From 725515efbb81d7b5ac867baaad11b04822ea9aa6 Mon Sep 17 00:00:00 2001 From: Assar Westerlund Date: Thu, 10 Aug 2000 20:15:41 +0000 Subject: [PATCH] (krb5_mk_req_internal): add comment on checksum type selection git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8929 ec53bebd-3082-4978-b11e-865c3cabbd6b --- lib/krb5/mk_req_ext.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/lib/krb5/mk_req_ext.c b/lib/krb5/mk_req_ext.c index 7d2753467..a3adf65bb 100644 --- a/lib/krb5/mk_req_ext.c +++ b/lib/krb5/mk_req_ext.c @@ -1,5 +1,5 @@ /* - * Copyright (c) 1997, 1998, 1999 Kungliga Tekniska Högskolan + * Copyright (c) 1997 - 2000 Kungliga Tekniska Högskolan * (Royal Institute of Technology, Stockholm, Sweden). * All rights reserved. * @@ -88,6 +88,11 @@ krb5_mk_req_internal(krb5_context context, krb5_free_keyblock(context, ac->keyblock); krb5_copy_keyblock(context, &in_creds->session, &ac->keyblock); + /* it's unclear what type of checksum we can use. try the best one, except: + * a) if it's configured differently for the current realm, or + * b) if the session key is des-cbc-crc + */ + if (in_data) { if(ac->keyblock->keytype == ETYPE_DES_CBC_CRC) { /* this is to make DCE secd (and older MIT kdcs?) happy */