git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20813 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2007-06-03 03:35:51 +00:00
parent ceb434a58b
commit f57ad3e8e7

View File

@@ -1,4 +1,21 @@
2007-06-02 Love H<>rnquist <20>strand <lha@it.su.se>
* kdc/pkinit.c: In case of OCSP verification failure, referash
every 5 min. In case of success, refreash 2 min before expiring or
faster.
2007-05-31 Love H<>rnquist <20>strand <lha@it.su.se>
* lib/krb5/krb5_err.et: add error 68, WRONG_REALM
* kdc/pkinit.c: Handle the ms san in a propper way, still cheat
with the realm name.
* kdc/kerberos5.c: If _kdc_pk_check_client failes, bail out
directly and hand the error back to the client.
* lib/krb5/krb5_err.et: Add missing REVOCATION_STATUS_UNAVAILABLE
and fix error message for CLIENT_NAME_MISMATCH.
* kdc/pkinit.c: More logging for pk-init client mismatch.