CVE-2022-37966 selftest: Add tests for Kerberos session key behaviour since ENC_HMAC_...
authorJoseph Sutton <josephsutton@catalyst.net.nz>
Thu, 17 Nov 2022 23:11:39 +0000 (12:11 +1300)
committerStefan Metzmacher <metze@samba.org>
Tue, 13 Dec 2022 23:48:48 +0000 (00:48 +0100)
commitc273cb75625c144fc31ede19dcf3c301e209c371
treecb69558d7c7684a3ae1df658316d23d79d87f4e3
parent84c28b05a0a590a0edea616cd0f267e2be44d0a0
CVE-2022-37966 selftest: Add tests for Kerberos session key behaviour since ENC_HMAC_SHA1_96_AES256_SK was added

ENC_HMAC_SHA1_96_AES256_SK is a flag introduced for by Microsoft in this CVE
to indicate that additionally, AES session keys are available.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15237

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
(similar to commit 371d7e63fcb966ab54915a3dedb888d48adbf0c0)
[jsutton@samba.org Removed unneeded fast_tests.py change, added
 non_etype_bits in raw_testcase.py, fixed conflicts in knownfails and
 tests.py]

[jsutton@samba.org Fixed conflicts in tests and knownfails]

[jsutton@samba.org Fixed conflicts in raw_testcase.py, tests.py; moved
 test_fast_rc4 knownfail to 'KDC TGS tests' section with other FAST
 knownfails]
python/samba/tests/krb5/etype_tests.py
python/samba/tests/krb5/kdc_base_test.py
python/samba/tests/krb5/kdc_tgs_tests.py
python/samba/tests/krb5/raw_testcase.py
python/samba/tests/krb5/rfc4120_constants.py
python/samba/tests/krb5/s4u_tests.py
selftest/knownfail_heimdal_kdc
selftest/knownfail_mit_kdc
selftest/target/Samba4.pm
source4/selftest/tests.py