From f57ad3e8e7462b31a52f7c55b6e0b17b1d0b9032 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= Date: Sun, 3 Jun 2007 03:35:51 +0000 Subject: [PATCH] x git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20813 ec53bebd-3082-4978-b11e-865c3cabbd6b --- ChangeLog | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/ChangeLog b/ChangeLog index 40ee751d7..20431db94 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,4 +1,21 @@ +2007-06-02 Love Hörnquist Åstrand + + * kdc/pkinit.c: In case of OCSP verification failure, referash + every 5 min. In case of success, refreash 2 min before expiring or + faster. + 2007-05-31 Love Hörnquist Åstrand + + * lib/krb5/krb5_err.et: add error 68, WRONG_REALM + + * kdc/pkinit.c: Handle the ms san in a propper way, still cheat + with the realm name. + + * kdc/kerberos5.c: If _kdc_pk_check_client failes, bail out + directly and hand the error back to the client. + + * lib/krb5/krb5_err.et: Add missing REVOCATION_STATUS_UNAVAILABLE + and fix error message for CLIENT_NAME_MISMATCH. * kdc/pkinit.c: More logging for pk-init client mismatch.