sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-03-27 22:50:26 +03:00
Code

use ETYPE_DES3_CBC_SHA1 for the verify step in verify_mic_des3

Browse Source 
This allows a strict link between checksum types and key types to be
enforced.

Andrew Bartlett
This commit is contained in:
Andrew Bartlett 2011-12-15 16:17:09 +11:00
parent d087e715fc
commit 1787efaa00
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
source4/heimdal/lib/gssapi/krb5/verify_mic.c
View File

@ -251,6 +251,14 @@ retry:
csum.checksum.length = 20;
csum.checksum.data = p + 8;
krb5_crypto_destroy (context, crypto);
ret = krb5_crypto_init(context, key,
ETYPE_DES3_CBC_SHA1, &crypto);
if (ret){
*minor_status = ret;
return GSS_S_FAILURE;
}
ret = krb5_verify_checksum (context, crypto,
KRB5_KU_USAGE_SIGN,
tmp, message_buffer->length + 8,