oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

(hdb_unseal_key_mkey): try to unseal key with keyusage 0 in case the

Browse Source 
key was encrypted with MIT Kerberos (old patch from Johan)


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15826 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2005-07-28 14:06:16 +00:00
parent 24112b1082
commit f3862df669
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
lib/hdb/mkey.c
View File

@@ -393,6 +393,13 @@ hdb_unseal_key_mkey(krb5_context context, Key *k, hdb_master_key mkey)
k->key.keyvalue.data, k->key.keyvalue.data,
k->key.keyvalue.length, k->key.keyvalue.length,
&res); &res);
if(ret == KRB5KRB_AP_ERR_BAD_INTEGRITY) {
/* try to decrypt with MIT key usage */
ret = krb5_decrypt(context, key->crypto, 0,
k->key.keyvalue.data,
k->key.keyvalue.length,
&res);
}
if (ret) if (ret)
return ret; return ret;