Integrated: 8139348: Deprecate 3DES and RC4 in Kerberos

Weijun Wang weijun at openjdk.java.net
Thu Feb 25 18:53:39 UTC 2021


On Wed, 24 Feb 2021 01:38:07 GMT, Weijun Wang <weijun at openjdk.org> wrote:

> Deprecate des3-hmac-sha1 (etype 16) and rc4-hmac (etype 23). User can add "allow_weak_crypto = true" in krb5.conf to re-enable them (plus the DES-based etypes deprecated long ago).

This pull request has now been integrated.

Changeset: ded96ddc
Author:    Weijun Wang <weijun at openjdk.org>
URL:       https://git.openjdk.java.net/jdk/commit/ded96ddc
Stats:     72 lines in 7 files changed: 29 ins; 8 del; 35 mod

8139348: Deprecate 3DES and RC4 in Kerberos

Reviewed-by: mullan

-------------

PR: https://git.openjdk.java.net/jdk/pull/2701



More information about the security-dev mailing list