Love Hornquist Astrand
77ecef0327
tell where kafs will search for files, from Harald Barth
2009-10-06 09:27:46 -07:00
Love Hornquist Astrand
57b40643b9
use server name for referral decision
2009-10-06 07:38:29 -07:00
Love Hornquist Astrand
ceac2815bb
Just use RAND_bytes() for generating random bytes
2009-10-06 06:00:24 -07:00
Love Hornquist Astrand
75a61b8842
krb5_build_authenticator is private
2009-10-05 22:09:23 -07:00
Love Hornquist Astrand
6d1d17efed
don't canonicalize names that are short then 2 name element
...
Since KDC will probably guess wrong on them, and doing
afs@CLIENT-REALM have too large change of actually working.
2009-10-05 22:07:47 -07:00
Love Hornquist Astrand
d7e7640d46
fix argumentin doxygen
2009-10-05 20:29:37 -07:00
Love Hornquist Astrand
a132ffe757
Simplify krb5_build_authenticator and unexport
2009-10-05 19:52:28 -07:00
Love Hornquist Astrand
cc65dc4e8e
Just make a copy of the cksum instead of trying to work around the
...
fact that its not really copied.
2009-10-05 19:25:46 -07:00
Love Hornquist Astrand
753e2cc925
Check that enctypes are valid/enabled before trying to request them
2009-10-05 19:17:11 -07:00
Love Hornquist Astrand
0d10dfb529
doxygen
2009-10-04 11:33:45 -07:00
Love Hornquist Astrand
b0f73165a7
use krb5_make_principal
2009-10-04 11:29:54 -07:00
Love Hornquist Astrand
9e13b309d9
use krb5_make_principal
2009-10-04 11:29:43 -07:00
Love Hornquist Astrand
dc31556b7d
use krb5_generate_subkey_extended
2009-10-04 11:12:43 -07:00
Love Hornquist Astrand
4f6759157b
move krb5_generate_subkey to deprecated and provide doxygen
2009-10-04 11:02:44 -07:00
Love Hornquist Astrand
615820b0af
move krb5_generate_subkey here and deprecate
2009-10-04 11:02:43 -07:00
Love Hornquist Astrand
ff87429593
Make LDAP code fetch less attributes from LDAP server when KDC is asking
...
Johan Gadsjö did a awesome analysis of the LDAP access pattens
and sent us a patch that reduced the calls the ldap server by 4
times as many. The patch was adopted and change to avoid compile
time depencies and make the determination runtime instead. Thanks!
2009-10-03 13:20:41 -07:00
Love Hornquist Astrand
4b79b6fa57
remove unused variable
...
Based on a report from Matthias Dieter Wallnöfer.
2009-10-03 11:38:55 -07:00
Love Hornquist Astrand
7b999148f8
Rename str to oid in the function namespace to avoid -Wshadow warning
...
Based on a report from Matthias Dieter Wallnöfer.
2009-10-03 11:35:45 -07:00
Love Hornquist Astrand
ce0293b994
Rename f to ksf in the global function namespace to avoid -Wshadow warning
...
Based on a report from Matthias Dieter Wallnöfer.
2009-10-03 11:33:41 -07:00
Love Hornquist Astrand
64835d0836
Rename header to print_pem_stamp in the global namespace to avoid -Wshadow warning
...
Based on a report from Matthias Dieter Wallnöfer.
2009-10-03 11:24:03 -07:00
Love Hornquist Astrand
100c440153
Handle windows windows LH with interesting content info packets (broken)
2009-10-01 10:38:30 -07:00
Love Hornquist Astrand
7eac18abc3
verify that n0ll cert is broken
2009-09-30 01:20:38 -07:00
Love Hornquist Astrand
24f9a30864
reference to where cert comes from
2009-09-30 01:20:25 -07:00
Love Hornquist Astrand
824ac40a10
add data/n0ll.pem
2009-09-30 01:18:34 -07:00
Love Hornquist Astrand
b17ad58fe5
n0ll names check
2009-09-30 01:18:04 -07:00
Love Hornquist Astrand
d4e2da58cf
count certs that verify and if no verify at all, whine
2009-09-30 01:17:50 -07:00
Love Hornquist Astrand
215b3813f6
teletexString is now a real string type
2009-09-30 00:54:13 -07:00
Love Hornquist Astrand
4d06f484ec
implement TeletexString
2009-09-30 00:48:18 -07:00
Love Hornquist Astrand
0b144cdf8d
implement teletexstring
2009-09-30 00:47:39 -07:00
Love Hornquist Astrand
18f2c32463
make _krb5_pk_set_user_id update ->cert too
2009-09-29 14:27:47 -07:00
Love Hornquist Astrand
2064ee1a37
Wrap rc2 with COMMONCRYPTO_SUPPORTS_RC2 since its not suported on Leopard
2009-09-29 13:21:16 -07:00
Love Hornquist Astrand
91e067e925
Use hx509_context that build from krb5_context
2009-09-29 13:14:20 -07:00
Love Hornquist Astrand
1e65f30a2d
drop hx509_context in krb5_id
2009-09-29 13:13:51 -07:00
Love Hornquist Astrand
1ac50627e6
add forward decl for hx509_certs_data
2009-09-29 11:29:20 -07:00
Love Hornquist Astrand
a95f16503e
load hx509 context
2009-09-29 11:29:02 -07:00
Love Hornquist Astrand
682e7e012c
export hx509_certs_ref
2009-09-29 11:28:24 -07:00
Love Hornquist Astrand
0e762f8689
support output passphrases for copy certificate
2009-09-29 11:28:12 -07:00
Love Hornquist Astrand
50de7c4203
(hx509_lock_free): allow freeing NULL
2009-09-29 11:12:32 -07:00
Love Hornquist Astrand
a610d28727
Add _krb5_get_init_creds_opt_set_pkinit_user_certs
2009-09-29 11:11:04 -07:00
Love Hornquist Astrand
97a511457f
kinit helpers
2009-09-29 11:10:41 -07:00
Love Hornquist Astrand
17cd6e2d5f
Use hx509_certs_ref()
2009-09-29 09:58:47 -07:00
Love Hornquist Astrand
ec47674c2b
expose hx509_certs_ref
2009-09-29 09:42:15 -07:00
Love Hornquist Astrand
61cc35b83b
include hx509_context in krb5_context
2009-09-29 09:23:37 -07:00
Love Hornquist Astrand
f7bde058ee
Include dirfd for AIX too
...
From Anton Lundin
2009-09-29 08:56:07 -07:00
Love Hornquist Astrand
ec263fc5a4
reading negative size is wrong, zero is ok
2009-09-25 14:53:31 -07:00
Love Hornquist Astrand
9bace01559
Check for malloc(0) to make AIX happy
...
Prompted by [HEIMDAL-646] by Anton Lundin
2009-09-24 07:32:35 -07:00
Love Hornquist Astrand
f8b06809a1
export _et_list, report by Barry Sia
2009-09-23 16:23:04 -07:00
Love Hornquist Astrand
92075b8825
add allow wrong oid flag, short for trust anchors
2009-09-23 00:02:46 -07:00
Love Hornquist Astrand
6b3fb1c674
drop $Id$
2009-09-21 19:15:00 -07:00
Love Hornquist Astrand
2ef2c451a4
drop $Id$
2009-09-21 19:14:50 -07:00
