Commit Graph

2487 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
1d9702acee try handle ts preauth better, still not good, but at least it work
with older heimdal releases that doesn't send back
KRB5KDC_ERR_PREAUTH_REQUIRED when preauth was sent


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13226 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-12-17 20:44:37 +00:00
Love Hörnquist Åstrand
bc7413ea31 (_krb5_pk_create_sign): fill in NULL as parameters, required by CMS
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13206 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-12-11 08:59:07 +00:00
Love Hörnquist Åstrand
97c31914c0 add krb5_auth_con_{add,remove}flags
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13203 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-12-07 22:52:57 +00:00
Love Hörnquist Åstrand
aef8b69dc6 (krb5_get_in_tkt_with_keytab): avoid memory leak that snuck in when
krb5_keytab_key_proc was exported, pointed out by Panases Inc


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13197 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-12-07 18:52:49 +00:00
Love Hörnquist Åstrand
94fde1ea7a (_krb5_xlock): fix compile error in last commit
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13196 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-12-07 18:43:15 +00:00
Love Hörnquist Åstrand
11dce94342 do locking, found to be a problem for Panasas Inc
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13193 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-12-07 18:09:26 +00:00
Love Hörnquist Åstrand
a561725fdd internally export x{,un}lock and thus prefix them with _krb5_
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13192 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-12-07 18:05:42 +00:00
Love Hörnquist Åstrand
fd226be1f3 (krb5_get_forwarded_creds): use KRB5_AUTH_CONTEXT_DO_TIME if we want
timestamp in forwarded krb-cred


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13191 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-12-07 17:17:50 +00:00
Love Hörnquist Åstrand
da06a5604a update Dd
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13189 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-12-07 17:09:51 +00:00
Love Hörnquist Åstrand
24e6123e23 some text about krb5_auth_con_{add,remove}flags
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13188 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-12-07 17:09:09 +00:00
Love Hörnquist Åstrand
2647105cbe add krb5_auth_con_addflags and krb5_auth_con_removeflags
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13187 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-12-07 17:07:26 +00:00
Love Hörnquist Åstrand
dc82ab8fa2 (decrypt_internal_derived): move up padsize to avoid memory leak
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13178 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-12-03 13:07:41 +00:00
Love Hörnquist Åstrand
84ca0906cd require cipher-text to be padded to padsize
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13174 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-12-02 16:32:25 +00:00
Love Hörnquist Åstrand
446442bdf2 EAI_ADDRFAMILY and EAI_NODATA is deprecated in RFC3493
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13171 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-12-02 11:32:22 +00:00
Love Hörnquist Åstrand
c8e6b409c1 (check_host): don't check for EAI_NODATA, because its depricated in RFC3493
Pointed out by Hajimu UMEMOTO <ume@mahoroba.org> on heimdal-discuss


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13168 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-12-02 11:25:01 +00:00
Love Hörnquist Åstrand
6d4640ff58 move test_crypto to noinst_PROGRAMS
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13166 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-12-01 17:33:47 +00:00
Love Hörnquist Åstrand
3676f25630 add --version,--help
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13165 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-12-01 17:32:43 +00:00
Love Hörnquist Åstrand
456f102612 tweek to make pkinit work with the fact the asn1_compile can't
generate code for context tagless optionals


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13159 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-26 00:46:02 +00:00
Love Hörnquist Åstrand
b3b050fa31 clean up error handling, make enc-type work again
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13157 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-25 23:26:58 +00:00
Love Hörnquist Åstrand
9b2795abd8 make PKINIT DH support work
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13154 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-25 10:53:20 +00:00
Love Hörnquist Åstrand
c90cadbe73 make pkinit_win2k_compatible into a flag field
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13148 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-24 06:14:53 +00:00
Love Hörnquist Åstrand
aff1525106 remove most compile depencies
clean up


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13147 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-24 06:13:37 +00:00
Love Hörnquist Åstrand
e3c2965c74 fix bugs, improve error reporting
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13140 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-24 04:10:00 +00:00
Love Hörnquist Åstrand
8f1d37e688 clean up, make remove depenency on openssl's api
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13138 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-23 23:43:27 +00:00
Love Hörnquist Åstrand
d601b85bd3 add some glue for pkinit
add reference counter to _krb5_get_init_creds_opt_private


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13137 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-23 23:40:23 +00:00
Love Hörnquist Åstrand
9c1ceb2050 reference count krb5_get_init_creds_opt private component to avoid
copy all the data in it


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13136 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-23 23:38:02 +00:00
Love Hörnquist Åstrand
0cb92c7056 (AES_string_to_key): fix memory leak
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13135 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-23 22:06:34 +00:00
Love Hörnquist Åstrand
5c2a1917c0 (init_cred_loop): fix memory leak
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13134 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-23 21:17:52 +00:00
Love Hörnquist Åstrand
b4fc4e3eb4 include pthread.h in the pthread case
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13133 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-23 20:16:50 +00:00
Love Hörnquist Åstrand
43d74c9d79 (TESTS): add test_crypto
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13120 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-15 07:04:17 +00:00
Love Hörnquist Åstrand
1c791de2da time crypto operations
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13119 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-15 06:49:20 +00:00
Love Hörnquist Åstrand
f0e00bfd8d (krb5_verify_ap_req2): krb5_free_ticket free the ticket now, rewrite
error handling to handle that


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13108 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-09 01:28:01 +00:00
Love Hörnquist Åstrand
3d146065c3 (krb5_free_ticket): free the ticket itself to match mit behavior,
pointed out by Derrick Brashear


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13102 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-09 00:53:12 +00:00
Love Hörnquist Åstrand
52330937a3 krb5_free_ticket free the whole ticket
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13101 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-09 00:48:40 +00:00
Love Hörnquist Åstrand
c8d290d46d add krb5_padata_add
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13098 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-08 09:36:35 +00:00
Love Hörnquist Åstrand
5e15b4e031 krb5_context_data.pkinit_win2k_compatible
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13097 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-08 09:34:54 +00:00
Love Hörnquist Åstrand
8260bb511d add pkinit.c
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13096 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-08 09:32:47 +00:00
Love Hörnquist Åstrand
61cd5b101e add support for pkinit
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13093 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-08 08:52:07 +00:00
Love Hörnquist Åstrand
bb6a4a2b80 rename krb5_pk_init_openssl_ctx to krb5_pk_init_ctx
fix win2k error handling


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13092 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-08 08:49:02 +00:00
Love Hörnquist Åstrand
acc61addac make compile again
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13091 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-08 08:46:58 +00:00
Love Hörnquist Åstrand
f955c2a095 add the opaque krb5_pk_init_ctx to _krb5_get_init_creds_opt_private
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13090 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-08 08:42:03 +00:00
Love Hörnquist Åstrand
0c7a0277a1 PKINIT patch from Daniel Kouril and Petr Holub, I removed the
dependency on valicert asn1 parser, remove smartcard and globus
support (for now). Work to be done on this: DH support, Globus
support, Smartcard support, windows support (MS implements -09 of the
draft), verify that it conforms the new draft


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13089 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-11-08 08:32:11 +00:00
Johan Danielsson
7448fcfe7c document capaths section
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13077 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-27 11:14:55 +00:00
Love Hörnquist Åstrand
731fab1b47 (krb5_domain_x500_encode): always zero out encoding to make sure it
have a defined value on failure


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13066 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-22 06:04:35 +00:00
Love Hörnquist Åstrand
4cd19e3fe3 (krb5_domain_x500_encode): if num_realms == 0, set encoding and return
(avoids malloc(0)), check return value for malloc


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13062 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-21 23:06:50 +00:00
Johan Danielsson
da0880581b [capaths] section
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13040 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-21 11:59:16 +00:00
Love Hörnquist Åstrand
b446b9833f (krb5_domain_x500_decode): set *num_realms to zero not num_realms
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13033 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-21 10:16:39 +00:00
Johan Danielsson
88e4f61f85 (krb5_decrypt_ticket): try to verify transited realms, unless the
transited-policy-checked flag is set


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13026 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-20 16:43:30 +00:00
Johan Danielsson
df034198d5 (krb5_domain_x500_decode): handle zero length tr data;
(krb5_check_transited): new function that does more useful stuff


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13025 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-20 16:41:27 +00:00
Johan Danielsson
e7a40f2d44 get capath info from [capaths] section
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13024 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-10-20 16:40:14 +00:00