Commit Graph

16663 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
97d0c9dd3c x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17300 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-27 09:15:05 +00:00
Love Hörnquist Åstrand
7f951c53d0 Shared paths between login and rshd.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17299 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-27 09:14:20 +00:00
Love Hörnquist Åstrand
9f74e254e8 CRL delta support
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17298 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-27 08:01:04 +00:00
Love Hörnquist Åstrand
bbe32e832c x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17297 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 20:11:13 +00:00
Love Hörnquist Åstrand
f9889e9eab ignore leftover from OpenSSL generation
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17296 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 20:10:14 +00:00
Love Hörnquist Åstrand
01da7f3a0c x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17295 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 20:09:34 +00:00
Love Hörnquist Åstrand
5a305af6a1 Add name malformated error
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17294 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 20:09:02 +00:00
Love Hörnquist Åstrand
1047c39f0d (hx509_parse_name): don't abort on error, rather return error
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17293 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 20:08:36 +00:00
Love Hörnquist Åstrand
378ecba935 Test failure parsing name.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17292 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 20:07:48 +00:00
Love Hörnquist Åstrand
25f574426e (_krb5_pk_allow_proxy_certificate); less arguments better
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17291 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 18:54:16 +00:00
Love Hörnquist Åstrand
61be59e8c7 make compile
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17290 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 18:53:52 +00:00
Love Hörnquist Åstrand
2e299e21c3 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17289 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 18:44:01 +00:00
Love Hörnquist Åstrand
b4cb62bc99 document pki-allow-proxy-certificate
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17288 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 18:43:45 +00:00
Love Hörnquist Åstrand
459f0648f1 Add option [kdc]pki-allow-proxy-certificate=bool to allow using proxy certificate.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17287 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 18:42:48 +00:00
Love Hörnquist Åstrand
53905171a0 (_krb5_pk_allow_proxy_certificates): expose hx509_verify_set_proxy_certificate
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17286 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 18:41:40 +00:00
Love Hörnquist Åstrand
d7bc1efbc8 (_kdc_pk_check_client): Use hx509_cert_get_base_subject to get subject
name of the certificate, needed for proxy certificates.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17285 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 18:36:22 +00:00
Love Hörnquist Åstrand
c7b6f93485 When verifying certificates, store subject basename for later consumption.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17284 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 18:33:55 +00:00
Love Hörnquist Åstrand
4035c1117d regen
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17283 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 17:18:11 +00:00
Love Hörnquist Åstrand
dcbc344ca5 Add test_name to regression tests
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17282 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 17:17:33 +00:00
Love Hörnquist Åstrand
3a3a774e1e x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17281 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 17:16:52 +00:00
Love Hörnquist Åstrand
0117efb5aa test to parse and print name and check that they are the same.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17280 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 17:16:44 +00:00
Love Hörnquist Åstrand
d9f7944c9b (hx509_parse_name): fix length argument to printf string
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17279 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 17:15:57 +00:00
Love Hörnquist Åstrand
fe9bb14be8 (hx509_parse_name): fix length argument to stringtooid, 1 too short.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17278 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 17:12:36 +00:00
Love Hörnquist Åstrand
70552d3ed2 remove debug printf's
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17277 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 16:59:52 +00:00
Love Hörnquist Åstrand
e944135b02 (hx509_parse_name): make compile pre c99
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17276 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 16:56:26 +00:00
Love Hörnquist Åstrand
b55c0fbc9c OpenSSL have a serious issue of user confusion -subj in -ca takes the
arguments in LDAP order. -subj for x509 takes it in x509 order.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17275 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 16:49:23 +00:00
Love Hörnquist Åstrand
b1139e02d0 (hx509_verify_path): handle the case where the where two proxy certs
in a chain.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17274 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 16:47:45 +00:00
Love Hörnquist Åstrand
5cf4bf36f0 enable two proxy certificates in a chain test
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17273 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 16:45:01 +00:00
Love Hörnquist Åstrand
d7839a8c50 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17272 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 16:17:18 +00:00
Love Hörnquist Åstrand
05e08f62a6 regen
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17271 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 16:16:38 +00:00
Love Hörnquist Åstrand
c76ab3bc40 build proxy certificates
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17270 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 16:16:01 +00:00
Love Hörnquist Åstrand
d1b6d05cdc add def for proxy10_cert
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17269 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 16:15:33 +00:00
Love Hörnquist Åstrand
dfe29472cd add more certs
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17268 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 16:15:12 +00:00
Love Hörnquist Åstrand
dfd46eaeaa x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17267 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 15:46:22 +00:00
Love Hörnquist Åstrand
ce731322d7 Add another proxy certificate error.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17266 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 15:45:48 +00:00
Love Hörnquist Åstrand
f591c22c1f Now that find_keys speaks for it self, remove extra logging.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17265 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 15:27:25 +00:00
Love Hörnquist Åstrand
f9d85a2590 (find_keys): add client_name and server_name argument and use them,
and adapt callers.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17264 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 15:22:57 +00:00
Love Hörnquist Åstrand
0c3cff7fec x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17263 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 15:03:02 +00:00
Love Hörnquist Åstrand
56b18c1385 (hx509_verify_path): Need to mangle name to remove the CN of the
subject, copying issuer only works for one level but is better then
doing no checking at all.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17262 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 15:02:48 +00:00
Love Hörnquist Åstrand
05557b9ae9 Add verify --allow-proxy-certificate.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17261 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 14:43:14 +00:00
Love Hörnquist Åstrand
5a3e4a1865 add verify --allow-proxy-certificate
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17260 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 14:42:45 +00:00
Love Hörnquist Åstrand
d82349fba1 Add proxy certificate errors.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17259 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 14:41:14 +00:00
Love Hörnquist Åstrand
db9e1df818 Fix comment about subject name of proxy certificate.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17258 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 13:49:27 +00:00
Love Hörnquist Åstrand
cf3c9e7986 Make proxy certificate work.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17257 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 13:35:20 +00:00
Love Hörnquist Åstrand
e9a7ef8057 tests for proxy certs
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17256 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 13:32:17 +00:00
Love Hörnquist Åstrand
104b2bda39 gen proxy and non-proxy tests certificates
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17255 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 13:31:58 +00:00
Love Hörnquist Åstrand
a52db0479d Add definition for proxy certs
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17254 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 13:31:26 +00:00
Love Hörnquist Åstrand
0c10f202f4 proxy certs
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17253 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 13:30:50 +00:00
Love Hörnquist Åstrand
1b98d3a6ff (hx509_verify_path): verify proxy certificate have no san or ian
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17252 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 12:36:49 +00:00
Love Hörnquist Åstrand
253352539c (hx509_verify_set_proxy_certificate): Add
(*): rename policy cert to proxy cert


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17251 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 12:21:20 +00:00