[OpenAFS] AES Support ?

Derrick J Brashear shadow@dementia.org
Thu, 27 Sep 2007 15:54:11 -0400 (EDT)


On Thu, 27 Sep 2007, John Hascall wrote:

>   By "not yet completed" I meant started.  If I'm understanding
>   the process as it was outlined many messages ago it was:
>
>       1) create afs-k5 or (or is it k5-afs?) key
>       2) upgrade all your servers
>       3) upgrade all your clients
>       4) remove the old afs key

actually, i think i'd upgrade the servers, then add the key, then upgrade 
the clients, then remove the old key

for experimental deployment i'd use a 3rd key that clients needed to know 
about to use.