Date: Mon, 16 Jun 2025 02:51:52 GMT From: Cy Schubert <cy@FreeBSD.org> To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org Subject: git: 78d4557a9b6d - main - telnet: Add Support for MIT KRB5 build Message-ID: <202506160251.55G2pqQO063012@gitrepo.freebsd.org>
next in thread | raw e-mail | index | archive | help
The branch main has been updated by cy: URL: https://cgit.FreeBSD.org/src/commit/?id=78d4557a9b6d13ce6040255ec5f8875db351e9a0 commit 78d4557a9b6d13ce6040255ec5f8875db351e9a0 Author: Cy Schubert <cy@FreeBSD.org> AuthorDate: 2025-06-10 20:07:32 +0000 Commit: Cy Schubert <cy@FreeBSD.org> CommitDate: 2025-06-16 02:49:36 +0000 telnet: Add Support for MIT KRB5 build MIT KRB5 does not support telnet. This is because telnet uses 3DES encryption, which requires 3DES encrypted keys in the KDC database. As MIT had deprecated and removed 3DES support about a decade ago, telnet is not supported. Sponsored by: The FreeBSD Foundation Reviewed by: markj Differential revision: https://reviews.freebsd.org/D50785 --- lib/libtelnet/Makefile | 3 ++- usr.bin/telnet/Makefile | 3 ++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/lib/libtelnet/Makefile b/lib/libtelnet/Makefile index 69e63af4e272..6bc2f5a51de0 100644 --- a/lib/libtelnet/Makefile +++ b/lib/libtelnet/Makefile @@ -19,7 +19,8 @@ CFLAGS+= -DENCRYPTION -DAUTHENTICATION -DSRA CFLAGS+= -DOPENSSL_API_COMPAT=0x10100000L .endif -.if ${MK_KERBEROS_SUPPORT} != "no" +.if ${MK_KERBEROS_SUPPORT} != "no" && ${MK_MITKRB5} != "yes" +# MIT KRB5 deprecated and removed 3DES. Therefore no telnet support. SRCS+= kerberos5.c CFLAGS+= -DKRB5 -DFORWARD -Dnet_write=telnet_net_write .endif diff --git a/usr.bin/telnet/Makefile b/usr.bin/telnet/Makefile index 930d70faa8ba..9197d44db94c 100644 --- a/usr.bin/telnet/Makefile +++ b/usr.bin/telnet/Makefile @@ -30,7 +30,8 @@ CFLAGS+= -DENCRYPTION -DAUTHENTICATION -DIPSEC LIBADD+= mp crypto ipsec pam .endif -.if ${MK_KERBEROS_SUPPORT} != "no" +.if ${MK_KERBEROS_SUPPORT} != "no" && ${MK_MITKRB5} != "yes" +# MIT KRB5 deprecated and removed 3DES. Therefore no telnet support. CFLAGS+= -DKRB5 -DFORWARD -Dnet_write=telnet_net_write LIBADD+= krb5 roken .endif
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202506160251.55G2pqQO063012>