Commit Graph

222 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
ac802945fa Pick cert upfront, so that we know that we are using an ECDSA cert and
should use ECDH for the key exchange.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24706 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-14 20:14:26 +00:00
Love Hörnquist Åstrand
e2413291b1 Move DH code out of the common path.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24700 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-14 20:13:28 +00:00
Love Hörnquist Åstrand
237cc964d3 Make ECDH work
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24699 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-14 20:13:15 +00:00
Love Hörnquist Åstrand
0222c98eaa Make ECDH work.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24698 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-14 20:13:05 +00:00
Love Hörnquist Åstrand
adba9c066a Create key and assign group before starting to parse.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24694 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-14 20:12:23 +00:00
Love Hörnquist Åstrand
5585a2b58b use variable instead of oid function
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24693 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-14 04:17:57 +00:00
Love Hörnquist Åstrand
651fe508c0 ECDH bits, still need negotiation
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24686 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-14 04:16:44 +00:00
Love Hörnquist Åstrand
12a7a9e488 Prepare for ECDH.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24638 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-07 04:06:43 +00:00
Love Hörnquist Åstrand
62a968de1b Add _krb5_pk_enterprise_cert that figures out the enterprise name to
use for PK-INIT from the certs.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24616 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-04 22:10:31 +00:00
Love Hörnquist Åstrand
a1ef548600 Anonymous pkinit support.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24594 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-04 22:06:52 +00:00
Love Hörnquist Åstrand
6dbf91d7e3 send supportedCMSTypes
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24217 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-18 05:01:15 +00:00
Love Hörnquist Åstrand
6811c7dce6 add BTMM style pkinit reply
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24210 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-18 05:00:07 +00:00
Love Hörnquist Åstrand
daa7c34ab3 turn off supportedCMSTypes for now, allow kdc not sending correct certs
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24206 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-15 04:33:09 +00:00
Love Hörnquist Åstrand
dc7cea0417 add flags to hx509_cms_verify_signed
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24193 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-15 04:31:03 +00:00
Love Hörnquist Åstrand
e2f40cd57f free only lock on existance, cid#53
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24145 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-11 05:07:25 +00:00
Love Hörnquist Åstrand
f317fa98cf check the right variable for mallocation failure, cid#9
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24139 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-11 05:06:24 +00:00
Love Hörnquist Åstrand
e83545e8f0 release m1, cid#117e
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24138 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-11 05:06:14 +00:00
Love Hörnquist Åstrand
e6f8e55360 better language in error, make nounce more random
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24052 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-11-29 19:34:11 +00:00
Love Hörnquist Åstrand
f01ccbab8d no pkinit, means no pkinit, not ever for the kdc
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23970 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-10-26 18:23:11 +00:00
Love Hörnquist Åstrand
03babea1e3 switch to krb5_clear_error_message
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23911 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-10-14 02:55:39 +00:00
Love Hörnquist Åstrand
6937d41a02 remove trailing whitespace
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23815 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-09-13 09:21:03 +00:00
Love Hörnquist Åstrand
e172367898 switch to utf8 encoding of all files
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23814 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-09-13 08:53:55 +00:00
Love Hörnquist Åstrand
758449c3f1 N_()ify
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23792 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-09-07 21:30:37 +00:00
Love Hörnquist Åstrand
734a7cdf4f return whatever krb5_copy_data returnd
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23507 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-08-11 10:00:33 +00:00
Love Hörnquist Åstrand
ae31169249 close-on-exec
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23450 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-07-27 12:10:10 +00:00
Love Hörnquist Åstrand
7fcd266fdd use krb5_set_error_message
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23316 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-06-23 04:32:32 +00:00
Love Hörnquist Åstrand
3020b22d4d use krb5_set_error_message
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23301 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-06-23 03:29:30 +00:00
Love Hörnquist Åstrand
7629345563 pass time time now to hx509_cms_unenvelope
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23271 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-06-23 03:24:35 +00:00
Love Hörnquist Åstrand
bb3c231225 Cast krb5_error_code to int to avoid warning.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22990 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-04-15 15:55:16 +00:00
Love Hörnquist Åstrand
ccd66600f5 Rename the pkinit type enum.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22919 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-04-08 08:17:14 +00:00
Love Hörnquist Åstrand
459b3f0a69 Drop krb5_pk_identity and rename constants to match global header.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22911 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-04-08 08:16:44 +00:00
Love Hörnquist Åstrand
3394928100 Move _krb5_pk_copy_error() within #ifdef (from Björn Schlögl) and
rename to pk_copy_error


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22775 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-25 10:03:31 +00:00
Love Hörnquist Åstrand
0968e71694 Try searchin the key by to use by first looking for for PK-INIT
EKU, then the Microsoft smart card EKU and last, no special EKU at all.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22673 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-10 15:00:05 +00:00
Love Hörnquist Åstrand
dc2db77898 Replace hx509_name_to_der_name with hx509_name_binary.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22433 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-01-13 14:11:46 +00:00
Love Hörnquist Åstrand
e470de122e Adapt to changes in hx509 interface.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22227 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-12-08 21:39:14 +00:00
Love Hörnquist Åstrand
188a94b93a fix spelling.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21683 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-07-23 22:19:39 +00:00
Love Hörnquist Åstrand
c092ca9238 Add RFC3526 modp group14 as a default.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21681 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-07-23 22:18:08 +00:00
Love Hörnquist Åstrand
7ce6be4012 drop internal flags that was impossile to set.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21425 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-07-10 11:52:00 +00:00
Love Hörnquist Åstrand
42c349839d Use hx509_cms_unwrap_ContentInfo.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21321 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-26 05:21:56 +00:00
Love Hörnquist Åstrand
6ef8b2861b Adapt to hx509_verify_hostname change.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21270 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-24 19:26:50 +00:00
Love Hörnquist Åstrand
6a7734667a (_krb5_pk_load_id): fail directoy for first calloc.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21133 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-18 20:52:29 +00:00
Love Hörnquist Åstrand
14537be0f4 (get_reply_key*): don't expose freed memory
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21132 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-18 20:49:42 +00:00
Love Hörnquist Åstrand
b1f3eb8118 (pk_rd_pa_reply_enckey): simplify handling of content data (and avoid
leaking memory).


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21109 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-18 10:49:08 +00:00
Love Hörnquist Åstrand
347f286c8b Commit workaround for LH (disabled).
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21091 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-14 01:08:37 +00:00
Love Hörnquist Åstrand
582a9d3c06 update (c)
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21064 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-12 18:00:11 +00:00
Love Hörnquist Åstrand
9df9f6a9da revert 21003
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21004 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-08 01:53:10 +00:00
Love Hörnquist Åstrand
12df8538af use "roken.h" consitantly
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21003 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-08 01:42:05 +00:00
Love Hörnquist Åstrand
9fe3a53f6d Allow turning off sending trustedCertifiers in the request.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20752 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-05-31 20:58:07 +00:00
Love Hörnquist Åstrand
d76d52e01d (_krb5_get_init_creds_opt_free_pkinit): remember to free memory too.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20433 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-04-19 13:20:18 +00:00
Love Hörnquist Åstrand
2af2d575a3 (pk_rd_pa_reply_dh): free content-type when done.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20431 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-04-19 13:13:51 +00:00