Lots of random changes.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@1107 ec53bebd-3082-4978-b11e-865c3cabbd6b

lib/krb5/build_ap_req.c

@@ -0,0 +1,60 @@
+#include <krb5_locl.h>
+#include <krb5_error.h>
+
+krb5_error_code
+krb5_build_ap_req (krb5_context context,
+		   krb5_creds *cred,
+		   krb5_flags ap_options,
+		   krb5_data authenticator,
+		   krb5_data *ret)
+{
+  AP_REQ ap;
+  Ticket t;
+  des_cblock key;
+  des_key_schedule schedule;
+  u_int32_t crc;
+  unsigned char *p;
+  unsigned char buf[1024];
+
+  ap.pvno = 5;
+  ap.msg_type = krb_ap_req;
+  memset(&ap.ap_options, 0, sizeof(ap.ap_options));
+  if (ap_options & AP_OPTS_USE_SESSION_KEY)
+    ap.ap_options.use_session_key = 1;
+  if (ap_options & AP_OPTS_MUTUAL_REQUIRED)
+    ap.ap_options.mutual_required = 1;
+  
+  ap.ticket.tkt_vno = 5;
+  ap.ticket.realm = malloc(cred->server->realm.length + 1);
+  strncpy(ap.ticket.realm, cred->server->realm.data,
+	  cred->server->realm.length);
+  ap.ticket.realm[cred->server->realm.length] = '\0';
+  krb5_principal2principalname(&ap.ticket.sname, cred->server);
+
+  decode_Ticket(cred->ticket.data, cred->ticket.length, &t);
+
+  ap.ticket.enc_part.etype  = t.enc_part.etype;
+  ap.ticket.enc_part.kvno   = NULL;
+  ap.ticket.enc_part.cipher = t.enc_part.cipher;
+
+  memcpy(&key, cred->session.contents.data, sizeof(key));
+  des_set_key (&key, schedule);
+
+  /* authenticator */
+
+  des_cbc_encrypt (authenticator.data,
+		   authenticator.data,
+		   authenticator.length,
+		   schedule, &key, DES_ENCRYPT);
+
+  ap.authenticator.etype = ap.ticket.enc_part.etype;
+  ap.authenticator.kvno  = NULL;
+  ap.authenticator.cipher = authenticator;
+
+  ret->length = encode_AP_REQ(buf + sizeof(buf) - 1, sizeof(buf), &ap);
+
+  ret->data = malloc(ret->length);
+  memcpy (ret->data, buf + sizeof(buf) - ret->length, ret->length);
+
+  return 0;
+}