Adding optional param KrbEncryptionKey to GenerateWrappedServiceTicket and GenerateServiceTicket

Author: Diaa Fathalla

Kerberos.NET/Entities/Krb/KrbKdcRep.cs

@@ -22,10 +22,11 @@ public KrbKdcRep()
         internal const TicketFlags DefaultFlags = TicketFlags.Renewable |
                                                   TicketFlags.Forwardable;
 
-        public static KrbCred GenerateWrappedServiceTicket(ServiceTicketRequest request)
+        public static KrbCred GenerateWrappedServiceTicket(ServiceTicketRequest request, KrbEncryptionKey encryptionKey = null)
         {
             GenerateServiceTicket<KrbTgsRep>(
                 request,
+                encryptionKey,
                 out KrbEncTicketPart encTicketPart,
                 out KrbTicket ticket,
                 out _,
@@ -36,7 +37,7 @@ out _
             return KrbCred.WrapTicket(ticket, encTicketPart);
         }
 
-        public static T GenerateServiceTicket<T>(ServiceTicketRequest request)
+        public static T GenerateServiceTicket<T>(ServiceTicketRequest request, KrbEncryptionKey encryptionKey = null)
             where T : KrbKdcRep, new()
         {
             if (request.EncryptedPartKey == null)
@@ -46,6 +47,7 @@ public static T GenerateServiceTicket<T>(ServiceTicketRequest request)
 
             request = GenerateServiceTicket<T>(
                 request,
+                encryptionKey,
                 out KrbEncTicketPart encTicketPart,
                 out KrbTicket ticket,
                 out KrbEncKdcRepPart encKdcRepPart,
@@ -72,6 +74,7 @@ out MessageType messageType
 
         private static ServiceTicketRequest GenerateServiceTicket<T>(
             ServiceTicketRequest request,
+            KrbEncryptionKey encryptionKey,
             out KrbEncTicketPart encTicketPart,
             out KrbTicket ticket,
             out KrbEncKdcRepPart encKdcRepPart,
@@ -102,7 +105,12 @@ out MessageType messageType
 
             var authz = GenerateAuthorizationData(request);
 
-            var sessionKey = KrbEncryptionKey.Generate(request.PreferredClientEType ?? request.ServicePrincipalKey.EncryptionType);
+            var sessionKey = encryptionKey;
+
+            if (sessionKey == null)
+            {
+                sessionKey = KrbEncryptionKey.Generate(request.PreferredClientEType ?? request.ServicePrincipalKey.EncryptionType);
+            }
 
             encTicketPart = CreateEncTicketPart(request, authz.ToArray(), sessionKey);
             bool appendRealm = false;