Commit Graph

991 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
487bcca4e2 Use strcspn to remove \n from fgets result. Prompted by change by Ray
Lai of OpenBSD via Björn Sandell.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19213 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-04 23:36:36 +00:00
Love Hörnquist Åstrand
c264018278 Add LIB_pkinit to pacify AIX
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19188 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-29 07:39:58 +00:00
Love Hörnquist Åstrand
5b304e5f20 Need better code in the DH parameter rejection case, add comment to
that effect.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19165 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-28 03:41:55 +00:00
Love Hörnquist Åstrand
772ed07a25 Reply KRB5KRB_ERR_RESPONSE_TOO_BIG for too large packets when using
datagram based transports.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19163 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-27 14:17:58 +00:00
Love Hörnquist Åstrand
6ff3e7477d Pass down datagram_reply to _kdc_tgs_rep.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19162 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-27 14:16:09 +00:00
Love Hörnquist Åstrand
480aff7f9b (_kdc_pk_rd_padata): Pick up supportedCMSTypes and pass in into
hx509_cms_create_signed_1 via hx509_peer_info blob.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19125 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-26 16:38:51 +00:00
Love Hörnquist Åstrand
ddfe47e5e1 Update hx509_cms_create_signed_1.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19120 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-26 15:50:48 +00:00
Love Hörnquist Åstrand
c4cd047939 Make all pkinit options prefixed with pkinit_
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19089 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-21 19:57:33 +00:00
Love Hörnquist Åstrand
b9624a871d Use KRB5_KU_OTHER_CKSUM for the impersonate checksum.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19081 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-21 05:14:43 +00:00
Love Hörnquist Åstrand
ece5f9603e Make krb5_get_init_creds_opt_free take a context argument.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19078 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-20 18:12:41 +00:00
Love Hörnquist Åstrand
8466eac79d revert the enable-pkinit change, and make it consistant with all other
other enable- options


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19075 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-19 04:16:49 +00:00
Love Hörnquist Åstrand
5b7701514e Make all pkinit options prefixed with pkinit_
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19069 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-17 22:27:01 +00:00
Love Hörnquist Åstrand
61623b636c Make app pkinit options prefixed with pkinit_
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19068 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-17 22:20:25 +00:00
Love Hörnquist Åstrand
204ec47405 (_kdc_pk_check_client): drop client_princ as an argument
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18984 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-10 03:37:43 +00:00
Love Hörnquist Åstrand
21ef9de7e6 (_kdc_as_rep): drop client_princ from _kdc_pk_check_client since its
not valid in canonicalize case


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18983 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-10 03:36:32 +00:00
Love Hörnquist Åstrand
e6e22c2bbd Remove support dumping to a kerberos 4 database.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18957 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-08 18:48:36 +00:00
Love Hörnquist Åstrand
9956ae0200 Catch error string from hx509_cms_verify_signed.
Check for id-pKKdcEkuOID and warn if its not there.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18933 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-07 17:24:57 +00:00
Love Hörnquist Åstrand
6cf72f998b (_kdc_as_rep): More verbose time skew logging.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18908 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-11-04 17:05:28 +00:00
Love Hörnquist Åstrand
896bc81f54 Default to always print subject dn for pk-init authorization.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18874 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-24 17:51:33 +00:00
Love Hörnquist Åstrand
0a3bd1b7b8 Try to not leak memory.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18845 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-22 20:13:52 +00:00
Love Hörnquist Åstrand
87500b6c61 (check_KRB5SignedPath): free KRB5SignedPath on successful completion
too, not just the error cases.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18827 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-22 15:54:37 +00:00
Love Hörnquist Åstrand
826f6e75e3 ignore kdc-protos.h and kdc-private.h
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18710 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-20 20:42:43 +00:00
Love Hörnquist Åstrand
1b9fae5253 more files
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18653 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-20 15:52:20 +00:00
Love Hörnquist Åstrand
a54f56a729 remove stale comment
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18489 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-17 02:22:17 +00:00
Love Hörnquist Åstrand
cf5ac5cacc Prefix asn1 primitives with der_.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18488 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-17 02:16:29 +00:00
Love Hörnquist Åstrand
69883abf62 Prefix der primitives with der_.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18460 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-14 10:16:45 +00:00
Love Hörnquist Åstrand
ca35d60f1e (pk_mk_pa_reply_enckey): add missing break. From Olga Kornievskaia.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18427 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-12 20:00:25 +00:00
Love Hörnquist Åstrand
fb5806c7f5 document max-kdc-datagram-reply-length
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18419 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-12 10:05:57 +00:00
Love Hörnquist Åstrand
247cda7f2f (loop): Log that the kdc have started.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18392 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-10 10:13:36 +00:00
Love Hörnquist Åstrand
3128010cc2 (do_request): tell krb5_kdc_process_request if its a datagram reply or not
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18386 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-09 15:41:01 +00:00
Love Hörnquist Åstrand
35cbc4ce07 Reply KRB5KRB_ERR_RESPONSE_TOO_BIG error if its a datagram reply and
the datagram reply length limit is reached.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18385 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-09 15:38:59 +00:00
Love Hörnquist Åstrand
6a5f157cb9 Rename krb5_kdc_process_generic_request to krb5_kdc_process_request
Add datagram_reply argument.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18384 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-09 15:37:39 +00:00
Love Hörnquist Åstrand
3f3792b7a7 check for [kdc]max-kdc-datagram-reply-length
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18383 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-09 15:35:36 +00:00
Love Hörnquist Åstrand
6e093638af (krb5_kdc_config): Add max_datagram_reply_length.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18382 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-09 15:34:07 +00:00
Love Hörnquist Åstrand
8b981cc040 (tgs_parse_request): set cusec, not csec from auth->cusec.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18366 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-09 06:51:57 +00:00
Love Hörnquist Åstrand
562c2aced2 Adapt to signature change of _krb5_principalname2krb5_principal.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18349 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-08 13:43:52 +00:00
Love Hörnquist Åstrand
aa75a633ee (handle_vanilla_tcp): shorten length when we shorten the buffer, this
matter im the PK-INIT encKey case where a checksum is done over the
whole packet. Reported by Olga Kornievskaia


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18345 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-08 09:01:36 +00:00
Love Hörnquist Åstrand
ddf7f8db2a Adapt to signature change of _krb5_principalname2krb5_principal.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18273 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-07 07:03:13 +00:00
Love Hörnquist Åstrand
c7b54c3372 Adapt to signature change of _krb5_principalname2krb5_principal.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18270 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-06 17:06:30 +00:00
Love Hörnquist Åstrand
7c8ba97fe4 (_krb5_principalname2krb5_principal): adapt to signature change
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18268 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-06 17:00:21 +00:00
Love Hörnquist Åstrand
a01d3c5a98 Make digest argument o MD5_final unsigned char to help OpenSSL.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18259 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-06 12:06:45 +00:00
Love Hörnquist Åstrand
760f9f5bee Sign the request in the encKey case.
Bug reported by Olga Kornievskaia of Umich.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18220 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-04 20:54:25 +00:00
Love Hörnquist Åstrand
cafd935d88 Check the adtkt in the constrained delegation case too.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18101 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-09-18 17:30:19 +00:00
Love Hörnquist Åstrand
a10e7216d6 (sigterm): don't _exit, let loop() catch the signal instead.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18095 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-09-16 17:28:05 +00:00
Love Hörnquist Åstrand
ce1b1b08af Signing outgoing tickets.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18075 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-09-11 13:39:48 +00:00
Love Hörnquist Åstrand
2db346fb7d Add signing and checking of tickets to s4u2self works securely.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18074 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-09-11 13:39:13 +00:00
Love Hörnquist Åstrand
647c78fdc2 indent.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17951 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-28 14:41:49 +00:00
Love Hörnquist Åstrand
1bb5708e19 Catch more error, add SASL DIGEST MD5.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17945 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-28 12:38:44 +00:00
Love Hörnquist Åstrand
687cb26c9e Remove _kdc_find_etype(), its no longer used.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17934 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-24 11:52:29 +00:00
Love Hörnquist Åstrand
821b7e5e20 Remove local error label and have just one exit label, set error
strings properly.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17932 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-24 11:27:42 +00:00