]> git.ipfire.org Git - thirdparty/krb5.git/commit
Restore test coverage for old session key types 1361/head
authorGreg Hudson <ghudson@mit.edu>
Mon, 29 Jul 2024 16:34:10 +0000 (12:34 -0400)
committerGreg Hudson <ghudson@mit.edu>
Wed, 31 Jul 2024 00:28:43 +0000 (20:28 -0400)
commit2063e72ca296a55768c071fb70727ff4688c3496
treef2ad535134f0389c7acebbda585cf580e168313e
parent3ebe2ec4c1c5afe39f094b50590dd6f56cbce5ca
Restore test coverage for old session key types

Commit 1b57a4d134bbd0e7c52d5885a92eccc815726463 made the KDC stop
issuing des3 and rc4 session keys by default.  To make the des3 and
arcfour passes of the test suite work, it added aes256-sha1 to the
permitted enctypes for those passes.  Negotiating AES session keys
reduces coverage of pre-CFX GSSAPI code and other uses of the older
enctypes.  Instead set the enable_des3 and enable_rc4 variables.
src/util/k5test.py