Use reply_key from fast layer.
This commit is contained in:
committed by
Love Hörnquist Åstrand
parent
fd7c870550
commit
04128ac081
@@ -83,7 +83,7 @@ typedef struct krb5_get_init_creds_ctx {
|
|||||||
#define KRB5_FAST_KDC_REPLY_KEY_REPLACED 4
|
#define KRB5_FAST_KDC_REPLY_KEY_REPLACED 4
|
||||||
#define KRB5_FAST_REPLY_REPLY_VERIFED 8
|
#define KRB5_FAST_REPLY_REPLY_VERIFED 8
|
||||||
#define KRB5_FAST_STRONG 16
|
#define KRB5_FAST_STRONG 16
|
||||||
krb5_keyblock reply_key;
|
krb5_keyblock *reply_key;
|
||||||
};
|
};
|
||||||
|
|
||||||
} krb5_get_init_creds_ctx;
|
} krb5_get_init_creds_ctx;
|
||||||
@@ -1704,7 +1704,8 @@ krb5_init_creds_step(krb5_context context,
|
|||||||
eflags |= EXTRACT_TICKET_ALLOW_CNAME_MISMATCH;
|
eflags |= EXTRACT_TICKET_ALLOW_CNAME_MISMATCH;
|
||||||
|
|
||||||
ret = process_pa_data_to_key(context, ctx, &ctx->cred,
|
ret = process_pa_data_to_key(context, ctx, &ctx->cred,
|
||||||
&ctx->as_req, &rep.kdc_rep, hostinfo, &key);
|
&ctx->as_req, &rep.kdc_rep,
|
||||||
|
hostinfo, &ctx->reply_key);
|
||||||
if (ret) {
|
if (ret) {
|
||||||
free_AS_REP(&rep.kdc_rep);
|
free_AS_REP(&rep.kdc_rep);
|
||||||
goto out;
|
goto out;
|
||||||
@@ -1715,7 +1716,7 @@ krb5_init_creds_step(krb5_context context,
|
|||||||
ret = _krb5_extract_ticket(context,
|
ret = _krb5_extract_ticket(context,
|
||||||
&rep,
|
&rep,
|
||||||
&ctx->cred,
|
&ctx->cred,
|
||||||
key,
|
ctx->reply_key,
|
||||||
NULL,
|
NULL,
|
||||||
KRB5_KU_AS_REP_ENC_PART,
|
KRB5_KU_AS_REP_ENC_PART,
|
||||||
NULL,
|
NULL,
|
||||||
@@ -1723,8 +1724,8 @@ krb5_init_creds_step(krb5_context context,
|
|||||||
eflags,
|
eflags,
|
||||||
NULL,
|
NULL,
|
||||||
NULL);
|
NULL);
|
||||||
krb5_free_keyblock(context, key);
|
krb5_free_keyblock(context, ctx->reply_key);
|
||||||
|
ctx->reply_key = NULL;
|
||||||
*flags = 0;
|
*flags = 0;
|
||||||
|
|
||||||
if (ret == 0)
|
if (ret == 0)
|
||||||
|
|||||||
Reference in New Issue
Block a user