Love Hornquist Astrand
b0f73165a7
use krb5_make_principal
2009-10-04 11:29:54 -07:00
Love Hornquist Astrand
9e13b309d9
use krb5_make_principal
2009-10-04 11:29:43 -07:00
Love Hornquist Astrand
dc31556b7d
use krb5_generate_subkey_extended
2009-10-04 11:12:43 -07:00
Love Hornquist Astrand
4f6759157b
move krb5_generate_subkey to deprecated and provide doxygen
2009-10-04 11:02:44 -07:00
Love Hornquist Astrand
615820b0af
move krb5_generate_subkey here and deprecate
2009-10-04 11:02:43 -07:00
Love Hornquist Astrand
ff87429593
Make LDAP code fetch less attributes from LDAP server when KDC is asking
...
Johan Gadsjö did a awesome analysis of the LDAP access pattens
and sent us a patch that reduced the calls the ldap server by 4
times as many. The patch was adopted and change to avoid compile
time depencies and make the determination runtime instead. Thanks!
2009-10-03 13:20:41 -07:00
Love Hornquist Astrand
4b79b6fa57
remove unused variable
...
Based on a report from Matthias Dieter Wallnöfer.
2009-10-03 11:38:55 -07:00
Love Hornquist Astrand
7b999148f8
Rename str to oid in the function namespace to avoid -Wshadow warning
...
Based on a report from Matthias Dieter Wallnöfer.
2009-10-03 11:35:45 -07:00
Love Hornquist Astrand
ce0293b994
Rename f to ksf in the global function namespace to avoid -Wshadow warning
...
Based on a report from Matthias Dieter Wallnöfer.
2009-10-03 11:33:41 -07:00
Love Hornquist Astrand
64835d0836
Rename header to print_pem_stamp in the global namespace to avoid -Wshadow warning
...
Based on a report from Matthias Dieter Wallnöfer.
2009-10-03 11:24:03 -07:00
Love Hornquist Astrand
100c440153
Handle windows windows LH with interesting content info packets (broken)
2009-10-01 10:38:30 -07:00
Love Hornquist Astrand
7eac18abc3
verify that n0ll cert is broken
2009-09-30 01:20:38 -07:00
Love Hornquist Astrand
24f9a30864
reference to where cert comes from
2009-09-30 01:20:25 -07:00
Love Hornquist Astrand
824ac40a10
add data/n0ll.pem
2009-09-30 01:18:34 -07:00
Love Hornquist Astrand
b17ad58fe5
n0ll names check
2009-09-30 01:18:04 -07:00
Love Hornquist Astrand
d4e2da58cf
count certs that verify and if no verify at all, whine
2009-09-30 01:17:50 -07:00
Love Hornquist Astrand
215b3813f6
teletexString is now a real string type
2009-09-30 00:54:13 -07:00
Love Hornquist Astrand
4d06f484ec
implement TeletexString
2009-09-30 00:48:18 -07:00
Love Hornquist Astrand
0b144cdf8d
implement teletexstring
2009-09-30 00:47:39 -07:00
Love Hornquist Astrand
18f2c32463
make _krb5_pk_set_user_id update ->cert too
2009-09-29 14:27:47 -07:00
Love Hornquist Astrand
2064ee1a37
Wrap rc2 with COMMONCRYPTO_SUPPORTS_RC2 since its not suported on Leopard
2009-09-29 13:21:16 -07:00
Love Hornquist Astrand
91e067e925
Use hx509_context that build from krb5_context
2009-09-29 13:14:20 -07:00
Love Hornquist Astrand
1e65f30a2d
drop hx509_context in krb5_id
2009-09-29 13:13:51 -07:00
Love Hornquist Astrand
1ac50627e6
add forward decl for hx509_certs_data
2009-09-29 11:29:20 -07:00
Love Hornquist Astrand
a95f16503e
load hx509 context
2009-09-29 11:29:02 -07:00
Love Hornquist Astrand
682e7e012c
export hx509_certs_ref
2009-09-29 11:28:24 -07:00
Love Hornquist Astrand
0e762f8689
support output passphrases for copy certificate
2009-09-29 11:28:12 -07:00
Love Hornquist Astrand
50de7c4203
(hx509_lock_free): allow freeing NULL
2009-09-29 11:12:32 -07:00
Love Hornquist Astrand
a610d28727
Add _krb5_get_init_creds_opt_set_pkinit_user_certs
2009-09-29 11:11:04 -07:00
Love Hornquist Astrand
97a511457f
kinit helpers
2009-09-29 11:10:41 -07:00
Love Hornquist Astrand
17cd6e2d5f
Use hx509_certs_ref()
2009-09-29 09:58:47 -07:00
Love Hornquist Astrand
ec47674c2b
expose hx509_certs_ref
2009-09-29 09:42:15 -07:00
Love Hornquist Astrand
61cc35b83b
include hx509_context in krb5_context
2009-09-29 09:23:37 -07:00
Love Hornquist Astrand
f7bde058ee
Include dirfd for AIX too
...
From Anton Lundin
2009-09-29 08:56:07 -07:00
Love Hornquist Astrand
ec263fc5a4
reading negative size is wrong, zero is ok
2009-09-25 14:53:31 -07:00
Love Hornquist Astrand
9bace01559
Check for malloc(0) to make AIX happy
...
Prompted by [HEIMDAL-646] by Anton Lundin
2009-09-24 07:32:35 -07:00
Love Hornquist Astrand
f8b06809a1
export _et_list, report by Barry Sia
2009-09-23 16:23:04 -07:00
Love Hornquist Astrand
92075b8825
add allow wrong oid flag, short for trust anchors
2009-09-23 00:02:46 -07:00
Love Hornquist Astrand
6b3fb1c674
drop $Id$
2009-09-21 19:15:00 -07:00
Love Hornquist Astrand
2ef2c451a4
drop $Id$
2009-09-21 19:14:50 -07:00
Love Hornquist Astrand
94cc296741
plug more leaks
2009-09-21 10:08:42 -07:00
Love Hornquist Astrand
76cf97e2b0
free pac after reading it
2009-09-21 09:59:38 -07:00
Love Hornquist Astrand
80c866a4a7
fix valgrind problems
2009-09-21 09:52:28 -07:00
Love Hornquist Astrand
ff5bd1f6c6
use socket_set_ipv6only to bind only to the local v6 socket
...
This is since we probably will get a v4 adresses a tiny bit later, and
that will fail binding.
2009-09-21 07:59:18 -07:00
Love Hornquist Astrand
d7dcaae909
str unused, drop
2009-09-21 06:26:39 -07:00
Love Hornquist Astrand
e247375e1c
add hx509_print_cert
2009-09-21 06:24:22 -07:00
Love Hornquist Astrand
b9c11926f7
add hx509_print_cert
2009-09-21 06:24:14 -07:00
Love Hornquist Astrand
9c89bf0a73
use hx509_print_cert
2009-09-21 06:23:34 -07:00
Love Hornquist Astrand
7a0af9ae18
Its ok to pass down NULL as the context handle to error string function
...
Just ignore setting the error string if that is the case.
2009-09-21 06:21:23 -07:00
Love Hornquist Astrand
a7d5b2a15e
make zero_ivec unsigned
2009-09-20 22:37:27 -07:00
