[prev in list] [next in list] [prev in thread] [next in thread]
List: krb5-bugs
Subject: [krbdev.mit.edu #7745] git commit
From: "Tom Yu via RT" <rt-comment () krbdev ! mit ! edu>
Date: 2013-10-30 21:59:39
Message-ID: rt-7745-39433.0.410338207914478 () krbdev ! mit ! edu
[Download RAW message or body]
Correctly activate master keys in pre-1.7 KDBs
Starting with 1.7, databases are created with actkvno tl-data in the
K/M entry which gives the initial master key version an activation
time of 0. A database created before 1.7 will not have this tl-data,
but we should behave in the same way as we do for a more recent
database.
Move the actkvno list synthesis code from krb5_dbe_fetch_act_key_list
to krb5_dbe_lookup_actkvno so it applies to kdb5_util commands as well
as libkadm5. Synthesize the same list as we would have initialized
the KDB with, with an activation time of 0 for the earliest master
key.
(cherry picked from commit ec560fac83912abaa15fb158101c8174497081c5)
https://github.com/krb5/krb5/commit/8df3a37ddeae3980ae074903c7c5392f2c522a9d
Author: Greg Hudson <ghudson@mit.edu>
Committer: Tom Yu <tlyu@mit.edu>
Commit: 8df3a37ddeae3980ae074903c7c5392f2c522a9d
Branch: krb5-1.10
src/lib/kdb/kdb5.c | 41 +++++++++++++++++++----------------------
1 files changed, 19 insertions(+), 22 deletions(-)
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic