oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity
13,443 Commits 2 Branches 2 Tags
db76c6366f2b851d08a54be32c930e77a94b93e1
Commit Graph

743 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
af2494e41a (pk_principal_from_X509): reverse test, makes principal in cert work 
From: Mayur Patel <patelm4@rpi.edu>


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14055 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-07-19 20:45:50 +00:00
Love Hörnquist Åstrand
c4ca019013 add enable_pkinit_princ_in_cert 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13992 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-06-24 14:35:56 +00:00
Love Hörnquist Åstrand
a26804c1a9 enable_pkinit_princ_in_cert 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13991 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-06-24 14:35:33 +00:00
Love Hörnquist Åstrand
4347dadb27 Check certificate for Kerberos Principal in OtherName of subjectAltName 
Based on patch from Mayur Patel <patelm4@rpi.edu>


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13990 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-06-24 14:34:46 +00:00
Love Hörnquist Åstrand
7fe851e011 (handle_tcp): note who is what that closed the connection on us 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13933 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-06-15 13:13:22 +00:00
Love Hörnquist Åstrand
713ea798a8 use krb5_enctype_to_oid 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13816 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-04-26 21:21:54 +00:00
Love Hörnquist Åstrand
36033ab9d4 use krb5_crypto_set_params 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13808 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-04-26 20:08:42 +00:00
Johan Danielsson
26457b7135 replace krb5_free_creds_contents by krb5_free_cred_contents 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13790 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-04-25 19:25:35 +00:00
Love Hörnquist Åstrand
4fa6529707 use IV for envelopeddata encryption, patch originally from Luke Howard 
<lukeh@padl.com>, tweeked by me.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13776 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-04-25 14:29:33 +00:00
Love Hörnquist Åstrand
e597b84708 (generate_dh_keyblock): use the new function krb5_random_to_key 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13743 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-04-22 11:54:37 +00:00
Love Hörnquist Åstrand
7298e49a3f use the first proposed enable enctype 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13739 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-04-21 15:21:05 +00:00
Love Hörnquist Åstrand
35140ccefa at least try to handle diffrent enveloped enctypes 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13737 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-04-21 11:30:20 +00:00
Love Hörnquist Åstrand
2553080b05 replace the krb5.conf configuration option that describes the mapping 
between principals and subject names with a file, default
/var/heimdal/pki-mapping. XXX this should be pushed into HDB
XXX should add issuer too


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13727 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-04-17 09:01:35 +00:00
Love Hörnquist Åstrand
4121fc049e merge certificate/private_key to a user_id 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13726 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-04-17 08:43:40 +00:00
Love Hörnquist Åstrand
e6dca71033 update prototype for pk_initialize 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13725 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-04-16 09:00:18 +00:00
Love Hörnquist Åstrand
bb7814c980 adapt to heim_integer changes 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13723 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-04-16 00:38:36 +00:00
Love Hörnquist Åstrand
eac2949b39 adapt to heim_integer changes 
merge certificate/private_key to a user_id


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13721 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-04-15 23:44:02 +00:00
Love Hörnquist Åstrand
0f7b18e449 case size_t to unsigned long for LP64 platforms 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13678 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-04-02 21:09:46 +00:00
Love Hörnquist Åstrand
57826dfa7e update year 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13650 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-03-30 10:32:47 +00:00
Love Hörnquist Åstrand
3ea2077af8 stop the client from renewing tickets into the future 
From: Jeffrey Hutzelman <jhutz@cmu.edu>


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13646 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-03-30 09:19:14 +00:00
Love Hörnquist Åstrand
6c42be48d6 s/krb5_get_host_realm_int/_&/ 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13626 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-03-23 12:08:55 +00:00
Love Hörnquist Åstrand
0d2fb05db7 adapt to change of signature of _krb5_pk_load_openssl_id 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13608 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-03-21 18:48:35 +00:00
Love Hörnquist Åstrand
08d9c002c9 add --builtin-hdb command 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13548 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-03-19 20:09:43 +00:00
Love Hörnquist Åstrand
72ca40b845 add missing req argument to pk_mk_pa_reply 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13499 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-03-09 22:34:18 +00:00
Love Hörnquist Åstrand
d263741bef update prototype for pk_mk_pa_reply 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13498 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-03-09 22:18:57 +00:00
Love Hörnquist Åstrand
dc86c0f0f9 (pk_mk_pa_reply): add hdb_entry 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13497 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-03-09 22:16:40 +00:00
Love Hörnquist Åstrand
b7907c6862 pass client hdb_entry to pk_check_client 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13495 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-03-09 22:00:37 +00:00
Love Hörnquist Åstrand
9197bbb0c8 rename ca_dir to pkinit/x509_anchors since its more like that language 
in RFC3280


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13494 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-03-09 21:06:10 +00:00
Love Hörnquist Åstrand
288ae5fc9a add --disable-DES 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13455 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-03-07 17:10:46 +00:00
Love Hörnquist Åstrand
c0e634f6c4 document --detach and --disable-DES 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13454 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-03-07 17:10:14 +00:00
Love Hörnquist Åstrand
15af520f64 check if enctype is disabled before using it 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13453 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-03-07 17:06:01 +00:00
Love Hörnquist Åstrand
60e6ffb478 ifdef protect label that is only uesd with pkinit 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13451 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-03-07 16:40:58 +00:00
Love Hörnquist Åstrand
9fe5dfb67c on strange tcp error; log local port number and socket type 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13449 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-03-07 14:54:49 +00:00
Love Hörnquist Åstrand
6da4e2989e adapt to rename of oid_cmp to heim_oid_cmp 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13399 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-02-22 17:31:53 +00:00
Love Hörnquist Åstrand
9dac88f093 update error codes 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13396 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-02-20 21:42:34 +00:00
Love Hörnquist Åstrand
d85519e16d s/heim_big_integer/heim_integer/ 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13355 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-02-13 17:08:29 +00:00
Love Hörnquist Åstrand
e78b654fc1 adapt to asn1 bignum code, use HEIM_PKINIT errors 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13354 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2004-02-13 16:53:25 +00:00
Love Hörnquist Åstrand
8e42e1a3f4 add support for KDC side of DH PKINIT 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13158 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-11-26 00:44:54 +00:00
Love Hörnquist Åstrand
7afa1d35ae clean up 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13149 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-11-24 06:18:23 +00:00
Love Hörnquist Åstrand
e10d6ca29d print an error and turn of pkinit if openssl failed to load 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13146 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-11-24 04:36:06 +00:00
Love Hörnquist Åstrand
d8c5b10b7d (kdc_SOURCES): += pkinit.c 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13145 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-11-24 04:31:21 +00:00
Love Hörnquist Åstrand
0612f36a98 read pkinit (pki-muble) configuration options 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13144 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-11-24 04:30:13 +00:00
Love Hörnquist Åstrand
a81af4edb5 add pkinit support 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13143 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-11-24 04:19:43 +00:00
Love Hörnquist Åstrand
962356b65c add prototypes for pkinit 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13142 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-11-24 04:15:55 +00:00
Love Hörnquist Åstrand
c055731b98 PKINIT patch from Daniel Kouril and Petr Holub, I removed the 
dependency on valicert asn1 parser, remove smartcard and globus
support (for now). Work to be done on this: DH support, Globus
support, Smartcard support, windows support (MS implements -09 of the
draft), make it conform to the new draft


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13141 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-11-24 04:13:46 +00:00
Love Hörnquist Åstrand
4e48b5550c (tgs_rep2): don't free ticket, krb5_free_ticket does that now 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13103 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-11-09 00:58:03 +00:00
Johan Danielsson
ed1bc5a928 make sure that the server realm and the krbtgt second component are 
identical; get rpath from the capaths section


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13072 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-10-22 18:48:20 +00:00
Johan Danielsson
3cedc78b77 document recent changes 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13071 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-10-22 18:45:56 +00:00
Johan Danielsson
1461770557 change logic for when to check transited policy to a tri-state model 
involving per principal flags (to be implemented)


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13070 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-10-22 18:22:24 +00:00
Johan Danielsson
3ddd0c11e7 change enforce_transited_policy to a tri-state variable 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13069 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-10-22 18:19:11 +00:00