[19297] in Kerberos_V5_Development
RFC 6542 adopted by MIT krb5?
daemon@ATHENA.MIT.EDU (Wang Weijun)
Thu Oct 15 04:00:45 2015
From: Wang Weijun <weijun.wang@oracle.com>
Date: Thu, 15 Oct 2015 16:00:27 +0800
To: krbdev@mit.edu
Message-Id: <A17B63AC-7BEC-4FFA-9AB5-496395F14BFA@oracle.com>
Mime-Version: 1.0 (Mac OS X Mail 9.0 \(3093\))
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
We (Java team at Oracle) are going through weak algorithms in all our code and noticed our krb5 GSS-API mech is using MD5 in channel binding. I noticed RFC 6542 already updated it. Does MIT krb5 support it?
src/lib/gssapi/krb5/util_cksum.c has
/* Checksumming the channel bindings always uses plain MD5. */
krb5_error_code
kg_checksum_channel_bindings(context, cb, cksum)
Is that comment still precise? I tried to search for RFC 6542 site:mit.edu and also found nothing.
Thanks
Max
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
