Commit Graph

1986 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
bf932fdd72 add copyright/licenses on more manpages
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11685 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-03-10 02:19:34 +00:00
Love Hörnquist Åstrand
006b538595 (libkrb5_la_LDFLAGS): bump minor
(TESTS): add test_cc


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11682 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-03-10 00:27:21 +00:00
Love Hörnquist Åstrand
9a2e5b06e1 test some krb5_cc_default_name/krb5_cc_set_default_name combinations
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11681 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-03-10 00:26:40 +00:00
Love Hörnquist Åstrand
3d2fd2dc7f (init_context_from_config_file): set default_cc_name to NULL
(krb5_free_context): free default_cc_name if set


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11680 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-03-10 00:24:13 +00:00
Love Hörnquist Åstrand
3bac5fb118 (krb5_cc_set_default_name): new function
(krb5_cc_default_name): use krb5_cc_set_default_name


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11679 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-03-10 00:23:11 +00:00
Love Hörnquist Åstrand
04b2ccc9ed (krb5_context_data): add default_cc_name
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11678 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-03-10 00:21:50 +00:00
Love Hörnquist Åstrand
aa25cfcafa add copyright/license statment
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11648 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-02-16 21:10:32 +00:00
Jacques A. Vidrine
6710968492 [Dug this out of an email I sent November 2002.]
Currently, if the AS exchange uses PA-ENC-TIMESTAMP, a Heimdal client
will transmit the AS-REQ with one PA-ENC-TIMESTAMP for every supported
encryption type.  This is bad because:

   (1) An eavesdropper collecting this information for dictionary
       attacks will have his life made easier, since he can use
       DES (rather than a stronger crypto system).
   (2) Waste of CPU cycles on client.
   (3) (Maybe) cryptanalysis is assisted by capturing ciphtertexts
       that are known to be the same plaintext encrypted with the
       same key in several algorithms (though the confounder confounds
       this).

The KDC provides the list of etypes supported in PA-ETYPE-INFO in the
KRB-ERROR reply ... let's use the first one, eh?


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11646 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-02-16 06:41:25 +00:00
Love Hörnquist Åstrand
8f66f2c8be documentation for of boolean, etypes, address
write out encryption type in sentences
s/Host/host


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11629 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-30 20:23:31 +00:00
Love Hörnquist Åstrand
94ff0be352 (find_all_addresses): address-less point-to-point might not have an
address, just ignore those. Reported by Harald Barth.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11613 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-25 15:19:49 +00:00
Love Hörnquist Åstrand
50c24d50f2 (check_section): when key isn't found, don't print out all known keys
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11612 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-23 19:53:19 +00:00
Love Hörnquist Åstrand
e0a89410d7 (syslogvals): mark up where severity and facility start resp
(check_log): find_value() returns -1 when key isn't found


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11611 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-23 19:49:32 +00:00
Love Hörnquist Åstrand
ea94038288 (_krb5_aes_cts_encrypt): make key argument a 'const void *' to avoid
AES_KEY being exposed in krb5-private.h


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11610 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-23 19:05:52 +00:00
Love Hörnquist Åstrand
bf7e9c641a add [kdc]use_2b
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11605 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-23 14:54:48 +00:00
Love Hörnquist Åstrand
34e289f50a spelling, from Jason McIntyre <jmc@cvs.openbsd.org>
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11596 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-22 12:22:20 +00:00
Love Hörnquist Åstrand
5692615e30 spelling
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11595 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-22 11:01:21 +00:00
Love Hörnquist Åstrand
1c9d1873ae write more about [realms] REALM = { kdc = ... }
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11585 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-15 04:36:40 +00:00
Love Hörnquist Åstrand
5d66fae756 add aes-test.c
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11584 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-15 04:26:29 +00:00
Love Hörnquist Åstrand
7a2c854c80 Add support for AES (draft-raeburn-krb-rijndael-krb-02), not enabled
by default.
(HMAC_SHA1_DES3_checksum): rename to SP_HMAC_SHA1_checksum and modify
to support checksumtype that are have a shorter wireformat then their
output block size.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11583 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-15 04:24:05 +00:00
Love Hörnquist Åstrand
1f6debd562 (struct encryption_type): split the blocksize into blocksize and
padsize, padsize is the minimum padding size. they are the same for now
(enctype_*): add padsize
(encrypt_internal): use padsize
(encrypt_internal_derived): use padsize
(wrapped_length): use padsize
(wrapped_length_dervied): use padsize


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11582 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-15 03:54:51 +00:00
Love Hörnquist Åstrand
e96bdba80d add extra `opaque' argument to string_to_key function for each enctype
in preparation enctypes that uses `Encryption and Checksum
Specifications for Kerberos 5' draft


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11581 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-15 03:26:46 +00:00
Love Hörnquist Åstrand
0c14ee0c21 (krb5_keytype): add KEYTYPE_AES128, KEYTYPE_AES256
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11578 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-15 03:12:13 +00:00
Love Hörnquist Åstrand
eef39a201d Split out Kerberos 4 help functions/structures so other parts of the
source tree can use it (like the KDC)


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11570 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-14 05:22:35 +00:00
Johan Danielsson
4b2a8a83d2 free allocated storage; reported by Howard Chu
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11564 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-12-19 13:30:36 +00:00
Johan Danielsson
d0ec42bfdf remove trailing comma in enum
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11539 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-11-15 14:16:42 +00:00
Johan Danielsson
27cc22110f more strcspn
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11513 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-10-21 15:42:06 +00:00
Johan Danielsson
5ee773037f (emem_store): limit how much we allocate (from Olaf Kirch)
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11512 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-10-21 15:36:23 +00:00
Johan Danielsson
cf87a976ce don't allow trailing backslashes in components
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11511 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-10-21 15:30:53 +00:00
Johan Danielsson
b411502ebe properly close the open keytabs (from Larry Greenfield)
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11490 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-10-21 13:36:59 +00:00
Johan Danielsson
77c4778b71 (process_reply): fix reply length check calculation (reported by
various people)


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11473 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-29 11:48:34 +00:00
Johan Danielsson
242db364ce (fkt_remove_entry): check return value from start_seq_get (from Wynn
Wilkes)


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11471 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-24 16:43:30 +00:00
Johan Danielsson
89a75e551c (krb5_set_config_files): return ENXIO instead of ENOENT when
"unconfigured"


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11467 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-19 19:49:52 +00:00
Jacques A. Vidrine
d29f4a9e27 Use strcspn to convert the newline to NUL in fgets results.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11462 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-16 17:32:11 +00:00
Johan Danielsson
d5871dbfc7 remove extra "application"
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11459 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-13 14:49:31 +00:00
Johan Danielsson
5f129a8870 get limits.h for UINT_MAX
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11448 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-10 20:10:45 +00:00
Johan Danielsson
77de2f4011 use crypto-headers.h
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11444 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-10 20:03:49 +00:00
Johan Danielsson
13718918cb don't use NULL when we mean 0
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11435 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-10 19:04:55 +00:00
Jacques A. Vidrine
5e6f1d8e82 Use O_EXCL when creating a new keyfile.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11414 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-09 14:22:26 +00:00
Jacques A. Vidrine
9849899e7f Validate some counts that may be received from the network:
Check that they are non-negative, and that they are small enough to
avoid integer overflow when used in memory allocation calculations.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11411 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-09 14:03:03 +00:00
Johan Danielsson
45cc9bab8d (krb5_vlog_msg): delay message formating till we know we need it
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11399 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-05 14:59:14 +00:00
Johan Danielsson
6d3f51c725 close ccache if we opened it
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11388 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-04 21:34:43 +00:00
Johan Danielsson
6a8ce7e86f (init_tgs_req): init ret
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11385 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-04 21:12:46 +00:00
Johan Danielsson
ddc308c36f use ASN1_MALLOC_ENCODE
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11372 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-04 16:26:05 +00:00
Johan Danielsson
9012f55e7c (init_tgs_req): use in_creds->session.keytype literally instead of
trying to convert to a list of enctypes (it should already be an
enctype)


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11366 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-04 12:04:19 +00:00
Johan Danielsson
d9a1ec3c10 (krb5_get_forwarded_creds): don't blindly use the local subkey
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11348 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-03 19:59:48 +00:00
Johan Danielsson
ae784bda45 add function krb5_crypto_getblocksize that extracts the required
blocksize from a crypto context


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11347 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-03 19:58:15 +00:00
Johan Danielsson
b92b2b6b22 remove ENCTYPE_DES3_CBC_NONE_IVEC
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11342 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-03 17:31:47 +00:00
Johan Danielsson
2ccdee74a3 get rid of DES3_CBC_encrypt_ivec, just use zero ivec in
DES3_CBC_encrypt if passed ivec is NULL


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11341 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-03 17:31:12 +00:00
Jacques A. Vidrine
430a7ebc58 Verify the combined lengths of the KRB_AP_REP and KRB_PRIV in the set
password response.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11337 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-03 16:14:34 +00:00
Johan Danielsson
084816d5ec just get the length of the encoded authenticator instead of trying to
grow a buffer


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11336 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-03 15:17:09 +00:00