RFR: 8031046: Native Windows ccache might still get unsupported ticket

Weijun Wang weijun.wang at oracle.com
Fri Dec 27 09:59:40 UTC 2013


Hi All

Please review the code changes at

    http://cr.openjdk.java.net/~weijun/8031046/webrev.00/

In 8016594, we updated Windows LSA retrieval so that when the existing 
TGT has a session key whose etype is not supported by Java (say, 
aes-256), we re-acquire one using the default_tkt_enctypes list and 
return it. Unfortunately, if the first item in that list is not 
supported by Windows (say, des3-cbc-sha1), Windows will still issue an 
aes-256 ticket. We should check again and possibly try other items until 
we get a ticket with the requested etype.

Thanks
Max



More information about the security-dev mailing list