hdb: Change default_keytypes[] to drop weak enctypes

2025-11-11 22:40:15 -06:00
parent 8a52ba7e0f
commit 49ff8baae4
1 changed files with 1 additions and 2 deletions
--- a/lib/hdb/keys.c
+++ b/lib/hdb/keys.c
@@ -673,8 +673,7 @@ hdb_generate_key_set(krb5_context context, krb5_principal principal,
    char **config_ktypes = NULL;
    static const char *default_keytypes[] = {
 	"aes256-cts-hmac-sha1-96:pw-salt",
-	"des3-cbc-sha1:pw-salt",
-	"arcfour-hmac-md5:pw-salt",
+	"aes256-cts-hmac-sha384-192:pw-salt",
 	NULL
    };