RFR: 8273670: Remove weak etypes from default krb5 etype list [v3]

Weijun Wang weijun at openjdk.java.net
Mon Sep 27 01:28:29 UTC 2021


> This code change removes weak etypes from the default list so it's safer to enable one of them. See the corresponding CSR at https://bugs.openjdk.java.net/browse/JDK-8274207 for more explanation. BTW, please review the CSR as well.

Weijun Wang has updated the pull request incrementally with one additional commit since the last revision:

  disable weak checksums as well

-------------

Changes:
  - all: https://git.openjdk.java.net/jdk/pull/5654/files
  - new: https://git.openjdk.java.net/jdk/pull/5654/files/7937b069..24b6d91e

Webrevs:
 - full: https://webrevs.openjdk.java.net/?repo=jdk&pr=5654&range=02
 - incr: https://webrevs.openjdk.java.net/?repo=jdk&pr=5654&range=01-02

  Stats: 145 lines in 4 files changed: 59 ins; 51 del; 35 mod
  Patch: https://git.openjdk.java.net/jdk/pull/5654.diff
  Fetch: git fetch https://git.openjdk.java.net/jdk pull/5654/head:pull/5654

PR: https://git.openjdk.java.net/jdk/pull/5654



More information about the security-dev mailing list