Commit Graph

8358 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
cbd4c81a98 reformat, avoid free-ing un-init'd memory
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16780 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-28 14:51:39 +00:00
Love Hörnquist Åstrand
6e877e22b1 Only use PKCS5_PBKDF2_HMAC_SHA1.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16779 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-28 14:43:27 +00:00
Love Hörnquist Åstrand
cd9b9cb29f x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16778 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-28 14:19:48 +00:00
Love Hörnquist Åstrand
152e551c29 Add pkcs5 files.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16777 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-28 14:19:00 +00:00
Love Hörnquist Åstrand
3e6b1b43a3 Testcases for pkcs5 pbe2.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16776 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-28 14:18:20 +00:00
Love Hörnquist Åstrand
64332f3462 (PKCS5_PBKDF2_HMAC_SHA1): new function.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16775 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-28 14:17:25 +00:00
Love Hörnquist Åstrand
551b1a36fc Digest key when it exceeds block size, not when it exceeds the size of
the output block.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16774 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-28 14:11:21 +00:00
Love Hörnquist Åstrand
d8486beab5 Add exceptions for null (empty) subjectNames
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16762 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-22 15:14:00 +00:00
Love Hörnquist Åstrand
d8636d8a66 Add some more name constraints tests.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16761 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-22 15:10:21 +00:00
Love Hörnquist Åstrand
47ff6b5f81 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16760 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-22 13:12:32 +00:00
Love Hörnquist Åstrand
19b22db4e2 Add some of the test from 4.13 Name Constraints.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16759 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-22 13:12:13 +00:00
Love Hörnquist Åstrand
e66a73adce x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16758 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-22 13:11:44 +00:00
Love Hörnquist Åstrand
f07a60cae0 Name constraits needs to be evaluated in block as they appear in the
certificates, they can not be joined to one list. One example of this is:

* cert is cn=foo,dc=bar,dc=baz
* subca is  dc=foo,dc=baz with name restriction dc=kaka,dc=baz
* ca is  dc=baz with name restriction dc=baz

If the name restrictions are merged to a list, the certificate will
pass this test.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16757 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-22 13:11:05 +00:00
Love Hörnquist Åstrand
a1cba64cac Document that applications want to use krb5_get_error_message, add example.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16751 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-18 10:00:59 +00:00
Love Hörnquist Åstrand
d339f27552 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16750 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-16 10:38:47 +00:00
Love Hörnquist Åstrand
cbe9276ad4 (RAND_bytes): Don't abort() on failure, return error.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16749 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-16 10:11:44 +00:00
Love Hörnquist Åstrand
5cebb7986f (krb5_generate_random_block): check return value from RAND_bytes
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16748 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-16 10:10:59 +00:00
Love Hörnquist Åstrand
a2cdaa4cb6 (BN_rand): check return value from RAND_bytes
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16747 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-16 10:08:34 +00:00
Love Hörnquist Åstrand
e4531fd61d Change indentation, update (c)
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16746 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-16 07:49:23 +00:00
Love Hörnquist Åstrand
1662652a84 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16745 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-15 12:00:22 +00:00
Love Hörnquist Åstrand
686a5944b6 Accept both GSS_C_NT_HOSTBASED_SERVICE and
GSS_C_NT_HOSTBASED_SERVICE_X as nametype for hostbased names.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16743 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-15 11:59:10 +00:00
Love Hörnquist Åstrand
6ef3ac4edb x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16742 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-14 12:48:43 +00:00
Love Hörnquist Åstrand
84746467cc Handle more name constraints cases.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16741 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-14 12:48:25 +00:00
Love Hörnquist Åstrand
cc053da651 Try handle name constraints a little bit better.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16740 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-14 11:36:00 +00:00
Love Hörnquist Åstrand
43470798fb update (c)
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16739 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-14 10:45:47 +00:00
Love Hörnquist Åstrand
baf806b355 (dsa_verify_signature): if test if malloc failed
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16738 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-14 10:44:52 +00:00
Love Hörnquist Åstrand
9f095696c7 Make struct krb5_dh_moduli available when compiling w/o pkinit.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16736 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-14 10:08:29 +00:00
Love Hörnquist Åstrand
362b24c168 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16735 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-13 11:52:52 +00:00
Love Hörnquist Åstrand
1b1e73d1ff update to new paChecksum definition, update the dhgroup handling
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16734 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-13 11:51:23 +00:00
Love Hörnquist Åstrand
46882d6c08 Add new (-34) pk-init error codes.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16732 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-13 11:28:22 +00:00
Love Hörnquist Åstrand
365aa1b86b paChecksum is now OPTIONAL so it can be upgraded to something better then SHA1
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16730 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-13 11:03:24 +00:00
Love Hörnquist Åstrand
fbf63feaeb Move Configurable options to last in the file.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16728 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-09 11:36:27 +00:00
Love Hörnquist Åstrand
9c6c230c49 Wrap KRB5_ADDRESSLESS_DEFAULT with #ifndef
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16727 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-09 11:35:25 +00:00
Love Hörnquist Åstrand
2496f0d489 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16725 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-06 19:30:33 +00:00
Love Hörnquist Åstrand
59fade5fcd Spelling, from Alexey Dobriyan, via Jason McIntyre
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16724 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-06 19:30:16 +00:00
Love Hörnquist Åstrand
4ecc7c1493 Revert previous commit.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16697 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-03 12:50:37 +00:00
Love Hörnquist Åstrand
07bb0509dd (krb5_get_error_message): peek inside the context and make a copy of
the error string.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16696 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-03 12:47:01 +00:00
Love Hörnquist Åstrand
713880c9a3 update (c) and .Dd
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16695 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-03 12:41:00 +00:00
Love Hörnquist Åstrand
d353b1f751 Document krb5_get_error_message.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16694 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-03 12:40:25 +00:00
Love Hörnquist Åstrand
7b20682f7b (krb5_get_error_message): new function, and combination of
krb5_get_error_string and krb5_get_err_text


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16693 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-03 12:36:45 +00:00
Love Hörnquist Åstrand
c5fe204436 sort, and krb5_get_error_message
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16692 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-03 12:33:14 +00:00
Love Hörnquist Åstrand
b81ea8dcbc Log the filter string to the error message.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16690 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-03 12:17:10 +00:00
Love Hörnquist Åstrand
0562239eb9 (krb5_get_init_creds_opt_set_default_flags): Use
KRB5_ADDRESSLESS_DEFAULT when checking [appdefault]no-addresses.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16689 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-03 11:42:31 +00:00
Love Hörnquist Åstrand
2b37c08fa7 (get_cred_from_kdc_flags): Use KRB5_ADDRESSLESS_DEFAULT when checking
[appdefault]no-addresses.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16688 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-03 11:41:02 +00:00
Love Hörnquist Åstrand
1bb5af8ef5 (krb5_get_forwarded_creds): Use [appdefault]no-addresses before
checking if the krbtgt is address-less, use KRB5_ADDRESSLESS_DEFAULT.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16687 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-03 11:37:29 +00:00
Love Hörnquist Åstrand
99dd89912c Introduce KRB5_ADDRESSLESS_DEFAULT that controlls all address-less behavior.
Defaults to false.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16686 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-03 11:27:40 +00:00
Love Hörnquist Åstrand
5074d775f7 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16685 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-02 13:17:20 +00:00
Love Hörnquist Åstrand
cdc1726021 (PASS_REUSE): Spelling, from Václav H?la <ax@natur.cuni.cz>
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16683 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-02 13:11:47 +00:00
Love Hörnquist Åstrand
e02cf71271 main is not a KRB5_LIB_FUNCTION
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16682 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-01 12:45:13 +00:00
Love Hörnquist Åstrand
bbebb7cc34 (krb5_mk_priv): abort if ASN1_MALLOC_ENCODE failes to produce the
matching lenghts.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16680 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-02-01 12:39:26 +00:00