sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-08 21:18:16 +03:00
Code

s3:smbd: really support AES-256* in the server

Browse Source 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14764

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>

Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Tue Jul 20 16:13:28 UTC 2021 on sn-devel-184
This commit is contained in:
Stefan Metzmacher 2021-07-15 13:20:22 +02:00 committed by Jeremy Allison
parent 407b458242
commit 0ac7106104
2 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
selftest/knownfail.d/smb2.session
View File

@ -2,6 +2,3 @@
# we required the same client guid for session binds
^samba3.smb2.session.*.bind_negative_smb3signCtoHd
^samba3.smb2.session.*.bind_negative_smb3signHtoCd
# aes-256-* is not fully working yet
^samba3.smb2.session.*.encryption-aes-256-ccm
^samba3.smb2.session.*.encryption-aes-256-gcm

6
source3/smbd/smb2_sesssetup.c
View File

@ -346,6 +346,12 @@ static NTSTATUS smbd_smb2_auth_generic_return(struct smbXsrv_session *session,
case SMB2_ENCRYPTION_AES128_GCM:
nonce_size = gnutls_cipher_get_iv_size(GNUTLS_CIPHER_AES_128_GCM);
break;
case SMB2_ENCRYPTION_AES256_CCM:
nonce_size = SMB2_AES_128_CCM_NONCE_SIZE;
break;
case SMB2_ENCRYPTION_AES256_GCM:
nonce_size = gnutls_cipher_get_iv_size(GNUTLS_CIPHER_AES_256_GCM);
break;
default:
nonce_size = 0;
break;