sun.security.spnego.msinterop does not work anymore/disable by default for 15

Weijun Wang weijun.wang at oracle.com
Thu Apr 16 13:14:48 UTC 2020


>> 
>> So I guess it's because Java has no subkey set. Try "-Dsun.security.krb5.acceptor.subkey=true" to see if it's bigger.
> 
> Yes, it is bigger and inline with the other Kerberos implemenatations.
> Is there any reason not to turn it on by default since the others do it too?

No real reason but I seldom want to change the existing behavior.

Except for being smaller, is there any other problem?

Thanks,
Max




More information about the security-dev mailing list