Commit Graph

186 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
9af7efed48 prefix pkinit symbols with _kdc
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15544 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-07-01 15:37:24 +00:00
Love Hörnquist Åstrand
de92125f9d adapt pkinit code to libkdc split
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15540 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-07-01 04:42:59 +00:00
Love Hörnquist Åstrand
7a3fc5e663 Don't pollute namespace, generate public headerfile
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15532 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-06-30 01:54:49 +00:00
Love Hörnquist Åstrand
7132a9b084 Merge in the libkdc/kdc configuration split from Andrew Bartlet <abartlet@samba.org>
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15529 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-06-30 01:03:35 +00:00
Love Hörnquist Åstrand
10cedfe58e (pk_principal_from_X509): remember to free KRB5PrincipalName
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15365 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-06-11 00:42:20 +00:00
Love Hörnquist Åstrand
a3c6124483 handle pkinit-9, pkinit-19, and pkinit-25 enckey, still no DH
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15116 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-05-10 19:40:39 +00:00
Love Hörnquist Åstrand
2446dccfda pass a NULL prompter data to _krb5_pk_load_openssl_id
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15041 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-04-30 16:15:45 +00:00
Love Hörnquist Åstrand
01f52d48e6 use generated oid's
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14628 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-03-09 15:49:23 +00:00
Love Hörnquist Åstrand
2b0b4dc044 update to the asn1 structures used in -25's
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14625 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-03-08 22:17:46 +00:00
Love Hörnquist Åstrand
9f52383628 match new error names
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14317 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-10-14 15:49:51 +00:00
Love Hörnquist Åstrand
4feb3c1abd use ETYPE_DES3_CBC_NONE_CMS
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14302 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-10-12 21:25:43 +00:00
Love Hörnquist Åstrand
1212f664ea free openssl engine
deal with RecipientIdentifier -> CMSIdentifier and heim_any -> name change


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14293 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-10-06 22:37:46 +00:00
Love Hörnquist Åstrand
31b9ad59ba improve error logging
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14282 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-10-03 16:54:11 +00:00
Love Hörnquist Åstrand
15994aadba stop using AlgorithmIdentifierNonOpt
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14280 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-10-03 16:43:24 +00:00
Love Hörnquist Åstrand
af2494e41a (pk_principal_from_X509): reverse test, makes principal in cert work
From: Mayur Patel <patelm4@rpi.edu>


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14055 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-07-19 20:45:50 +00:00
Love Hörnquist Åstrand
4347dadb27 Check certificate for Kerberos Principal in OtherName of subjectAltName
Based on patch from Mayur Patel <patelm4@rpi.edu>


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13990 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-06-24 14:34:46 +00:00
Love Hörnquist Åstrand
713ea798a8 use krb5_enctype_to_oid
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13816 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-04-26 21:21:54 +00:00
Love Hörnquist Åstrand
36033ab9d4 use krb5_crypto_set_params
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13808 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-04-26 20:08:42 +00:00
Love Hörnquist Åstrand
4fa6529707 use IV for envelopeddata encryption, patch originally from Luke Howard
<lukeh@padl.com>, tweeked by me.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13776 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-04-25 14:29:33 +00:00
Love Hörnquist Åstrand
e597b84708 (generate_dh_keyblock): use the new function krb5_random_to_key
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13743 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-04-22 11:54:37 +00:00
Love Hörnquist Åstrand
7298e49a3f use the first proposed enable enctype
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13739 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-04-21 15:21:05 +00:00
Love Hörnquist Åstrand
35140ccefa at least try to handle diffrent enveloped enctypes
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13737 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-04-21 11:30:20 +00:00
Love Hörnquist Åstrand
2553080b05 replace the krb5.conf configuration option that describes the mapping
between principals and subject names with a file, default
/var/heimdal/pki-mapping. XXX this should be pushed into HDB
XXX should add issuer too


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13727 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-04-17 09:01:35 +00:00
Love Hörnquist Åstrand
bb7814c980 adapt to heim_integer changes
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13723 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-04-16 00:38:36 +00:00
Love Hörnquist Åstrand
eac2949b39 adapt to heim_integer changes
merge certificate/private_key to a user_id


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13721 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-04-15 23:44:02 +00:00
Love Hörnquist Åstrand
0d2fb05db7 adapt to change of signature of _krb5_pk_load_openssl_id
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13608 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-03-21 18:48:35 +00:00
Love Hörnquist Åstrand
dc86c0f0f9 (pk_mk_pa_reply): add hdb_entry
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13497 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-03-09 22:16:40 +00:00
Love Hörnquist Åstrand
b7907c6862 pass client hdb_entry to pk_check_client
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13495 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-03-09 22:00:37 +00:00
Love Hörnquist Åstrand
6da4e2989e adapt to rename of oid_cmp to heim_oid_cmp
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13399 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-02-22 17:31:53 +00:00
Love Hörnquist Åstrand
9dac88f093 update error codes
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13396 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-02-20 21:42:34 +00:00
Love Hörnquist Åstrand
d85519e16d s/heim_big_integer/heim_integer/
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13355 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-02-13 17:08:29 +00:00
Love Hörnquist Åstrand
e78b654fc1 adapt to asn1 bignum code, use HEIM_PKINIT errors
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13354 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-02-13 16:53:25 +00:00
Love Hörnquist Åstrand
8e42e1a3f4 add support for KDC side of DH PKINIT
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13158 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-26 00:44:54 +00:00
Love Hörnquist Åstrand
7afa1d35ae clean up
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13149 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-24 06:18:23 +00:00
Love Hörnquist Åstrand
e10d6ca29d print an error and turn of pkinit if openssl failed to load
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13146 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-24 04:36:06 +00:00
Love Hörnquist Åstrand
c055731b98 PKINIT patch from Daniel Kouril and Petr Holub, I removed the
dependency on valicert asn1 parser, remove smartcard and globus
support (for now). Work to be done on this: DH support, Globus
support, Smartcard support, windows support (MS implements -09 of the
draft), make it conform to the new draft


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13141 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-24 04:13:46 +00:00