diff options
| author | Tom Yu <tlyu@mit.edu> | 2010-01-05 02:47:58 +0000 |
|---|---|---|
| committer | Tom Yu <tlyu@mit.edu> | 2010-01-05 02:47:58 +0000 |
| commit | b19f2a8984321c3e20a29c8a76456cecb99bccca (patch) | |
| tree | 4e34cb973572b321e9e9f32641937e96137ec348 /src/include | |
| parent | b8b8377845e02bb7e60dd09e01e15d0fad96caf5 (diff) | |
| download | krb5-b19f2a8984321c3e20a29c8a76456cecb99bccca.tar.gz krb5-b19f2a8984321c3e20a29c8a76456cecb99bccca.tar.xz krb5-b19f2a8984321c3e20a29c8a76456cecb99bccca.zip | |
disable weak crypto by default
Set allow_weak_crypto=false by default. Set default master key
enctype to sha256. Adjust test suite to compensate.
ticket: 6621
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23586 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/include')
| -rw-r--r-- | src/include/osconf.hin | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/include/osconf.hin b/src/include/osconf.hin index 6d0e7bc09..b39c97498 100644 --- a/src/include/osconf.hin +++ b/src/include/osconf.hin @@ -77,7 +77,7 @@ #define DEFAULT_KDB_LIB_PATH { "@MODULEDIR/kdb", NULL } #endif -#define DEFAULT_KDC_ENCTYPE ENCTYPE_DES3_CBC_SHA1 +#define DEFAULT_KDC_ENCTYPE ENCTYPE_AES256_CTS_HMAC_SHA1_96 #define KDCRCACHE "dfl:krb5kdc_rcache" #define KDC_PORTNAME "kerberos" /* for /etc/services or equiv. */ |