src/java.security.jgss/share/classes/sun/security/krb5/KrbKdcRep.java
changeset 55570 1e95931e7d8f
parent 55258 d65d3c37232c
child 58679 9c3209ff7550
equal deleted inserted replaced
55569:8e3a0ebf3497 55570:1e95931e7d8f
   156                     if (pa.getType() == Krb5.PA_REQ_ENC_PA_REP) {
   156                     if (pa.getType() == Krb5.PA_REQ_ENC_PA_REP) {
   157                         try {
   157                         try {
   158                             Checksum repCksum = new Checksum(
   158                             Checksum repCksum = new Checksum(
   159                                     new DerInputStream(
   159                                     new DerInputStream(
   160                                             pa.getValue()).getDerValue());
   160                                             pa.getValue()).getDerValue());
       
   161                             // The checksum is inside encKDCRepPart so we don't
       
   162                             // care if it's keyed or not.
   161                             repPaReqEncPaRepValid =
   163                             repPaReqEncPaRepValid =
   162                                     repCksum.verifyKeyedChecksum(
   164                                     repCksum.verifyAnyChecksum(
   163                                             req.asn1Encode(), replyKey,
   165                                             req.asn1Encode(), replyKey,
   164                                             KeyUsage.KU_AS_REQ);
   166                                             KeyUsage.KU_AS_REQ);
   165                         } catch (Exception e) {
   167                         } catch (Exception e) {
   166                             if (Krb5.DEBUG) {
   168                             if (Krb5.DEBUG) {
   167                                 e.printStackTrace();
   169                                 e.printStackTrace();