[15922] in Kerberos-V5-bugs
[krbdev.mit.edu #8657] SPAKE support for Windows build
daemon@ATHENA.MIT.EDU (Greg Hudson via RT)
Mon Mar 26 22:25:23 2018
Mail-followup-to: rt@krbdev.mit.edu
mail-copies-to: never
From: "Greg Hudson via RT" <rt-comment@KRBDEV-PROD-APP-1.mit.edu>
In-Reply-To: <rt-8657@krbdev.mit.edu>
Message-ID: <rt-8657-48348.14.1616562802255@krbdev.mit.edu>
To: "'AdminCc of krbdev.mit.edu Ticket #8657'":;
Date: Mon, 26 Mar 2018 22:25:16 -0400 (EDT)
Reply-To: rt-comment@KRBDEV-PROD-APP-1.mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu
SPAKE is implemented as a dynamically loaded plugin, with one group
implemented internally and the other three using OpenSSL. As we have
no support for building dynamic plugin modules on Windows.
The ideal approach is to add build system support for creating dynamic
plugin modules (as DLLs), and support for building against OpenSSL.
This would also make it relatively easy to add PKINIT support for
Windows.
A less satisfactory approach would be to move the SPAKE client module
and edwards25519 code into libkrb5, so it can be built with the
existing Windows build system, and delegate the OpenSSL groups to a
dynamically loaded module somehow.
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
