From 7d8cc5653179eb4aaa5c8e980ec1bf8f90888d1b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= Date: Wed, 26 Nov 2003 02:41:53 +0000 Subject: [PATCH] don't use PKINIT DH per default since its too slow git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13160 ec53bebd-3082-4978-b11e-865c3cabbd6b --- kuser/kinit.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/kuser/kinit.c b/kuser/kinit.c index aac9e6a21..96b00c046 100644 --- a/kuser/kinit.c +++ b/kuser/kinit.c @@ -155,7 +155,7 @@ static struct getargs args[] = { { "ca-dir", 'D', arg_string, &pk_ca_dir, "directory with CA certificates", "directory" }, - { "pkinit-use-dh", 0, arg_negative_flag, &pk_use_dh, + { "pkinit-use-dh", 0, arg_flag, &pk_use_dh, "make pkinit use DH" }, #endif { "version", 0, arg_flag, &version_flag }, @@ -725,7 +725,7 @@ main (int argc, char **argv) if(pk_use_dh == -1) krb5_appdefault_boolean(context, "kinit", krb5_principal_get_realm(context, principal), - "pkinit-use-dh", TRUE, &pk_use_dh); + "pkinit-use-dh", FALSE, &pk_use_dh); #endif if(!addrs_flag && extra_addresses.num_strings > 0)