Add sequence number.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@1916 ec53bebd-3082-4978-b11e-865c3cabbd6b

lib/gssapi/krb5/get_mic.c

@@ -1,6 +1,4 @@
 #include "gssapi_locl.h"
-#include <des.h>
-#include <md5.h>
 
 RCSID("$Id$");
 
@@ -19,6 +17,7 @@ OM_uint32 gss_get_mic
   des_key_schedule schedule;
   des_cblock key;
   des_cblock zero;
+  int32_t seq_number;
 
   len = 28 + GSS_KRB5_MECHANISM->length;
   message_token->length = len;
@@ -38,9 +37,11 @@ OM_uint32 gss_get_mic
   memcpy (p, "\xff\xff\xff\xff", 4);
   p += 4;
 
+  /* Fill in later */
   memset (p, 0, 16);
   p += 16;
-  
+
+  /* checksum */
   md5_init (&md5);
   md5_update (&md5, p - 24, 8);
   md5_update (&md5, message_buffer->value,
@@ -54,5 +55,30 @@ OM_uint32 gss_get_mic
   des_cbc_cksum ((des_cblock *)hash,
 		 (des_cblock *)hash, sizeof(hash), schedule, &zero);
   memcpy (p - 8, hash, 8);
+
+  /* sequence number */
+  krb5_auth_getlocalseqnumber (gssapi_krb5_context,
+			       context_handle->auth_context,
+			       &seq_number);
+
+  p -= 16;
+  p[0] = (seq_number >> 0)  & 0xFF;
+  p[1] = (seq_number >> 8)  & 0xFF;
+  p[2] = (seq_number >> 16) & 0xFF;
+  p[3] = (seq_number >> 24) & 0xFF;
+  memset (p + 4,
+	  (context_handle->more_flags & LOCAL) ? 0 : 0xFF,
+	  4);
+
+  des_set_key (&key, schedule);
+  des_cbc_encrypt (p, p, 8, schedule, p + 16, DES_ENCRYPT);
+
+  krb5_auth_setlocalseqnumber (gssapi_krb5_context,
+			       context_handle->auth_context,
+			       ++seq_number);
+  
+  memset (key, 0, sizeof(key));
+  memset (schedule, 0, sizeof(schedule));
+  
   return GSS_S_COMPLETE;
 }