Commit Graph

17081 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
f1e2dae0f6 Check return values from seteuid, prompted by MIT advisory.
Thanks to Tom Yu at MIT, and Michael Calmer and Marcus Meissner at SUSE.
Either of CVE-2006-3083 or CVE-2006-3084.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17874 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-08 21:08:46 +00:00
Love Hörnquist Åstrand
7160948ea6 Add comment by seteuid call isn't not needed.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17873 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-08 21:06:11 +00:00
Love Hörnquist Åstrand
7154d3b11d Check return values from seteuid, prompted by MIT advisory.
Thanks to Tom Yu at MIT, and Michael Calmer and Marcus Meissner at SUSE.
Either of CVE-2006-3083 or CVE-2006-3084.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17872 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-08-08 21:03:26 +00:00
Love Hörnquist Åstrand
702b7b61f4 rename command to supported-mechanisms
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17871 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-22 14:54:05 +00:00
Love Hörnquist Åstrand
7b226efc09 rename command to supported-mechanisms
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17870 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-22 14:48:58 +00:00
Love Hörnquist Åstrand
f60c032c64 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17869 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-22 02:37:29 +00:00
Love Hörnquist Åstrand
d88a0c2607 Make gss objects depend on the slc built gss-commands.h
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17868 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-22 02:37:08 +00:00
Love Hörnquist Åstrand
feb36e2e72 Add the slc file gss-commands.in to gss program
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17867 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-21 09:06:52 +00:00
Love Hörnquist Åstrand
5a4d04ed30 remove aes-192
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17866 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 21:37:17 +00:00
Love Hörnquist Åstrand
0cc87e8758 Remove more CMS bits.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17865 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 21:37:16 +00:00
Love Hörnquist Åstrand
45445f0304 make chap work too (needed for eap-md5)
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17864 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 13:33:43 +00:00
Love Hörnquist Åstrand
36a68f2522 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17863 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 11:23:25 +00:00
Love Hörnquist Åstrand
80e3f2716a Remove CMS symmetric encryption support.
Add DigestProtocol.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17862 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 11:23:07 +00:00
Love Hörnquist Åstrand
a51123b032 DigestProtocol
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17861 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 11:22:36 +00:00
Love Hörnquist Åstrand
af73b8f85f x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17860 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 10:58:02 +00:00
Love Hörnquist Åstrand
fdcc12bca6 Remove CMS symmetric encryption support.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17859 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 10:57:44 +00:00
Love Hörnquist Åstrand
ab33ecb1ab Remove CMS symmetric encryption support.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17858 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 10:48:26 +00:00
Love Hörnquist Åstrand
3a7f18784a Avoid calling sl_command w/o command name.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17857 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 10:27:50 +00:00
Love Hörnquist Åstrand
e976877e0c more name testing
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17856 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 05:13:25 +00:00
Love Hörnquist Åstrand
908ffa6950 test names
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17855 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 05:02:14 +00:00
Love Hörnquist Åstrand
2524317450 add slc commands for gss
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17854 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 04:26:05 +00:00
Love Hörnquist Åstrand
43c4d28c5a use slc
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17853 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 04:25:45 +00:00
Love Hörnquist Åstrand
6fc08c2f0a Remove dup prototype of _gsskrb5_init()
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17852 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 03:53:31 +00:00
Love Hörnquist Åstrand
700548d8f3 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17851 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 02:31:16 +00:00
Love Hörnquist Åstrand
e99cae2284 Add test_cfx
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17850 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 02:30:53 +00:00
Love Hörnquist Åstrand
492e9f9da2 add GSS_KRB5_REGISTER_ACCEPTOR_IDENTITY_X
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17849 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 02:30:07 +00:00
Love Hörnquist Åstrand
a2ea91c906 catch GSS_KRB5_REGISTER_ACCEPTOR_IDENTITY_X
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17848 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 02:29:13 +00:00
Love Hörnquist Åstrand
24397fd675 reimplement gsskrb5_register_acceptor_identity
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17847 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 02:28:37 +00:00
Love Hörnquist Åstrand
e177561ec2 implement gsskrb5_register_acceptor_identity
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17846 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 02:18:08 +00:00
Love Hörnquist Åstrand
400ccc768d add GSS_KRB5_REGISTER_ACCEPTOR_IDENTITY_X
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17845 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 02:17:00 +00:00
Love Hörnquist Åstrand
bccfb8cbf4 call _gss_load_mech
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17844 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 02:04:00 +00:00
Love Hörnquist Åstrand
00e06e0965 (gss_inquire_cred): call _gss_load_mech
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17843 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 02:03:18 +00:00
Love Hörnquist Åstrand
c8823f15de Make _gss_load_mech() atomic and run only once, this have the side
effect that _gss_mechs and _gss_mech_oids is only initialized once, so
if just the users of these two global variables calls _gss_load_mech()
first, it will act as a barrier and make sure the variables are never
changed and we don't need to lock them.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17842 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 02:01:56 +00:00
Love Hörnquist Åstrand
dceb8d0ad3 no need to mark functions extern.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17841 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 01:48:25 +00:00
Love Hörnquist Åstrand
9b06a35e57 no need to mark _gss_find_mn extern.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17840 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 01:47:51 +00:00
Love Hörnquist Åstrand
c54d474c55 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17839 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-20 01:41:22 +00:00
Love Hörnquist Åstrand
610f467aca Redo the wrap length calculations.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17838 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-19 14:17:05 +00:00
Love Hörnquist Åstrand
430246f106 Expose the wrap length calculations in cfx for external testing.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17837 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-19 14:16:33 +00:00
Love Hörnquist Åstrand
8938caad35 test max_wrap_size in cfx.c
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17836 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-19 14:15:07 +00:00
Love Hörnquist Åstrand
401ac054a8 Handle more error codes.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17835 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-19 11:02:33 +00:00
Love Hörnquist Åstrand
0171fbdfdb x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17834 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-14 02:31:56 +00:00
Love Hörnquist Åstrand
c86020bf6d (format_field): optionally print issuer and anchor.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17833 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-14 02:31:30 +00:00
Love Hörnquist Åstrand
cbd3b00c19 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17832 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-13 18:38:20 +00:00
Love Hörnquist Åstrand
615106f750 (_kdc_pk_check_client): make it not crash when there are no acl
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17831 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-13 18:37:58 +00:00
Love Hörnquist Åstrand
fea203a708 (_kdc_pk_check_client): use the acl in the kerberos database
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17830 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-13 18:32:45 +00:00
Love Hörnquist Åstrand
c0c59a96f2 Rename HDB-Ext-PKINIT-certificate to HDB-Ext-PKINIT-hash.
Add trust anchor to HDB-Ext-PKINIT-acl.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17829 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-13 18:22:22 +00:00
Love Hörnquist Åstrand
ae8b26789f rename asn1_HDB_Ext_PKINIT_certificate to asn1_HDB_Ext_PKINIT_hash
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17828 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-13 18:20:31 +00:00
Love Hörnquist Åstrand
5575d427b3 Add hdb_entry_get_pkinit_hash().
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17827 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-13 18:18:50 +00:00
Love Hörnquist Åstrand
2cdda8a767 (_gsskrb5_accept_sec_context): use GSS_C_NO_NAME
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17826 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-10 18:28:22 +00:00
Love Hörnquist Åstrand
c2de386016 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17825 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-07-10 17:03:52 +00:00