Love Hörnquist Åstrand
bf932fdd72
add copyright/licenses on more manpages
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11685 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-03-10 02:19:34 +00:00
Love Hörnquist Åstrand
006b538595
(libkrb5_la_LDFLAGS): bump minor
...
(TESTS): add test_cc
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11682 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-03-10 00:27:21 +00:00
Love Hörnquist Åstrand
9a2e5b06e1
test some krb5_cc_default_name/krb5_cc_set_default_name combinations
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11681 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-03-10 00:26:40 +00:00
Love Hörnquist Åstrand
3d2fd2dc7f
(init_context_from_config_file): set default_cc_name to NULL
...
(krb5_free_context): free default_cc_name if set
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11680 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-03-10 00:24:13 +00:00
Love Hörnquist Åstrand
3bac5fb118
(krb5_cc_set_default_name): new function
...
(krb5_cc_default_name): use krb5_cc_set_default_name
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11679 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-03-10 00:23:11 +00:00
Love Hörnquist Åstrand
04b2ccc9ed
(krb5_context_data): add default_cc_name
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11678 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-03-10 00:21:50 +00:00
Love Hörnquist Åstrand
aa25cfcafa
add copyright/license statment
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11648 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-02-16 21:10:32 +00:00
Jacques A. Vidrine
6710968492
[Dug this out of an email I sent November 2002.]
...
Currently, if the AS exchange uses PA-ENC-TIMESTAMP, a Heimdal client
will transmit the AS-REQ with one PA-ENC-TIMESTAMP for every supported
encryption type. This is bad because:
(1) An eavesdropper collecting this information for dictionary
attacks will have his life made easier, since he can use
DES (rather than a stronger crypto system).
(2) Waste of CPU cycles on client.
(3) (Maybe) cryptanalysis is assisted by capturing ciphtertexts
that are known to be the same plaintext encrypted with the
same key in several algorithms (though the confounder confounds
this).
The KDC provides the list of etypes supported in PA-ETYPE-INFO in the
KRB-ERROR reply ... let's use the first one, eh?
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11646 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-02-16 06:41:25 +00:00
Love Hörnquist Åstrand
8f66f2c8be
documentation for of boolean, etypes, address
...
write out encryption type in sentences
s/Host/host
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11629 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-30 20:23:31 +00:00
Love Hörnquist Åstrand
94ff0be352
(find_all_addresses): address-less point-to-point might not have an
...
address, just ignore those. Reported by Harald Barth.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11613 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-25 15:19:49 +00:00
Love Hörnquist Åstrand
50c24d50f2
(check_section): when key isn't found, don't print out all known keys
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11612 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-23 19:53:19 +00:00
Love Hörnquist Åstrand
e0a89410d7
(syslogvals): mark up where severity and facility start resp
...
(check_log): find_value() returns -1 when key isn't found
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11611 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-23 19:49:32 +00:00
Love Hörnquist Åstrand
ea94038288
(_krb5_aes_cts_encrypt): make key argument a 'const void *' to avoid
...
AES_KEY being exposed in krb5-private.h
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11610 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-23 19:05:52 +00:00
Love Hörnquist Åstrand
bf7e9c641a
add [kdc]use_2b
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11605 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-23 14:54:48 +00:00
Love Hörnquist Åstrand
34e289f50a
spelling, from Jason McIntyre <jmc@cvs.openbsd.org>
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11596 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-22 12:22:20 +00:00
Love Hörnquist Åstrand
5692615e30
spelling
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11595 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-22 11:01:21 +00:00
Love Hörnquist Åstrand
1c9d1873ae
write more about [realms] REALM = { kdc = ... }
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11585 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-15 04:36:40 +00:00
Love Hörnquist Åstrand
5d66fae756
add aes-test.c
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11584 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-15 04:26:29 +00:00
Love Hörnquist Åstrand
7a2c854c80
Add support for AES (draft-raeburn-krb-rijndael-krb-02), not enabled
...
by default.
(HMAC_SHA1_DES3_checksum): rename to SP_HMAC_SHA1_checksum and modify
to support checksumtype that are have a shorter wireformat then their
output block size.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11583 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-15 04:24:05 +00:00
Love Hörnquist Åstrand
1f6debd562
(struct encryption_type): split the blocksize into blocksize and
...
padsize, padsize is the minimum padding size. they are the same for now
(enctype_*): add padsize
(encrypt_internal): use padsize
(encrypt_internal_derived): use padsize
(wrapped_length): use padsize
(wrapped_length_dervied): use padsize
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11582 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-15 03:54:51 +00:00
Love Hörnquist Åstrand
e96bdba80d
add extra `opaque' argument to string_to_key function for each enctype
...
in preparation enctypes that uses `Encryption and Checksum
Specifications for Kerberos 5' draft
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11581 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-15 03:26:46 +00:00
Love Hörnquist Åstrand
0c14ee0c21
(krb5_keytype): add KEYTYPE_AES128, KEYTYPE_AES256
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11578 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-15 03:12:13 +00:00
Love Hörnquist Åstrand
eef39a201d
Split out Kerberos 4 help functions/structures so other parts of the
...
source tree can use it (like the KDC)
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11570 ec53bebd-3082-4978-b11e-865c3cabbd6b
2003-01-14 05:22:35 +00:00
Johan Danielsson
4b2a8a83d2
free allocated storage; reported by Howard Chu
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11564 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-12-19 13:30:36 +00:00
Johan Danielsson
d0ec42bfdf
remove trailing comma in enum
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11539 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-11-15 14:16:42 +00:00
Johan Danielsson
27cc22110f
more strcspn
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11513 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-10-21 15:42:06 +00:00
Johan Danielsson
5ee773037f
(emem_store): limit how much we allocate (from Olaf Kirch)
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11512 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-10-21 15:36:23 +00:00
Johan Danielsson
cf87a976ce
don't allow trailing backslashes in components
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11511 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-10-21 15:30:53 +00:00
Johan Danielsson
b411502ebe
properly close the open keytabs (from Larry Greenfield)
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11490 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-10-21 13:36:59 +00:00
Johan Danielsson
77c4778b71
(process_reply): fix reply length check calculation (reported by
...
various people)
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11473 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-29 11:48:34 +00:00
Johan Danielsson
242db364ce
(fkt_remove_entry): check return value from start_seq_get (from Wynn
...
Wilkes)
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11471 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-24 16:43:30 +00:00
Johan Danielsson
89a75e551c
(krb5_set_config_files): return ENXIO instead of ENOENT when
...
"unconfigured"
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11467 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-19 19:49:52 +00:00
Jacques A. Vidrine
d29f4a9e27
Use strcspn to convert the newline to NUL in fgets results.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11462 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-16 17:32:11 +00:00
Johan Danielsson
d5871dbfc7
remove extra "application"
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11459 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-13 14:49:31 +00:00
Johan Danielsson
5f129a8870
get limits.h for UINT_MAX
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11448 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-10 20:10:45 +00:00
Johan Danielsson
77de2f4011
use crypto-headers.h
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11444 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-10 20:03:49 +00:00
Johan Danielsson
13718918cb
don't use NULL when we mean 0
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11435 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-10 19:04:55 +00:00
Jacques A. Vidrine
5e6f1d8e82
Use O_EXCL when creating a new keyfile.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11414 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-09 14:22:26 +00:00
Jacques A. Vidrine
9849899e7f
Validate some counts that may be received from the network:
...
Check that they are non-negative, and that they are small enough to
avoid integer overflow when used in memory allocation calculations.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11411 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-09 14:03:03 +00:00
Johan Danielsson
45cc9bab8d
(krb5_vlog_msg): delay message formating till we know we need it
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11399 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-05 14:59:14 +00:00
Johan Danielsson
6d3f51c725
close ccache if we opened it
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11388 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-04 21:34:43 +00:00
Johan Danielsson
6a8ce7e86f
(init_tgs_req): init ret
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11385 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-04 21:12:46 +00:00
Johan Danielsson
ddc308c36f
use ASN1_MALLOC_ENCODE
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11372 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-04 16:26:05 +00:00
Johan Danielsson
9012f55e7c
(init_tgs_req): use in_creds->session.keytype literally instead of
...
trying to convert to a list of enctypes (it should already be an
enctype)
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11366 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-04 12:04:19 +00:00
Johan Danielsson
d9a1ec3c10
(krb5_get_forwarded_creds): don't blindly use the local subkey
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11348 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-03 19:59:48 +00:00
Johan Danielsson
ae784bda45
add function krb5_crypto_getblocksize that extracts the required
...
blocksize from a crypto context
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11347 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-03 19:58:15 +00:00
Johan Danielsson
b92b2b6b22
remove ENCTYPE_DES3_CBC_NONE_IVEC
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11342 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-03 17:31:47 +00:00
Johan Danielsson
2ccdee74a3
get rid of DES3_CBC_encrypt_ivec, just use zero ivec in
...
DES3_CBC_encrypt if passed ivec is NULL
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11341 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-03 17:31:12 +00:00
Jacques A. Vidrine
430a7ebc58
Verify the combined lengths of the KRB_AP_REP and KRB_PRIV in the set
...
password response.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11337 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-03 16:14:34 +00:00
Johan Danielsson
084816d5ec
just get the length of the encoded authenticator instead of trying to
...
grow a buffer
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11336 ec53bebd-3082-4978-b11e-865c3cabbd6b
2002-09-03 15:17:09 +00:00