9f587ef0c2
Allocate some memory for OCSP responces
2009-10-11 16:26:26 -07:00
84111cb8e1
[HEIMDAL-646] malloc(0) checks for AIX
2009-10-11 16:25:42 -07:00
102cd04b0d
its ok to return NULL if we are allocating zero elements
2009-10-11 15:38:21 -07:00
1e9ec73bbc
[HEIMDAL-646] aix
...
AIX qsort() is unstable and might change the order of the elements
if they are equal, libwind require them to be in the same order as they were
on the input, pull in FreeBSD qsort and use that instead of AIX version.
2009-10-11 15:08:58 -07:00
e1b14b7854
Use right type when mallocing data (allocated too much)
2009-10-11 15:08:27 -07:00
377543e78e
use size_t for index
2009-10-11 14:36:46 -07:00
93f0e450cc
fix sizeof, only matter on platforms where sizeof(unsigned) != sizeof(uint32_t)
2009-10-11 12:22:19 -07:00
983d0f66f1
print lineno
2009-10-11 12:18:22 -07:00
d36402a671
Don't assume ldap_bv2escaped_filter_value() is exported
2009-10-11 11:17:56 -07:00
977acdd84d
Always send subkey and assume reply is encrypted using subkey
2009-10-11 09:12:01 -07:00
8e08aa0a15
Use krb5_free_keyblock()
2009-10-11 08:45:51 -07:00
943123da3b
enable DES when getting the afs credential
2009-10-07 09:39:19 -07:00
d3d9e5ecb5
free sp on error/full send
2009-10-06 11:19:27 -07:00
4bab1141d8
syntax error, from Harald Barth
2009-10-06 09:36:18 -07:00
77ecef0327
tell where kafs will search for files, from Harald Barth
2009-10-06 09:27:46 -07:00
57b40643b9
use server name for referral decision
2009-10-06 07:38:29 -07:00
ceac2815bb
Just use RAND_bytes() for generating random bytes
2009-10-06 06:00:24 -07:00
75a61b8842
krb5_build_authenticator is private
2009-10-05 22:09:23 -07:00
6d1d17efed
don't canonicalize names that are short then 2 name element
...
Since KDC will probably guess wrong on them, and doing
afs@CLIENT-REALM have too large change of actually working.
2009-10-05 22:07:47 -07:00
d7e7640d46
fix argumentin doxygen
2009-10-05 20:29:37 -07:00
a132ffe757
Simplify krb5_build_authenticator and unexport
2009-10-05 19:52:28 -07:00
cc65dc4e8e
Just make a copy of the cksum instead of trying to work around the
...
fact that its not really copied.
2009-10-05 19:25:46 -07:00
753e2cc925
Check that enctypes are valid/enabled before trying to request them
2009-10-05 19:17:11 -07:00
0d10dfb529
doxygen
2009-10-04 11:33:45 -07:00
b0f73165a7
use krb5_make_principal
2009-10-04 11:29:54 -07:00
9e13b309d9
use krb5_make_principal
2009-10-04 11:29:43 -07:00
dc31556b7d
use krb5_generate_subkey_extended
2009-10-04 11:12:43 -07:00
4f6759157b
move krb5_generate_subkey to deprecated and provide doxygen
2009-10-04 11:02:44 -07:00
615820b0af
move krb5_generate_subkey here and deprecate
2009-10-04 11:02:43 -07:00
ff87429593
Make LDAP code fetch less attributes from LDAP server when KDC is asking
...
Johan Gadsjö did a awesome analysis of the LDAP access pattens
and sent us a patch that reduced the calls the ldap server by 4
times as many. The patch was adopted and change to avoid compile
time depencies and make the determination runtime instead. Thanks!
2009-10-03 13:20:41 -07:00
4b79b6fa57
remove unused variable
...
Based on a report from Matthias Dieter Wallnöfer.
2009-10-03 11:38:55 -07:00
7b999148f8
Rename str to oid in the function namespace to avoid -Wshadow warning
...
Based on a report from Matthias Dieter Wallnöfer.
2009-10-03 11:35:45 -07:00
ce0293b994
Rename f to ksf in the global function namespace to avoid -Wshadow warning
...
Based on a report from Matthias Dieter Wallnöfer.
2009-10-03 11:33:41 -07:00
64835d0836
Rename header to print_pem_stamp in the global namespace to avoid -Wshadow warning
...
Based on a report from Matthias Dieter Wallnöfer.
2009-10-03 11:24:03 -07:00
100c440153
Handle windows windows LH with interesting content info packets (broken)
2009-10-01 10:38:30 -07:00
7eac18abc3
verify that n0ll cert is broken
2009-09-30 01:20:38 -07:00
24f9a30864
reference to where cert comes from
2009-09-30 01:20:25 -07:00
824ac40a10
add data/n0ll.pem
2009-09-30 01:18:34 -07:00
b17ad58fe5
n0ll names check
2009-09-30 01:18:04 -07:00
d4e2da58cf
count certs that verify and if no verify at all, whine
2009-09-30 01:17:50 -07:00
215b3813f6
teletexString is now a real string type
2009-09-30 00:54:13 -07:00
4d06f484ec
implement TeletexString
2009-09-30 00:48:18 -07:00
0b144cdf8d
implement teletexstring
2009-09-30 00:47:39 -07:00
18f2c32463
make _krb5_pk_set_user_id update ->cert too
2009-09-29 14:27:47 -07:00
2064ee1a37
Wrap rc2 with COMMONCRYPTO_SUPPORTS_RC2 since its not suported on Leopard
2009-09-29 13:21:16 -07:00
91e067e925
Use hx509_context that build from krb5_context
2009-09-29 13:14:20 -07:00
1e65f30a2d
drop hx509_context in krb5_id
2009-09-29 13:13:51 -07:00
1ac50627e6
add forward decl for hx509_certs_data
2009-09-29 11:29:20 -07:00
a95f16503e
load hx509 context
2009-09-29 11:29:02 -07:00
682e7e012c
export hx509_certs_ref
2009-09-29 11:28:24 -07:00
Love Hornquist Astrand