oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

turn off supportedCMSTypes for now, allow kdc not sending correct certs

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24206 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2008-12-15 04:33:09 +00:00
parent 28de60a9bc
commit daa7c34ab3
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
lib/krb5/pkinit.c
View File

@@ -453,7 +453,7 @@ build_auth_pack(krb5_context context,
a->clientPublicValue->subjectPublicKey.data = dhbuf.data;
}
{
if (0) {
a->supportedCMSTypes = calloc(1, sizeof(*a->supportedCMSTypes));
if (a->supportedCMSTypes == NULL)
return ENOMEM;
@@ -648,7 +648,7 @@ pk_mk_padata(krb5_context context,
if (ret)
free(buf.data);
if (ret == 0 && ctx->type == PKINIT_WIN2K)
if (ret == 0)
krb5_padata_add(context, md, KRB5_PADATA_PK_AS_09_BINDING, NULL, 0);
out:
@@ -737,7 +737,7 @@ _krb5_pk_verify_sign(krb5_context context,
ret = hx509_cms_verify_signed(id->hx509ctx,
id->verify_ctx,
0,
HX509_CMS_VS_ALLOW_DATA_OID_MISMATCH|HX509_CMS_VS_NO_KU_CHECK,
data,
length,
NULL,