[krbdev.mit.edu #8906] git commit
"Greg Hudson via RT" <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.bugs |
|---|---|
| Message-ID | <[email protected]> |
<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=8906 > Prevent use of invalid local TGT key Commit 570967e11bd5ea60a82fc8157ad7d07602402ebb took a shortcut in get_local_tgt() by using the first key data entry in the TGT principal entry. This is usually correct, but if the first key data entry has an invalid enctype (such as a single-DES enctype), we can select a key we can't use. Call krb5_dbe_find_enctype() instead. Reported by Leonard Peirce. (cherry picked from commit d7ed635e822e13b89fef93463d1d132b1e03b78f) https://github.com/krb5/krb5/commit/32f3659b836319112ed951371944ca50f19e9167 Author: Greg Hudson <[email protected]> Commit: 32f3659b836319112ed951371944ca50f19e9167 Branch: krb5-1.18 src/kdc/kdc_util.c | 10 +++++----- 1 files changed, 5 insertions(+), 5 deletions(-)