SUNRPC: Add build option to disable support for insecure enctypes
Enable distributions to enforce the rejection of ancient and insecure Kerberos enctypes in the kernel's RPCSEC_GSS implementation. These are the single-DES encryption types that were deprecated in 2012 by RFC 6649. Enctypes that were deprecated more recently (by RFC 8429) remain fully supported for now because they are still likely to be widely used. Signed-off-by:Chuck Lever <chuck.lever@oracle.com> Acked-by:
Simo Sorce <simo@redhat.com> Signed-off-by:
Anna Schumaker <Anna.Schumaker@Netapp.com>
parent
067fb11b
Please register or sign in to comment