RFR: 8031046: Native Windows ccache might still get unsupported ticket
Valerie (Yu-Ching) Peng
valerie.peng at oracle.com
Fri Jan 10 19:05:45 UTC 2014
Changes look fine.
Thanks,
Valerie
On 12/27/13 01:59, Weijun Wang wrote:
> Hi All
>
> Please review the code changes at
>
> http://cr.openjdk.java.net/~weijun/8031046/webrev.00/
>
> In 8016594, we updated Windows LSA retrieval so that when the existing
> TGT has a session key whose etype is not supported by Java (say,
> aes-256), we re-acquire one using the default_tkt_enctypes list and
> return it. Unfortunately, if the first item in that list is not
> supported by Windows (say, des3-cbc-sha1), Windows will still issue an
> aes-256 ticket. We should check again and possibly try other items
> until we get a ticket with the requested etype.
>
> Thanks
> Max
More information about the security-dev
mailing list