
src/lib/krb5/keytab/kt_file.c