oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

tests: Work around OpenSSL legacy provider being disabled

Browse Source
This commit is contained in:
Nicolas Williams
2026-01-07 12:28:13 -06:00
parent b9773f7839
commit d1f56c6966
2 changed files with 10 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
tests/kdc/Makefile.am
View File

@@ -244,7 +244,7 @@ krb5-hdb-mitdb.conf: krb5-hdb-mitdb.conf.in Makefile
krb5-weak.conf: krb5.conf.in Makefile
$(do_subst) \
-e 's,[@]WEAK[@],true,g' \
-e 's,[@]dk[@],default_keys = aes256-cts-hmac-sha1-96:pw-salt aes256-cts-hmac-sha384-192:pw-salt arcfour-hmac-md5:pw-salt,g' \
-e 's,[@]dk[@],default_keys = aes256-cts-hmac-sha1-96:pw-salt aes256-cts-hmac-sha384-192:pw-salt,g' \
-e 's,[@]messages[@],messages,g' \
-e 's,[@]signalsocket[@],signal,g' \
-e 's,[@]ipropstats[@],iprop-stats,g' \

15
tests/kdc/check-kdc.in
View File

@@ -829,12 +829,15 @@ fi
if $weak; then
echo "test impersonate using rc4 based tgt"; > messages.log
${kinit} -e arcfour-hmac-md5 --forwardable --password-file=${objdir}/foopassword ${ps} || \
{ ec=1 ; eval "${testfailed}"; }
${kgetcred_imp} --impersonate=bar@${R} ${ps} || \
{ ec=1 ; eval "${testfailed}"; }
${test_ap_req} ${ps} ${keytab} ${ocache} || \
{ ec=1 ; eval "${testfailed}"; }
# RC4 requires the OpenSSL legacy provider and arcfour keys; skip if not available
if ${kinit} -e arcfour-hmac-md5 --forwardable --password-file=${objdir}/foopassword ${ps} 2>/dev/null; then
${kgetcred_imp} --impersonate=bar@${R} ${ps} || \
{ ec=1 ; eval "${testfailed}"; }
${test_ap_req} ${ps} ${keytab} ${ocache} || \
{ ec=1 ; eval "${testfailed}"; }
else
echo " SKIP: arcfour-hmac-md5 not available (no arcfour keys or legacy provider)"
fi
fi
echo "test impersonate"; > messages.log