add key usage
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8613 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -46,6 +46,9 @@ enum hdb_lockop{ HDB_RLOCK, HDB_WLOCK };
|
|||||||
#define HDB_F_DECRYPT 1 /* decrypt keys */
|
#define HDB_F_DECRYPT 1 /* decrypt keys */
|
||||||
#define HDB_F_REPLACE 2 /* replace entry */
|
#define HDB_F_REPLACE 2 /* replace entry */
|
||||||
|
|
||||||
|
/* key usage for master key */
|
||||||
|
#define HDB_KU_MKEY 0x484442
|
||||||
|
|
||||||
typedef struct hdb_master_key_data *hdb_master_key;
|
typedef struct hdb_master_key_data *hdb_master_key;
|
||||||
|
|
||||||
typedef struct HDB{
|
typedef struct HDB{
|
||||||
|
@@ -316,7 +316,7 @@ hdb_unseal_keys_mkey(krb5_context context, hdb_entry *ent, hdb_master_key mkey)
|
|||||||
|
|
||||||
key = find_master_key(&ent->keys.val[i], mkey);
|
key = find_master_key(&ent->keys.val[i], mkey);
|
||||||
|
|
||||||
ret = krb5_decrypt(context, key->crypto, 0,
|
ret = krb5_decrypt(context, key->crypto, HDB_KU_MKEY,
|
||||||
k->key.keyvalue.data,
|
k->key.keyvalue.data,
|
||||||
k->key.keyvalue.length,
|
k->key.keyvalue.length,
|
||||||
&res);
|
&res);
|
||||||
@@ -352,7 +352,7 @@ hdb_seal_keys_mkey(krb5_context context, hdb_entry *ent, hdb_master_key mkey)
|
|||||||
|
|
||||||
key = find_master_key(k, mkey);
|
key = find_master_key(k, mkey);
|
||||||
|
|
||||||
ret = krb5_encrypt(context, key->crypto, 0,
|
ret = krb5_encrypt(context, key->crypto, HDB_KU_MKEY,
|
||||||
k->key.keyvalue.data,
|
k->key.keyvalue.data,
|
||||||
k->key.keyvalue.length,
|
k->key.keyvalue.length,
|
||||||
&res);
|
&res);
|
||||||
|
Reference in New Issue
Block a user