summaryrefslogtreecommitdiffstats
path: root/src
diff options
context:
space:
mode:
authorSam Hartman <hartmans@mit.edu>2001-10-27 04:22:08 +0000
committerSam Hartman <hartmans@mit.edu>2001-10-27 04:22:08 +0000
commit19e02f6fbe7212a05652594a3d4680f875863c94 (patch)
treee83f2448387b26dd73eeb7be2347733a9f06a343 /src
parent5c130e23c39fddbf4a3dd8d60cae7597503c25f1 (diff)
downloadkrb5-19e02f6fbe7212a05652594a3d4680f875863c94.tar.gz
krb5-19e02f6fbe7212a05652594a3d4680f875863c94.tar.xz
krb5-19e02f6fbe7212a05652594a3d4680f875863c94.zip
* Use right key usage for seal without encryption.
Now tested and working against win2k ldap server; wrap and unwrap of encrypted and unencrypted data tested. So far no test of getmic or verify_mic. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13870 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src')
-rw-r--r--src/lib/gssapi/krb5/ChangeLog4
-rw-r--r--src/lib/gssapi/krb5/k5seal.c2
2 files changed, 5 insertions, 1 deletions
diff --git a/src/lib/gssapi/krb5/ChangeLog b/src/lib/gssapi/krb5/ChangeLog
index 2bc1ca9a6d..61f853aadd 100644
--- a/src/lib/gssapi/krb5/ChangeLog
+++ b/src/lib/gssapi/krb5/ChangeLog
@@ -1,3 +1,7 @@
+2001-10-27 Sam Hartman <hartmans@mit.edu>
+
+ * k5seal.c (make_seal_token_v1): Use usage 15 only for mic tokens, not for seal tokens without encryption
+
2001-10-26 Ezra Peisach <epeisach@mit.edu>
* k5seal.c (make_seal_token_v1): Correct errors in code pertaining
diff --git a/src/lib/gssapi/krb5/k5seal.c b/src/lib/gssapi/krb5/k5seal.c
index 7ba53db27c..e9d2985d18 100644
--- a/src/lib/gssapi/krb5/k5seal.c
+++ b/src/lib/gssapi/krb5/k5seal.c
@@ -150,7 +150,7 @@ make_seal_token_v1 (krb5_context context,
break;
case SGN_ALG_HMAC_MD5:
md5cksum.checksum_type = CKSUMTYPE_HMAC_MD5_ARCFOUR;
- if (!encrypt)
+ if (toktype != KG_TOK_SEAL_MSG)
sign_usage = 15;
break;
default: