Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  newsreader  groups  login

Message-ID:  

"A verbal contract isn't worth the paper it's printed on." -- Samuel Goldwyn


devel / comp.protocols.kerberos / Re: Using PKINIT with ECC

SubjectAuthor
o Re: Using PKINIT with ECCGreg Hudson

1
Re: Using PKINIT with ECC

<mailman.63.1700519660.2263420.kerberos@mit.edu>

  copy mid

https://www.novabbs.com/devel/article-flat.php?id=441&group=comp.protocols.kerberos#441

  copy link   Newsgroups: comp.protocols.kerberos
Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!tncsrv06.tnetconsulting.net!.POSTED.mailman.mit.edu!not-for-mail
From: ghud...@mit.edu (Greg Hudson)
Newsgroups: comp.protocols.kerberos
Subject: Re: Using PKINIT with ECC
Date: Mon, 20 Nov 2023 17:34:07 -0500
Organization: TNet Consulting
Lines: 7
Message-ID: <mailman.63.1700519660.2263420.kerberos@mit.edu>
References: <8984fe41-f9a0-434b-a09c-df2bc88125dc@sec4mail.de>
<ae76ed5c-1399-401e-988c-ed2dbdfff6e7@mit.edu>
<202311191700.3AJH0hJD016758@hedwig.cmf.nrl.navy.mil>
<51e3d01f-4c52-490b-a0c0-f1ebbbe436e3@mit.edu>
<202311201909.3AKJ96j2009434@hedwig.cmf.nrl.navy.mil>
<e27ddc92-43aa-4b9f-b78c-18bddaebaf7b@mit.edu>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Info: tncsrv06.tnetconsulting.net; posting-host="mailman.mit.edu:18.7.21.50";
logging-data="21011"; mail-complaints-to="newsmaster@tnetconsulting.net"
User-Agent: Mozilla Thunderbird
To: Ken Hornstein <kenh@cmf.nrl.navy.mil>, <kerberos@mit.edu>
DKIM-Filter: OpenDKIM Filter v2.11.0 unknown-host (unknown-jobid)
Authentication-Results: mailman.mit.edu; dkim=pass (2048-bit key,
unprotected) header.d=mit.edu header.i=@mit.edu header.a=rsa-sha256
header.s=outgoing header.b=DOSODQrv
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=outgoing;
t=1700519658; bh=4MayGWN0Cj1g/ozvGEgzA+/9JY1TvI7lsO4yJipmfeA=;
h=Message-ID:Date:MIME-Version:Subject:From:Content-Type;
b=DOSODQrvz/YpElQVqIAIEn1SgszlqnzKCRMr0dOdxOH1NwcZt0IJcQ0DlaRtvLLOS
uD+GCag5Eadk7Ackic8VsV2blbAFLJk/d/O28w02eAGMV77mUbYHpi+zhdBTWLZs4E
3uIiSG0ONRDvftE+vmzG6UMMK3MSL9V+4BJAa2GLrzy9DixIgeNhGlH7HuVxOL82jr
CpYHGvocK0QBnIonCR8eo/kCZpe7IBLcSU30LYNGVMwLsVC7zkpP3+kVTvmLw7jtQC
9nfTO1WlnoX/Rv5G06fLnFFLsq/1cgoDZhgyODLAaFV4PfnJPSwfypTDIKOSK/WimV
aIpCgY2SDZBbQ==
Authentication-Results: spf=pass (sender IP is 18.9.28.11)
smtp.mailfrom=mit.edu; dkim=pass (signature was verified)
header.d=mit.edu;dmarc=pass action=none header.from=mit.edu;
Received-SPF: Pass (protection.outlook.com: domain of mit.edu designates
18.9.28.11 as permitted sender) receiver=protection.outlook.com;
client-ip=18.9.28.11; helo=outgoing.mit.edu; pr=C
Content-Language: en-US
In-Reply-To: <202311201909.3AKJ96j2009434@hedwig.cmf.nrl.navy.mil>
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: SN1PEPF000252A4:EE_|SA1PR01MB8562:EE_
X-MS-Office365-Filtering-Correlation-Id: 3799d7ab-613e-40c7-a868-08dbea18d2b9
X-LD-Processed: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b,ExtAddr
X-MS-Exchange-AtpMessageProperties: SA
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: nHoP9TCBWWCP+zB3ZOIogC/4w7LbNqhdC4X9oJiuz4Q8BxindNmvecbwR6aQhUNghDx7sx+UkVzaW62RTlfcq7wGNyABmVr1nqmAaik7qWCwVW3t2bD7MwDTpYyoBtFa+BVgRhMFBqVlCgd5eRqay03roHYuzIMZSZmjiT0FtPCoW72US/GHdCYmmUMatrzSKaJMbTy8apda85G2oxBefzWc1jAWUh3LKlGtEPG7a+gn13z0sjE+0hSaTDWK9scCAptnzJHZBiAGvJ/sbcAX0FW2CCJbMUAybeBqGXGR81E5v9Y2P+uzOEGFdA80yfWvVDdryBSzobMSWDDgnhyooDLBwpb8LJlJM217v+/pRXjPnDbqZTiFYvzhmsMIN8BsXTJhSpwMLmJtgEJ9LOfGdjm31c28e4IGEBJ7owfpufikKV2xZw/bCUNsuEkqGNsitCwN3xflMS29nkUfROYjBqKWp0jJxb0Z66BKD5XMfTHow41yDV6rm3LOXYVVy5zo5+ix6L8345StAEWCiJtTyhCc9j/yWpQSDectxDjqn56t9I6GHIENTT8tfn8yfG6HI1dEBn2tm75BX8nzVXMD8Hl1PZ8vdl++Em3MKGOoNwawxuY8RR/Nk+kh4DlxDj8TUBfAoHpProaF4j3LRl89A+yrvSkamv4GFnXjEtQT/WGL68fEHKJ5OPgr0JJoyMIZNDJ9CLZUBlImPq0ZeJjnTtNCdduNTEafC7ioxwo1utFBBBMfuTWrdBOcXpW/NJqW48CKs4FvIjd/nlBua0j/kQ==
X-Forefront-Antispam-Report: CIP:18.9.28.11; CTRY:US; LANG:en; SCL:1; SRV:;
IPV:CAL; SFV:NSPM; H:outgoing.mit.edu; PTR:outgoing-auth-1.mit.edu; CAT:NONE;
SFS:(13230031)(4636009)(376002)(396003)(136003)(346002)(39860400002)(451199024)(64100799003)(1800799012)(356005)(31696002)(86362001)(75432002)(36756003)(6636002)(786003)(70586007)(316002)(53546011)(956004)(2616005)(68406010)(26005)(336012)(426003)(478600001)(5660300002)(7696005)(2906002)(4744005)(8676002)(31686004)(3480700007)(83380400001)(43740500002);
DIR:OUT; SFP:1102;
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Nov 2023 22:34:13.5273 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 3799d7ab-613e-40c7-a868-08dbea18d2b9
X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-MS-Exchange-CrossTenant-AuthSource: SN1PEPF000252A4.namprd05.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR01MB8562
X-OriginatorOrg: mit.edu
X-BeenThere: kerberos@mit.edu
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: The Kerberos Authentication System Mailing List <kerberos.mit.edu>
List-Unsubscribe: <https://mailman.mit.edu/mailman/options/kerberos>,
<mailto:kerberos-request@mit.edu?subject=unsubscribe>
List-Archive: <http://mailman.mit.edu/pipermail/kerberos/>
List-Post: <mailto:kerberos@mit.edu>
List-Help: <mailto:kerberos-request@mit.edu?subject=help>
List-Subscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
<mailto:kerberos-request@mit.edu?subject=subscribe>
X-Mailman-Original-Message-ID: <e27ddc92-43aa-4b9f-b78c-18bddaebaf7b@mit.edu>
X-Mailman-Original-References: <8984fe41-f9a0-434b-a09c-df2bc88125dc@sec4mail.de>
<ae76ed5c-1399-401e-988c-ed2dbdfff6e7@mit.edu>
<202311191700.3AJH0hJD016758@hedwig.cmf.nrl.navy.mil>
<51e3d01f-4c52-490b-a0c0-f1ebbbe436e3@mit.edu>
<202311201909.3AKJ96j2009434@hedwig.cmf.nrl.navy.mil>
 by: Greg Hudson - Mon, 20 Nov 2023 22:34 UTC

On 11/20/23 14:09, Ken Hornstein via Kerberos wrote:
> I guess what I was thinking was maybe not EVERY pkiDebug() call, but
> more all of the ones that report errors.

I think we're in agreement. Setting an extended error message should
generally be sufficient, as it should get trace logged by libkrb5 or
included in the KDC log.

1
server_pubkey.txt

rocksolid light 0.9.8
clearnet tor