mbox series

[v1,0/9] Remove support for DES-based Kerberos enctypes

Message ID 168806089210.507650.17584608037244782863.stgit@morisot.1015granger.net (mailing list archive)
Headers show
Series Remove support for DES-based Kerberos enctypes | expand

Message

Chuck Lever June 29, 2023, 5:50 p.m. UTC
As we agreed, v6.6 will remove support for DES-based Kerberos
enctypes from the kernel's SunRPC GSS implementation. Here's a
series to do that.

This has been compile-tested only. Comments and further testing are
welcome.

---

Chuck Lever (9):
      SUNRPC: Remove RPCSEC_GSS_KRB5_ENCTYPES_DES
      SUNRPC: Remove Kunit tests for the DES3 encryption type
      SUNRPC: Remove DES and DES3 enctypes from the supported enctypes list
      SUNRPC: Remove code behind CONFIG_RPCSEC_GSS_KRB5_SIMPLIFIED
      SUNRPC: Remove krb5_derive_key_v1()
      SUNRPC: Remove gss_import_v1_context()
      SUNRPC: Remove CONFIG_RPCSEC_GSS_KRB5_CRYPTOSYSTEM
      SUNRPC: Remove the ->import_ctx method
      SUNRPC: Remove net/sunrpc/auth_gss/gss_krb5_seqnum.c


 net/sunrpc/.kunitconfig                 |   1 -
 net/sunrpc/Kconfig                      |  35 ---
 net/sunrpc/auth_gss/Makefile            |   2 +-
 net/sunrpc/auth_gss/gss_krb5_internal.h |  23 --
 net/sunrpc/auth_gss/gss_krb5_keys.c     |  84 -------
 net/sunrpc/auth_gss/gss_krb5_mech.c     | 257 +--------------------
 net/sunrpc/auth_gss/gss_krb5_seal.c     |  69 ------
 net/sunrpc/auth_gss/gss_krb5_seqnum.c   | 106 ---------
 net/sunrpc/auth_gss/gss_krb5_test.c     | 196 ----------------
 net/sunrpc/auth_gss/gss_krb5_unseal.c   |  77 -------
 net/sunrpc/auth_gss/gss_krb5_wrap.c     | 287 ------------------------
 11 files changed, 3 insertions(+), 1134 deletions(-)
 delete mode 100644 net/sunrpc/auth_gss/gss_krb5_seqnum.c

--
Chuck Lever

Comments

Jeff Layton June 30, 2023, 6:10 p.m. UTC | #1
On Thu, 2023-06-29 at 13:50 -0400, Chuck Lever wrote:
> As we agreed, v6.6 will remove support for DES-based Kerberos
> enctypes from the kernel's SunRPC GSS implementation. Here's a
> series to do that.
> 
> This has been compile-tested only. Comments and further testing are
> welcome.
> 
> ---
> 
> Chuck Lever (9):
>       SUNRPC: Remove RPCSEC_GSS_KRB5_ENCTYPES_DES
>       SUNRPC: Remove Kunit tests for the DES3 encryption type
>       SUNRPC: Remove DES and DES3 enctypes from the supported enctypes list
>       SUNRPC: Remove code behind CONFIG_RPCSEC_GSS_KRB5_SIMPLIFIED
>       SUNRPC: Remove krb5_derive_key_v1()
>       SUNRPC: Remove gss_import_v1_context()
>       SUNRPC: Remove CONFIG_RPCSEC_GSS_KRB5_CRYPTOSYSTEM
>       SUNRPC: Remove the ->import_ctx method
>       SUNRPC: Remove net/sunrpc/auth_gss/gss_krb5_seqnum.c
> 
> 
>  net/sunrpc/.kunitconfig                 |   1 -
>  net/sunrpc/Kconfig                      |  35 ---
>  net/sunrpc/auth_gss/Makefile            |   2 +-
>  net/sunrpc/auth_gss/gss_krb5_internal.h |  23 --
>  net/sunrpc/auth_gss/gss_krb5_keys.c     |  84 -------
>  net/sunrpc/auth_gss/gss_krb5_mech.c     | 257 +--------------------
>  net/sunrpc/auth_gss/gss_krb5_seal.c     |  69 ------
>  net/sunrpc/auth_gss/gss_krb5_seqnum.c   | 106 ---------
>  net/sunrpc/auth_gss/gss_krb5_test.c     | 196 ----------------
>  net/sunrpc/auth_gss/gss_krb5_unseal.c   |  77 -------
>  net/sunrpc/auth_gss/gss_krb5_wrap.c     | 287 ------------------------
>  11 files changed, 3 insertions(+), 1134 deletions(-)
>  delete mode 100644 net/sunrpc/auth_gss/gss_krb5_seqnum.c
> 
> --
> Chuck Lever
> 

Love that diffstat.

Reviewed-by: Jeff Layton <jlayton@kernel.org>