[jdk8u-dev] Integrated: 8139348: Deprecate 3DES and RC4 in Kerberos

[Ekaterina Vergizova]

On Thu, 4 May 2023 17:51:40 GMT, Ekaterina Vergizova <evergizova at openjdk.org> wrote:

> I'd like to backport JDK-8139348 to 8u for parity with Oracle 8u351. 
> CSR JDK-8262273 is approved for 8-pool.
> 
> 11u patch doesn't apply cleanly, some tests need to be adjusted:
> - jdk/test/sun/security/krb5/auto/NewSalt.java
>   - copyright years adjusted
>   - "default_tgs_enctypes=aes128-sha1" changed to "default_tgs_enctypes=aes128-cts" since aes128-sha1 alias is not supported in 8u (JDK-8014628 is not backported to 8u)
> - jdk/test/sun/security/krb5/auto/W83.java
>   - copyright years adjusted
>   - compile tag hunk applied manually due to context difference
> - jdk/test/sun/security/krb5/etype/WeakCrypto.java
>   - bug tag hunk applied manually due to context difference
>   - List.of replaced with Arrays.asList 
> - test/jdk/sun/security/krb5/tools/KtabCheck.java changes applied to jdk/test/sun/security/krb5/tools/ktcheck.sh (JDK-8180569 is not backported to 8u)
>   - additionally, aes128-sha2 (19) values are removed since it is not supported in 8u (JDK-8014628 is not in 8u)
> - jdk/test/sun/security/krb5/tools/onlythree.conf
>   - aes128-sha2 removed from default_tkt_enctypes since it is not supported in 8u (JDK-8014628 is not in 8u)
> 
> Tested with jdk_security and tier1, no regressions.

This pull request has now been integrated.

Changeset: 6244292d
Author:    Ekaterina Vergizova <evergizova at openjdk.org>
Committer: Andrew John Hughes <andrew at openjdk.org>
URL:       https://git.openjdk.org/jdk8u-dev/commit/6244292d28e1cddcc70bc4dbf98adad13fe1e3d7
Stats:     70 lines in 7 files changed: 27 ins; 8 del; 35 mod

8139348: Deprecate 3DES and RC4 in Kerberos

Reviewed-by: andrew
Backport-of: ded96ddcde1e9e8556a6ce8948acef27b6e192cc

-------------

PR: https://git.openjdk.org/jdk8u-dev/pull/312