On Wed, Jul 10, 2019 at 04:05:39PM -0400, Sam Hartman wrote: > Hi. > In krb5 1.17-4, DES is entirely removed. > > src/aklog/aklog.c makes it look like openafs still requires > des-cbc-crc. If so, please upgrade this bug to RC. > Kaduk thinks that's probably not the case though. > > If not, please consider removing the weak_crypto code at this point.
https://gerrit.openafs.org/13689 has the first step at getting rid of the weak crypto code (disable it by default and require opt-in if there are stragglers using it). -Ben
