oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

krb5: set PKINIT_BTMM flag per Apple implementation

Browse Source
This commit is contained in:
Luke Howard
2019-05-07 13:54:10 +10:00
committed by Jeffrey Altman
parent 8350f34a05
commit fd209c5dca
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
lib/krb5/pkinit.c
View File

@@ -2380,6 +2380,11 @@ krb5_get_init_creds_opt_set_pkinit(krb5_context context,
opt->opt_private->pk_init_ctx = NULL; opt->opt_private->pk_init_ctx = NULL;
return ret; return ret;
} }
if (flags & KRB5_GIC_OPT_PKINIT_BTMM)
opt->opt_private->pk_init_ctx->id->flags |= PKINIT_BTMM;
if (principal && krb5_principal_is_lkdc(context, principal))
opt->opt_private->pk_init_ctx->id->flags |= PKINIT_BTMM;
if (opt->opt_private->pk_init_ctx->id->certs) { if (opt->opt_private->pk_init_ctx->id->certs) {
_krb5_pk_set_user_id(context, _krb5_pk_set_user_id(context,