0fa8cd58ec
(der_print_heim_oid): use delim when printing.
Love Hörnquist Åstrand
2006-11-24 06:08:27 +00:00
dcb8f42f41
pkinit_allow_proxy_certificate=true
Love Hörnquist Åstrand
2006-11-24 05:12:03 +00:00
ad2a57913f
x
Love Hörnquist Åstrand
2006-11-23 18:28:41 +00:00
53d000b120
check that the getarg -- option works for delete and add.
Love Hörnquist Åstrand
2006-11-23 18:28:23 +00:00
23105c3230
x
Love Hörnquist Åstrand
2006-11-23 18:15:10 +00:00
3f3bf585c4
Test proxy cert.
Love Hörnquist Åstrand
2006-11-23 18:14:53 +00:00
03d0a158b8
(_krb5_pk_create_sign): stuff down the users certs in the pool to make sure a path is returned, without this proxy certificates wont work.
Love Hörnquist Åstrand
2006-11-23 18:13:47 +00:00
1a89ccbde3
(_hx509_calculate_path): allow to calculate optimistic path when we don't know the trust anchors, just follow the chain upward until we no longer find a parent or we hit the max limit.
Love Hörnquist Åstrand
2006-11-23 18:11:22 +00:00
b10833408a
regen
Love Hörnquist Åstrand
2006-11-23 18:09:59 +00:00
94d63f5092
(hx509_cms_create_signed_1): provide a best effort path to the trust anchors to be stored in the SignedData packet, if find parents until trust anchor or max length.
Love Hörnquist Åstrand
2006-11-23 18:08:23 +00:00
976c93b3e6
(krb5_get_init_creds_opt_free): allow free on NULL.
Love Hörnquist Åstrand
2006-11-23 16:27:36 +00:00
a0440ced16
(renew_func): if the initial ticket wasn't renewable from the beginning, not even try to renew it now.
Love Hörnquist Åstrand
2006-11-22 18:13:50 +00:00
f1e2992b43
x
Love Hörnquist Åstrand
2006-11-21 19:59:31 +00:00
c4cd047939
Make all pkinit options prefixed with pkinit_
Love Hörnquist Åstrand
2006-11-21 19:57:33 +00:00
473532da2a
update (c)
Love Hörnquist Åstrand
2006-11-21 08:08:46 +00:00
40363f06d7
x
Love Hörnquist Åstrand
2006-11-21 08:07:50 +00:00
9db7608772
(krb5_get_warn_dest): return warn_dest from krb5_context
Love Hörnquist Åstrand
2006-11-21 08:06:40 +00:00
7f09ad0520
document krb5_[gs]et_warn_dest
Love Hörnquist Åstrand
2006-11-21 07:55:20 +00:00
05c87d8f58
x
Love Hörnquist Åstrand
2006-11-21 05:18:06 +00:00
24d6d22312
Make KRB5-PADATA-S4U2SELF pa type 129.
Love Hörnquist Åstrand
2006-11-21 05:17:47 +00:00
213255c32a
Drop KRB5_KU_TGS_IMPERSONATE.
Love Hörnquist Åstrand
2006-11-21 05:15:36 +00:00
b9624a871d
Use KRB5_KU_OTHER_CKSUM for the impersonate checksum.
Love Hörnquist Åstrand
2006-11-21 05:14:43 +00:00
7624883fb4
Make krb5_get_init_creds_opt_free take a context argument.
Love Hörnquist Åstrand
2006-11-20 18:41:57 +00:00
240d98f20f
x
Love Hörnquist Åstrand
2006-11-20 18:14:57 +00:00
ece5f9603e
Make krb5_get_init_creds_opt_free take a context argument.
Love Hörnquist Åstrand
2006-11-20 18:12:41 +00:00
ebc7f63d48
x
Love Hörnquist Åstrand
2006-11-19 04:17:40 +00:00
8466eac79d
revert the enable-pkinit change, and make it consistant with all other other enable- options
Love Hörnquist Åstrand
2006-11-19 04:16:49 +00:00
f5bb642011
x
Love Hörnquist Åstrand
2006-11-19 04:16:22 +00:00
87ade2d6ad
revert previous
Love Hörnquist Åstrand
2006-11-19 04:14:03 +00:00
30e35fb625
rename enable-digest to digest_enable
Love Hörnquist Åstrand
2006-11-19 04:12:43 +00:00
e57d3c0cae
fix spelling
Love Hörnquist Åstrand
2006-11-17 22:33:21 +00:00
8fa5515700
x
Love Hörnquist Åstrand
2006-11-17 22:27:25 +00:00
5b7701514e
Make all pkinit options prefixed with pkinit_
Love Hörnquist Åstrand
2006-11-17 22:27:01 +00:00
61623b636c
Make app pkinit options prefixed with pkinit_
Love Hörnquist Åstrand
2006-11-17 22:20:25 +00:00
e299db5039
(krb5_c_keylengths): make compile again.
Love Hörnquist Åstrand
2006-11-17 22:17:46 +00:00
20a7bd7a29
Update krb5_c_keylengths
Love Hörnquist Åstrand
2006-11-17 22:09:25 +00:00
0afc3bb28a
(krb5_c_keylengths): rename.
Love Hörnquist Åstrand
2006-11-17 22:06:07 +00:00
3719ad0089
(krb5_c_keylength): mit changed the api, deal.
Love Hörnquist Åstrand
2006-11-17 22:04:54 +00:00
4e200bc2d5
Add krb5_enctype_keybits.
Love Hörnquist Åstrand
2006-11-17 21:58:47 +00:00
f6a0b79caf
x
Love Hörnquist Åstrand
2006-11-16 15:08:26 +00:00
aaf8aff1c6
(hx509_get_error_string): Put ", " between strings in error message.
Love Hörnquist Åstrand
2006-11-16 15:08:09 +00:00
210162ce80
Test that token keys are the same, return actual_mech.
Love Hörnquist Åstrand
2006-11-16 07:27:07 +00:00
142d5bba6f
x
Love Hörnquist Åstrand
2006-11-16 06:54:26 +00:00
18023278c3
We shouldn't be running /bin/ls under valgrind, but for now, at least make it easier to see any other warnings. From Andrew Bartlett.
Love Hörnquist Åstrand
2006-11-16 06:54:13 +00:00
e1cc3a8396
Info.plist.in
Love Hörnquist Åstrand
2006-11-15 12:24:59 +00:00
98cd4ae20b
Resources
Love Hörnquist Åstrand
2006-11-15 12:20:26 +00:00
317383fd3d
Talk about how far the build have progressed.
Love Hörnquist Åstrand
2006-11-15 12:16:51 +00:00
ea44c62ad1
x
Love Hörnquist Åstrand
2006-11-15 12:10:31 +00:00
224784eb7e
clean after ourself.
Love Hörnquist Åstrand
2006-11-15 12:10:11 +00:00
d38439bc09
x
Love Hörnquist Åstrand
2006-11-15 12:03:38 +00:00
8cff9246fb
how to build a mac package
Love Hörnquist Åstrand
2006-11-15 12:03:09 +00:00
07a8f134e8
Make bitfields unsigned, add maybe_open.
Love Hörnquist Åstrand
2006-11-15 11:37:25 +00:00
a4908290ac
x
Love Hörnquist Åstrand
2006-11-15 11:10:54 +00:00
b60aecaebf
Use ASN.1 encoder functions to encode CHOICE structure now that we can handle it.
Love Hörnquist Åstrand
2006-11-15 11:10:46 +00:00
062328fffc
x
Love Hörnquist Åstrand
2006-11-15 10:31:33 +00:00
75b517309f
(_gss_spnego_accept_sec_context): send back ad accept_completed when the security context is ->open, w/o this the client doesn't know that the server have completed the transaction.
Love Hörnquist Åstrand
2006-11-15 10:31:21 +00:00
db9e36b915
x
Love Hörnquist Åstrand
2006-11-15 10:19:54 +00:00
0be2851d8e
Add delegate flag and check that the delegated cred works.
Love Hörnquist Åstrand
2006-11-15 10:19:41 +00:00
c00799be18
Keep track of the opportunistic token in the inital message, it might be a complete gss-api context, in that case we'll get back accept_completed without any token. With this change, krb5 w/o mutual authentication works.
Love Hörnquist Åstrand
2006-11-15 10:18:55 +00:00
c8fd5412ce
Use ASN.1 encoder functions to encode CHOICE structure now that we can handle it.
Love Hörnquist Åstrand
2006-11-15 09:01:45 +00:00
8f4072982a
Add dce-style context building test.
Love Hörnquist Åstrand
2006-11-15 08:49:28 +00:00
0f08e9941a
test more combination of context building
Love Hörnquist Åstrand
2006-11-15 08:45:51 +00:00
774e93dac2
Filter out SPNEGO from the out supported mechs list and make sure we don't select that for the preferred mechamism.
Love Hörnquist Åstrand
2006-11-15 08:42:36 +00:00
576019c819
x
Love Hörnquist Åstrand
2006-11-14 12:35:04 +00:00
f34964d46f
(_gss_mech_cred_find): break out the cred finding to its own function
Love Hörnquist Åstrand
2006-11-14 12:33:11 +00:00
882845f819
x
Love Hörnquist Åstrand
2006-11-14 10:05:56 +00:00
92486672bd
Better error strings, from Andrew Bartlet.
Love Hörnquist Åstrand
2006-11-14 09:49:56 +00:00
891f46953e
x
Love Hörnquist Åstrand
2006-11-14 09:48:24 +00:00
8e8a2d46f4
Forward decl.
Love Hörnquist Åstrand
2006-11-14 09:47:07 +00:00
3e0139bc20
x
Love Hörnquist Åstrand
2006-11-13 18:06:45 +00:00
00bcd44370
Switch from using a specific error message context in the TLS to have a whole krb5_context in TLS. This have some interestion side-effekts for the configruration setting options since they operate on per-thread basis now.
Love Hörnquist Åstrand
2006-11-13 18:02:57 +00:00
a16e0b633c
Create our own krb5_context.
Love Hörnquist Åstrand
2006-11-13 18:01:39 +00:00
073e1a2052
(fill_zeros): stop using MIN.
Love Hörnquist Åstrand
2006-11-13 17:45:27 +00:00
9cfefab1b3
Forward decl
Love Hörnquist Åstrand
2006-11-13 17:39:45 +00:00
bbb3facabd
x
Love Hörnquist Åstrand
2006-11-13 10:11:33 +00:00
c1fc563b38
switch to test.h5l.se
Love Hörnquist Åstrand
2006-11-13 10:09:12 +00:00
b88907807b
x
Love Hörnquist Åstrand
2006-11-13 09:01:20 +00:00
d1aeb0f6ce
When calling ->gm_set_cred_option and checking for success, use GSS_S_COMPLETE. From Andrew Bartlet.
Love Hörnquist Åstrand
2006-11-13 08:59:43 +00:00
3580cf19b8
Change realm to TEST.H5L.SE
Love Hörnquist Åstrand
2006-11-13 08:22:52 +00:00
edd8dd277c
x
Love Hörnquist Åstrand
2006-11-13 08:20:46 +00:00
73d8cedc12
x
Love Hörnquist Åstrand
2006-11-13 08:20:13 +00:00
8835bc2f1f
Update all strings
Love Hörnquist Åstrand
2006-11-13 08:19:07 +00:00
ef6a951382
SE not ORG
Love Hörnquist Åstrand
2006-11-13 07:44:50 +00:00
bd69f9fb24
regen with TEST.H5L.SE
Love Hörnquist Åstrand
2006-11-13 05:50:22 +00:00
17fd0d123f
use TEST2.H5L.SE
Love Hörnquist Åstrand
2006-11-13 05:41:55 +00:00
6a065ff0a7
use TEST.H5L.SE
Love Hörnquist Åstrand
2006-11-13 05:41:54 +00:00
314fb19bfd
Use TEST.H5L.ORG instead of EXAMPLE.ORG
Love Hörnquist Åstrand
2006-11-13 05:34:56 +00:00
19712268d7
x
Love Hörnquist Åstrand
2006-11-13 05:32:46 +00:00
cfb4caacee
Use NOTHERE.H5L.SE.
Love Hörnquist Åstrand
2006-11-13 05:28:43 +00:00
e53d2e7d9a
Use 127.0.0.2 to make us slightly diffrent from the rest of the world.
Love Hörnquist Åstrand
2006-11-13 05:11:39 +00:00
fc7e9e82d2
x
Love Hörnquist Åstrand
2006-11-13 05:06:30 +00:00
feca1fb894
Fill in hints for picky getaddrinfo()s.
Love Hörnquist Åstrand
2006-11-13 05:06:08 +00:00
8ba76d2ba8
Set sin_len if it exists.
Love Hörnquist Åstrand
2006-11-13 05:01:03 +00:00
35ac6d4651
Use plugin for the other realm locate types too.
Love Hörnquist Åstrand
2006-11-13 04:46:37 +00:00
b000964b53
x
Love Hörnquist Åstrand
2006-11-12 21:49:19 +00:00
1bbf3e6917
update (c)
Love Hörnquist Åstrand
2006-11-12 21:42:18 +00:00
f6b6bb58e3
Add plugin types.
Love Hörnquist Åstrand
2006-11-12 21:40:19 +00:00
ec21016cde
Read config file and allow multi directories.
Love Hörnquist Åstrand
2006-11-12 21:39:43 +00:00
Love Hörnquist Åstrand