(DES_string_to_key_int): must check for weak keys after doing the

DES_cbc_cksum


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14592 ec53bebd-3082-4978-b11e-865c3cabbd6b

lib/krb5/crypto.c

@@ -217,6 +217,8 @@ DES_string_to_key_int(unsigned char *data, size_t length, DES_cblock *key)
     DES_cbc_cksum((void*)data, key, length, &schedule, key);
     memset(&schedule, 0, sizeof(schedule));
     DES_set_odd_parity(key);
+    if(DES_is_weak_key(key))
+	(*key)[7] ^= 0xF0;
 }
 
 static krb5_error_code