[33668] in Kerberos
Re: Problems with unkeyed crypto hashing code
daemon@ATHENA.MIT.EDU (Greg Hudson)
Tue Jul 26 14:42:40 2011
From: Greg Hudson <ghudson@mit.edu>
To: "nagy@fnal.gov" <nagy@fnal.gov>
In-Reply-To: <4E2EED9B.7040603@fnal.gov>
Date: Tue, 26 Jul 2011 14:42:33 -0400
Message-ID: <1311705753.23877.239.camel@t410>
Mime-Version: 1.0
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Tue, 2011-07-26 at 12:38 -0400, Frank J. Nagy wrote:
> Key size is incompatible with encryption type
>
> This does not seem right to me.
This is a bug, yes. The problem is that the glue code translates the
null key into an invalid key block, which then triggers the error.
The easiest course of action is probably to change the code to use the
non-deprecated API, krb5_c_make_checksum(). The bug should be fixed in
1.10. I can supply a patch if it would help.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
