[krbdev.mit.edu #9108] git commit
"Greg Hudson via RT" <[email protected]> Fri, 01 Dec 2023 15:09:08 -0500
| Newsgroups | gmane.comp.encryption.kerberos.bugs |
|---|---|
| Message-ID | <[email protected]> |
Fri Dec 01 15:09:08 2023: Request 9108 was acted upon. Transaction: Ticket created by [email protected] Queue: krb5 Subject: git commit Owner: [email protected] Requestors: Status: new Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9108 > Remove PKINIT RSA support RSA mode is no longer needed for interoperability. Reduce the attack surface of clients and KDCs by removing support for it. https://github.com/krb5/krb5/commit/401f584526e501b68e7516c17d8e467883f8f210 Author: Greg Hudson <[email protected]> Commit: 401f584526e501b68e7516c17d8e467883f8f210 Branch: master doc/user/user_commands/kinit.rst | 4 - src/plugins/preauth/pkinit/pkinit.h | 2 - src/plugins/preauth/pkinit/pkinit_clnt.c | 235 +++------- src/plugins/preauth/pkinit/pkinit_crypto.h | 39 -- src/plugins/preauth/pkinit/pkinit_crypto_openssl.c | 504 --------------------- src/plugins/preauth/pkinit/pkinit_lib.c | 2 - src/plugins/preauth/pkinit/pkinit_srv.c | 208 +++------ src/plugins/preauth/pkinit/pkinit_trace.h | 9 - src/tests/t_pkinit.py | 7 - src/windows/leash/htmlhelp/html/KINIT.htm | 3 - 10 files changed, 131 insertions(+), 882 deletions(-)