RFR: 8273670: Remove weak etypes from default krb5 etype list [v3]

Valerie Peng valeriep at openjdk.java.net
Mon Sep 27 18:05:56 UTC 2021


On Mon, 27 Sep 2021 01:28:29 GMT, Weijun Wang <weijun at openjdk.org> wrote:

>> This code change removes weak etypes from the default list so it's safer to enable one of them. See the corresponding CSR at https://bugs.openjdk.java.net/browse/JDK-8274207 for more explanation. BTW, please review the CSR as well.
>
> Weijun Wang has updated the pull request incrementally with one additional commit since the last revision:
> 
>   disable weak checksums as well

Updates look good. Thanks.

-------------

Marked as reviewed by valeriep (Reviewer).

PR: https://git.openjdk.java.net/jdk/pull/5654


More information about the security-dev mailing list