95e56fa3ae
Prior to this change hdb_unseal_keys_kvno() could return successfully (0) if the choice_HDB_extension_data_hist_keys extension was found but the hist_keys list was empty. As a side effect callers would believe that the provide hdb_entry keys were unsealed when they weren't. This could cause the KDC or kadmin to report invalid key size errors. If the extension is present and the history list is empty attempt to unseal the provided hdb_entry using hdb_unseal_keys_mkey(). Change-Id: I9218b02bccdbcf22133a9464a677374db53ade85
Heimdal is a Kerberos 5 implementation. For information how to install see <http://www.h5l.org/compile.html>. There are briefer man pages for most of the commands. Bug reports and bugs are appreciated, see more under Bug reports in the manual on how we prefer them: <heimdal-bugs@h5l.org>. For more information see the web-page at <http://www.h5l.org/> or the mailing lists: heimdal-announce@sics.se low-volume announcement heimdal-discuss@sics.se high-volume discussion send a mail to heimdal-announce-request@sics.se and heimdal-discuss-request@sics.se respectively to subscribe.