8 Commits

Author	SHA1	Message	Date
Jeffrey Altman	238fd7c6c6	kdc: kdc_issue_certificate remove dead code ... 'ret' cannot equal EACCES after setting it to KRB5KDC_ERR_POLICY. Change-Id: I2fbb0c91f6fdc541813685fde26229833fa56e42	2022-01-17 22:41:33 -05:00
Luke Howard	ce58eb9081	kdc: annotate libkdc Windows function annotations ... Annotate libkdc APIs with KDC_LIB_{CALL,FUNCTION} to ensure correct calling convention and optimized DLL importing on Windows. Ensure Windows and libtool export tables are consistent.	2022-01-04 12:27:43 +11:00
Nicolas Williams	fbb1a4e3ec	bx509d: Allow requesting longer cert lifetimes ... Add a `lifetime=NUMunit` query parameter. Also add a krb5.conf parameter to indicate whether this is allowed. We already have a max lifetime configuration parameter.	2021-03-07 22:20:06 -06:00
Nicolas Williams	4f0249cd94	hx509/kdc: Move KDC CA utility function into hx509 ... This is part of the program to move REST services like bx509d out of kdc/.	2020-09-08 00:25:24 -05:00
Nicolas Williams	73c424ea66	bx509d: Get KDC config out of bx509d	2020-09-08 00:25:24 -05:00
Nicolas Williams	1d5062b167	kdc: Modernize kx509 logging too	2019-12-11 19:34:36 -06:00
Nicolas Williams	0a0a27ccec	kdc: bx509: Do not vend issuer private keys	2019-12-09 18:10:10 -06:00
Nicolas Williams	575c67806b	Add bx509d	2019-12-04 21:34:44 -06:00