[krbdev.mit.edu #8906] git commit
"Greg Hudson via RT" <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.bugs |
|---|---|
| Message-ID | <[email protected]> |
<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=8906 > Prevent use of invalid local TGT key Commit 570967e11bd5ea60a82fc8157ad7d07602402ebb took a shortcut in get_local_tgt() by using the first key data entry in the TGT principal entry. This is usually correct, but if the first key data entry has an invalid enctype (such as a single-DES enctype), we can select a key we can't use. Call krb5_dbe_find_enctype() instead. Reported by Leonard Peirce. https://github.com/krb5/krb5/commit/d7ed635e822e13b89fef93463d1d132b1e03b78f Author: Greg Hudson <[email protected]> Commit: d7ed635e822e13b89fef93463d1d132b1e03b78f Branch: master src/kdc/kdc_util.c | 10 +++++----- 1 files changed, 5 insertions(+), 5 deletions(-)