From 2e299e21c3a0943a93136c5f35d2b035872d7d47 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= Date: Wed, 26 Apr 2006 18:44:01 +0000 Subject: [PATCH] x git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17289 ec53bebd-3082-4978-b11e-865c3cabbd6b --- ChangeLog | 22 +++++++++++++++++++++- 1 file changed, 21 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index e964bb9dd..9faf8767a 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,25 @@ -2006-04-25 Love Hörnquist Åstrand +2006-04-26 Love Hörnquist Åstrand + * doc/setup.texi: document pki-allow-proxy-certificate + + * kdc/pkinit.c: Add option [kdc]pki-allow-proxy-certificate=bool + to allow using proxy certificate. + + * lib/krb5/pkinit.c (_krb5_pk_allow_proxy_certificates): expose + hx509_verify_set_proxy_certificate + + * kdc/pkinit.c (_kdc_pk_check_client): Use + hx509_cert_get_base_subject to get subject name of the + certificate, needed for proxy certificates. + + * kdc/kerberos5.c: Now that find_keys speaks for it self, remove + extra logging. + + * kdc/kerberos5.c (find_keys): add client_name and server_name + argument and use them, and adapt callers. + +2006-04-25 Love Hörnquist Åstrand + * kuser/kinit.1: document option password-file * kuser/kinit.c: Add option password-file, read password from the