Commit Graph

16656 Commits

Author SHA1 Message Date
Asanka Herath
3e2b840565 Try both fd and socket ops for net_read() and net_write()
When using WinSock, a socket is not a file descriptor and does not
interoperate with read()/write().  File descriptors do not work with
send()/recv().  However, for net_read() and net_write(), we don't know
whether we are dealing with a socket or a file descriptor.  So try
one, and if it fails, try the other.

This is an ugly hack until we clean up the users of this API so it
doesn't use sockets and fds interchangably.
2010-05-26 10:38:44 -04:00
Asanka Herath
5c0f3f99c6 Use path tokens when locating plug-in .dlls 2010-05-26 10:38:44 -04:00
Asanka Herath
b9567cb158 Don't attempt to release unallocated resource in fcc_move() 2010-05-26 10:38:43 -04:00
Asanka Herath
b9dc82e09e Fix slashes while expanding path tokens
On Windows, some (external) APIs get confused if we mix both back and
forward slashes.  When expanding path tokens we use back-slashes for
token expansions because they come from the OS.  For consistency, fix
the path so that the remaining path separators are also backslashes.
2010-05-26 10:38:43 -04:00
Asanka Herath
6d132f1d7d Remove spurious slash when expanding path tokens
Path tokens that expand to directories are expected to end in a slash.
2010-05-26 10:38:42 -04:00
Asanka Herath
500603506f Link libkrb5 against DNSAPI.lib on Windows 2010-05-26 10:38:42 -04:00
Asanka Herath
884f5ac627 Use WinDNS on Windows for DNS 2010-05-26 10:38:41 -04:00
Asanka Herath
a750f29cda _getch() can return '\r' on Windows 2010-05-26 10:38:40 -04:00
Asanka Herath
7b8ebf0efe Fix return value of w32crypto_bytes() and use correct data types 2010-05-26 10:38:40 -04:00
Asanka Herath
154de6b3a3 krb5_kuserok() only does the local principal test on Windows
Remove the other tests for now.  The file and directory access checks must be
made against the respective DACLs.
2010-05-26 10:38:39 -04:00
Love Hornquist Astrand
323ccec648 add support to generate keys 2010-05-26 09:31:23 -05:00
Love Hornquist Astrand
fa5a1cb201 tomcrypt rsa 2010-05-22 13:19:48 -07:00
Love Hornquist Astrand
d631443133 Support both BE and LE MIT master key file formats
Prompted by discussion on heimdal-discuss by Michael Wood, Russ Allbery,
and Henry B. Hotz.
2010-05-22 13:16:52 -07:00
Love Hornquist Astrand
3c58379590 tomsfastmath version of rsa, keygen missing 2010-05-19 22:29:07 -07:00
Love Hornquist Astrand
fd107d08c4 use case compare for teletex string 2010-05-01 11:47:02 +02:00
Love Hornquist Astrand
af0f2717c2 test case compare 2010-05-01 11:45:40 +02:00
Love Hornquist Astrand
eec74bd2fe Wrap SOCK_CLOEXEC in ifdef, from Harald Barth 2010-04-30 15:15:58 +02:00
Simon Wilkinson
994e8641c0 hcrypto: Don't explicitly include system headers
Don't explicitly include system headers in hash.h. These get pulled
in anyway through roken.h, and explicitly including them here makes
compiling hcrypto in the kernel much harder.

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-04-29 16:43:48 +02:00
Love Hornquist Astrand
2a842e90d3 Drop MD2 support
Patch partly from Guillaume Rousse
2010-04-28 22:10:27 +02:00
Simon Wilkinson
887993e8b3 Add mutex protection for the fortuna PRNG
The fortuna PRNG has an statically held internal state. Prevent
concurrent access to this internal state by adding mutexes around
all of the access classes.

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-04-19 14:26:53 +02:00
Love Hornquist Astrand
dd34c02329 spelling, from Tollef Fog Heen via Brian May of Debian 2010-04-11 16:36:15 -07:00
Love Hornquist Astrand
b7c0365677 fix documentation 2010-04-08 15:36:27 -07:00
Love Hornquist Astrand
312f4f9bd6 GSS_C_NO_OID matches nothing, not even it-self, document function 2010-03-30 11:18:49 -07:00
Love Hornquist Astrand
aa371571f9 insert _FLAG into the name 2010-03-29 19:08:00 -07:00
Love Hornquist Astrand
cf35620ecf name flag 1 as KRB5_INIT_CREDS_STEP_CONTINUE 2010-03-29 18:55:41 -07:00
Love Hornquist Astrand
a76daa7e35 support WIND_PROFILE_LDAP_CASE 2010-03-29 01:13:30 -07:00
Love Hornquist Astrand
aaf310f99e constify 2010-03-23 20:20:51 -07:00
Love Hornquist Astrand
4660ec8358 check for underruns 2010-03-21 21:05:21 -07:00
Love Hornquist Astrand
d02418be27 windows doesn't have /dev/random 2010-03-21 16:44:30 -07:00
Love Hornquist Astrand
08572822da use pathp for pathbased file names 2010-03-21 16:07:45 -07:00
Love Hornquist Astrand
408e3420d1 try hard to unset HOME and randfile 2010-03-21 16:06:34 -07:00
Love Hornquist Astrand
83e2a17c0f document more assumptions about hdb_rename 2010-03-21 14:56:57 -07:00
Love Hornquist Astrand
d837f736f8 Make locking work when doing rename, rename assume db in not ->hdb_open'ed. 2010-03-21 14:55:36 -07:00
Love Hornquist Astrand
c491b59007 pull out unix /dev/random if we cant get users home directory 2010-03-21 11:01:24 -07:00
Love Hornquist Astrand
76122d97c2 Test emptier environment 2010-03-21 10:59:26 -07:00
Love Hornquist Astrand
fc9aff2260 log the source too 2010-03-21 09:41:20 -07:00
Love Hornquist Astrand
3ac7d626c2 log failures 2010-03-21 09:37:42 -07:00
Love Hornquist Astrand
32d148b2f8 Check for dd_fd in DIR not struct dirent
Pointed out by Ragnnar Sundblad in private mail
2010-03-21 09:08:46 -07:00
Love Hornquist Astrand
ad2de1222f spelling 2010-03-20 15:25:55 -07:00
Love Hornquist Astrand
cfb43997ae define YY_NULL 2010-03-20 14:44:16 -07:00
Love Hornquist Astrand
b0a79dcd40 Improve the dns retry logic
Bug reported by Richard Silverman on heimdal-bugs
2010-03-19 14:19:43 -07:00
Love Hornquist Astrand
3af54e67d9 Renumber signedticket to 512 since 142 was stolen. 2010-03-19 13:44:51 -07:00
Andrew Tridge
6bff49a89d memset the right length of the {i,o}pad data, memset opad not ipad in the opad case (typo)
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-03-18 10:59:51 -07:00
Love Hornquist Astrand
f26d6c2398 (krb5_set_default_in_tkt_etypes): filter out unwanted enctypes
Needed for Samba that tries really hard to use DES encryption types.

Reported by Natanael Copa on heimdal-discuss
2010-03-17 09:30:11 -07:00
Matthias Dieter Wallnöfer
69ea9b38e9 heimdal - fix overlapped identifiers in the "krb5" library
heimdal - fix overlapped identifiers in the "krb5" library

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-03-16 10:05:35 -07:00
Love Hornquist Astrand
50990d61cf free always "ctx->password" when it isn't needed anymore
Patch originally from Matthias Dieter Wallnöfer, changed by me to keep
clearing the password from memory.
2010-03-16 10:04:20 -07:00
Love Hornquist Astrand
313a2243bb Allow users to specify their own configuration file ~/.krb5/config
Idea from Rune L on heimdal-discuss
2010-03-16 09:09:27 -07:00
Love Hornquist Astrand
33d80cbcfc include roken.h 2010-03-12 09:04:39 -08:00
Love Hornquist Astrand
cf1b11f8a0 export more 2010-03-11 23:35:26 -08:00
Love Hornquist Astrand
6da28e73eb move same ifdef magic from roken-common.h.in to here, use strerror() 2010-03-11 23:35:00 -08:00