6d6734bfab
document hx509_certs_iter()
2011-03-13 17:09:08 -07:00
e1c37aac08
update (c)
2011-03-13 16:54:16 -07:00
9ef071c94e
replace libeditline with libedit
2011-03-13 14:18:14 -07:00
217021914d
add more oids
2011-03-13 13:40:52 -07:00
df802c6298
add keys
2011-03-13 12:42:54 -07:00
35a072e574
add pac
2011-03-13 12:42:42 -07:00
f237400f2c
add GSS_C_INQ_SSPI_SESSION_KEY
2011-03-13 12:38:25 -07:00
c3905ff795
glue in some more functions
2011-03-12 19:29:00 -08:00
7013c453eb
x
2011-03-12 18:49:44 -08:00
4d0d3b9535
remove other _krb5_key_data
2011-03-12 13:53:24 -08:00
1bb482e168
prefix internal structures with _krb5_
2011-03-12 13:50:39 -08:00
03806492d9
prefix symbols that are _krb5_ structures
2011-03-12 13:45:09 -08:00
c05773d443
drop gss_name_any since it removed from the draft
2011-03-12 12:50:59 -08:00
4248882381
drop gss_name_any since it removed from the draft
2011-03-12 12:49:42 -08:00
fbf5cff0ac
Patch from Luke Howard to allow dynamic gss_mo
2011-03-12 12:45:53 -08:00
2b2ab30f53
Add naming extension SPIs
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2011-03-12 12:35:43 -08:00
6ffdb884e8
Add naming extension SPIs
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2011-03-12 12:30:41 -08:00
b59a20bc1f
clarify documentation
2011-03-12 11:37:13 -08:00
ef045438c9
no support for semaphores w/o pthreads
2011-03-12 11:37:13 -08:00
cb2aa28c7d
Include <heimbase.h>
2011-03-12 11:37:12 -08:00
2caea73cef
Make prim static to prevent its being exported.
...
Having that symbol exported clobbers the namespace and makes other
apps fail, most notably pdftex. I don't believe that the symbol is in
fact intended for public use. Fixes http://bugs.gentoo.org/357235 .
2011-03-03 18:27:54 +01:00
1ec5eff475
bump version of libgssapi, from Eray Aslan
2011-02-26 13:10:06 -08:00
c5d0acb859
Correct "not newer" etypes per RFC 4121
...
Section 1 of RFC 4121 describes behavior which
applies when using "newer" etypes, then goes on in
table form to list etypes which are not newer.
While it specifies it is ok to use new token formats
when both initiator and acceptor are known to handle them,
this code makes no such verification, and encoded an
incorrect set of etypes as "not newer". Correct the list.
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2011-02-24 19:22:25 -08:00
36ade8b509
hx509: Make various functions used by Samba public.
...
* hx509_cert_public_encrypt
* hx509_parse_private_key
* hx509_private_key_assign_rsa
* hx509_private_key_free
* hx509_private_key_private_decrypt
* hx509_private_key_init
* hx509_private_key2SPKI
* hx509_request_get_name
* hx509_request_get_SubjectPublicKeyInfo
* hx509_request_free
* hx509_request_init
* hx509_request_set_name
* hx509_request_set_SubjectPublicKeyInfo
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2011-02-23 19:47:28 -08:00
1f59fe0edf
move up internal framework to avoid using already installed frameworks
2011-02-12 09:49:35 -08:00
8704b871ff
add enc-pa-rep(15) to ticket flags
2011-02-06 16:35:36 -08:00
2fb63b37e7
add KRB5_KU_AS_REQ
2011-02-06 16:35:10 -08:00
fb29123dfd
add KRB5-PADATA-REQ-ENC-PA-REP
2011-02-06 16:28:48 -08:00
7e1ba19fda
setup cfx context, found by Jaideep Padhye
2011-02-02 21:37:26 -08:00
9e1d467534
s4-heimdal: implement KERB_AP_ERR_TYPE_SKEW_RECOVERY
...
this e_data field in a kerberos error packet tells windows to do clock
skew recovery.
See [MS-KILE] 2.2.1 KERB-ERROR-DATA
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org >
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2011-01-30 11:26:31 -08:00
8ce821c387
heimdal: make some private key manipulation function public
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2011-01-26 12:03:50 -08:00
4c507594d3
heimdal: make hx509_cert_public_encrypt public
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2011-01-26 12:03:35 -08:00
995d305f8c
lib/com_err only use error_message for the exported libcom_err
...
This avoids using the same function name in compile_et internally
Andrew Bartlett
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2011-01-26 12:00:32 -08:00
4be5db6a32
define GSS_IOV_BUFFER_FLAG_ALLOCATE and friends
2011-01-18 16:49:03 +01:00
49ca1a40fa
export hx509_find_private_alg
2011-01-12 17:49:12 +01:00
d083ae19af
export hx509_private_key_ops
...
export hx509_private_key_ops
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2011-01-12 17:45:17 +01:00
21c5987018
Rename GSS_IOV_BUFFER_TYPE_FLAG to GSS_IOV_BUFFER_FLAG
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2011-01-03 13:22:57 +01:00
0b4f6bbfc2
Use RTLD_GROUP
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2011-01-03 13:21:47 +01:00
9427bcc22e
log more version numbers
2011-01-03 12:12:18 +01:00
1ad64fe599
hdb.h: Include krb5.h first, so hdb.h can be included standalone.
...
This makes it a bit easier to find libhdb in e.g. configure tests and
is consistent with the main header files for the other Heimdal
libraries, none of which has any prerequisite other headers.
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2011-01-03 11:51:09 +01:00
73769bf777
always define HEIM_SLIST
2010-12-12 11:47:45 -08:00
3c241aef9e
don't undefined SLIST
2010-12-12 11:45:53 -08:00
7c7dd8e1af
prefix SLIST with HEIM
2010-12-12 11:45:35 -08:00
7b1e954ad4
Reorder DES algs to work around MIT pre-1.8 GSS
...
Pre-1.8 MIT GSS accept_sec_context() has a bug which treats
des-cbc-md4 as if the received token format should be CFX.
The previous DES alg ordering resulted in MIT KDCs issuing
des-cbc-md4 session keys for service tickets which triggered
this bug. Reorder the list so md4 is not preferred.
Change-Id: I11269498a6eb8494044c618db29c43f62b0ced49
2010-12-07 00:28:13 -05:00
b45dd13c44
Expand path tokens for krb5.moduli
2010-12-03 17:42:42 -05:00
e4d2d78a21
Condition roken's ssize_t definition for compatibility
...
If SSIZE_T_DEFINED macro is defined, assume we already have ssize_t.
2010-12-03 01:12:32 -05:00
e0e746b1ca
Revert use of backslash as an escape for double quote in config strings
2010-12-03 01:12:31 -05:00
7ba01bda98
Deal with possibly non-const initializers
2010-12-02 01:18:03 -05:00
94aa4de1b9
Windows: Don't treat drive letters as keytab types
2010-12-02 01:18:03 -05:00
3e8172f9e3
Initialize allocated memory in any_resolve()
...
Otherwise we might attempt to free an uninitialized pointer.
2010-12-02 01:18:02 -05:00
Love Hornquist Astrand