From aa3cf9664515246bb8a9674ef270ba9433e0f25c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= Date: Sun, 17 Aug 2008 14:09:56 +0000 Subject: [PATCH] add [libdefaults]allow_weak_crypto to allow des git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23590 ec53bebd-3082-4978-b11e-865c3cabbd6b --- lib/krb5/context.c | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/lib/krb5/context.c b/lib/krb5/context.c index bf5d6411f..358ab2034 100644 --- a/lib/krb5/context.c +++ b/lib/krb5/context.c @@ -192,6 +192,19 @@ init_context_from_config_file(krb5_context context) INIT_FLAG(context, flags, KRB5_CTX_F_CHECK_PAC, TRUE, "check_pac"); context->default_cc_name = NULL; context->default_cc_name_set = 0; + + ret = krb5_config_get_bool_default(context, NULL, FALSE, + "libdefaults", + "allow_weak_crypto", NULL); + if (ret) { + krb5_enctype_enable(context, ETYPE_DES_CBC_CRC); + krb5_enctype_enable(context, ETYPE_DES_CBC_MD4); + krb5_enctype_enable(context, ETYPE_DES_CBC_MD5); + krb5_enctype_enable(context, ETYPE_DES_CBC_NONE); + krb5_enctype_enable(context, ETYPE_DES_CFB64_NONE); + krb5_enctype_enable(context, ETYPE_DES_PCBC_NONE); + } + return 0; }