[16310] in Kerberos-V5-bugs
[krbdev.mit.edu #8808] git commit
daemon@ATHENA.MIT.EDU (Greg Hudson via RT)
Tue May 28 15:01:11 2019
Mail-followup-to: rt@krbdev.mit.edu
mail-copies-to: never
From: Greg Hudson via RT <rt-comment@KRBDEV-PROD-APP-1.mit.edu>
In-Reply-To: <rt-8808@krbdev.mit.edu>
Message-ID: <rt-8808-49456.10.8990237171044@krbdev.mit.edu>
To: "'AdminCc of krbdev.mit.edu Ticket #8808'":;
Date: Tue, 28 May 2019 15:00:57 -0400
MIME-Version: 1.0
Reply-To: rt-comment@KRBDEV-PROD-APP-1.mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu
Remove support for single-DES and CRC
Single-DES removal brings us closer to compliance with RFC 6649.
Single-DES was disabled by default starting in release 1.8, and
user-visible deprecation warnings were issued starting in release
1.17.
https://github.com/krb5/krb5/commit/fb2dada5eb89c4cd4e39dedd6dbb7dbd5e94f8b8
Author: Robbie Harwood <rharwood@redhat.com>
Committer: Greg Hudson <ghudson@mit.edu>
Commit: fb2dada5eb89c4cd4e39dedd6dbb7dbd5e94f8b8
Branch: master
.gitignore | 1 -
doc/admin/advanced/retiring-des.rst | 5 +
doc/admin/conf_files/kdc_conf.rst | 17 +-
doc/admin/conf_files/krb5_conf.rst | 17 +-
doc/admin/enctypes.rst | 38 +-
doc/appdev/refs/macros/index.rst | 1 +
doc/conf.py | 2 +-
doc/mitK5features.rst | 2 +-
src/include/k5-int.h | 1 -
src/include/krb5/krb5.hin | 10 +-
src/include/win-mac.h | 12 -
src/kdc/kdc_util.c | 14 -
src/kdc/main.c | 6 -
src/kdc/realm_data.h | 1 -
src/lib/crypto/builtin/des/des_int.h | 1 -
src/lib/crypto/builtin/enc_provider/Makefile.in | 3 -
src/lib/crypto/builtin/enc_provider/deps | 12 -
src/lib/crypto/builtin/enc_provider/des.c | 120 ----
src/lib/crypto/builtin/hash_provider/Makefile.in | 7 +-
src/lib/crypto/builtin/hash_provider/deps | 13 -
src/lib/crypto/builtin/hash_provider/hash_crc32.c | 56 --
src/lib/crypto/krb/Makefile.in | 9 -
src/lib/crypto/krb/cksumtypes.c | 24 -
src/lib/crypto/krb/combine_keys.c | 3 -
src/lib/crypto/krb/crc32.c | 165 -----
src/lib/crypto/krb/crypto_int.h | 16 -
src/lib/crypto/krb/default_state.c | 4 -
src/lib/crypto/krb/deps | 36 -
src/lib/crypto/krb/enc_old.c | 181 -----
src/lib/crypto/krb/etypes.c | 46 --
src/lib/crypto/krb/s2k_des.c | 691 --------------------
src/lib/crypto/libk5crypto.exports | 1 -
src/lib/crypto/openssl/enc_provider/Makefile.in | 3 -
src/lib/crypto/openssl/enc_provider/deps | 11 -
src/lib/crypto/openssl/enc_provider/des.c | 218 ------
src/lib/crypto/openssl/hash_provider/Makefile.in | 10 +-
src/lib/crypto/openssl/hash_provider/deps | 12 -
src/lib/crypto/openssl/hash_provider/hash_crc32.c | 56 --
src/lib/gssapi/krb5/accept_sec_context.c | 3 -
src/lib/gssapi/krb5/gssapiP_krb5.h | 20 +-
src/lib/gssapi/krb5/k5seal.c | 28 +-
src/lib/gssapi/krb5/k5sealiov.c | 20 -
src/lib/gssapi/krb5/k5unseal.c | 112 ----
src/lib/gssapi/krb5/k5unsealiov.c | 34 +-
src/lib/gssapi/krb5/util_crypt.c | 41 --
src/lib/kadm5/kadm_rpc_xdr.c | 10 -
src/lib/krb5/ccache/cc_mslsa.c | 11 +-
src/lib/krb5/krb/auth_con.c | 23 +-
src/lib/krb5/krb/gic_keytab.c | 4 -
src/lib/krb5/krb/init_ctx.c | 9 -
src/lib/krb5/krb/mk_req_ext.c | 43 +--
src/lib/krb5/krb/s4u_creds.c | 3 -
src/lib/krb5/krb/ser_ctx.c | 2 +-
src/man/kdc.conf.man | 47 +--
src/man/krb5.conf.man | 6 +-
.../leash/htmlhelp/html/Encryption_Types.htm | 14 +-
56 files changed, 74 insertions(+), 2181 deletions(-)
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
