b5c8c913bc
x
Love Hörnquist Åstrand
2005-10-07 08:54:59 +00:00
a705696f64
Match error code with pk-init-27.
Love Hörnquist Åstrand
2005-10-07 08:53:50 +00:00
29bab5c5f9
Update error codes. Add name to group. Change return value of _krb5_dh_group_ok.
Love Hörnquist Åstrand
2005-10-07 08:53:15 +00:00
71b2f65b0d
Provide forward declartion of krb5_dh_moduli.
Love Hörnquist Åstrand
2005-10-07 06:27:14 +00:00
178e4c0087
Add support for reading a moduli-file for DH parameters.
Love Hörnquist Åstrand
2005-10-07 04:37:28 +00:00
7f2116e65f
Add tests for parse and print functions for heim_integer.
Love Hörnquist Åstrand
2005-10-07 03:49:57 +00:00
7c785284bd
Add parse and print functions for heim_integer.
Love Hörnquist Åstrand
2005-10-07 03:49:16 +00:00
5b3597703d
Document --list-caches
Love Hörnquist Åstrand
2005-10-06 19:59:16 +00:00
737b532df0
Change short flag of --list-caches to -l (-v is already used).
Love Hörnquist Åstrand
2005-10-06 19:56:38 +00:00
ce87d34e7c
x
Love Hörnquist Åstrand
2005-10-04 09:02:34 +00:00
1e22f60639
Validate that issuerAltName and subjectAltName isn't empty.
Love Hörnquist Åstrand
2005-10-04 08:59:54 +00:00
af4ec70bf2
x
Love Hörnquist Åstrand
2005-10-03 14:25:17 +00:00
c6df2af5e9
RFC 1510 was obsoleted by 4120.
Love Hörnquist Åstrand
2005-10-03 14:24:36 +00:00
1b5f2b7362
(init_ccapi): return kerberos errors, callers expect it (acc_get_cache_first): don't leak memory or abort on malloc failure
Love Hörnquist Åstrand
2005-10-03 08:44:18 +00:00
fcad6caa4c
x
Love Hörnquist Åstrand
2005-10-02 14:38:40 +00:00
183b07583a
Update text about Kerberos RFC's.
Love Hörnquist Åstrand
2005-10-02 14:38:04 +00:00
addf150924
Mac OS X 10.4 needs a runtime check if we are going to use the syscall, there is no cpp define to use to check the version. Every after 10.0 (darwin 8.0) uses the /dev/ version of the pioctl.
Love Hörnquist Åstrand
2005-10-02 03:17:06 +00:00
9cfdb7f017
Maybe include <sys/sysctl.h>.
Love Hörnquist Åstrand
2005-10-02 03:14:47 +00:00
2a6e781bff
x
Love Hörnquist Åstrand
2005-10-01 03:41:33 +00:00
cd2ce0c2a6
Add option --list-caches that lists the avaible caches and their status.
Love Hörnquist Åstrand
2005-10-01 03:39:59 +00:00
02a6d6bf99
Return KRB5_CC_NOSUPP for ccErrServerUnavailable.
Love Hörnquist Åstrand
2005-10-01 03:37:12 +00:00
a1ed69cd38
x
Love Hörnquist Åstrand
2005-10-01 02:56:32 +00:00
c9f13ad9b3
Support the new MacOS X 10.4 ioctl interface that is a device node. Patched from Tomas Olson <tol@it.su.se>.
Love Hörnquist Åstrand
2005-10-01 02:55:55 +00:00
5be5faa722
Use all DES keys, not just des-cbc-md5, verify that they all are the same.
Love Hörnquist Åstrand
2005-09-30 11:20:53 +00:00
5cfc8bd58c
Implement the cache iteration functions.
Love Hörnquist Åstrand
2005-09-30 11:16:04 +00:00
5ddc2e0774
Implement the cache iteration functions.
Love Hörnquist Åstrand
2005-09-30 10:10:09 +00:00
5eb65a941e
Test the new cache iteration functions.
Love Hörnquist Åstrand
2005-09-30 10:08:01 +00:00
e0a769c950
Add cache iteration funcations. Add internal allocation function for the memory of a krb5_ccache, and use it.
Love Hörnquist Åstrand
2005-09-30 10:07:26 +00:00
f8dce1d55e
x
Love Hörnquist Åstrand
2005-09-28 03:07:19 +00:00
aa37b056a2
Check for <stdint.h> and uintptr_t
Love Hörnquist Åstrand
2005-09-28 03:06:36 +00:00
38c5dbe857
Move rk_UNCONST to roken.h.in since it might use uintptr_t depending on avaibility.
Love Hörnquist Åstrand
2005-09-28 03:05:58 +00:00
2440d579fb
Include <stdint.h> if it exists. If avaiable, use uintptr_t to define rk_UNCONST.
Love Hörnquist Åstrand
2005-09-28 03:04:54 +00:00
754eec0f53
Remove leftovers, remove extra space.
Love Hörnquist Åstrand
2005-09-26 05:38:55 +00:00
388b0ffca4
More verbose PK-INIT logging.
Love Hörnquist Åstrand
2005-09-25 15:23:21 +00:00
61b1ea80de
The public DH key is encoded as an INTEGER in subjectPublicKey. Don't verify OID's for now.
Love Hörnquist Åstrand
2005-09-25 15:18:14 +00:00
70a6c9a2e4
Support cached DH variable (still need to store it though), don't check the oid of the DH signedData for now.
Love Hörnquist Åstrand
2005-09-25 15:14:31 +00:00
8191484ee6
Wrap DH public key in a ASN.1 INTEGER wrapping.
Love Hörnquist Åstrand
2005-09-23 05:47:13 +00:00
3f70dd507f
x
Love Hörnquist Åstrand
2005-09-23 05:30:50 +00:00
a6a2a09c88
(gen_files_rfc2459) += asn1_DHPublicKey.x
Love Hörnquist Åstrand
2005-09-23 05:29:29 +00:00
3b929ad31f
Add DHPublicKey, and INTEGER to for storing the DH public key in the SubjectPublicKeyInfo.subjectPublicKey BIT STRING.
Love Hörnquist Åstrand
2005-09-23 05:27:57 +00:00
f0bf8a5c1e
(krb5_rd_cred): try both the session key and the sender subkey. Both RFC1510 and RFC4120 say that you have to use the session key, Heimdal uses subkey.
Love Hörnquist Åstrand
2005-09-23 03:37:57 +00:00
57dfd2209e
(libroken_la_SOURCES) += dumpdata.c
Love Hörnquist Åstrand
2005-09-23 00:02:50 +00:00
e0cb46351f
Add rk_dumpdata.
Love Hörnquist Åstrand
2005-09-22 23:52:24 +00:00
47be0b2203
Add rk_dumpdata() that write a chunk of data into a file for later processing by some other tool (like asn1_print).
Love Hörnquist Åstrand
2005-09-22 23:51:35 +00:00
f498bc66ae
Implement correct DH for -27, now working with client.
Love Hörnquist Åstrand
2005-09-22 13:41:01 +00:00
defb6d5697
Don't check oid's too closely, they change in Windows Vista.
Love Hörnquist Åstrand
2005-09-22 04:18:05 +00:00
28d0ef8d96
Move DH support from -19 to -27.
Love Hörnquist Åstrand
2005-09-21 00:40:32 +00:00
c957c952ca
x
Love Hörnquist Åstrand
2005-09-21 00:31:45 +00:00
2c7a8d4dca
TSequenceOf/TSetOf: Increase the length of the array after successful decoding the next element, so that the array don't contain heap-data.
Love Hörnquist Åstrand
2005-09-21 00:30:37 +00:00
c850268273
Disable sending -19, fix parsing -27 of the protocol.
Love Hörnquist Åstrand
2005-09-20 23:21:36 +00:00
0b55d28880
Remove double free, now pk-init works again.
Love Hörnquist Åstrand
2005-09-20 22:18:24 +00:00
e6aa3d7e6b
Ignore __i686.get_pc_thunk.
Love Hörnquist Åstrand
2005-09-20 20:41:04 +00:00
39b04f72d8
Support PK-INIT-27 DH (and remove -19)
Love Hörnquist Åstrand
2005-09-20 19:10:29 +00:00
fa4a72a52b
(pk_verify_chain_standard): set cert to NULL to make sure its not freed.
Love Hörnquist Åstrand
2005-09-20 19:06:40 +00:00
ce7c2af147
(krb5_DES_string_to_key): If the opaque length it set to 1, and content is 0x01, use the afs3 string-to-key.
Love Hörnquist Åstrand
2005-09-19 22:13:54 +00:00
d0af14e4fe
(make_etype_info2_entry): When its a afs3-salted key, use send the opaque, length 1 (with content set to 0x01) in ETYPE-INFO2-ENTRY.
Love Hörnquist Åstrand
2005-09-19 22:01:04 +00:00
9ea6ec2caa
Remove signedness warnings.
Love Hörnquist Åstrand
2005-09-19 20:23:05 +00:00
baee68592b
x
Love Hörnquist Åstrand
2005-09-19 16:42:21 +00:00
0640ce0c14
x
Love Hörnquist Åstrand
2005-09-19 14:21:22 +00:00
f6d60e2846
x
Love Hörnquist Åstrand
2005-09-15 21:59:09 +00:00
f22d629100
Use libtool's default values for building shared/static libaries, ie remove AC_ENABLE_SHARED(no), solves building problems users have on Mac OS X.
Love Hörnquist Åstrand
2005-09-15 21:58:45 +00:00
c30c8e2e42
x
Love Hörnquist Åstrand
2005-09-14 15:55:20 +00:00
ae8b9cd3fb
Cast to unsigned char to avoid warning.
Love Hörnquist Åstrand
2005-09-14 15:54:27 +00:00
f47adcff7d
Register pkcs11 module.
Love Hörnquist Åstrand
2005-09-14 15:53:53 +00:00
7f1ab5f9e8
x
Love Hörnquist Åstrand
2005-09-13 20:19:37 +00:00
52ec27616b
cast to unsigned char to make sure its not negative when passing it to is* functions
Love Hörnquist Åstrand
2005-09-13 20:19:11 +00:00
be827bd01d
x
Love Hörnquist Åstrand
2005-09-13 19:43:49 +00:00
b23278e0c5
(PKCS8PrivateKeyInfo): Inline SET OF to avoid compiler "feature"
Love Hörnquist Åstrand
2005-09-13 19:41:29 +00:00
84b70dac40
Avoid signedness warnings.
Love Hörnquist Åstrand
2005-09-13 19:40:30 +00:00
272cc63375
Makes bytes native platform signed to avoid casting everywhere
Love Hörnquist Åstrand
2005-09-13 19:37:27 +00:00
b9a6e93c62
Don't depend on malloc(very-very-larger-value) will fail. Cast to unsigned long before printing size_t.
Love Hörnquist Åstrand
2005-09-13 19:36:17 +00:00
a1d193721c
Don't depend on malloc(very-very-larger-value) will fail.
Love Hörnquist Åstrand
2005-09-13 19:35:32 +00:00
3b70a5f5e3
Fix signedness warnings.
Love Hörnquist Åstrand
2005-09-13 19:24:23 +00:00
9eebea050b
unput() have to hanppen in actions for flex 2.5.31, can do them in user code sesction, so move up handle_comment and handle_string into action, not much sharing was done anyway.
Love Hörnquist Åstrand
2005-09-13 18:17:16 +00:00
fc894dcecf
Removed wrong variable.
Love Hörnquist Åstrand
2005-09-09 12:04:38 +00:00
326478ac32
(check_directory): use passed directory name
Love Hörnquist Åstrand
2005-09-09 10:33:33 +00:00
dea6f6cdf8
(test_one_int): len and len_len is size_t
Love Hörnquist Åstrand
2005-09-09 04:57:08 +00:00
2c714acde1
Constify password.
Love Hörnquist Åstrand
2005-09-08 11:38:01 +00:00
c032b2bfd5
x
Love Hörnquist Åstrand
2005-09-08 11:31:36 +00:00
ee050659b1
Constify password
Love Hörnquist Åstrand
2005-09-08 11:30:53 +00:00
6d0ecf1803
Add KRB5_TL_PKINIT_ACL.
Love Hörnquist Åstrand
2005-09-08 11:28:45 +00:00
819d3ee297
(create_random_entry): create principal with random password even though its disabled. From Andrew Bartlet <abartlet@samba.org>
Love Hörnquist Åstrand
2005-09-08 11:06:09 +00:00
d4910426eb
x
Love Hörnquist Åstrand
2005-09-05 10:31:31 +00:00
3e5fc8944f
Document krb5_rd_req.
Love Hörnquist Åstrand
2005-09-05 07:56:09 +00:00
6678d249d9
x
Love Hörnquist Åstrand
2005-09-05 05:45:57 +00:00
06a654ed20
MAN_mans+= krb5_mk_req.3
Love Hörnquist Åstrand
2005-09-05 05:45:33 +00:00