[Bug 275915] kadmin(d): adding principal crashes in ARCFOUR_string_to_key

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=275915

--- Comment #2 from Lexi Winter <lexi.freebsd@le-fay.org> ---
Created attachment 247295
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=247295&action=edit
patch

well, this patch fixes the crash in kadmin/kadmind by returning an error
instead:

kadmin> add -r host/test.example.org@EXAMPLE.ORG
Max ticket life [1 day]:
Max renewable life [1 week]:
Principal expiration time [never]:
Password expiration time [never]:
Attributes []:
kadmin: kadm5_create_principal: Cannot create digest
kadmin: adding host/test.example.org@EXAMPLE.ORG: Cannot create digest
kadmin>

it doesn't fix the underlying issue with MD4 not being available. the default
default_keys should probably be updated to remove arcfour-hmac-md5, since
almost nothing requires this nowadays (including Windows).

-- 
You are receiving this mail because:
You are the assignee for the bug.