Changes between Version 7 and Version 8 of Ticket #1308


Ignore:
Timestamp:
01/05/14 17:41:01 (10 years ago)
Author:
adehnert
Comment:

I think everything may now be ready for unsetting allow_weak_crypto. Can we do so now?

Legend:

Unmodified
Added
Removed
Modified

  • Ticket #1308 – Description

    v7 v8  
    99 
    1010Key rolling status: 
    11  * '''WAIT''': We believe that the cert update process will roll keys, so all (active-ish) users should have updated keys by ~September even without any additional work. 
    12  * '''OK''': AFS servers are hard to roll, but mostly don't count because of krb5_allow_weak_crypto.html (see comment:3). 
     11 * '''FIXED''': We believe that the cert update process will roll keys, so all (active-ish) users should now have updated keys. 
     12 * '''FIXED''': AFS servers now use a hack to use AES keys, plus mostly don't count because of krb5_allow_weak_crypto.html (see comment:3). 
    1313 * '''FIXED''': Except for AFS (above), Server Operations' keys have all be updated (see comment:4). 
    1414 * '''FIXED''': The PO servers (IMAP) have new keys