RFR: 8031046: Native Windows ccache might still get unsupported ticket
Weijun Wang
weijun.wang at oracle.com
Fri Dec 27 09:59:40 UTC 2013
Hi All
Please review the code changes at
http://cr.openjdk.java.net/~weijun/8031046/webrev.00/
In 8016594, we updated Windows LSA retrieval so that when the existing
TGT has a session key whose etype is not supported by Java (say,
aes-256), we re-acquire one using the default_tkt_enctypes list and
return it. Unfortunately, if the first item in that list is not
supported by Windows (say, des3-cbc-sha1), Windows will still issue an
aes-256 ticket. We should check again and possibly try other items until
we get a ticket with the requested etype.
Thanks
Max
More information about the security-dev
mailing list