oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

(krb5_rd_req_ctx): If there is a PAC, verify its server signature.

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19679 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2007-01-04 11:23:34 +00:00
parent 91d3c46e77
commit c8c4c730ac
1 changed files with 30 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
lib/krb5/rd_req.c
View File

@@ -822,6 +822,36 @@ krb5_rd_req_ctx(krb5_context context,
&o->ap_req_options, &o->ap_req_options,
&o->ticket); &o->ticket);
if (ret)
goto out;
/* If there is a PAC, verify its server signature */
{
krb5_pac pac;
krb5_data data;
ret = krb5_ticket_get_authorization_data_type(context,
o->ticket,
KRB5_AUTHDATA_WIN2K_PAC,
&data);
if (ret == 0) {
ret = krb5_pac_parse(context, data.data, data.length, &pac);
krb5_data_free(&data);
if (ret)
goto out;
ret = krb5_pac_verify(context,
pac,
o->ticket->ticket.authtime,
o->ticket->client,
&o->ticket->ticket.key,
NULL);
krb5_pac_free(context, pac);
if (ret)
goto out;
}
ret = 0;
}
out: out:
if (ret || outctx == NULL) { if (ret || outctx == NULL) {
krb5_rd_req_out_ctx_free(context, o); krb5_rd_req_out_ctx_free(context, o);