]> git.ipfire.org Git - thirdparty/krb5.git/commit
Remove PKINIT RSA support 1321/head
authorGreg Hudson <ghudson@mit.edu>
Sun, 26 Nov 2023 22:42:34 +0000 (17:42 -0500)
committerGreg Hudson <ghudson@mit.edu>
Fri, 1 Dec 2023 04:44:15 +0000 (23:44 -0500)
commit401f584526e501b68e7516c17d8e467883f8f210
tree81490345d081f30b70eeb9c1eac927bb9020db4b
parent48ccd81656381522d1f9ccb8705c13f0266a46ab
Remove PKINIT RSA support

RSA mode is no longer needed for interoperability.  Reduce the attack
surface of clients and KDCs by removing support for it.

ticket: 9108 (new)
doc/user/user_commands/kinit.rst
src/plugins/preauth/pkinit/pkinit.h
src/plugins/preauth/pkinit/pkinit_clnt.c
src/plugins/preauth/pkinit/pkinit_crypto.h
src/plugins/preauth/pkinit/pkinit_crypto_openssl.c
src/plugins/preauth/pkinit/pkinit_lib.c
src/plugins/preauth/pkinit/pkinit_srv.c
src/plugins/preauth/pkinit/pkinit_trace.h
src/tests/t_pkinit.py
src/windows/leash/htmlhelp/html/KINIT.htm