RFR: 8031046: Native Windows ccache might still get unsupported ticket

Weijun Wang weijun.wang at oracle.com
Tue Jan 7 19:00:01 PST 2014


ping again.

On 12/27/13, 17:59, Weijun Wang wrote:
> Hi All
>
> Please review the code changes at
>
>     http://cr.openjdk.java.net/~weijun/8031046/webrev.00/
>
> In 8016594, we updated Windows LSA retrieval so that when the existing
> TGT has a session key whose etype is not supported by Java (say,
> aes-256), we re-acquire one using the default_tkt_enctypes list and
> return it. Unfortunately, if the first item in that list is not
> supported by Windows (say, des3-cbc-sha1), Windows will still issue an
> aes-256 ticket. We should check again and possibly try other items until
> we get a ticket with the requested etype.
>
> Thanks
> Max


More information about the security-dev mailing list