]> git.ipfire.org Git - thirdparty/bind9.git/commit
tsiggss: regenerate kerberos credentials
authorMark Andrews <marka@isc.org>
Wed, 17 Aug 2022 01:13:41 +0000 (11:13 +1000)
committerMark Andrews <marka@isc.org>
Mon, 3 Apr 2023 02:44:27 +0000 (12:44 +1000)
commit56d2bf11414d407d7bc78669dea54920f7765b28
treef481bb0f5eebd064faa15856dbd54f6470a0914b
parentc3ba38f89f0999ed8843c3ab63b704b5cf0c5bcb
tsiggss: regenerate kerberos credentials

The existing set of kerberos credential used deprecated algorithms
which are not supported by some implementations in FIPS mode.
Regenerate the saved credentials using more modern algorithms.

Added tsiggss/krb/setup.sh which sets up a test KDC with the required
principals for the system test to work.  The tsiggss system test
needs to be run once with this active and KRB5_CONFIG appropriately.
set.  See tsiggss/tests.sh for an example of how to do this.
bin/tests/system/tsiggss/krb/setup.sh [new file with mode: 0644]
bin/tests/system/tsiggss/ns1/administrator.ccache
bin/tests/system/tsiggss/ns1/dns.keytab
bin/tests/system/tsiggss/ns1/testdenied.ccache
bin/tests/system/tsiggss/tests.sh