Commit Graph

  • 9eab344d35 gss: don't leak client_cred in test_context Luke Howard 2020-04-16 07:13:16 +00:00
  • 33137a8c82 gss: allow source/target to be null on export/import Luke Howard 2020-04-14 12:34:44 +10:00
  • 865fffb0f5 gss: fix typo regression in setting minor_status Luke Howard 2020-04-16 10:44:04 +10:00
  • 354d76f63a Improve coverage script a bit Nicolas Williams 2020-04-15 18:48:26 -05:00
  • 2c8fa27224 gss: use _gss_secure_release_buffer_[set] Luke Howard 2020-04-15 16:20:06 +10:00
  • 689eef20ec gss: add _gss_secure_release_buffer_set() Luke Howard 2020-04-15 16:11:42 +10:00
  • b2eb5b0edf gss: add _gss_secure_release_buffer() Luke Howard 2020-04-15 15:59:01 +10:00
  • 1611ac457f krb5: allow NULL authenticator in krb5_auth_con_free() Luke Howard 2020-04-14 12:37:56 +10:00
  • d2880425e5 Fix Coveralls badge to master branch Nicolas Williams 2020-04-14 20:48:19 -05:00
  • 3bdd074595 Recover coverage data on more files Nicolas Williams 2020-04-14 19:23:39 -05:00
  • 4411448bfd krb5: always zero elastic storage Luke Howard 2020-04-15 08:58:27 +10:00
  • a7c332700d Add Coveralls badge to README.md Nicolas Williams 2020-04-14 17:03:05 -05:00
  • 4ac8d44f14 Send coverage data from Travis to Coveralls Nicolas Williams 2020-04-14 05:04:00 -05:00
  • ed41592876 krb5: use memset_s() in krb5_free_keyblock_contents() Luke Howard 2020-04-14 20:21:09 +10:00
  • baeebd4113 gss: check for replays in test_context Luke Howard 2020-04-14 20:02:59 +10:00
  • 8fad2cf5c3 gss: don't use heim_assert() in test_context Luke Howard 2020-04-14 17:27:55 +10:00
  • 73a5bc8499 gss: make gss_compare_name comply with RFC2743 Luke Howard 2020-04-14 14:46:32 +10:00
  • 846c839cbf gss: add tests for importing and exporting contexts Luke Howard 2020-04-14 12:33:25 +10:00
  • 9a9aaa078c gss: allow gss_set_sec_context_option() to allocate a context Luke Howard 2020-04-14 12:36:55 +10:00
  • b73c9cc063 gss: add support for gss_duplicate_cred() in SPNEGO Luke Howard 2020-04-13 20:53:35 +10:00
  • 9eb01c66e9 gss: remove superfluous SPNEGO cred wrappers Luke Howard 2020-04-13 20:51:44 +10:00
  • 2d2d8a0979 gss: fix test_acquire_cred usage description Luke Howard 2020-04-13 13:53:44 +10:00
  • 7df0195c26 gss: fix downlevel Windows interop regression Luke Howard 2020-04-09 22:51:30 +10:00
  • 0cb752258e gss: remove GSS_C_MA_AUTH_INIT_ANON from krb5 mech Luke Howard 2020-04-13 09:42:29 +10:00
  • 3b7aae7fce gss: order SPNEGO proposed mechs by req_flags Luke Howard 2020-04-07 12:39:43 +10:00
  • 1c74afb01a roken: add mergesort_r() Luke Howard 2020-04-07 13:49:27 +10:00
  • 4f7dc7694e gss: __gss_c_attr_stream_sizes_oid_desc declspec Luke Howard 2020-04-11 10:04:43 +10:00
  • 30bf21401c gss: fix copy/paste error in gss_destroy_cred() Luke Howard 2020-04-11 10:02:09 +10:00
  • 7055365f47 Expand tokens in gss cred store "ccache" value Nicolas Williams 2020-03-18 13:37:13 -05:00
  • 31a73c3c27 List FILE collection even when KRB5CCNAME is a sub Nicolas Williams 2020-03-18 00:43:01 -05:00
  • cc6a3f337b hcrypto: Fix Makefile build race Nicolas Williams 2020-03-17 19:46:37 -05:00
  • 8f3b5e0862 krb5: Use sqlite3_close(), not v2 Nicolas Williams 2020-03-17 19:45:51 -05:00
  • a8874a62bb krb5: Fix kinit harder Nicolas Williams 2020-03-13 21:36:00 -05:00
  • 4c736cbeec krb5: Allow rename of empty FILE ccaches Nicolas Williams 2020-03-14 11:25:46 -05:00
  • d725f28384 gss: Sometimes set KRB5CCNAME when not overwriting Nicolas Williams 2020-03-13 18:43:00 -05:00
  • 93d638a486 gss: Fix default cache preference Nicolas Williams 2020-03-13 18:14:17 -05:00
  • 327d7e7b43 Fix Appveyor Windows build Nicolas Williams 2020-03-12 22:58:13 -05:00
  • 312f353b98 gss: Prefer the default ccache when user_realm Nicolas Williams 2020-03-12 17:58:53 -05:00
  • 02db43a1ae kinit: Prefer the default ccache when user_realm Nicolas Williams 2020-03-12 17:57:16 -05:00
  • 7dae771eef kinit: Add --cache-default-for flag (fix check-cc) Nicolas Williams 2020-03-12 11:46:47 -05:00
  • 64d5f86ec3 Fix warnings (some bugs, some spurious) Nicolas Williams 2020-03-12 00:42:33 -05:00
  • f3e6c4ffd4 krb5: Make FILE ccache type a collection type! Nicolas Williams 2020-03-11 13:42:30 -05:00
  • f70ccfa967 krb5: Restore FILE as the default ccache type Nicolas Williams 2020-03-11 13:42:03 -05:00
  • 3a1f700cef gsskrb5: Add unique ccache k/v for cred store Nicolas Williams 2020-03-11 13:40:35 -05:00
  • bc5070d36f krb5: Add krb5_set_config() for test_cc Nicolas Williams 2020-03-11 13:40:02 -05:00
  • 86bb80d7cf Revert cccol changes to kinit Nicolas Williams 2020-03-12 10:57:25 -05:00
  • 713aa7961a kdc: kx509.c fix build failures Jeffrey Altman 2020-03-08 10:28:37 -04:00
  • bcb5ed28fb kdc/kx509.c: clean up krb5_get_error_message strings used for mk_error_resp Daria Phoebe Brashear 2020-01-10 13:12:57 -05:00
  • c295233648 lib/base log_file should free filename in all cases Daria Phoebe Brashear 2020-03-05 18:58:41 -05:00
  • 59d132f825 hdb: don't use lock_file name after free in open_lock_file Daria Phoebe Brashear 2020-01-12 23:53:02 -05:00
  • efba1c21e9 lib/kadm5 kadm5_c_randkey_principal allow keyblock cleanup on error Daria Phoebe Brashear 2020-01-10 13:08:43 -05:00
  • c2a7041402 krb5_mk_ncred: clean enc_krb_cred_part before use Daria Phoebe Brashear 2020-01-10 12:58:09 -05:00
  • bfcc7a90ed kdc kx509: avoid double free of cprinc and s in check_authz Daria Phoebe Brashear 2020-01-10 12:51:20 -05:00
  • c6b891556e krb5: Init mutex of anon MEMORY ccaches Nicolas Williams 2020-03-04 14:11:42 -06:00
  • 7bf4d76e75 krb5: Improve cccol sub naming; add gss_store_cred_into2() Nicolas Williams 2020-01-22 19:18:14 -06:00
  • a7359d6898 roken: Add mkdtemp() Nicolas Williams 2020-01-24 00:24:52 -06:00
  • 77619f245d roken: Add base32 Nicolas Williams 2020-01-13 19:46:13 -06:00
  • 5ab1a2b7a6 appveyor: Minor improvements for debugging Nicolas Williams 2020-03-02 10:52:39 -06:00
  • 3c0f59b658 hdb: Fix memory leak in hdb_generate_key_set() Nicolas Williams 2020-02-29 21:32:26 -06:00
  • ea90ca8666 Move some infra bits of lib/krb5/ to lib/base/ (2) Nicolas Williams 2020-02-24 18:50:01 -06:00
  • b2823cbd74 Move some infra bits of lib/krb5/ to lib/base/ (1) Nicolas Williams 2020-02-25 23:25:51 -06:00
  • e8de24f236 gss: initialize mech output parameters in mechglue Luke Howard 2020-03-02 17:10:11 +11:00
  • 41cb135b30 gss: plug leak in test_negoex_mech Luke Howard 2020-03-02 17:15:33 +11:00
  • aaf4cf89a5 gss: initialize output params in test_negoex_mech Luke Howard 2020-03-02 17:08:31 +11:00
  • 839b073fac tgs-req: strip forwardable and proxiable if the server is disallowed Isaac Boukris 2020-01-18 14:47:02 +01:00
  • 921d528d8b gss: add mechanism-force-mechListMIC hook to SPNEGO Luke Howard 2020-02-04 16:39:34 +11:00
  • 5d1a33f780 gss: don't explicitly reorder krb5 to front of spnego Luke Howard 2019-12-29 20:45:03 +11:00
  • 161f846d76 gss: harmonize negState with RFC 4178 Luke Howard 2020-01-14 13:06:51 +11:00
  • 3e69aacbe2 gss: harmonize SPNEGO with [MS-SPNG] Luke Howard 2020-01-01 11:25:16 +11:00
  • 044c1c6b63 gss: don't generate mechListMIC in SPNEGO if it is safe to omit it Luke Howard 2020-01-01 22:32:46 +11:00
  • 4fb6a6adc9 gss: port NegoEx implementation from MIT Luke Howard 2019-12-30 13:34:10 +11:00
  • ae5c60286a gss: remove SPNEGO name wrappers Luke Howard 2020-01-02 16:30:42 +11:00
  • e80248ed36 gss: add some missing GM_USE_MG_CRED checks Luke Howard 2019-12-28 16:35:04 +11:00
  • 340cc3f092 gss: make krb5 default GSS mech earlier in path Luke Howard 2019-12-27 00:15:13 +11:00
  • e69c2a8111 gss: expose gss_destroy_cred() Luke Howard 2019-12-29 00:15:49 +11:00
  • 8478dd1c88 gss: merge Apple name helper APIs Luke Howard 2019-12-28 16:34:35 +11:00
  • 6af3ea9099 gss: merge enhanced Apple mechglue logging Luke Howard 2019-12-28 16:45:47 +11:00
  • 31af9ba703 gss: use tail queue instead of singly linked list in mechglue Luke Howard 2019-12-28 16:30:55 +11:00
  • d7138cfbe7 base: make heimqueue.h a shared header Luke Howard 2019-12-26 21:41:29 +11:00
  • 64d5d138a9 gss: mechanism optional interfaces Luke Howard 2019-12-29 00:17:26 +11:00
  • 920cfc5584 gss: use _gss_ntlm_set_keys() in gss_init_sec_context() Luke Howard 2019-12-27 23:11:00 +11:00
  • c510e6d474 gss: don't provide domain to nsi_probe() in NTLM Luke Howard 2019-12-27 20:47:24 +11:00
  • bf14eb29df gss: NTLM nsi_probe returns a krb5, not gss error Luke Howard 2019-12-27 20:31:45 +11:00
  • fd572363a5 gss: register GSS_KRB5_S error table Luke Howard 2019-12-29 17:44:26 +11:00
  • 7b8fa4758c Windows: Fix type cast warning. Rod Widdowson 2020-01-29 10:31:15 +00:00
  • cc7610b77c Update README.md Jeffrey Altman 2020-01-10 15:00:16 -05:00
  • 1cbbca8dcf bx509: Add /, /health for load balancer checking Nicolas Williams 2020-01-10 11:39:56 -06:00
  • e7ad9da3cc bx509: Do not clobber library error info Nicolas Williams 2020-01-10 11:34:33 -06:00
  • 62c0261cff kdc: add test_token_validator -a option Nicolas Williams 2020-01-10 11:32:59 -06:00
  • 8430acfe95 kdc: implement test_kdc_ca -a option Nicolas Williams 2020-01-10 11:30:56 -06:00
  • 8ef971786b bx509: Fix CSR authorizer IPC plugin bug Nicolas Williams 2020-01-10 11:29:21 -06:00
  • 2b92d938ae Add bx509d.8 man page Nicolas Williams 2020-01-03 00:12:43 -06:00
  • 027941b858 Document Heimdal's PKIX, kx509, bx509 Nicolas Williams 2020-01-01 13:43:10 -06:00
  • 8fd3cc84eb kdc: link test_token_validator against libgssapi Luke Howard 2020-01-01 19:15:59 +11:00
  • 1a3716a132 krb5: Do not write start_realm ccconfig twice Nicolas Williams 2019-12-30 20:45:40 -06:00
  • d2542d8261 bx509: Make test work with older curl versions Nicolas Williams 2019-12-26 16:37:28 -06:00
  • 1482309565 iprop: Use test port for testing Nicolas Williams 2019-12-20 16:52:00 -06:00
  • bc9054d4b5 hx509: Better handle OpenSSL diffs in test_req Nicolas Williams 2019-12-20 16:14:00 -06:00
  • a79714da93 kdc: Fix build race Nicolas Williams 2019-12-20 16:05:03 -06:00
  • 4d96132cef bx509: Tolerate older microhttpd versions Nicolas Williams 2019-12-20 15:59:21 -06:00