Simplify subkey usage for tgs-req, don't rewrite tgs-rep-sub-key keyuage for arcfour, its correct
This commit is contained in:
@@ -244,16 +244,12 @@ init_tgs_req (krb5_context context,
|
||||
if(ret)
|
||||
goto fail;
|
||||
|
||||
ret = krb5_generate_subkey_extended(context, &krbtgt->session,
|
||||
ETYPE_NULL, &key);
|
||||
ret = krb5_auth_con_generatelocalsubkey(context, ac, &krbtgt->session);
|
||||
if (ret)
|
||||
goto fail;
|
||||
|
||||
ret = krb5_auth_con_setlocalsubkey(context, ac, key);
|
||||
if (ret)
|
||||
goto fail;
|
||||
|
||||
ret = set_auth_data (context, &t->req_body, &in_creds->authdata, key);
|
||||
ret = set_auth_data (context, &t->req_body, &in_creds->authdata,
|
||||
ac->local_subkey);
|
||||
if (ret)
|
||||
goto fail;
|
||||
|
||||
@@ -265,12 +261,11 @@ init_tgs_req (krb5_context context,
|
||||
if(ret)
|
||||
goto fail;
|
||||
|
||||
*subkey = key;
|
||||
key = NULL;
|
||||
|
||||
ret = krb5_auth_con_getlocalsubkey(context, ac, subkey);
|
||||
if (ret)
|
||||
goto fail;
|
||||
|
||||
fail:
|
||||
if (key)
|
||||
krb5_free_keyblock (context, key);
|
||||
if (ac)
|
||||
krb5_auth_con_free(context, ac);
|
||||
if (ret) {
|
||||
|
Reference in New Issue
Block a user