Luke Howard 6554dc69b0 gss: allow partial accept context export in SPNEGO ...

Support for exporting partially established acceptor context tokens. With this,
an acceptor can send the initiator an encrypted state cookie containing the
exported context token.

(The concrete mechanism, of course, must either require a single round trip or
support partial context export itself. Kerberos and GSS EAP would work, but
Kerberos with GSS_C_DCE_STYLE would not, as currently implemented.)

Partial context export is not permitted for initiators.

2021-08-07 18:56:33 +10:00

30 KiB

Raw Blame History

View Raw