Integrated: 8139348: Deprecate 3DES and RC4 in Kerberos
Weijun Wang
weijun at openjdk.java.net
Thu Feb 25 18:53:39 UTC 2021
On Wed, 24 Feb 2021 01:38:07 GMT, Weijun Wang <weijun at openjdk.org> wrote:
> Deprecate des3-hmac-sha1 (etype 16) and rc4-hmac (etype 23). User can add "allow_weak_crypto = true" in krb5.conf to re-enable them (plus the DES-based etypes deprecated long ago).
This pull request has now been integrated.
Changeset: ded96ddc
Author: Weijun Wang <weijun at openjdk.org>
URL: https://git.openjdk.java.net/jdk/commit/ded96ddc
Stats: 72 lines in 7 files changed: 29 ins; 8 del; 35 mod
8139348: Deprecate 3DES and RC4 in Kerberos
Reviewed-by: mullan
-------------
PR: https://git.openjdk.java.net/jdk/pull/2701
More information about the security-dev
mailing list