tree c3a0026af4b4f69ed5880fd508c3e776870f92ab
parent 067fb11b12af1448f7bbcacca41e470cb775e9fa
author Chuck Lever <chuck.lever@oracle.com> 1549902283 -0500
committer Anna Schumaker <Anna.Schumaker@Netapp.com> 1550082792 -0500

SUNRPC: Add build option to disable support for insecure enctypes

Enable distributions to enforce the rejection of ancient and
insecure Kerberos enctypes in the kernel's RPCSEC_GSS
implementation. These are the single-DES encryption types that
were deprecated in 2012 by RFC 6649.

Enctypes that were deprecated more recently (by RFC 8429) remain
fully supported for now because they are still likely to be widely
used.

Signed-off-by: Chuck Lever <chuck.lever@oracle.com>
Acked-by: Simo Sorce <simo@redhat.com>
Signed-off-by: Anna Schumaker <Anna.Schumaker@Netapp.com>