git: 78d4557a9b6d - main - telnet: Add Support for MIT KRB5 build
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Mon, 16 Jun 2025 02:51:52 UTC
The branch main has been updated by cy:
URL: https://cgit.FreeBSD.org/src/commit/?id=78d4557a9b6d13ce6040255ec5f8875db351e9a0
commit 78d4557a9b6d13ce6040255ec5f8875db351e9a0
Author: Cy Schubert <cy@FreeBSD.org>
AuthorDate: 2025-06-10 20:07:32 +0000
Commit: Cy Schubert <cy@FreeBSD.org>
CommitDate: 2025-06-16 02:49:36 +0000
telnet: Add Support for MIT KRB5 build
MIT KRB5 does not support telnet. This is because telnet uses 3DES
encryption, which requires 3DES encrypted keys in the KDC database.
As MIT had deprecated and removed 3DES support about a decade ago,
telnet is not supported.
Sponsored by: The FreeBSD Foundation
Reviewed by: markj
Differential revision: https://reviews.freebsd.org/D50785
---
lib/libtelnet/Makefile | 3 ++-
usr.bin/telnet/Makefile | 3 ++-
2 files changed, 4 insertions(+), 2 deletions(-)
diff --git a/lib/libtelnet/Makefile b/lib/libtelnet/Makefile
index 69e63af4e272..6bc2f5a51de0 100644
--- a/lib/libtelnet/Makefile
+++ b/lib/libtelnet/Makefile
@@ -19,7 +19,8 @@ CFLAGS+= -DENCRYPTION -DAUTHENTICATION -DSRA
CFLAGS+= -DOPENSSL_API_COMPAT=0x10100000L
.endif
-.if ${MK_KERBEROS_SUPPORT} != "no"
+.if ${MK_KERBEROS_SUPPORT} != "no" && ${MK_MITKRB5} != "yes"
+# MIT KRB5 deprecated and removed 3DES. Therefore no telnet support.
SRCS+= kerberos5.c
CFLAGS+= -DKRB5 -DFORWARD -Dnet_write=telnet_net_write
.endif
diff --git a/usr.bin/telnet/Makefile b/usr.bin/telnet/Makefile
index 930d70faa8ba..9197d44db94c 100644
--- a/usr.bin/telnet/Makefile
+++ b/usr.bin/telnet/Makefile
@@ -30,7 +30,8 @@ CFLAGS+= -DENCRYPTION -DAUTHENTICATION -DIPSEC
LIBADD+= mp crypto ipsec pam
.endif
-.if ${MK_KERBEROS_SUPPORT} != "no"
+.if ${MK_KERBEROS_SUPPORT} != "no" && ${MK_MITKRB5} != "yes"
+# MIT KRB5 deprecated and removed 3DES. Therefore no telnet support.
CFLAGS+= -DKRB5 -DFORWARD -Dnet_write=telnet_net_write
LIBADD+= krb5 roken
.endif