FAST response only when FAST in use

Client should expect a FAST response only when fast is being ussed.
krb5int_fast_process_response now returns success if FAST is not in use.

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/fast@22143 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/lib/krb5/krb/fast.c b/src/lib/krb5/krb/fast.c
index 51dfe04da764cafb498ce87dd40108ca9040e0f6..e9f54be788bd7616624fc41b5a8b62c81e52a187 100644 (file)
--- a/src/lib/krb5/krb/fast.c
+++ b/src/lib/krb5/krb/fast.c
@@ -257,8 +257,7 @@ static krb5_error_code decrypt_fast_reply
     krb5_pa_data *fx_reply = NULL;
     krb5_fast_response *local_resp = NULL;
     assert(state != NULL);
-    if (state->armor_key == NULL)
-       return 0;
+    assert(state->armor_key);
         fx_reply = krb5int_find_pa_data(context, in_padata, KRB5_PADATA_FX_FAST);
     if (fx_reply == NULL)
        retval = KRB5_ERR_FAST_REQUIRED;
@@ -417,6 +416,8 @@ krb5_error_code krb5int_fast_process_response
     krb5_boolean cksum_valid;
     krb5_clear_error_message(context);
     *as_key = NULL;
+    if (state->armor_key == 0)
+       return 0;
         retval = decrypt_fast_reply(context, state, resp->padata,
                                &fast_response);
     if (retval == 0) {