Page MenuHomeFreeBSD

D20343.id58379.diff
No OneTemporary

D20343.id58379.diff

Index: sys/kgssapi/krb5/kcrypto_arcfour.c
===================================================================
--- sys/kgssapi/krb5/kcrypto_arcfour.c
+++ sys/kgssapi/krb5/kcrypto_arcfour.c
@@ -46,8 +46,12 @@
static void
arcfour_init(struct krb5_key_state *ks)
{
+ static struct timeval lastwarn;
+ static struct timeval warninterval = { .tv_sec = 3600, .tv_usec = 0 };
ks->ks_priv = NULL;
+ if (ratecheck(&lastwarn, &warninterval))
+ gone_in(13, "RC4 cipher for Kerberos GSS");
}
static void
Index: sys/kgssapi/krb5/kcrypto_des.c
===================================================================
--- sys/kgssapi/krb5/kcrypto_des.c
+++ sys/kgssapi/krb5/kcrypto_des.c
@@ -53,11 +53,15 @@
static void
des1_init(struct krb5_key_state *ks)
{
+ static struct timeval lastwarn;
+ static struct timeval warninterval = { .tv_sec = 3600, .tv_usec = 0 };
struct des1_state *ds;
ds = malloc(sizeof(struct des1_state), M_GSSAPI, M_WAITOK|M_ZERO);
mtx_init(&ds->ds_lock, "gss des lock", NULL, MTX_DEF);
ks->ks_priv = ds;
+ if (ratecheck(&lastwarn, &warninterval))
+ gone_in(13, "DES cipher for Kerberos GSS");
}
static void
Index: sys/kgssapi/krb5/kcrypto_des3.c
===================================================================
--- sys/kgssapi/krb5/kcrypto_des3.c
+++ sys/kgssapi/krb5/kcrypto_des3.c
@@ -54,11 +54,15 @@
static void
des3_init(struct krb5_key_state *ks)
{
+ static struct timeval lastwarn;
+ static struct timeval warninterval = { .tv_sec = 3600, .tv_usec = 0 };
struct des3_state *ds;
ds = malloc(sizeof(struct des3_state), M_GSSAPI, M_WAITOK|M_ZERO);
mtx_init(&ds->ds_lock, "gss des3 lock", NULL, MTX_DEF);
ks->ks_priv = ds;
+ if (ratecheck(&lastwarn, &warninterval))
+ gone_in(13, "DES3 cipher for Kerberos GSS");
}
static void

File Metadata

Mime Type
text/plain
Expires
Sat, Mar 21, 4:27 AM (11 h, 50 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
30060407
Default Alt Text
D20343.id58379.diff (1 KB)

Event Timeline