Commit Graph

473 Commits

Author SHA1 Message Date
Nicolas Williams 7dfad1ab0b Use secure_getenv() instead of issuid() 2017-04-17 18:02:30 -04:00
Nicolas Williams 76c596ceb8 Complete support for --disable-afs-support 2016-08-10 19:51:11 -05:00
Nicolas Williams 490337f4f9 Make OpenSSL an hcrypto backend proper
This adds a new backend for libhcrypto: the OpenSSL backend.

Now libhcrypto has these backends:

 - hcrypto itself (i.e., the algorithms coded in lib/hcrypto)
 - Common Crypto (OS X)
 - PKCS#11 (specifically for Solaris, but not Solaris-specific)
 - Windows CNG (Windows)
 - OpenSSL (generic)

The ./configure --with-openssl=... option no longer disables the use of
hcrypto.  Instead it enables the use of OpenSSL as a (and the default)
backend in libhcrypto.  The libhcrypto framework is now always used.

OpenSSL should no longer be used directly within Heimdal, except in the
OpenSSL hcrypto backend itself, and files where elliptic curve (EC)
crypto is needed.

Because libhcrypto's EC support is incomplete, we can only use OpenSSL
for EC.  Currently that means separating all EC-using code so that it
does not use hcrypto, thus the libhx509/hxtool and PKINIT EC code has
been moved out of the files it used to be in.
2016-04-15 00:16:17 -05:00
Viktor Dukhovni 0d52fd607f LLVM enum range warning 2015-03-04 19:52:26 -05:00
Jeffrey Hutzelman 9d511ea37d libkafs: derivation from non-DES key (rxkad-kdf)
Add support for the "rxkad-kdf" protocol for deriving rxkad session keys
from non-DES Kerberos session keys.  This allows rxkad to be used in
realms where the KDC is unwilling or unable to issue tickets with
single-DES session keys.
2014-08-21 13:05:59 -04:00
Love Hornquist Astrand 9ba23d7da8 guess some code for SUN_PROC_POINT 2012-09-24 21:28:04 -07:00
Samuel Thibault fbf44ea51d Fix compilation of kafs on Hurd.
kafs now defines two ioctls, define the GNU _IOT constants.

This was originally submitted to the Debian Heimdal package:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=483281

Signed-Off-By: Jelmer Vernooij <jelmer@debian.org>

Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
2012-04-05 22:55:01 -07:00
Roland C. Dowdeswell cc47c8fa7b Turn on -Wextra -Wno-sign-compare -Wno-unused-paramter and fix issues.
We turn on a few extra warnings and fix the fallout that occurs
when building with --enable-developer.  Note that we get different
warnings on different machines and so this will be a work in
progress.  So far, we have built on NetBSD/amd64 5.99.64 (which
uses gcc 4.5.3) and Ubuntu 10.04.3 LTS (which uses gcc 4.4.3).

Notably, we fixed

	1.  a lot of missing structure initialisers,

	2.  unchecked return values for functions that glibc
	    marks as __attribute__((warn-unused-result)),

	3.  made minor modifications to slc and asn1_compile
	    which can generate code which generates warnings,
	    and

	4.  a few stragglers here and there.

We turned off the extended warnings for many programs in appl/ as
they are nearing the end of their useful lifetime, e.g.  rsh, rcp,
popper, ftp and telnet.

Interestingly, glibc's strncmp() macro needed to be worked around
whereas the function calls did not.

We have not yet tried this on 32 bit platforms, so there will be
a few more warnings when we do.
2012-02-20 19:45:41 +00:00
Love Hornquist Astrand f7821b793d also check for des-cbc-md5 while at it 2011-08-30 23:20:04 -07:00
Love Hörnquist Åstrand 7aaba443bc add NTMakefile and windows directories 2011-07-17 12:16:59 -07:00
Love Hornquist Astrand 0879b9831a remove trailing whitespace 2011-05-21 11:57:31 -07:00
Love Hornquist Astrand f5f9014c90 Warning fixes from Christos Zoulas
- shadowed variables
- signed/unsigned confusion
- const lossage
- incomplete structure initializations
- unused code
2011-04-29 20:25:05 -07:00
Love Hornquist Astrand 23f5f03c7e drop v4 2010-11-26 09:03:36 -08:00
Love Hornquist Astrand c6bbdb545b First drop of Windows build infrastructure from Secure Endpoints 2009-11-24 12:12:53 -08:00
Love Hornquist Astrand 943123da3b enable DES when getting the afs credential 2009-10-07 09:39:19 -07:00
Love Hornquist Astrand 77ecef0327 tell where kafs will search for files, from Harald Barth 2009-10-06 09:27:46 -07:00
Love Hornquist Astrand a83bb81997 drop rcsid 2009-09-07 21:23:42 -07:00
Love Hornquist Astrand 54e10a2a13 Provide better error messages for libkafs 2009-08-30 11:10:15 -07:00
Love Hornquist Astrand de0ae78c4e Remove dlfcn implementation for AIX since nowadays AIX have dlopen()
Also drop license and copyright statement
2009-07-24 04:25:39 +02:00
Love Hornquist Astrand 6d9354edf7 x 2009-07-21 10:29:53 -07:00
Love Hornquist Astrand ebb3dd62c0 See README.dlfcn for license 2009-07-21 10:29:44 -07:00
Love Hörnquist Åstrand 22d7aecc02 make comile
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25049 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-03 04:05:38 +00:00
Love Hörnquist Åstrand 1888913797 use krb5_make_principal instead of krb5_425_conv_principal, since they
will mostly do the same thing....

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25047 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-03 04:05:04 +00:00
Love Hörnquist Åstrand 58b16c9bf1 dns: switch to rk types, prefix types with rk_
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24891 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-22 17:18:35 +00:00
Love Hörnquist Åstrand 12c724f2c9 rename different symbols
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24763 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-17 02:51:00 +00:00
Love Hörnquist Åstrand 4f3c4eafaa remove krb4 support
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24493 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-26 01:08:49 +00:00
Love Hörnquist Åstrand 6937d41a02 remove trailing whitespace
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23815 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-09-13 09:21:03 +00:00
Love Hörnquist Åstrand e172367898 switch to utf8 encoding of all files
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23814 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-09-13 08:53:55 +00:00
Love Hörnquist Åstrand ecf817db43 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23374 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-07-17 20:42:54 +00:00
Love Hörnquist Åstrand fbdd3b822d Try afs/cell@REALM before afs@REALM since that is what OpenAFS folks
have been saying is best pratices for some time now.

Patch from Derrick Brashear.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23373 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-07-17 20:42:42 +00:00
Love Hörnquist Åstrand 32bfb9806b More ifdef protection of VIOC_SYSCALL_DEV*
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22973 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-04-15 13:09:05 +00:00
Love Hörnquist Åstrand 2bfbcf0a5f x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22972 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-04-15 13:09:01 +00:00
Love Hörnquist Åstrand b7c0fc22b3 Avoid using entry points depending on _IOWR if there is no _IOWR (on cygwin).
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22971 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-04-15 13:08:55 +00:00
Love Hörnquist Åstrand f497adc89f x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21447 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-07-10 12:45:48 +00:00
Love Hörnquist Åstrand 37cd218c14 New library version.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21446 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-07-10 12:45:36 +00:00
Love Hörnquist Åstrand cc4333b758 remove cvs ignore files
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21026 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-09 03:09:59 +00:00
Love Hörnquist Åstrand 3ebd5555f4 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20653 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-05-10 19:30:35 +00:00
Love Hörnquist Åstrand c6231897c2 Add VIOCSETTOK2
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20652 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-05-10 19:30:18 +00:00
Love Hörnquist Åstrand 7ba2b2006c rename des to hcrypto
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20466 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-04-20 08:29:05 +00:00
Love Hörnquist Åstrand 0a66d3e486 use LIBADD_roken
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19985 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-17 18:45:03 +00:00
Love Hörnquist Åstrand b6d9890960 update version number and remove depenency on libvers for libraries
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19974 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-17 17:30:31 +00:00
Love Hörnquist Åstrand 59f11c5813 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18755 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-21 14:59:25 +00:00
Love Hörnquist Åstrand 6a03845d0a x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18754 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-21 14:56:27 +00:00
Love Hörnquist Åstrand eb25d3464f unbreak previous
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18753 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-21 14:55:59 +00:00
Love Hörnquist Åstrand 752de87529 split dist and nodist sources
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18740 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-21 12:01:46 +00:00
Love Hörnquist Åstrand caa52f4f8f x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18648 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-20 07:50:19 +00:00
Love Hörnquist Åstrand 2e3bcf3d83 add more files
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18647 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-10-20 07:49:11 +00:00
Love Hörnquist Åstrand fe0b3a491c Spelling, from Björn Sandell.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17380 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-05-01 07:01:18 +00:00
Love Hörnquist Åstrand 345ef1316d x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17379 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-05-01 07:00:25 +00:00
Love Hörnquist Åstrand fced68ddd0 use afs_ioctlnum, From Tomas Olsson <tol@it.su.se>
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17050 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-11 08:12:29 +00:00