70ec67ed73
Remove signedness warnings.
Love Hörnquist Åstrand
2005-11-01 06:55:55 +00:00
7f2110c0ba
x
Love Hörnquist Åstrand
2005-10-31 16:07:59 +00:00
069a5f19a2
Document that gss_krb5_import_ccache is copy by reference.
Love Hörnquist Åstrand
2005-10-31 16:07:23 +00:00
4cc93f5d2e
(gss_krb5_import_ccache): Instead of making a copy of the ccache, make a reference by getting the name and resolving the name. This way the cache is shared, this flipp side is of course that if someone calls krb5_cc_destroy the cache is lost for everyone.
Love Hörnquist Åstrand
2005-10-31 16:02:08 +00:00
d4a3ad2adf
x
Love Hörnquist Åstrand
2005-10-31 15:59:30 +00:00
3cf6e96dbb
Remove memory leaks.
Love Hörnquist Åstrand
2005-10-31 15:59:11 +00:00
6cda86abca
x
Love Hörnquist Åstrand
2005-10-31 09:28:03 +00:00
f7f36911ed
(Data): Use right variable. From Tomas Olsson
Love Hörnquist Åstrand
2005-10-31 09:27:36 +00:00
9ccab13242
Maybe include <sys/param.h>.
Love Hörnquist Åstrand
2005-10-30 15:10:15 +00:00
c71a749176
Support DSA signature operations.
Love Hörnquist Åstrand
2005-10-29 10:59:21 +00:00
0e80fef74a
x
Love Hörnquist Åstrand
2005-10-29 10:57:46 +00:00
027488e89f
Add some X9.57 (DSA) oids, sort lines
Love Hörnquist Åstrand
2005-10-29 10:57:14 +00:00
0143ed18c7
Add some X9.57 (DSA) oids.
Love Hörnquist Åstrand
2005-10-29 10:55:52 +00:00
cfcfa2ad3f
Add some more tests.
Love Hörnquist Åstrand
2005-10-28 14:24:07 +00:00
6f657ec556
allow breaking early, print a dot for each certificate that is processed.
Love Hörnquist Åstrand
2005-10-28 14:16:23 +00:00
7f3c73aaec
Add all nist certificates.
Love Hörnquist Åstrand
2005-10-28 14:08:41 +00:00
ac8e06b969
Print that it started, it takes a while...
Love Hörnquist Åstrand
2005-10-28 14:08:13 +00:00
c62dae6184
control data to drive the NIST tests
Love Hörnquist Åstrand
2005-10-27 19:09:26 +00:00
f1a89fb37f
Use NIST test certificates to test the x509 stack.
Love Hörnquist Åstrand
2005-10-27 19:04:33 +00:00
881e730620
Spelling.
Love Hörnquist Åstrand
2005-10-27 13:21:42 +00:00
9b2fa77b4d
(krb5_ticket_get_authorization_data_type): understand KRB5_AUTHDATA_IF_RELEVANT and KRB5_AUTHDATA_AND_OR (but have KRB5_AUTHDATA_KDC_ISSUED commented out for now)
Love Hörnquist Åstrand
2005-10-27 13:18:25 +00:00
d8c4ce5bad
x
Love Hörnquist Åstrand
2005-10-26 19:47:06 +00:00
a271224bab
In the list caches view, rename the Status field to Expires.
Love Hörnquist Åstrand
2005-10-26 19:46:10 +00:00
085f3eb85c
x
Love Hörnquist Åstrand
2005-10-26 11:30:26 +00:00
c55b53060b
build test_kcred
Love Hörnquist Åstrand
2005-10-26 11:30:12 +00:00
b742a50cf7
Document gss_krb5_import_ccache
Love Hörnquist Åstrand
2005-10-26 11:29:34 +00:00
780dc8dd41
Sort and add gss_krb5_import_ccache.
Love Hörnquist Åstrand
2005-10-26 11:26:55 +00:00
8980a47d4a
x
Love Hörnquist Åstrand
2005-10-26 11:25:34 +00:00
a5755046b4
(_gssapi_krb5_ccache_lifetime): break out code used to extract lifetime from a credential cache
Love Hörnquist Åstrand
2005-10-26 11:25:16 +00:00
fc4f134e26
Add _gssapi_krb5_ccache_lifetime, used to extract lifetime from a credential cache.
Love Hörnquist Åstrand
2005-10-26 11:23:48 +00:00
4084884d71
add gss_krb5_import_ccache, reverse of gss_krb5_copy_ccache
Love Hörnquist Åstrand
2005-10-26 11:22:13 +00:00
afd104d9cd
test gss_krb5_import_ccache
Love Hörnquist Åstrand
2005-10-26 11:19:41 +00:00
abc2b55034
x
Love Hörnquist Åstrand
2005-10-26 10:17:15 +00:00
a95dbf7a69
Add variable INSTALL_CATPAGES that controls if cat pages are installed, defaults to true. From Johnny Lam <jlam@pkgsrc.org>.
Love Hörnquist Åstrand
2005-10-26 10:16:50 +00:00
65447e1a4b
Install krb5_set_password.3, Johnny Lam <jlam@pkgsrc.org>
Love Hörnquist Åstrand
2005-10-26 09:08:18 +00:00
9319b9dce1
Fix mdoc for krb5_encrypt_EncryptedData, Johnny Lam <jlam@pkgsrc.org>
Love Hörnquist Åstrand
2005-10-26 08:50:09 +00:00
b62b7a569e
More verbose errors.
Love Hörnquist Åstrand
2005-10-25 19:41:32 +00:00
8586ef823b
Check return value from asprintf instead of string != NULL since it undefined behavior on Linux. From Björn Sandell
Love Hörnquist Åstrand
2005-10-25 10:55:21 +00:00
74a52646aa
add missing }
Love Hörnquist Åstrand
2005-10-22 21:13:53 +00:00
e07d2b2d06
x
Love Hörnquist Åstrand
2005-10-22 17:18:07 +00:00
d448f74010
Check return value from asprintf instead of string != NULL since it undefined behavior on Linux. From Björn Sandell
Love Hörnquist Åstrand
2005-10-22 17:17:44 +00:00
af8272f96c
Check return value from asprintf instead of string != NULL since it undefined behavior on Linux. From Björn Sandell
Love Hörnquist Åstrand
2005-10-22 17:09:06 +00:00
8b804c1012
Check return value from asprintf instead of string != NULL since it undefined behavior on Linux. From Björn Sandell
Love Hörnquist Åstrand
2005-10-22 16:57:04 +00:00
36b34169c8
x
Love Hörnquist Åstrand
2005-10-22 15:08:17 +00:00
4863ea9553
Check return value from asprintf instead of string != NULL since it undefined behavior on Linux. From Björn Sandell
Love Hörnquist Åstrand
2005-10-22 15:07:48 +00:00
4232beb6e4
x
Love Hörnquist Åstrand
2005-10-22 14:19:01 +00:00
e5dc0153d3
Check return value from asprintf instead of string != NULL since it undefined behavior on Linux. From Björn Sandell
Love Hörnquist Åstrand
2005-10-22 14:18:19 +00:00
5f70cc361a
x
Love Hörnquist Åstrand
2005-10-22 13:16:07 +00:00
9dccedb6d3
Check return value from asprintf instead of string != NULL since it undefined behavior on Linux. From Björn Sandell
Love Hörnquist Åstrand
2005-10-22 13:15:43 +00:00
f74a40ff85
Check return value from asprintf instead of string != NULL since it undefined behavior on Linux. From Björn Sandell
Love Hörnquist Åstrand
2005-10-22 12:49:00 +00:00
993ae3a82f
(_krb5_dh_group_ok): if not enough bits are generated from the DH groups, fail.
Love Hörnquist Åstrand
2005-10-21 17:18:38 +00:00
3bfded2697
(get_dh_param): Pass down config so this function can check pkinit_dh_min_bits
Love Hörnquist Åstrand
2005-10-21 17:14:19 +00:00
b2698d9dc7
Fill in pkinit_dh_min_bits from configuration file.
Love Hörnquist Åstrand
2005-10-21 17:11:59 +00:00
2e2d62a9e5
Add pkinit_dh_min_bits to krb5_kdc_configuration.
Love Hörnquist Åstrand
2005-10-21 17:11:21 +00:00
9acc8d9033
x
Love Hörnquist Åstrand
2005-10-21 16:38:01 +00:00
b3da510397
x
Love Hörnquist Åstrand
2005-10-21 12:44:33 +00:00
bc4a1da9c6
(acquire_initiator_cred): use krb5_cc_cache_match to find a matching creditial cache, if that failes, fallback to the default cache.
Love Hörnquist Åstrand
2005-10-21 12:44:08 +00:00
19a7595ae2
x
Love Hörnquist Åstrand
2005-10-20 16:57:27 +00:00
256cf0f403
Remove untested patch that sneaked in.
Love Hörnquist Åstrand
2005-10-20 14:59:20 +00:00
8de40c5202
Add k_hasafs_recheck.
Love Hörnquist Åstrand
2005-10-20 14:53:01 +00:00
156ee39478
(k_hasafs_recheck): new function, allow rechecking if AFS client have started now, internaly it resets the internal state from k_hasafs() and retry retry the probing. The problem with calling k_hasaf() is that is plays around with signals, and that cases problem for some systems/applications.
Love Hörnquist Åstrand
2005-10-20 14:52:18 +00:00
ffd449e518
x
Love Hörnquist Åstrand
2005-10-20 13:38:32 +00:00
92c8cf86bc
x
Love Hörnquist Åstrand
2005-10-20 09:30:11 +00:00
8a06dac4ff
Add option to require binding between reply and response.
Love Hörnquist Åstrand
2005-10-20 09:29:19 +00:00
186339cc52
x
Love Hörnquist Åstrand
2005-10-19 21:30:23 +00:00
3c3052ff5f
Text about Kerberos errors.
Love Hörnquist Åstrand
2005-10-19 21:30:07 +00:00
b6574254f4
x
Love Hörnquist Åstrand
2005-10-19 21:16:04 +00:00
79146c3e71
Try both ReplyKey and ReplyKey-Win2k for the Windows case to support the updated -09 protocol (using asChecksum). Tell KDC we support this by sending KRB5-PADATA-PK-AS-09-BINDING in the pa-data.
Love Hörnquist Åstrand
2005-10-19 21:15:41 +00:00
2c6670fb89
x
Love Hörnquist Åstrand
2005-10-19 20:26:59 +00:00
b381016877
x
Love Hörnquist Åstrand
2005-10-19 17:36:48 +00:00
42ec2bd7b5
Test copy FILE -> FILE, and MEMORY -> MEMORY too.
Love Hörnquist Åstrand
2005-10-19 17:36:09 +00:00
9d8ec6711a
Test krb5_cc_copy_cache and krb5_cc_cache_match.
Love Hörnquist Åstrand
2005-10-19 17:31:39 +00:00
cc7855865c
(krb5_cc_cache_match): add function that iterates over all credential caches for a user and returns a match.
Love Hörnquist Åstrand
2005-10-19 17:30:40 +00:00
4107ec5557
Catch error returned by ->hdb_unlock. From Henry B. Hotz
Love Hörnquist Åstrand
2005-10-19 13:51:40 +00:00
af61e047fd
x
Love Hörnquist Åstrand
2005-10-19 07:40:49 +00:00
0a2f9014cc
Fix all prototypes, they got krb5_context argument wrong.
Love Hörnquist Åstrand
2005-10-19 07:39:01 +00:00
959cc8f926
Update .Dd and (c)
Love Hörnquist Åstrand
2005-10-19 07:37:27 +00:00
4269d4e6dc
Add krb5_cc_start_seq_get and an example.
Love Hörnquist Åstrand
2005-10-19 07:35:19 +00:00
91cb866ce3
Nits in the credential cache text.
Love Hörnquist Åstrand
2005-10-18 20:17:55 +00:00
2f0477a0b5
Try to explain krb5_ccache, krb5_principal and errors.
Love Hörnquist Åstrand
2005-10-18 20:11:25 +00:00
94b82109d3
x
Love Hörnquist Åstrand
2005-10-18 11:15:29 +00:00
6fcc9f4922
Specify that krb5_unparse_name sets name to NULL on failure.
Love Hörnquist Åstrand
2005-10-16 10:42:17 +00:00
7e25d8fb09
remove dump_config as there's a --dumpconfig for verify_krb5_conf now
Johan Danielsson
2005-10-13 15:44:21 +00:00
45d2b74ced
Add example how to use krb5_get_credentials.
Love Hörnquist Åstrand
2005-10-13 14:24:49 +00:00
8592c8225b
Clarifiying comment.
Love Hörnquist Åstrand
2005-10-13 03:30:14 +00:00
ac5ccfb7d6
x
Love Hörnquist Åstrand
2005-10-12 15:20:55 +00:00
5a5905fef1
Add gssapi_krb5_set_status and gssapi_krb5_clear_status
Love Hörnquist Åstrand
2005-10-12 15:20:37 +00:00
144885d37f
x
Love Hörnquist Åstrand
2005-10-12 12:52:55 +00:00
e42d007ce9
Rename private to opt_private.
Love Hörnquist Åstrand
2005-10-12 12:45:27 +00:00
296d9d6457
rename element private to opt_private to make c++ picky compilers less upset.
Love Hörnquist Åstrand
2005-10-12 12:41:04 +00:00
5d64a49fa7
(krb5_get_init_creds_opt): rename element private to opt_private to make cpp picky compilers less upset.
Love Hörnquist Åstrand
2005-10-12 12:39:28 +00:00
d29fd79920
x
Johan Danielsson
2005-10-12 09:48:39 +00:00
a703774dcd
document -x
Johan Danielsson
2005-10-12 09:48:31 +00:00
930f8ed46a
implement cprotect (from MIT)
Johan Danielsson
2005-10-12 09:46:56 +00:00
bc8df2efca
add -x (encrypt) option; implement cprotect (from MIT); make sure we CCC if switching to clear-text command channel
Johan Danielsson
2005-10-12 09:46:42 +00:00
8e29e3cb6f
if doing command line encryption (-x), ignore prot commands in .netrc
Johan Danielsson
2005-10-12 09:44:24 +00:00
0ef51c20cf
add -x (encrypt) option
Johan Danielsson
2005-10-12 09:42:47 +00:00
4bd45a62b8
x
Love Hörnquist Åstrand
2005-10-12 07:25:54 +00:00
72fabc6c6b
(spnego_reply): Don't pass back raw Kerberos errors, use GSS-API errors instead.
Love Hörnquist Åstrand
2005-10-12 07:25:18 +00:00