Commit Graph

20209 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
a3f341f304 Push down the kdc time into the x509 library.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20960 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 04:48:11 +00:00
Love Hörnquist Åstrand
8b91b80a1e Remove out2, no longer used.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20959 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 04:46:06 +00:00
Love Hörnquist Åstrand
23ed41b109 Move up krb5_kdc_save_request so we can catch the reply data too.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20958 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 04:35:05 +00:00
Love Hörnquist Åstrand
4fe154b2f9 verify reply by checking asn1 class, type and tag of the reply if
there is one.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20957 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 04:34:14 +00:00
Love Hörnquist Åstrand
43a028c82a Save asn1 class, type and tag of the reply if there is one. Used to
verify the reply in kdc-replay.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20956 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 04:32:53 +00:00
Love Hörnquist Åstrand
55df27f234 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20955 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 03:30:32 +00:00
Love Hörnquist Åstrand
1902040622 extern for request_log.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20954 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 03:30:15 +00:00
Love Hörnquist Åstrand
7d1da27427 Add kdc-replay.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20953 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 03:20:22 +00:00
Love Hörnquist Åstrand
162660bade Replay kdc messages to the KDC library.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20952 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 03:19:07 +00:00
Love Hörnquist Åstrand
35a6f8ed22 Pick up request_log from [kdc]kdc-request-log.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20951 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 03:08:39 +00:00
Love Hörnquist Åstrand
44e3c4e620 Option to save the request to disk.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20950 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 03:07:42 +00:00
Love Hörnquist Åstrand
7e2f36b1d6 (krb5_kdc_save_request): save request to file.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20949 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 03:07:04 +00:00
Love Hörnquist Åstrand
01d0aa7e38 Update kdc time.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20948 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 02:20:45 +00:00
Love Hörnquist Åstrand
c42a34c36d (krb5_kdc_process*): dont update _kdc_time automagicly.
(krb5_kdc_update_time): set or get current kdc-time.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20947 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 02:20:10 +00:00
Love Hörnquist Åstrand
32ba8c49ad x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20946 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 22:17:27 +00:00
Love Hörnquist Åstrand
8456183c48 rename functions, leaks less memory and more paranoia.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20945 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 22:17:17 +00:00
Love Hörnquist Åstrand
d3f35f642c x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20944 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 22:15:34 +00:00
Love Hörnquist Åstrand
6f787893cd (_kdc_pk_rd_padata): accept both pkcs-7 and pkauthdata as the signeddata oid
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20943 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 22:14:36 +00:00
Love Hörnquist Åstrand
3d7fc2b1e7 (_kdc_pk_rd_padata): Try to log what went wrong.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20942 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 22:03:20 +00:00
Love Hörnquist Åstrand
e133dc6209 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20941 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:57:18 +00:00
Love Hörnquist Åstrand
9e01858ba1 Test cms peer-alg.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20940 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:56:54 +00:00
Love Hörnquist Åstrand
8d185f280c (rsa_create_signature): make oid_id_pkcs1_rsaEncryption mean
rsa-with-sha1 but oid oid_id_pkcs1_rsaEncryption in algorithm field.
XXX should probably use another algorithmIdentifier for this.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20939 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:53:02 +00:00
Love Hörnquist Åstrand
c8cb0753ee Make free function return void.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20938 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:51:34 +00:00
Love Hörnquist Åstrand
a93b07021f (hx509_cms_create_signed_1): Use hx509_peer_info to select the
signature algorithm too.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20937 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:50:55 +00:00
Love Hörnquist Åstrand
5c70b04159 Merge init of hx509_peer_info structure and allow it for cms-create-sd.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20936 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:49:14 +00:00
Love Hörnquist Åstrand
9d1bb9e015 Add cms-create-sd --peer-alg.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20935 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:21:54 +00:00
Love Hörnquist Åstrand
af12b5af0e Use _hx509_crypto_default_sig_alg.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20934 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 15:30:02 +00:00
Love Hörnquist Åstrand
887517a8aa Create crl, because everyone needs one.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20933 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 05:00:32 +00:00
Love Hörnquist Åstrand
70722e64f8 add wcrl.crl
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20932 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 04:47:02 +00:00
Love Hörnquist Åstrand
689c6d559a x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20931 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 00:24:35 +00:00
Love Hörnquist Åstrand
5652b93c15 Disable KEYCHAIN for now, its slow.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20930 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 00:23:42 +00:00
Love Hörnquist Åstrand
f3b2b8b19c Make sure the gethostname() returned string is NUL terminated.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20929 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 21:19:22 +00:00
Love Hörnquist Åstrand
3fdc9f718e x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20928 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 17:27:59 +00:00
Love Hörnquist Åstrand
a7169a17a6 Use oid_id_pkcs7_data for pkinit-9 encKey reply to match windows DC
behavior better.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20927 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 17:23:44 +00:00
Love Hörnquist Åstrand
dbb87065cd When we are not using pkcs7-data, avoid seing signedAttributes since
some clients get upset by that (pkcs7 based or just plain broken).


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20926 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 17:21:58 +00:00
Love Hörnquist Åstrand
7e3fbc9232 Provide rsa signatures.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20925 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 15:48:07 +00:00
Love Hörnquist Åstrand
349077b505 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20924 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 06:17:59 +00:00
Love Hörnquist Åstrand
624dc60c1b Limit the searches to the selected keychain.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20923 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 06:17:44 +00:00
Love Hörnquist Åstrand
7ba3c7c11e include -framework Security specific header files after #ifdef
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20922 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 06:05:24 +00:00
Love Hörnquist Åstrand
b14a49e02e Find and attach private key (does not provide operations yet though).
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20921 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 05:54:19 +00:00
Love Hörnquist Åstrand
0800216d7b Prefix rsa method with p11_
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20920 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 05:47:06 +00:00
Love Hörnquist Åstrand
902605872f x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20919 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 04:20:55 +00:00
Love Hörnquist Åstrand
96d0020bca x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20918 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 04:17:08 +00:00
Love Hörnquist Åstrand
a9130ec025 Allow opening a specific chain, making "system" special and be the
system X509Anchors file. By not specifing any keychain ("KEYCHAIN:"),
all keychains are probed.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20917 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 04:16:46 +00:00
Love Hörnquist Åstrand
a5c1aa04ce (verify): Friendlier error message.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20916 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:59:36 +00:00
Love Hörnquist Åstrand
8a865fee2e Read in and use default trust anchors if they exists.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20915 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:58:56 +00:00
Love Hörnquist Åstrand
31ac88517f Add concept of default_trust_anchors.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20914 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:58:24 +00:00
Love Hörnquist Åstrand
90318d31b3 Remove err(), remove extra empty comment, fix _iter function.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20913 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:57:52 +00:00
Love Hörnquist Åstrand
7761ecce3f (hx509_get_error_string): if the error code is not the one we expect,
punt and use the default com_err/strerror string instead.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20912 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:53:52 +00:00
Love Hörnquist Åstrand
43ba803237 (hx509_certs_merge): its ok to merge in the NULL set of certs.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20911 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:41:17 +00:00