circular reference between libkrb5 and libk5crypto
John Hascall
john at iastate.edu
Wed Jan 5 20:24:53 EST 2005
> Clearly libkrb5 uses libk5crypto.
>
> I seem to have created a case where libk5crypto wants to use libkrb5.
> In particular, as part of implementing a PRF, I called
> krb5_init_keyblock because I was setting up a derived key.
>
> That ends up coming from libkrb5, which is probematiproblematic.
>
> One proposal would be to move these routines into k5crypto. I'm
> concerned that doing so would break our ABI on AIX and Debian (because
> of symbol versions).
>
> I'm not sure what the right solution is besides that.
How about:
1) Move krb5_init_keyblock;s code into k5crypto using some new function name
2) Make krb5_init_keyblock (still in libkrb5) do nothing but call "1" above
3) When in k5crypto call the new function name.
4) Optionally phase out calls to krb5_init_keyblock over time.
John
More information about the krbdev
mailing list