Add pool of certificates to help certificate path building for clients
sending incomplete path in the signedData. git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16856 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
		| @@ -70,6 +70,7 @@ int convert_524		= 0; | |||||||
| int fcache_version; | int fcache_version; | ||||||
| char *pk_user_id	= NULL; | char *pk_user_id	= NULL; | ||||||
| char *pk_x509_anchors	= NULL; | char *pk_x509_anchors	= NULL; | ||||||
|  | char **pk_x509_pool	= NULL; | ||||||
|  |  | ||||||
|  |  | ||||||
| static char *krb4_cc_name; | static char *krb4_cc_name; | ||||||
| @@ -464,6 +465,7 @@ get_new_tickets(krb5_context context, | |||||||
| 						 principal, | 						 principal, | ||||||
| 						 pk_user_id, | 						 pk_user_id, | ||||||
| 						 pk_x509_anchors, | 						 pk_x509_anchors, | ||||||
|  | 						 pk_x509_pool, | ||||||
| 						 0, | 						 0, | ||||||
| 						 NULL, | 						 NULL, | ||||||
| 						 NULL, | 						 NULL, | ||||||
| @@ -800,6 +802,12 @@ main (int argc, char **argv) | |||||||
| 				krb5_principal_get_realm(context, principal),  | 				krb5_principal_get_realm(context, principal),  | ||||||
| 				"afslog", TRUE, &do_afslog); | 				"afslog", TRUE, &do_afslog); | ||||||
|  |  | ||||||
|  |     /* XXX implement krb5_appdefault_strings  */ | ||||||
|  |     pk_x509_pool = krb5_config_get_strings(context, NULL, | ||||||
|  | 					   "appdefaults",  | ||||||
|  | 					   "pkinit-pool",  | ||||||
|  | 					   NULL); | ||||||
|  |  | ||||||
|     if (pk_x509_anchors == NULL) |     if (pk_x509_anchors == NULL) | ||||||
| 	krb5_appdefault_string(context, "kinit", | 	krb5_appdefault_string(context, "kinit", | ||||||
| 			       krb5_principal_get_realm(context, principal),  | 			       krb5_principal_get_realm(context, principal),  | ||||||
|   | |||||||
		Reference in New Issue
	
	Block a user
	 Love Hörnquist Åstrand
					Love Hörnquist Åstrand