Commit Graph

914 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
049a354efd (do_request): clean reply with krb5_data_zero
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17604 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-06-01 17:52:09 +00:00
Love Hörnquist Åstrand
e030c0d5e1 Split up the reverse cross krbtgt check and local clien must exists test.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17603 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-06-01 17:43:03 +00:00
Love Hörnquist Åstrand
23478bc157 Plug old memory leaks, unify all goto's.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17602 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-06-01 16:40:14 +00:00
Love Hörnquist Åstrand
cb7d1402f1 Split tgs_rep2 into tgs_parse_request and tgs_build_reply.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17600 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-06-01 13:17:42 +00:00
Love Hörnquist Åstrand
b0a3fd3a9c Add krb5tgs.c
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17599 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-06-01 11:19:59 +00:00
Love Hörnquist Åstrand
379d35fc8f split out krb5 tgs req to make it easier to reorganize the code.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17598 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-06-01 11:15:20 +00:00
Love Hörnquist Åstrand
1d2a17eca0 (tgs_rep2): check for memory alloc failure
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17597 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-06-01 10:55:28 +00:00
Love Hörnquist Åstrand
4c970b550e Avoid shadowing.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17579 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-05-13 21:22:55 +00:00
Love Hörnquist Åstrand
eeb100abe7 Don't call DH_check_pubkey, it doesn't exists in older OpenSSL.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17489 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-05-06 13:22:33 +00:00
Love Hörnquist Åstrand
652da91adb Rename u_intXX_t to uintXX_t
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17447 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-05-05 10:52:01 +00:00
Love Hörnquist Åstrand
30c1b8e531 Use the new unsigned integer storage types.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17429 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-05-04 09:51:22 +00:00
Love Hörnquist Åstrand
8faf263b83 Use the new unsigned integer storage types. Sprinkle some error handling.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17428 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-05-04 09:50:56 +00:00
Love Hörnquist Åstrand
b5cc2fa7aa (krb5_kdc_configuration): add pkinit_kdc_ocsp_file
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17413 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-05-03 12:03:29 +00:00
Love Hörnquist Åstrand
a276f37c56 read [kdc]pki-kdc-ocsp
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17412 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-05-03 12:02:55 +00:00
Love Hörnquist Åstrand
044719a5bd (_kdc_pk_mk_pa_reply): send back ocsp response if it seems to be
valid, simplfy the pkinit-windows DH case (it doesn't exists).


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17410 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-05-02 14:04:34 +00:00
Love Hörnquist Åstrand
36b923f56a (_kdc_pk_check_client): reorganize and make log when a SAN matches.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17348 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-29 14:30:01 +00:00
Love Hörnquist Åstrand
76ee5cb311 (tgs_rep2): check that the client exists in the kerberos database if
its local request.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17317 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-27 12:01:09 +00:00
Love Hörnquist Åstrand
5c9982831b pass down HDB_F_GET_ flags as appropriate
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17316 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-27 11:33:21 +00:00
Love Hörnquist Åstrand
357ca89f2d (_kdc_db_fetch4): pass down flags though krb5_425_conv_principal_ext2
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17315 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-27 11:32:13 +00:00
Love Hörnquist Åstrand
83d3254750 (_kdc_db_fetch): Break out the that we request from principal from the
entry and pass it in as a seprate argument.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17308 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-27 11:05:25 +00:00
Love Hörnquist Åstrand
61be59e8c7 make compile
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17290 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 18:53:52 +00:00
Love Hörnquist Åstrand
459f0648f1 Add option [kdc]pki-allow-proxy-certificate=bool to allow using proxy certificate.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17287 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 18:42:48 +00:00
Love Hörnquist Åstrand
d7bc1efbc8 (_kdc_pk_check_client): Use hx509_cert_get_base_subject to get subject
name of the certificate, needed for proxy certificates.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17285 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 18:36:22 +00:00
Love Hörnquist Åstrand
f591c22c1f Now that find_keys speaks for it self, remove extra logging.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17265 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 15:27:25 +00:00
Love Hörnquist Åstrand
f9d85a2590 (find_keys): add client_name and server_name argument and use them,
and adapt callers.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17264 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 15:22:57 +00:00
Love Hörnquist Åstrand
2edcff9efa Catch the case where the client sends no encryption types or no pa-types.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17232 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-25 12:23:04 +00:00
Love Hörnquist Åstrand
313fa917d5 Adapt to change in hx509_cms_create_signed_1.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17171 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-22 12:10:16 +00:00
Love Hörnquist Åstrand
1b73708904 (_kdc_pk_rd_padata): use hx509_cms_unwrap_ContentInfo.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17117 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-20 19:55:09 +00:00
Love Hörnquist Åstrand
538658a4e5 unbreak
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17113 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-20 18:17:16 +00:00
Love Hörnquist Åstrand
2ad7b45365 Handle diffrences between libhcrypto and libcrypto.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17111 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-20 18:15:48 +00:00
Love Hörnquist Åstrand
45fd105a52 Rename pki-chain to pki-pool to match rest of code.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17106 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-20 17:00:18 +00:00
Love Hörnquist Åstrand
6815452550 Added certificate revoke information from configuration file.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17054 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-12 13:21:46 +00:00
Love Hörnquist Åstrand
1082824558 (v4_prop_dump): close FILE handle f when done.
Fixes Coverity NetBSD CID#1956


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17023 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-09 17:41:47 +00:00
Love Hörnquist Åstrand
8f297fdb5c (_kdc_do_524): Handle memory allocation failure
Coverity, NetBSD CID#2752


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17015 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-07 22:12:28 +00:00
Love Hörnquist Åstrand
5800a9f897 (main): make sure type doesn't need to be set
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17012 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-07 21:41:14 +00:00
Love Hörnquist Åstrand
e3a5114857 (mit_prop_dump): close fd when done processing
Coverity NetBSD CID#1955


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17011 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-07 18:53:45 +00:00
Love Hörnquist Åstrand
39fbe46845 (tokey): catch warnings, free memory after use.
Based on Coverity NetBSD CID#1894


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17010 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-07 18:50:40 +00:00
Love Hörnquist Åstrand
54f35ca241 (main): remove dead code.
Coverity NetBSD CID#633


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17008 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-07 14:00:57 +00:00
Love Hörnquist Åstrand
b6fdc26556 (check_addresses): treat netbios as no addresses
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16949 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-02 01:54:38 +00:00
Love Hörnquist Åstrand
2211af38b6 _kdc_check_flags takes hdb_entry_ex
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16948 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-02 01:54:37 +00:00
Love Hörnquist Åstrand
b3f8381a4d (_kdc_check_flags): make it take hdb_entry_ex to avoid ?:'s at callers
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16947 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-02 01:52:32 +00:00
Love Hörnquist Åstrand
945efb8a96 Add pool of certificates to help certificate path building for clients
sending incomplete path in the signedData.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16854 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-03-28 19:57:25 +00:00
Love Hörnquist Åstrand
cd6acf1200 Allow passing in related certificates used to build the chain.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16850 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-03-28 04:38:14 +00:00
Love Hörnquist Åstrand
905242765a (log_patype): Add case for KRB5_PADATA_PA_PK_OCSP_RESPONSE.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16844 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-03-27 22:54:50 +00:00
Love Hörnquist Åstrand
56057ad91b (pk_mk_pa_reply_dh): encode the DH public key with asn1 wrapping
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16822 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-03-27 02:27:59 +00:00
Love Hörnquist Åstrand
b6350decc0 (_kdc_pk_check_client): More logging.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16821 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-03-27 02:15:12 +00:00
Love Hörnquist Åstrand
f024392e81 Switch to hx509.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16814 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-03-26 23:55:17 +00:00
Love Hörnquist Åstrand
137d218e79 (log_patypes): log the patypes requested by the client
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16804 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-03-24 22:50:02 +00:00
Love Hörnquist Åstrand
5290184954 update to new paChecksum definition, use hdb_entry_ex
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16733 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-13 11:48:21 +00:00
Love Hörnquist Åstrand
ca3745e9a4 Fix spelling of "Kungliga Tekniska Högskolan".
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16665 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-01-27 13:30:57 +00:00