JDK-6960894 : Better AS-REQ creation and processing
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: org.ietf.jgss:krb5
  • Affected Version: 6u20,7
  • Priority: P4
  • Status: Closed
  • Resolution: Fixed
  • OS: generic
  • CPU: generic
  • Submitted: 2010-06-13
  • Updated: 2014-02-18
  • Resolved: 2011-03-07
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 7
7 b120Fixed
Related Reports
Duplicate :  
JDK-6856039 - duplicate setSalt() called in AS-REQ
Duplicate :  
JDK-6942448 - krb5 cannot detect name case error without preauth
Duplicate :  
JDK-6941083 - take salt out of PrincipalName
Description
The current AS-REQ creation and processing implementation:

1. spread into multiple source files and have duplicate codes
2. cannot deal with PA-DATA in AS-REP
3. only use a single salt, and write it into PrincipalName permanently
4. generate too many secret keys and have no consistent way to clear them
5. does not handle the preferences of PA-ETYPE-INFO2, PA-ETYPE-INFO correctly
Comments
EVALUATION http://hg.openjdk.java.net/jdk7/build/jdk/rev/1e7dc87fad95
04-12-2010
EVALUATION http://hg.openjdk.java.net/jdk7/tl/jdk/rev/1e7dc87fad95
12-11-2010
EVALUATION Simplify AS-REQ manipulation and pave work for possible enhancements (PKINIT, more preauth, etc)
13-07-2010