b9567cb158
Don't attempt to release unallocated resource in fcc_move()
2010-05-26 10:38:43 -04:00
b9dc82e09e
Fix slashes while expanding path tokens
...
On Windows, some (external) APIs get confused if we mix both back and
forward slashes. When expanding path tokens we use back-slashes for
token expansions because they come from the OS. For consistency, fix
the path so that the remaining path separators are also backslashes.
2010-05-26 10:38:43 -04:00
6d132f1d7d
Remove spurious slash when expanding path tokens
...
Path tokens that expand to directories are expected to end in a slash.
2010-05-26 10:38:42 -04:00
500603506f
Link libkrb5 against DNSAPI.lib on Windows
2010-05-26 10:38:42 -04:00
884f5ac627
Use WinDNS on Windows for DNS
2010-05-26 10:38:41 -04:00
a750f29cda
_getch() can return '\r' on Windows
2010-05-26 10:38:40 -04:00
7b8ebf0efe
Fix return value of w32crypto_bytes() and use correct data types
2010-05-26 10:38:40 -04:00
154de6b3a3
krb5_kuserok() only does the local principal test on Windows
...
Remove the other tests for now. The file and directory access checks must be
made against the respective DACLs.
2010-05-26 10:38:39 -04:00
323ccec648
add support to generate keys
2010-05-26 09:31:23 -05:00
fa5a1cb201
tomcrypt rsa
2010-05-22 13:19:48 -07:00
d631443133
Support both BE and LE MIT master key file formats
...
Prompted by discussion on heimdal-discuss by Michael Wood, Russ Allbery,
and Henry B. Hotz.
2010-05-22 13:16:52 -07:00
3c58379590
tomsfastmath version of rsa, keygen missing
2010-05-19 22:29:07 -07:00
fd107d08c4
use case compare for teletex string
2010-05-01 11:47:02 +02:00
af0f2717c2
test case compare
2010-05-01 11:45:40 +02:00
eec74bd2fe
Wrap SOCK_CLOEXEC in ifdef, from Harald Barth
2010-04-30 15:15:58 +02:00
994e8641c0
hcrypto: Don't explicitly include system headers
...
Don't explicitly include system headers in hash.h. These get pulled
in anyway through roken.h, and explicitly including them here makes
compiling hcrypto in the kernel much harder.
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-04-29 16:43:48 +02:00
2a842e90d3
Drop MD2 support
...
Patch partly from Guillaume Rousse
2010-04-28 22:10:27 +02:00
887993e8b3
Add mutex protection for the fortuna PRNG
...
The fortuna PRNG has an statically held internal state. Prevent
concurrent access to this internal state by adding mutexes around
all of the access classes.
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-04-19 14:26:53 +02:00
dd34c02329
spelling, from Tollef Fog Heen via Brian May of Debian
2010-04-11 16:36:15 -07:00
b7c0365677
fix documentation
2010-04-08 15:36:27 -07:00
312f4f9bd6
GSS_C_NO_OID matches nothing, not even it-self, document function
2010-03-30 11:18:49 -07:00
aa371571f9
insert _FLAG into the name
2010-03-29 19:08:00 -07:00
cf35620ecf
name flag 1 as KRB5_INIT_CREDS_STEP_CONTINUE
2010-03-29 18:55:41 -07:00
a76daa7e35
support WIND_PROFILE_LDAP_CASE
2010-03-29 01:13:30 -07:00
aaf310f99e
constify
2010-03-23 20:20:51 -07:00
4660ec8358
check for underruns
2010-03-21 21:05:21 -07:00
d02418be27
windows doesn't have /dev/random
2010-03-21 16:44:30 -07:00
08572822da
use pathp for pathbased file names
2010-03-21 16:07:45 -07:00
408e3420d1
try hard to unset HOME and randfile
2010-03-21 16:06:34 -07:00
83e2a17c0f
document more assumptions about hdb_rename
2010-03-21 14:56:57 -07:00
d837f736f8
Make locking work when doing rename, rename assume db in not ->hdb_open'ed.
2010-03-21 14:55:36 -07:00
c491b59007
pull out unix /dev/random if we cant get users home directory
2010-03-21 11:01:24 -07:00
76122d97c2
Test emptier environment
2010-03-21 10:59:26 -07:00
fc9aff2260
log the source too
2010-03-21 09:41:20 -07:00
3ac7d626c2
log failures
2010-03-21 09:37:42 -07:00
32d148b2f8
Check for dd_fd in DIR not struct dirent
...
Pointed out by Ragnnar Sundblad in private mail
2010-03-21 09:08:46 -07:00
ad2de1222f
spelling
2010-03-20 15:25:55 -07:00
cfb43997ae
define YY_NULL
2010-03-20 14:44:16 -07:00
b0a79dcd40
Improve the dns retry logic
...
Bug reported by Richard Silverman on heimdal-bugs
2010-03-19 14:19:43 -07:00
3af54e67d9
Renumber signedticket to 512 since 142 was stolen.
2010-03-19 13:44:51 -07:00
6bff49a89d
memset the right length of the {i,o}pad data, memset opad not ipad in the opad case (typo)
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-03-18 10:59:51 -07:00
f26d6c2398
(krb5_set_default_in_tkt_etypes): filter out unwanted enctypes
...
Needed for Samba that tries really hard to use DES encryption types.
Reported by Natanael Copa on heimdal-discuss
2010-03-17 09:30:11 -07:00
69ea9b38e9
heimdal - fix overlapped identifiers in the "krb5" library
...
heimdal - fix overlapped identifiers in the "krb5" library
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-03-16 10:05:35 -07:00
50990d61cf
free always "ctx->password" when it isn't needed anymore
...
Patch originally from Matthias Dieter Wallnöfer, changed by me to keep
clearing the password from memory.
2010-03-16 10:04:20 -07:00
313a2243bb
Allow users to specify their own configuration file ~/.krb5/config
...
Idea from Rune L on heimdal-discuss
2010-03-16 09:09:27 -07:00
33d80cbcfc
include roken.h
2010-03-12 09:04:39 -08:00
cf1b11f8a0
export more
2010-03-11 23:35:26 -08:00
6da28e73eb
move same ifdef magic from roken-common.h.in to here, use strerror()
2010-03-11 23:35:00 -08:00
7d9335ce69
in the STRERROR_R_PROTO_COMPATIBLE case, only provide a rk_strerror_r function if there is a broken prototype
...
From harald barth.
2010-03-11 18:40:47 -08:00
e57bd85101
spelling
2010-03-10 20:05:31 -08:00
Asanka Herath