oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

add --disable-DES

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13455 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2004-03-07 17:10:46 +00:00
parent c0e634f6c4
commit 288ae5fc9a
1 changed files with 17 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
kdc/config.c
View File

@@ -70,6 +70,8 @@ static const char *trpolicy_str;
static struct getarg_strings addresses_str; /* addresses to listen on */
krb5_addresses explicit_addresses;
static int disable_des = -1;
#ifdef KRB4
char *v4_realm;
int enable_v4 = -1;
@@ -140,6 +142,8 @@ static struct getargs args[] = {
#endif
{ "addresses", 0, arg_strings, &addresses_str,
"addresses to listen on", "list of addresses" },
{ "disable-des", 0, arg_flag, &disable_des,
"disable DES" },
{ "help", 'h', arg_flag, &help_flag },
{ "version", 'v', arg_flag, &version_flag }
};
@@ -463,4 +467,17 @@ configure(int argc, char **argv)
krb_get_lrealm(v4_realm, 1);
}
#endif
if(disable_des == -1)
disable_des = krb5_config_get_bool_default(context, NULL,
0,
"kdc",
"disable-des", NULL);
if(disable_des) {
krb5_enctype_disable(context, ETYPE_DES_CBC_CRC);
krb5_enctype_disable(context, ETYPE_DES_CBC_MD4);
krb5_enctype_disable(context, ETYPE_DES_CBC_MD5);
krb5_enctype_disable(context, ETYPE_DES_CBC_NONE);
krb5_enctype_disable(context, ETYPE_DES_CFB64_NONE);
krb5_enctype_disable(context, ETYPE_DES_PCBC_NONE);
}
}