RFR: 8031046: Native Windows ccache might still get unsupported ticket

Valerie (Yu-Ching) Peng valerie.peng at oracle.com
Fri Jan 10 11:05:45 PST 2014


Changes look fine.
Thanks,
Valerie

On 12/27/13 01:59, Weijun Wang wrote:
> Hi All
>
> Please review the code changes at
>
>    http://cr.openjdk.java.net/~weijun/8031046/webrev.00/
>
> In 8016594, we updated Windows LSA retrieval so that when the existing 
> TGT has a session key whose etype is not supported by Java (say, 
> aes-256), we re-acquire one using the default_tkt_enctypes list and 
> return it. Unfortunately, if the first item in that list is not 
> supported by Windows (say, des3-cbc-sha1), Windows will still issue an 
> aes-256 ticket. We should check again and possibly try other items 
> until we get a ticket with the requested etype.
>
> Thanks
> Max



More information about the security-dev mailing list