oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Implement KERB_AP_OPTIONS_CBT (server side)

Browse Source 
if the client asserted knowledge of channel-bindings by
passing KERB_AP_OPTIONS_CBT, and the server passed bindings,
require the bindings to match.
This commit is contained in:
Isaac Boukris
2020-04-21 20:12:21 +02:00
committed by Luke Howard
parent 51ce4c8d15
commit a4527a28a3
6 changed files with 65 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
lib/krb5/krb5_locl.h
View File

@@ -391,4 +391,7 @@ struct krb5_pk_init_ctx_data {
# define ISPATHSEP(x) (x == '/')
#endif
/* Flag in KRB5_AUTHDATA_AP_OPTIONS */
#define KERB_AP_OPTIONS_CBT 0x00004000
#endif /* __KRB5_LOCL_H__ */

1
lib/krb5/libkrb5-exports.def.in
View File

@@ -788,6 +788,7 @@ EXPORTS
_krb5_kt_client_default_name
_krb5_have_debug
_krb5_SP800_108_HMAC_KDF
_krb5_get_ad
; Shared with libkadm5
_krb5_load_plugins

1
lib/krb5/version-script.map
View File

@@ -780,6 +780,7 @@ HEIMDAL_KRB5_2.0 {
_krb5_kt_client_default_name;
_krb5_have_debug;
_krb5_SP800_108_HMAC_KDF;
_krb5_get_ad;
# Shared with libkadm5
_krb5_load_plugins;