[krbdev.mit.edu #9066] git commit

Thu Jul 07 17:49:36 2022: Request 9066 was acted upon.
 Transaction: Ticket created by [email protected]
       Queue: krb5
     Subject: git commit
       Owner: [email protected]
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9066 >



Set reasonable supportedCMSTypes in PKINIT

The PKINIT client uses AuthPack.supportedCMSTypes to let the KDC know
the algorithms it supports for verification of the CMS data signature.
(The MIT krb5 KDC currently ignores this list, but other
implementations use it.)

Replace 3DES with sha512WithRSAEncryption and sha256WithRSAEncryption.

[[email protected]: simplified code and used appropriate helpers; edited
commit message]

https://github.com/krb5/krb5/commit/1417c64807e8f618c0c8b230246668a50425ec0c
Author: Julien Rische <[email protected]>
Committer: Greg Hudson <[email protected]>
Commit: 1417c64807e8f618c0c8b230246668a50425ec0c
Branch: master
 src/plugins/preauth/pkinit/pkinit_constants.c      | 33 ++++++++++++++-
 src/plugins/preauth/pkinit/pkinit_crypto.h         |  4 ++
 src/plugins/preauth/pkinit/pkinit_crypto_openssl.c | 49 +++++++++++-----------
 3 files changed, 60 insertions(+), 26 deletions(-)