]> git.ipfire.org Git - thirdparty/krb5.git/commit
Omit PA_FOR_USER if we can't compute its checksum 1080/head
authorIsaac Boukris <iboukris@gmail.com>
Sat, 6 Jun 2020 09:03:37 +0000 (11:03 +0200)
committerGreg Hudson <ghudson@mit.edu>
Mon, 8 Jun 2020 15:55:00 +0000 (11:55 -0400)
commit03f122bdb22cfa53c7d855ed929c9541e56365e0
treebeccd54192dbfa0bbab927a1560c5ea4a95e8055
parent778d3fd9de50ab0c87cf0031e1dd24a8ec4bd552
Omit PA_FOR_USER if we can't compute its checksum

OpenSSL in FIPS mode will refuse to perform hmac-md5.  Omit the legacy
PA_FOR_USER element in this case rather than failing out.

[ghudson@mit.edu: minor code and comment edits; wrote commit message]

ticket: 8912 (new)
src/lib/krb5/krb/s4u_creds.c