oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

truncate the number so it will if in a signed 32bit integer, apples pkinit uses signed int32 for the pkinit nonce

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24053 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2008-11-29 19:34:23 +00:00
parent e6f8e55360
commit 136c41e4cf
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
lib/krb5/init_creds_pw.c
View File

@@ -1244,7 +1244,7 @@ init_cred_loop(krb5_context context,
/* Set a new nonce. */
krb5_generate_random_block (&ctx->nonce, sizeof(ctx->nonce));
ctx->nonce &= 0xffffffff;
ctx->nonce &= 0x7fffffff;
/* XXX these just needs to be the same when using Windows PK-INIT */
ctx->pk_nonce = ctx->nonce;