Implement KERB_AP_OPTIONS_CBT (server side)

if the client asserted knowledge of channel-bindings by
passing KERB_AP_OPTIONS_CBT, and the server passed bindings,
require the bindings to match.
This commit is contained in:
Isaac Boukris
2020-04-21 20:12:21 +02:00
committed by Luke Howard
parent 51ce4c8d15
commit a4527a28a3
6 changed files with 65 additions and 4 deletions

View File

@@ -213,6 +213,7 @@ AUTHDATA-TYPE ::= INTEGER {
KRB5-AUTHDATA-SIGNTICKET-OLDER(-17),
KRB5-AUTHDATA-SIGNTICKET-OLD(142),
KRB5-AUTHDATA-SIGNTICKET(512),
KRB5-AUTHDATA-AP-OPTIONS(143),
-- N.B. these assignments have not been confirmed yet.
--
-- DO NOT USE in production yet!