src/java.security.jgss/share/classes/sun/security/krb5/internal/rcache/DflCache.java

rev 15878 : 8168518: rcache interop with krb5-1.15

*** 94,103 ****
--- 94,105 ----
   * The old style block is always created by MIT krb5 used even if a new style
   * is available, which means there can be 2 entries for a single Authenticator.
   * Java also does this way.
   *
   * See src/lib/krb5/rcache/rc_io.c and src/lib/krb5/rcache/rc_dfl.c.
+  *
+  * Update: New version can use other hash algorithms.
   */
  public class DflCache extends ReplayCache {
  
      private static final int KRB5_RV_VNO = 0x501;
      private static final int EXCESSREPS = 30;   // if missed-hit>this, recreate
*** 298,308 ****
                      AuthTime a = AuthTime.readFrom(chan);
                      if (a instanceof AuthTimeWithHash) {
                          if (time.equals(a)) {
                              // Exact match, must be a replay
                              throw new KrbApErrException(Krb5.KRB_AP_ERR_REPEAT);
!                         } else if (time.isSameIgnoresHash(a)) {
                              // Two different authenticators in the same second.
                              // Remember it
                              seeNewButNotSame = true;
                          }
                      } else {
--- 300,310 ----
                      AuthTime a = AuthTime.readFrom(chan);
                      if (a instanceof AuthTimeWithHash) {
                          if (time.equals(a)) {
                              // Exact match, must be a replay
                              throw new KrbApErrException(Krb5.KRB_AP_ERR_REPEAT);
!                         } else if (time.sameTimeDiffHash((AuthTimeWithHash)a)) {
                              // Two different authenticators in the same second.
                              // Remember it
                              seeNewButNotSame = true;
                          }
                      } else {