Commit Graph

7922 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
52e365482b Split encryption and s2k iterations to diffrent counters, 38seconds of
aes256 s2k is way too long.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16290 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-11-24 09:57:50 +00:00
Love Hörnquist Åstrand
2f31564fc4 Add timing code for s2k function.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16289 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-11-24 09:54:49 +00:00
Love Hörnquist Åstrand
d28785e212 Change sematics of ok-as-delegate to match windows if
[gssapi]realm/ok-as-delegate=true is set, otherwise keep old sematics.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16283 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-11-02 11:52:49 +00:00
Love Hörnquist Åstrand
6ece760454 (gss_release_cred): use GSS_CF_DESTROY_CRED_ON_RELEASE to decide if
the cache should be krb5_cc_destroy-ed


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16282 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-11-02 08:57:35 +00:00
Love Hörnquist Åstrand
f0dc59770a (acquire_initiator_cred): GSS_CF_DESTROY_CRED_ON_RELEASE on created credentials.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16281 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-11-02 08:56:25 +00:00
Love Hörnquist Åstrand
2a0d1e1d88 (gsskrb5_accept_delegated_token): rewrite to use gss_krb5_import_ccache
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16280 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-11-02 08:55:19 +00:00
Love Hörnquist Åstrand
6879aaef09 (gss_cred_id_t_desc_struct): add field cred_flags
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16279 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-11-02 08:51:17 +00:00
Love Hörnquist Åstrand
52bb24b476 s/RFC2140/RFC4120/ From Andrew Bartlet
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16278 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-11-02 08:36:42 +00:00
Love Hörnquist Åstrand
d7396a3cea (gss_krb5_import_ccache): Use krb5_cc_get_full_name.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16275 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-11-01 09:41:59 +00:00
Love Hörnquist Åstrand
333284ed2e Document krb5_cc_get_full_name.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16274 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-11-01 09:40:23 +00:00
Love Hörnquist Åstrand
91f8f1ce51 (krb5_cc_get_full_name): Add
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16273 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-11-01 09:36:41 +00:00
Love Hörnquist Åstrand
70ec67ed73 Remove signedness warnings.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16270 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-11-01 06:55:55 +00:00
Love Hörnquist Åstrand
7f2110c0ba x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16269 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-31 16:07:59 +00:00
Love Hörnquist Åstrand
069a5f19a2 Document that gss_krb5_import_ccache is copy by reference.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16268 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-31 16:07:23 +00:00
Love Hörnquist Åstrand
4cc93f5d2e (gss_krb5_import_ccache): Instead of making a copy of the ccache, make
a reference by getting the name and resolving the name. This way the
cache is shared, this flipp side is of course that if someone calls
krb5_cc_destroy the cache is lost for everyone.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16267 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-31 16:02:08 +00:00
Love Hörnquist Åstrand
d4a3ad2adf x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16266 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-31 15:59:30 +00:00
Love Hörnquist Åstrand
3cf6e96dbb Remove memory leaks.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16265 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-31 15:59:11 +00:00
Love Hörnquist Åstrand
c71a749176 Support DSA signature operations.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16258 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-29 10:59:21 +00:00
Love Hörnquist Åstrand
0e80fef74a x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16257 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-29 10:57:46 +00:00
Love Hörnquist Åstrand
027488e89f Add some X9.57 (DSA) oids, sort lines
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16256 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-29 10:57:14 +00:00
Love Hörnquist Åstrand
0143ed18c7 Add some X9.57 (DSA) oids.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16255 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-29 10:55:52 +00:00
Love Hörnquist Åstrand
cfcfa2ad3f Add some more tests.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16254 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-28 14:24:07 +00:00
Love Hörnquist Åstrand
6f657ec556 allow breaking early, print a dot for each certificate that is processed.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16253 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-28 14:16:23 +00:00
Love Hörnquist Åstrand
7f3c73aaec Add all nist certificates.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16252 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-28 14:08:41 +00:00
Love Hörnquist Åstrand
ac8e06b969 Print that it started, it takes a while...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16251 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-28 14:08:13 +00:00
Love Hörnquist Åstrand
c62dae6184 control data to drive the NIST tests
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16250 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-27 19:09:26 +00:00
Love Hörnquist Åstrand
f1a89fb37f Use NIST test certificates to test the x509 stack.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16249 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-27 19:04:33 +00:00
Love Hörnquist Åstrand
881e730620 Spelling.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16248 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-27 13:21:42 +00:00
Love Hörnquist Åstrand
9b2fa77b4d (krb5_ticket_get_authorization_data_type): understand
KRB5_AUTHDATA_IF_RELEVANT and KRB5_AUTHDATA_AND_OR (but have
KRB5_AUTHDATA_KDC_ISSUED commented out for now)


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16247 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-27 13:18:25 +00:00
Love Hörnquist Åstrand
085f3eb85c x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16244 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-26 11:30:26 +00:00
Love Hörnquist Åstrand
c55b53060b build test_kcred
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16243 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-26 11:30:12 +00:00
Love Hörnquist Åstrand
b742a50cf7 Document gss_krb5_import_ccache
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16242 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-26 11:29:34 +00:00
Love Hörnquist Åstrand
780dc8dd41 Sort and add gss_krb5_import_ccache.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16241 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-26 11:26:55 +00:00
Love Hörnquist Åstrand
8980a47d4a x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16240 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-26 11:25:34 +00:00
Love Hörnquist Åstrand
a5755046b4 (_gssapi_krb5_ccache_lifetime): break out code used to extract
lifetime from a credential cache


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16239 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-26 11:25:16 +00:00
Love Hörnquist Åstrand
fc4f134e26 Add _gssapi_krb5_ccache_lifetime, used to extract lifetime from a
credential cache.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16238 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-26 11:23:48 +00:00
Love Hörnquist Åstrand
4084884d71 add gss_krb5_import_ccache, reverse of gss_krb5_copy_ccache
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16237 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-26 11:22:13 +00:00
Love Hörnquist Åstrand
afd104d9cd test gss_krb5_import_ccache
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16236 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-26 11:19:41 +00:00
Love Hörnquist Åstrand
65447e1a4b Install krb5_set_password.3, Johnny Lam <jlam@pkgsrc.org>
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16230 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-26 09:08:18 +00:00
Love Hörnquist Åstrand
9319b9dce1 Fix mdoc for krb5_encrypt_EncryptedData, Johnny Lam <jlam@pkgsrc.org>
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16229 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-26 08:50:09 +00:00
Love Hörnquist Åstrand
b62b7a569e More verbose errors.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16228 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-25 19:41:32 +00:00
Love Hörnquist Åstrand
993ae3a82f (_krb5_dh_group_ok): if not enough bits are generated from the DH groups, fail.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16211 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-21 17:18:38 +00:00
Love Hörnquist Åstrand
b3da510397 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16206 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-21 12:44:33 +00:00
Love Hörnquist Åstrand
bc4a1da9c6 (acquire_initiator_cred): use krb5_cc_cache_match to find a matching
creditial cache, if that failes, fallback to the default cache.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16205 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-21 12:44:08 +00:00
Love Hörnquist Åstrand
19a7595ae2 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16202 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-20 16:57:27 +00:00
Love Hörnquist Åstrand
256cf0f403 Remove untested patch that sneaked in.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16201 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-20 14:59:20 +00:00
Love Hörnquist Åstrand
8de40c5202 Add k_hasafs_recheck.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16200 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-20 14:53:01 +00:00
Love Hörnquist Åstrand
156ee39478 (k_hasafs_recheck): new function, allow rechecking if AFS client have
started now, internaly it resets the internal state from k_hasafs()
and retry retry the probing. The problem with calling k_hasaf() is
that is plays around with signals, and that cases problem for some
systems/applications.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16199 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-20 14:52:18 +00:00
Love Hörnquist Åstrand
8a06dac4ff Add option to require binding between reply and response.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16196 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-20 09:29:19 +00:00
Love Hörnquist Åstrand
79146c3e71 Try both ReplyKey and ReplyKey-Win2k for the Windows case to support
the updated -09 protocol (using asChecksum). Tell KDC we support this
by sending KRB5-PADATA-PK-AS-09-BINDING in the pa-data.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16192 ec53bebd-3082-4978-b11e-865c3cabbd6b
2005-10-19 21:15:41 +00:00