On Wed, Jul 10, 2019 at 04:05:39PM -0400, Sam Hartman wrote:
> Hi.
> In krb5 1.17-4, DES is entirely removed.
>
> src/aklog/aklog.c makes it look like openafs still requires
> des-cbc-crc. If so, please upgrade this bug to RC.
> Kaduk thinks that's probably not the case though.
>
> If not, please consider removing the weak_crypto code at this point.
https://gerrit.openafs.org/13689 has the first step at getting rid of
the weak crypto code (disable it by default and require opt-in if
there are stragglers using it).
-Ben
