oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Merge pull request #50 from MrStaticVoid/kx509-allow-slash-in-principal-name

Browse Source 
kx509: Create certs for principals with slashes
This commit is contained in:
Love Hörnquist Åstrand
2013-12-04 11:08:00 -08:00
parent 6b2ebfcf8a 750a09bca2
commit 9e86558ed4
1 changed files with 13 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
kdc/kx509.c
View File

@@ -143,22 +143,26 @@ build_certificate(krb5_context context,
krb5_principal principal,
krb5_data *certificate)
{
char *name = NULL;
hx509_ca_tbs tbs = NULL;
hx509_env env = NULL;
hx509_cert cert = NULL;
hx509_cert signer = NULL;
int ret;
if (krb5_principal_get_comp_string(context, principal, 1) != NULL) {
kdc_log(context, config, 0, "Principal is not a user");
return EINVAL;
}
ret = hx509_env_add(context->hx509ctx, &env, "principal-name",
krb5_principal_get_comp_string(context, principal, 0));
ret = krb5_unparse_name_flags(context, principal,
KRB5_PRINCIPAL_UNPARSE_NO_REALM,
&name);
if (ret)
goto out;
ret = hx509_env_add(context->hx509ctx, &env, "principal-name",
name);
if (ret)
goto out;
krb5_xfree(name);
{
hx509_certs certs;
hx509_query *q;
@@ -262,6 +266,8 @@ build_certificate(krb5_context context,
return 0;
out:
if (name)
krb5_xfree(name);
if (env)
hx509_env_free(&env);
if (tbs)