oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

use the first proposed enable enctype

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13739 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2004-04-21 15:21:05 +00:00
parent b8ddf0d0a7
commit 7298e49a3f
1 changed files with 10 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
kdc/pkinit.c
View File

@@ -904,6 +904,7 @@ pk_mk_pa_reply(krb5_context context,
void *buf;
size_t len, size;
krb5_enctype enctype;
int i;
if (!enable_pkinit) {
krb5_clear_error_string(context);
@@ -913,15 +914,19 @@ pk_mk_pa_reply(krb5_context context,
memset(&rep, 0, sizeof(rep));
if (req->req_body.etype.len < 1) {
}
/* XXX select best/allowed enctype */
for (i = 0; i < req->req_body.etype.len; i++)
if (krb5_enctype_valid(context, req->req_body.etype.val[i]) == 0)
break;
if (req->req_body.etype.len <= i) {
ret = KRB5KRB_ERR_GENERIC;
krb5_set_error_string(context,
"No valid enctype available from client");
goto out;
}
/* XXX select best/allowed enctype */
enctype = req->req_body.etype.val[0];
enctype = ETYPE_DES3_CBC_SHA1;
}
enctype = req->req_body.etype.val[i];
if (client_params->dh == NULL) {
rep.element = choice_PA_PK_AS_REP_encKeyPack;