oysteikt/heimdal
0
0
Fork 0
Code Issues 4 Pull Requests Releases Activity

Use OpenSSL 3.x _only_ and implement RFC 8636

Browse Source 
- No more OpenSSL 1.x support
 - Remove 1DES and 3DES
 - Remove NETLOGON, NTLM (client and 'digest' service)
This commit is contained in:
Nicolas Williams
2025-10-16 13:06:15 -05:00
parent b857bde4fb
commit cbe156d927
294 changed files with 9592 additions and 29048 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/krb5/version-script.map
+11 -30
View File
@@ -204,6 +204,8 @@ HEIMDAL_KRB5_2.0 {
krb5_data_realloc;
krb5_data_zero;
krb5_debug;
_krb5_debug;
_krb5_debug_openssl;
krb5_decode_Authenticator;
krb5_decode_ETYPE_INFO2;
krb5_decode_ETYPE_INFO;
@@ -218,36 +220,6 @@ HEIMDAL_KRB5_2.0 {
krb5_decrypt_ivec;
krb5_decrypt_ticket;
krb5_derive_key;
krb5_digest_alloc;
krb5_digest_free;
krb5_digest_get_client_binding;
krb5_digest_get_identifier;
krb5_digest_get_opaque;
krb5_digest_get_rsp;
krb5_digest_get_server_nonce;
krb5_digest_get_session_key;
krb5_digest_get_tickets;
krb5_digest_init_request;
krb5_digest_probe;
krb5_digest_rep_get_status;
krb5_digest_request;
krb5_digest_set_authentication_user;
krb5_digest_set_authid;
krb5_digest_set_client_nonce;
krb5_digest_set_digest;
krb5_digest_set_hostname;
krb5_digest_set_identifier;
krb5_digest_set_method;
krb5_digest_set_nonceCount;
krb5_digest_set_opaque;
krb5_digest_set_qop;
krb5_digest_set_realm;
krb5_digest_set_responseData;
krb5_digest_set_server_cb;
krb5_digest_set_server_nonce;
krb5_digest_set_type;
krb5_digest_set_uri;
krb5_digest_set_username;
krb5_domain_x500_decode;
krb5_domain_x500_encode;
krb5_eai_to_heim_errno;
@@ -361,6 +333,7 @@ HEIMDAL_KRB5_2.0 {
krb5_get_init_creds_opt_set_pa_password;
krb5_get_init_creds_opt_set_pac_request;
krb5_get_init_creds_opt_set_pkinit;
krb5_get_init_creds_opt_set_pkinit_allowed_algs;
krb5_get_init_creds_opt_set_preauth_list;
krb5_get_init_creds_opt_set_process_last_req;
krb5_get_init_creds_opt_set_proxiable;
@@ -595,6 +568,7 @@ HEIMDAL_KRB5_2.0 {
krb5_set_dns_canonicalize_hostname;
krb5_set_error_message;
krb5_set_error_string;
_krb5_set_error_message_openssl;
krb5_set_extra_addresses;
krb5_set_fcache_version;
krb5_set_home_dir_access;
@@ -602,6 +576,7 @@ HEIMDAL_KRB5_2.0 {
krb5_set_kdc_sec_offset;
krb5_set_log_dest;
krb5_set_max_time_skew;
krb5_set_ossl_cnf_propq;
krb5_set_password;
krb5_set_password_using_ccache;
krb5_set_real_time;
@@ -861,6 +836,12 @@ HEIMDAL_KRB5_2.0 {
_krb5_find_capath;
_krb5_free_capath;
# Other
_krb5_UI_UTIL_read_pw_string;
_krb5_hmac_start_ossl;
_krb5_openssl_errors;
_krb5_hmac_ossl;
local:
*;
};