aboutsummaryrefslogtreecommitdiff
path: root/src/include
diff options
context:
space:
mode:
authorGreg Hudson <ghudson@mit.edu>2010-01-19 23:35:39 +0000
committerGreg Hudson <ghudson@mit.edu>2010-01-19 23:35:39 +0000
commitbc763a58830d2b5b097324a70317edb8638a4cc8 (patch)
tree7b6ec2238603f09d73fcd931ff371cca5d8dfdf3 /src/include
parent4c40a2de53cb618b839d1647442dcd9f0e9d2ae4 (diff)
downloadkrb5-bc763a58830d2b5b097324a70317edb8638a4cc8.zip
krb5-bc763a58830d2b5b097324a70317edb8638a4cc8.tar.gz
krb5-bc763a58830d2b5b097324a70317edb8638a4cc8.tar.bz2
Add krb5_allow_weak_crypto API
Add an API to allow apps to override the profile setting of allow_weak_crypto, so that aklog can work with krb5 1.8 out of the box until OpenAFS finishes migrating away from DES. ticket: 6645 target_version: 1.8 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23663 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/include')
-rw-r--r--src/include/krb5/krb5.hin5
1 files changed, 5 insertions, 0 deletions
diff --git a/src/include/krb5/krb5.hin b/src/include/krb5/krb5.hin
index 0941273..63b6971 100644
--- a/src/include/krb5/krb5.hin
+++ b/src/include/krb5/krb5.hin
@@ -2553,6 +2553,11 @@ krb5_pac_verify(krb5_context context, const krb5_pac pac,
krb5_timestamp authtime, krb5_const_principal principal,
const krb5_keyblock *server, const krb5_keyblock *privsvr);
+/* Allows the appplication to override the profile's allow_weak_crypto setting.
+ * Primarily for use by aklog. */
+krb5_error_code KRB5_CALLCONV
+krb5_allow_weak_crypto(krb5_context context, krb5_boolean enable);
+
#if TARGET_OS_MAC
# pragma pack(pop)
#endif