Commit Graph

20155 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
43a028c82a Save asn1 class, type and tag of the reply if there is one. Used to
verify the reply in kdc-replay.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20956 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 04:32:53 +00:00
Love Hörnquist Åstrand
55df27f234 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20955 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 03:30:32 +00:00
Love Hörnquist Åstrand
1902040622 extern for request_log.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20954 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 03:30:15 +00:00
Love Hörnquist Åstrand
7d1da27427 Add kdc-replay.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20953 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 03:20:22 +00:00
Love Hörnquist Åstrand
162660bade Replay kdc messages to the KDC library.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20952 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 03:19:07 +00:00
Love Hörnquist Åstrand
35a6f8ed22 Pick up request_log from [kdc]kdc-request-log.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20951 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 03:08:39 +00:00
Love Hörnquist Åstrand
44e3c4e620 Option to save the request to disk.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20950 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 03:07:42 +00:00
Love Hörnquist Åstrand
7e2f36b1d6 (krb5_kdc_save_request): save request to file.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20949 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 03:07:04 +00:00
Love Hörnquist Åstrand
01d0aa7e38 Update kdc time.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20948 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 02:20:45 +00:00
Love Hörnquist Åstrand
c42a34c36d (krb5_kdc_process*): dont update _kdc_time automagicly.
(krb5_kdc_update_time): set or get current kdc-time.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20947 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 02:20:10 +00:00
Love Hörnquist Åstrand
32ba8c49ad x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20946 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 22:17:27 +00:00
Love Hörnquist Åstrand
8456183c48 rename functions, leaks less memory and more paranoia.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20945 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 22:17:17 +00:00
Love Hörnquist Åstrand
d3f35f642c x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20944 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 22:15:34 +00:00
Love Hörnquist Åstrand
6f787893cd (_kdc_pk_rd_padata): accept both pkcs-7 and pkauthdata as the signeddata oid
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20943 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 22:14:36 +00:00
Love Hörnquist Åstrand
3d7fc2b1e7 (_kdc_pk_rd_padata): Try to log what went wrong.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20942 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 22:03:20 +00:00
Love Hörnquist Åstrand
e133dc6209 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20941 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:57:18 +00:00
Love Hörnquist Åstrand
9e01858ba1 Test cms peer-alg.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20940 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:56:54 +00:00
Love Hörnquist Åstrand
8d185f280c (rsa_create_signature): make oid_id_pkcs1_rsaEncryption mean
rsa-with-sha1 but oid oid_id_pkcs1_rsaEncryption in algorithm field.
XXX should probably use another algorithmIdentifier for this.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20939 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:53:02 +00:00
Love Hörnquist Åstrand
c8cb0753ee Make free function return void.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20938 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:51:34 +00:00
Love Hörnquist Åstrand
a93b07021f (hx509_cms_create_signed_1): Use hx509_peer_info to select the
signature algorithm too.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20937 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:50:55 +00:00
Love Hörnquist Åstrand
5c70b04159 Merge init of hx509_peer_info structure and allow it for cms-create-sd.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20936 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:49:14 +00:00
Love Hörnquist Åstrand
9d1bb9e015 Add cms-create-sd --peer-alg.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20935 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:21:54 +00:00
Love Hörnquist Åstrand
af12b5af0e Use _hx509_crypto_default_sig_alg.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20934 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 15:30:02 +00:00
Love Hörnquist Åstrand
887517a8aa Create crl, because everyone needs one.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20933 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 05:00:32 +00:00
Love Hörnquist Åstrand
70722e64f8 add wcrl.crl
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20932 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 04:47:02 +00:00
Love Hörnquist Åstrand
689c6d559a x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20931 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 00:24:35 +00:00
Love Hörnquist Åstrand
5652b93c15 Disable KEYCHAIN for now, its slow.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20930 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 00:23:42 +00:00
Love Hörnquist Åstrand
f3b2b8b19c Make sure the gethostname() returned string is NUL terminated.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20929 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 21:19:22 +00:00
Love Hörnquist Åstrand
3fdc9f718e x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20928 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 17:27:59 +00:00
Love Hörnquist Åstrand
a7169a17a6 Use oid_id_pkcs7_data for pkinit-9 encKey reply to match windows DC
behavior better.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20927 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 17:23:44 +00:00
Love Hörnquist Åstrand
dbb87065cd When we are not using pkcs7-data, avoid seing signedAttributes since
some clients get upset by that (pkcs7 based or just plain broken).


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20926 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 17:21:58 +00:00
Love Hörnquist Åstrand
7e3fbc9232 Provide rsa signatures.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20925 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 15:48:07 +00:00
Love Hörnquist Åstrand
349077b505 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20924 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 06:17:59 +00:00
Love Hörnquist Åstrand
624dc60c1b Limit the searches to the selected keychain.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20923 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 06:17:44 +00:00
Love Hörnquist Åstrand
7ba3c7c11e include -framework Security specific header files after #ifdef
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20922 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 06:05:24 +00:00
Love Hörnquist Åstrand
b14a49e02e Find and attach private key (does not provide operations yet though).
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20921 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 05:54:19 +00:00
Love Hörnquist Åstrand
0800216d7b Prefix rsa method with p11_
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20920 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 05:47:06 +00:00
Love Hörnquist Åstrand
902605872f x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20919 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 04:20:55 +00:00
Love Hörnquist Åstrand
96d0020bca x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20918 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 04:17:08 +00:00
Love Hörnquist Åstrand
a9130ec025 Allow opening a specific chain, making "system" special and be the
system X509Anchors file. By not specifing any keychain ("KEYCHAIN:"),
all keychains are probed.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20917 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 04:16:46 +00:00
Love Hörnquist Åstrand
a5c1aa04ce (verify): Friendlier error message.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20916 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:59:36 +00:00
Love Hörnquist Åstrand
8a865fee2e Read in and use default trust anchors if they exists.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20915 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:58:56 +00:00
Love Hörnquist Åstrand
31ac88517f Add concept of default_trust_anchors.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20914 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:58:24 +00:00
Love Hörnquist Åstrand
90318d31b3 Remove err(), remove extra empty comment, fix _iter function.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20913 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:57:52 +00:00
Love Hörnquist Åstrand
7761ecce3f (hx509_get_error_string): if the error code is not the one we expect,
punt and use the default com_err/strerror string instead.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20912 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:53:52 +00:00
Love Hörnquist Åstrand
43ba803237 (hx509_certs_merge): its ok to merge in the NULL set of certs.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20911 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:41:17 +00:00
Love Hörnquist Åstrand
4b729dfdd7 Fix status string.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20910 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:27:41 +00:00
Love Hörnquist Åstrand
340dff70cb (store_func): free whole CertBag, not just the data part.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20909 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:09:13 +00:00
Love Hörnquist Åstrand
9e262359f2 Check that the self-signed cert is really self-signed.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20908 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 02:59:33 +00:00
Love Hörnquist Åstrand
6623ac6441 Use selfsigned for CRL DP whine, tell if its a self-signed.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20907 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 02:28:18 +00:00