oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

turn off supportedCMSTypes for now, allow kdc not sending correct certs

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24206 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2008-12-15 04:33:09 +00:00
parent 28de60a9bc
commit daa7c34ab3
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
lib/krb5/pkinit.c
View File

@@ -453,7 +453,7 @@ build_auth_pack(krb5_context context,
a->clientPublicValue->subjectPublicKey.data = dhbuf.data; a->clientPublicValue->subjectPublicKey.data = dhbuf.data;
} }
{ if (0) {
a->supportedCMSTypes = calloc(1, sizeof(*a->supportedCMSTypes)); a->supportedCMSTypes = calloc(1, sizeof(*a->supportedCMSTypes));
if (a->supportedCMSTypes == NULL) if (a->supportedCMSTypes == NULL)
return ENOMEM; return ENOMEM;
@@ -648,7 +648,7 @@ pk_mk_padata(krb5_context context,
if (ret) if (ret)
free(buf.data); free(buf.data);
if (ret == 0 && ctx->type == PKINIT_WIN2K) if (ret == 0)
krb5_padata_add(context, md, KRB5_PADATA_PK_AS_09_BINDING, NULL, 0); krb5_padata_add(context, md, KRB5_PADATA_PK_AS_09_BINDING, NULL, 0);
out: out:
@@ -737,7 +737,7 @@ _krb5_pk_verify_sign(krb5_context context,
ret = hx509_cms_verify_signed(id->hx509ctx, ret = hx509_cms_verify_signed(id->hx509ctx,
id->verify_ctx, id->verify_ctx,
0, HX509_CMS_VS_ALLOW_DATA_OID_MISMATCH|HX509_CMS_VS_NO_KU_CHECK,
data, data,
length, length,
NULL, NULL,