oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

add BTMM style pkinit reply

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24210 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2008-12-18 05:00:07 +00:00
parent ef2a4a3969
commit 6811c7dce6
1 changed files with 36 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
lib/krb5/pkinit.c
View File

@@ -1344,14 +1344,44 @@ _krb5_pk_rd_pa_reply(krb5_context context,
case choice_PA_PK_AS_REP_encKeyPack: case choice_PA_PK_AS_REP_encKeyPack:
os = rep.u.encKeyPack; os = rep.u.encKeyPack;
break; break;
default: default: {
PA_PK_AS_REP_BTMM btmm;
free_PA_PK_AS_REP(&rep); free_PA_PK_AS_REP(&rep);
memset(&rep, 0, sizeof(rep));
ret = decode_PA_PK_AS_REP_BTMM(pa->padata_value.data,
pa->padata_value.length,
&btmm,
&size);
if (ret) {
krb5_set_error_message(context, EINVAL, krb5_set_error_message(context, EINVAL,
N_("PKINIT: -27 reply " N_("PKINIT: -27 reply "
"invalid content type", "")); "invalid content type", ""));
return EINVAL; return EINVAL;
} }
if (btmm.dhSignedData || btmm.encKeyPack == NULL) {
free_PA_PK_AS_REP_BTMM(&btmm);
ret = EINVAL;
krb5_set_error_message(context, ret,
N_("DH mode not supported for BTMM mode", ""));
return ret;
}
/*
* Transform to IETF style PK-INIT reply so that free works below
*/
rep.element = choice_PA_PK_AS_REP_encKeyPack;
rep.u.encKeyPack.data = btmm.encKeyPack->data;
rep.u.encKeyPack.length = btmm.encKeyPack->length;
btmm.encKeyPack->data = NULL;
btmm.encKeyPack->length = 0;
free_PA_PK_AS_REP_BTMM(&btmm);
os = rep.u.encKeyPack;
}
}
ret = hx509_cms_unwrap_ContentInfo(&os, &oid, &data, NULL); ret = hx509_cms_unwrap_ContentInfo(&os, &oid, &data, NULL);
if (ret) { if (ret) {
free_PA_PK_AS_REP(&rep); free_PA_PK_AS_REP(&rep);