Subject: [Ietf-krb-wg] Zero-length protected messages with Kerberos 5 gss-api

From: Martin Rex <[email-masked]>
Date: Thu, 17 Apr 2008 21:44:27 +0200 (MEST)

Did anyone else ever try zero-length protected messages with
Windows Server 2008?
(the one I tried says Build 6001: Service Pack 1 v.731)

I am faced with the Error message SEC_E_MESSAGE_ALTERED when
trying to unprotect/verify zero-length messages with
gss_verifymic/VerifySignature and gss_unwrap/DecryptMessage

Applying protection to a zero-sized message with
gss_getmic/MakeSignature or gss_wrap/EncryptMessage succeeds
and creates tokens of plausible sizes.

I don't have any problems doing this on Windows 2003(sp2).

-Martin
_______________________________________________
ietf-krb-wg mailing list
[email-masked]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg