On Fri, Jan 08, 2010 at 10:25:06PM +0000, ???? wrote: > > Dr.Henson, Thank you for you reminding. I am cross compiling the > openssl into an arm board with kerberos support. My cross compiling > for openssl is following the article written by David Sayada in > http://www.crosscompile.org/static/pages/OpenSSL.html. Before executing > my modified Makefile, I still should use ./config, am I right? Should > krb5-1.7 be installed before openssl? Thanks.
IIRC does not support any modern Kerberos ciphers, you are stuck with DES, which is deprecated with newer versions of Kerberos. You should probably not be using the Kerberos support in OpenSSL. You should look into the "channel-binding" draft RFCs, and see whether any patches are available to support Anonymous DHE SSL + GSSAPI channel bindings... What exactly are you planning to do with OpenSSL and Kerberos? -- Viktor. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org