Love Hörnquist Åstrand
52e365482b
Split encryption and s2k iterations to diffrent counters, 38seconds of
...
aes256 s2k is way too long.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16290 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-11-24 09:57:50 +00:00
Love Hörnquist Åstrand
2f31564fc4
Add timing code for s2k function.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16289 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-11-24 09:54:49 +00:00
Love Hörnquist Åstrand
d28785e212
Change sematics of ok-as-delegate to match windows if
...
[gssapi]realm/ok-as-delegate=true is set, otherwise keep old sematics.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16283 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-11-02 11:52:49 +00:00
Love Hörnquist Åstrand
6ece760454
(gss_release_cred): use GSS_CF_DESTROY_CRED_ON_RELEASE to decide if
...
the cache should be krb5_cc_destroy-ed
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16282 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-11-02 08:57:35 +00:00
Love Hörnquist Åstrand
f0dc59770a
(acquire_initiator_cred): GSS_CF_DESTROY_CRED_ON_RELEASE on created credentials.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16281 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-11-02 08:56:25 +00:00
Love Hörnquist Åstrand
2a0d1e1d88
(gsskrb5_accept_delegated_token): rewrite to use gss_krb5_import_ccache
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16280 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-11-02 08:55:19 +00:00
Love Hörnquist Åstrand
6879aaef09
(gss_cred_id_t_desc_struct): add field cred_flags
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16279 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-11-02 08:51:17 +00:00
Love Hörnquist Åstrand
52bb24b476
s/RFC2140/RFC4120/ From Andrew Bartlet
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16278 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-11-02 08:36:42 +00:00
Love Hörnquist Åstrand
d7396a3cea
(gss_krb5_import_ccache): Use krb5_cc_get_full_name.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16275 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-11-01 09:41:59 +00:00
Love Hörnquist Åstrand
333284ed2e
Document krb5_cc_get_full_name.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16274 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-11-01 09:40:23 +00:00
Love Hörnquist Åstrand
91f8f1ce51
(krb5_cc_get_full_name): Add
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16273 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-11-01 09:36:41 +00:00
Love Hörnquist Åstrand
70ec67ed73
Remove signedness warnings.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16270 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-11-01 06:55:55 +00:00
Love Hörnquist Åstrand
7f2110c0ba
x
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16269 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-31 16:07:59 +00:00
Love Hörnquist Åstrand
069a5f19a2
Document that gss_krb5_import_ccache is copy by reference.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16268 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-31 16:07:23 +00:00
Love Hörnquist Åstrand
4cc93f5d2e
(gss_krb5_import_ccache): Instead of making a copy of the ccache, make
...
a reference by getting the name and resolving the name. This way the
cache is shared, this flipp side is of course that if someone calls
krb5_cc_destroy the cache is lost for everyone.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16267 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-31 16:02:08 +00:00
Love Hörnquist Åstrand
d4a3ad2adf
x
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16266 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-31 15:59:30 +00:00
Love Hörnquist Åstrand
3cf6e96dbb
Remove memory leaks.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16265 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-31 15:59:11 +00:00
Love Hörnquist Åstrand
c71a749176
Support DSA signature operations.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16258 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-29 10:59:21 +00:00
Love Hörnquist Åstrand
0e80fef74a
x
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16257 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-29 10:57:46 +00:00
Love Hörnquist Åstrand
027488e89f
Add some X9.57 (DSA) oids, sort lines
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16256 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-29 10:57:14 +00:00
Love Hörnquist Åstrand
0143ed18c7
Add some X9.57 (DSA) oids.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16255 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-29 10:55:52 +00:00
Love Hörnquist Åstrand
cfcfa2ad3f
Add some more tests.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16254 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-28 14:24:07 +00:00
Love Hörnquist Åstrand
6f657ec556
allow breaking early, print a dot for each certificate that is processed.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16253 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-28 14:16:23 +00:00
Love Hörnquist Åstrand
7f3c73aaec
Add all nist certificates.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16252 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-28 14:08:41 +00:00
Love Hörnquist Åstrand
ac8e06b969
Print that it started, it takes a while...
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16251 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-28 14:08:13 +00:00
Love Hörnquist Åstrand
c62dae6184
control data to drive the NIST tests
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16250 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-27 19:09:26 +00:00
Love Hörnquist Åstrand
f1a89fb37f
Use NIST test certificates to test the x509 stack.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16249 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-27 19:04:33 +00:00
Love Hörnquist Åstrand
881e730620
Spelling.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16248 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-27 13:21:42 +00:00
Love Hörnquist Åstrand
9b2fa77b4d
(krb5_ticket_get_authorization_data_type): understand
...
KRB5_AUTHDATA_IF_RELEVANT and KRB5_AUTHDATA_AND_OR (but have
KRB5_AUTHDATA_KDC_ISSUED commented out for now)
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16247 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-27 13:18:25 +00:00
Love Hörnquist Åstrand
085f3eb85c
x
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16244 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-26 11:30:26 +00:00
Love Hörnquist Åstrand
c55b53060b
build test_kcred
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16243 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-26 11:30:12 +00:00
Love Hörnquist Åstrand
b742a50cf7
Document gss_krb5_import_ccache
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16242 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-26 11:29:34 +00:00
Love Hörnquist Åstrand
780dc8dd41
Sort and add gss_krb5_import_ccache.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16241 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-26 11:26:55 +00:00
Love Hörnquist Åstrand
8980a47d4a
x
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16240 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-26 11:25:34 +00:00
Love Hörnquist Åstrand
a5755046b4
(_gssapi_krb5_ccache_lifetime): break out code used to extract
...
lifetime from a credential cache
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16239 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-26 11:25:16 +00:00
Love Hörnquist Åstrand
fc4f134e26
Add _gssapi_krb5_ccache_lifetime, used to extract lifetime from a
...
credential cache.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16238 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-26 11:23:48 +00:00
Love Hörnquist Åstrand
4084884d71
add gss_krb5_import_ccache, reverse of gss_krb5_copy_ccache
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16237 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-26 11:22:13 +00:00
Love Hörnquist Åstrand
afd104d9cd
test gss_krb5_import_ccache
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16236 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-26 11:19:41 +00:00
Love Hörnquist Åstrand
65447e1a4b
Install krb5_set_password.3, Johnny Lam <jlam@pkgsrc.org>
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16230 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-26 09:08:18 +00:00
Love Hörnquist Åstrand
9319b9dce1
Fix mdoc for krb5_encrypt_EncryptedData, Johnny Lam <jlam@pkgsrc.org>
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16229 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-26 08:50:09 +00:00
Love Hörnquist Åstrand
b62b7a569e
More verbose errors.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16228 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-25 19:41:32 +00:00
Love Hörnquist Åstrand
993ae3a82f
(_krb5_dh_group_ok): if not enough bits are generated from the DH groups, fail.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16211 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-21 17:18:38 +00:00
Love Hörnquist Åstrand
b3da510397
x
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16206 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-21 12:44:33 +00:00
Love Hörnquist Åstrand
bc4a1da9c6
(acquire_initiator_cred): use krb5_cc_cache_match to find a matching
...
creditial cache, if that failes, fallback to the default cache.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16205 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-21 12:44:08 +00:00
Love Hörnquist Åstrand
19a7595ae2
x
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16202 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-20 16:57:27 +00:00
Love Hörnquist Åstrand
256cf0f403
Remove untested patch that sneaked in.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16201 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-20 14:59:20 +00:00
Love Hörnquist Åstrand
8de40c5202
Add k_hasafs_recheck.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16200 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-20 14:53:01 +00:00
Love Hörnquist Åstrand
156ee39478
(k_hasafs_recheck): new function, allow rechecking if AFS client have
...
started now, internaly it resets the internal state from k_hasafs()
and retry retry the probing. The problem with calling k_hasaf() is
that is plays around with signals, and that cases problem for some
systems/applications.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16199 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-20 14:52:18 +00:00
Love Hörnquist Åstrand
8a06dac4ff
Add option to require binding between reply and response.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16196 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-20 09:29:19 +00:00
Love Hörnquist Åstrand
79146c3e71
Try both ReplyKey and ReplyKey-Win2k for the Windows case to support
...
the updated -09 protocol (using asChecksum). Tell KDC we support this
by sending KRB5-PADATA-PK-AS-09-BINDING in the pa-data.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16192 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-19 21:15:41 +00:00