seal and unseal key at appropriate places
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3415 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -49,6 +49,7 @@ init_des_key(hdb_entry *ent)
|
|||||||
ent->keys.len++;
|
ent->keys.len++;
|
||||||
memset(k, 0, sizeof(*k));
|
memset(k, 0, sizeof(*k));
|
||||||
krb5_generate_random_keyblock(context, KEYTYPE_DES, &k->key);
|
krb5_generate_random_keyblock(context, KEYTYPE_DES, &k->key);
|
||||||
|
seal_key(k);
|
||||||
}
|
}
|
||||||
|
|
||||||
void
|
void
|
||||||
@@ -56,10 +57,13 @@ set_keys(hdb_entry *ent, char *password)
|
|||||||
{
|
{
|
||||||
krb5_data salt;
|
krb5_data salt;
|
||||||
int i;
|
int i;
|
||||||
|
|
||||||
memset(&salt, 0, sizeof(salt));
|
memset(&salt, 0, sizeof(salt));
|
||||||
krb5_get_salt(ent->principal, &salt);
|
krb5_get_salt(ent->principal, &salt);
|
||||||
for(i = 0; i < ent->keys.len; i++)
|
for(i = 0; i < ent->keys.len; i++) {
|
||||||
krb5_string_to_key(password, &salt, &ent->keys.val[i].key); /* XXX */
|
krb5_string_to_key(password, &salt, &ent->keys.val[i].key); /* XXX */
|
||||||
|
seal_key(&ent->keys.val[i]);
|
||||||
|
}
|
||||||
krb5_data_free(&salt);
|
krb5_data_free(&salt);
|
||||||
ent->kvno++;
|
ent->kvno++;
|
||||||
}
|
}
|
||||||
|
Reference in New Issue
Block a user