sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-03-09 08:58:35 +03:00
Code

s4:torture/rpc: without weak crypto we should require AES

Browse Source 
We should check that we can actually negotiated the strong AES
crypto instead of just checking that NETLOGON_NEG_ARCFOUR is not
there...

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15425

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
(cherry picked from commit 3dcbc8eea5bc53a8332b3ad93ea4c3df99af7830)
This commit is contained in:
Stefan Metzmacher 2024-10-10 15:02:16 +02:00 committed by Jule Anger
parent a65ca95d4d
commit 0267772cdf
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
source4/torture/rpc/netlogon_crypto.c
View File

@ -169,8 +169,8 @@ static bool test_ServerAuth3Crypto(struct dcerpc_pipe *p,
if (!weak_crypto_allowed) {
torture_assert(tctx,
(negotiate_flags & NETLOGON_NEG_ARCFOUR) == 0,
"Server should not announce RC4 support");
(negotiate_flags & NETLOGON_NEG_SUPPORTS_AES),
"Server negotiate AES support");
}
/* Prove that requesting a challenge again won't break it */