Add DES3 and RC4 to warning about weak etypes in Part IV of Advanced Security Programming in Java SE Authentication, Secure Communication and Single Sign-On

XMLWordPrintable

    • Type: Enhancement
    • Resolution: Unresolved
    • Priority: P4
    • 26
    • Affects Version/s: None
    • Component/s: docs
    • Fix Understood

      In Part IV of Advanced Security Programming in Java SE Authentication, Secure Communication and Single Sign-On, add DES3 and RC4 to the warnings as these etypes are also disabled by default.

      Also, since this is about using strong etypes, remove the examples that configure Kerberos to use RFC4 or DES3 etypes. And in fact, those etypes will not be used unless you also set allow_weak_crypto to true in the krb5.conf file.

            Assignee:
            Raymond Gallardo
            Reporter:
            Sean Mullan
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: