oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Now that we fixed the signed-ness of nonce for windows, remove the

Browse Source 
code that removed the signed bit. Instead add comment that they still
need to be the same (Kerberos protocol nonce and pk-init nonce) for Windows.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15055 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2005-05-02 14:52:57 +00:00
parent 3f77a73b62
commit 9f219c721d
1 changed files with 1 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
lib/krb5/init_creds_pw.c
View File

@@ -1209,11 +1209,7 @@ init_cred_loop(krb5_context context,
/* Set a new nonce. */ /* Set a new nonce. */
krb5_generate_random_block (&ctx->nonce, sizeof(ctx->nonce)); krb5_generate_random_block (&ctx->nonce, sizeof(ctx->nonce));
ctx->nonce &= 0xffffffff; ctx->nonce &= 0xffffffff;
#ifdef PKINIT /* XXX these just needs to be the same when using Windows PK-INIT */
/* XXX check if it isn't the that nonce is an unsigned
* variable so its just a asn1 mismatch */
ctx->nonce &= 0x7fffffff;
#endif
ctx->pk_nonce = ctx->nonce; ctx->pk_nonce = ctx->nonce;
#define MAX_PA_COUNTER 3 #define MAX_PA_COUNTER 3