Why do you want to link with nettle?
AFAIKT The ethereal support and use for nettle is for the special
case to handle
packetcable-style kerberos decryption.
It will NOT work for decrypting normal CIFS traffic and sing-and-seal
to a normal AD DC.
The kerberos support with nettle differs from the (so far only unix
kerberos suport) heimdal and mit in that nettle
1, only supports reading keys from krb4 style encryption key files,
srvtab or whatever they were called.
standard krb5.keytab files are not understood nor suported.
2, it can only decrypt the special non-1510 version of kerberos that
only packetcable use since it uses different pdu padding compared to
normal kerberos.
we should merge the two styles of implementation together so at least
the 'read keytabfile' functions can be used with any of the filetypes.
then we should maybe link with mit on windows so normal kjerberos can
be decrypted on windows, and also always link with nettle on unix as
well and have a krb5 preference : Decrypt kerberos as KRB5 or
PacketCable where the user can control which style of decryption to
choose.
The preference should default to KRB5 since those users are more
frequent than packetcable users.
I think many many more users (like all serious cifs users) would
benefit from having ethereal on windows linked with mit for windows.
Best would be to link always with both MIT and nettle (since nettle
will be useful for many non-kerberos related decryption things such
as ipsec decryption)
On Wed, 06 Apr 2005 12:47:23 +0200, Lars Roland <lars.roland@xxxxxxx> wrote:
> Hello all,
>
> I'd like to use the nettle library in ethereal on windows.
> It looks like Gerald did that successfully in the past.
> See http://www.ethereal.com/lists/ethereal-dev/200410/msg00226.html .
> Unfortunately the link to the precompiled library in that message isn't
> valid anymore and I haven't found any hint in the sources of nettle and
> googling didn't help me either, how to build it on windows.
>
> Any help appreciated.
>
> Regards,
> Lars
>
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
>
