88d55a1d06
Make compile for weak crypto global (HEIM_WEAK_CRYPTO) and use it for GSSAPI too
2009-08-17 18:06:42 +02:00
fc702a97f5
switch to use EVP interface instead of old crypto interface
2009-08-17 17:30:59 +02:00
62433c844c
switch to use EVP interface instead of old crypto interface
2009-08-17 16:02:45 +02:00
fcfa32b0b9
Use constant time memcmp
2009-08-17 12:04:51 +02:00
42cec58cb4
switch to use EVP interface instead of old crypto interface
2009-08-17 11:43:24 +02:00
dfd1edb54d
switch to use EVP interface instead of old MDX_ style interface
2009-08-17 10:20:01 +02:00
ddb54ca483
switch to use EVP interface instead of old MDX_ style interface
2009-08-17 10:16:13 +02:00
13c3b9b1c6
switch to use EVP interface instead of old MDX_ style interface
2009-08-17 10:15:31 +02:00
639e93d436
switch to use EVP interface instead of old MDX_ style interface
2009-08-17 10:14:24 +02:00
3ef05891ee
switch to use EVP interface instead of old MDX_ style interface
2009-08-17 10:13:04 +02:00
ddb8230917
switch to use EVP interface instead of old MDX_ style interface
2009-08-17 10:10:42 +02:00
6ac304d156
Use min() instead of MIN()
2009-08-14 20:05:36 +02:00
07f0c8be5d
Clean better
2009-08-06 10:18:52 +02:00
95993f222c
Fix order of flags, passes regression test now
2009-08-05 13:42:34 +02:00
0ede7ac561
Pass down the use-dce-style flag instead of the while gssapi krb5 context
2009-08-05 12:00:07 +02:00
ab9e5d13ec
gsskrb5: try to be compatible with windows for gss_wrap* and cfx
...
The good thing is that windows and heimdal both use EC=0
in the non DCE_STYLE case, so we need the windows compat hack
only in DCE_STYLE mode.
metze
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2009-08-04 20:22:05 +02:00
0297d047a4
gsskrb5: add support for DCE_STYLE and des and des3 keys
...
Only the des keys are tested as windows doesn't support des3
metze
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2009-08-04 20:21:20 +02:00
3cebc3767f
add more test to test_acquire_cred that removes the need of test_init_creds.c
2009-08-03 13:05:36 +02:00
3608b815b4
Don't bother checking usage of minor_status [CID-23]
2009-07-30 14:01:57 +02:00
901bac07e8
Don't need to look check *input_name twice [CID-27].
2009-07-30 14:00:48 +02:00
08256017e4
Don't dereference input_name [CID-27].
2009-07-30 13:59:42 +02:00
896391a56b
Double free of sp on empty list of creds [CID-183]
2009-07-30 07:46:37 +02:00
9581e59bde
FORWARD_NULL fixes [CID-163] and friends
2009-07-30 07:36:03 +02:00
b9644d7060
Test on wrong variable
2009-07-30 07:30:27 +02:00
2e1ebf8598
add export/import cred
2009-07-29 23:12:16 +02:00
fa502c6648
Add support for gss_{import,export}_cred() as requested by metze
...
Works for krb5 and SPNEGO mechanisms. Kerberos credentials are passed as
credential cache names, or if there are memory based credentials, inband in the protocol. This means that the credentials buffers must be keep secret.
As documented by IBM (they have the wrong prototype though)
and GGF (GSS-API Extensions) back in 2001
2009-07-29 13:36:02 +02:00
565236c603
Add store-cred to the dispatch table
2009-07-28 09:50:05 +02:00
c140f0255c
Implement core of _gsskrb5_store_cred()
2009-07-27 09:42:46 +02:00
1dd94e44ba
Switch to macros for c++ extern "C" to please editors that want to autoindent
2009-07-23 19:27:34 +02:00
517be51cc5
Test init_sec_context using keytab based credentials
...
Based on problem description from Rick Macklem in [HEIMDAL-197],
problem still not fixed.
2009-07-17 15:57:45 -07:00
8b71d0b93f
Prefer the realm of the user when doing referrals style ISC krb5-get-creds
...
The the realm of the user's principal and prefer that when doing a lookup.
This code still need to be smarter can cache the "initial value" -> positive result
to avoid roundtrips to the KDC.
2009-07-17 15:43:19 -07:00
57e31f7593
More tests for GSSAPI_DEPRECATED
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25333 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-16 18:27:37 +00:00
de5f912e02
Contributed by Andrew Bartlett:
...
When Samba4's 'fake' GSSAPI client contacts Windows 2008, and does not
request AP_MUTUAL_REQUIRED, it does not elicit a response packet.
We had previously assumed it was unconditional. Samba3 didn't mind
very much, but Samba4's samba3-like client did, and the behaviour
differed to Win2008 behaviour.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25328 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-15 22:18:00 +00:00
8eb14db155
remove unused variable
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25323 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-15 22:16:21 +00:00
9807194527
check for NULL pointer not no NULL pointer...
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25321 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-08 00:07:05 +00:00
012eae7f34
rename gssapi/ntlm/digest.c to kdc.c since that is what its talking too
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25292 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-07-03 03:16:21 +00:00
90ac3afd08
hostname is not_defined_in_RFC4178@please_ignore
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25291 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-06-28 21:12:38 +00:00
8be9f44602
rename find_buffer
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25289 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-06-23 03:45:56 +00:00
2ca3492e42
remove stream bits for now
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25288 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-06-23 03:45:37 +00:00
769f86eb33
start of unpack stream if there is one.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25287 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-06-23 03:45:02 +00:00
c99b2003e2
Implement gss_wrap_iov, gss_unwrap_iov for CFX type encryption types.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25286 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-06-22 17:56:41 +00:00
74af14affc
disable code
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25284 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-06-12 19:05:42 +00:00
f93dd564c3
fix depencies for asn1 headers
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25268 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-06-03 17:25:58 +00:00
a158e74fc4
add depencies for asn1 headers
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25267 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-06-03 17:25:48 +00:00
eb9f8ba4bb
output_name == NULL is invalid
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25201 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-05-09 14:21:05 +00:00
61a2a0fe7a
set right return value
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25200 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-05-09 14:20:50 +00:00
b9455d54f4
set right return value
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25199 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-05-09 14:20:36 +00:00
c9d5eca012
only set ret flags i we have them
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25195 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-05-06 19:04:26 +00:00
e5b52d6b32
need output_cred_handle, don't pretend
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25194 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-05-06 19:04:15 +00:00
9e9258e2b8
comment out unsupported options
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25183 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-05-06 19:02:03 +00:00
Love Hornquist Astrand