RFR: 8031046: Native Windows ccache might still get unsupported ticket
Weijun Wang
weijun.wang at oracle.com
Wed Jan 8 03:00:01 UTC 2014
ping again.
On 12/27/13, 17:59, Weijun Wang wrote:
> Hi All
>
> Please review the code changes at
>
> http://cr.openjdk.java.net/~weijun/8031046/webrev.00/
>
> In 8016594, we updated Windows LSA retrieval so that when the existing
> TGT has a session key whose etype is not supported by Java (say,
> aes-256), we re-acquire one using the default_tkt_enctypes list and
> return it. Unfortunately, if the first item in that list is not
> supported by Windows (say, des3-cbc-sha1), Windows will still issue an
> aes-256 ticket. We should check again and possibly try other items until
> we get a ticket with the requested etype.
>
> Thanks
> Max
More information about the security-dev
mailing list