351e0d0914
catch error from as.*printf
2010-05-30 13:28:09 -07:00
9773655027
catch error from as.*printf
2010-05-30 12:41:06 -07:00
f4f59121c3
allow password reuse for a short time after it was set last time
...
Patch from Harald Barth
2010-05-28 13:40:37 -07:00
f2c29f2b1e
use ret 0
2010-05-27 12:43:09 -05:00
44fd145d05
always use _krb5_expand_path_tokens
2010-05-27 12:31:23 -05:00
886914f8f9
always use _krb5_expand_path_tokens
2010-05-27 12:25:47 -05:00
f9481967c7
clean up
2010-05-27 12:20:36 -05:00
869b099f00
remove _w32
2010-05-27 11:56:03 -05:00
88c5f75b16
remove _w32 and support unix enviroments too
2010-05-27 11:55:20 -05:00
58022d0721
use _krb5_expand_path_tokens
2010-05-27 11:54:39 -05:00
f97ce2849d
remove unused functions
2010-05-27 11:08:51 -05:00
2664543dd5
spelling
2010-05-27 10:41:39 -05:00
7f6734138e
use lu and typecast to avoid warning for sizeof() between 32 and 64 bit hosts
2010-05-27 10:40:59 -05:00
83b86bf013
add fp_radix_size
2010-05-27 10:40:05 -05:00
90cb0ecae6
Windows fixes from Asanka Herath
2010-05-27 10:10:06 -05:00
05e836e7c6
add data-mkey.mit.des3.be and data-mkey.mit.des3.le
2010-05-26 14:37:26 -05:00
a7e8f05c9b
Check the GSS-API checksum exists before trying to use it [CVE-2010-1321]
...
This was introduced by checking the Kerberos 5 checksum as a
alternative to the 8003 checksum.
Thanks to MIT Kerberos and Shawn Emery for forwarding this issue
2010-05-26 11:53:31 -05:00
e745e97c3f
4.3.5 failes
2010-05-26 11:20:21 -05:00
85f6e6d670
Build Tom's fast math library on Windows
2010-05-26 12:17:30 -04:00
abcbfe08fb
don't use python if (!maintainer mode and we have built files)
2010-05-26 11:03:41 -05:00
e404c9db96
indent
2010-05-26 10:45:53 -05:00
3108d93489
add and use fp_isneg
2010-05-26 10:45:15 -05:00
658d110d4a
add tfm dh (and some missing files)
2010-05-26 10:27:32 -05:00
b09eac50ee
clean up
2010-05-26 10:19:07 -05:00
a45d584792
add tfm dh (and some missing files)
2010-05-26 10:07:11 -05:00
3e2b840565
Try both fd and socket ops for net_read() and net_write()
...
When using WinSock, a socket is not a file descriptor and does not
interoperate with read()/write(). File descriptors do not work with
send()/recv(). However, for net_read() and net_write(), we don't know
whether we are dealing with a socket or a file descriptor. So try
one, and if it fails, try the other.
This is an ugly hack until we clean up the users of this API so it
doesn't use sockets and fds interchangably.
2010-05-26 10:38:44 -04:00
5c0f3f99c6
Use path tokens when locating plug-in .dlls
2010-05-26 10:38:44 -04:00
b9567cb158
Don't attempt to release unallocated resource in fcc_move()
2010-05-26 10:38:43 -04:00
b9dc82e09e
Fix slashes while expanding path tokens
...
On Windows, some (external) APIs get confused if we mix both back and
forward slashes. When expanding path tokens we use back-slashes for
token expansions because they come from the OS. For consistency, fix
the path so that the remaining path separators are also backslashes.
2010-05-26 10:38:43 -04:00
6d132f1d7d
Remove spurious slash when expanding path tokens
...
Path tokens that expand to directories are expected to end in a slash.
2010-05-26 10:38:42 -04:00
500603506f
Link libkrb5 against DNSAPI.lib on Windows
2010-05-26 10:38:42 -04:00
884f5ac627
Use WinDNS on Windows for DNS
2010-05-26 10:38:41 -04:00
a750f29cda
_getch() can return '\r' on Windows
2010-05-26 10:38:40 -04:00
7b8ebf0efe
Fix return value of w32crypto_bytes() and use correct data types
2010-05-26 10:38:40 -04:00
154de6b3a3
krb5_kuserok() only does the local principal test on Windows
...
Remove the other tests for now. The file and directory access checks must be
made against the respective DACLs.
2010-05-26 10:38:39 -04:00
323ccec648
add support to generate keys
2010-05-26 09:31:23 -05:00
fa5a1cb201
tomcrypt rsa
2010-05-22 13:19:48 -07:00
d631443133
Support both BE and LE MIT master key file formats
...
Prompted by discussion on heimdal-discuss by Michael Wood, Russ Allbery,
and Henry B. Hotz.
2010-05-22 13:16:52 -07:00
3c58379590
tomsfastmath version of rsa, keygen missing
2010-05-19 22:29:07 -07:00
fd107d08c4
use case compare for teletex string
2010-05-01 11:47:02 +02:00
af0f2717c2
test case compare
2010-05-01 11:45:40 +02:00
eec74bd2fe
Wrap SOCK_CLOEXEC in ifdef, from Harald Barth
2010-04-30 15:15:58 +02:00
994e8641c0
hcrypto: Don't explicitly include system headers
...
Don't explicitly include system headers in hash.h. These get pulled
in anyway through roken.h, and explicitly including them here makes
compiling hcrypto in the kernel much harder.
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-04-29 16:43:48 +02:00
2a842e90d3
Drop MD2 support
...
Patch partly from Guillaume Rousse
2010-04-28 22:10:27 +02:00
887993e8b3
Add mutex protection for the fortuna PRNG
...
The fortuna PRNG has an statically held internal state. Prevent
concurrent access to this internal state by adding mutexes around
all of the access classes.
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-04-19 14:26:53 +02:00
dd34c02329
spelling, from Tollef Fog Heen via Brian May of Debian
2010-04-11 16:36:15 -07:00
b7c0365677
fix documentation
2010-04-08 15:36:27 -07:00
312f4f9bd6
GSS_C_NO_OID matches nothing, not even it-self, document function
2010-03-30 11:18:49 -07:00
aa371571f9
insert _FLAG into the name
2010-03-29 19:08:00 -07:00
cf35620ecf
name flag 1 as KRB5_INIT_CREDS_STEP_CONTINUE
2010-03-29 18:55:41 -07:00
Love Hornquist Astrand