Chaskiel Grundman c2e2de7384 When using PKINIT with DH, compute session key ...

RFC6112 provides a method of computing a session key when the PKINIT DH
is used, and mandates it for anonymous pkinit. The session key is computed
using KRB-FX-CF2 from the reply key and a random key chosen by the kdc.
The random key is provided to the client, which is supposed to verify
that the session key was computed this way.

2014-07-03 12:24:08 -04:00

..

announce.c

cast to avoid size_t vs int issue

2011-07-24 13:07:07 -07:00

config.c

Turn on -Wextra -Wno-sign-compare -Wno-unused-paramter and fix issues.

2012-02-20 19:45:41 +00:00

connect.c

Fix typo with return values in realloc_descrs.

2012-11-22 17:24:40 -08:00

default_config.c

Rename and fix as/tgs-use-strongest-key config parameters

2011-11-25 17:21:04 -06:00

digest-service.c

Initial patch for dealing with AD x-realm key rollover

2011-11-15 21:53:33 -06:00

digest.c

add HDBGET: that only supports get, iteration doesnt really make sense for the HDB keytab except when dumping

2013-10-15 12:40:39 +02:00

fast.c

Initial patch for dealing with AD x-realm key rollover

2011-11-15 21:53:33 -06:00

headers.h

Create a request structure

2011-07-24 20:24:37 -07:00

hprop-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

hprop.8

remove trailing whitespace

2011-05-21 11:57:31 -07:00

hprop.c

add HDBGET: that only supports get, iteration doesnt really make sense for the HDB keytab except when dumping

2013-10-15 12:40:39 +02:00

hprop.h

add HDBGET: that only supports get, iteration doesnt really make sense for the HDB keytab except when dumping

2013-10-15 12:40:39 +02:00

hpropd-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

hpropd.8

remove trailing whitespace

2011-05-21 11:57:31 -07:00

hpropd.c

add HDBGET: that only supports get, iteration doesnt really make sense for the HDB keytab except when dumping

2013-10-15 12:40:39 +02:00

kdc_locl.h

use json to drive kdc-tester

2011-11-21 20:34:35 -08:00

kdc-replay.c

Turn on -Wextra -Wno-sign-compare -Wno-unused-paramter and fix issues.

2012-02-20 19:45:41 +00:00

kdc-tester.c

add HDBGET: that only supports get, iteration doesnt really make sense for the HDB keytab except when dumping

2013-10-15 12:40:39 +02:00

kdc-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

kdc.8

kdc.8: Remove references to kerberos 4.

2014-04-28 01:02:45 +02:00

kdc.h

Rename and fix as/tgs-use-strongest-key config parameters

2011-11-25 17:21:04 -06:00

kerberos5.c

Include empty PKINIT-KX padata

2014-07-03 12:24:08 -04:00

krb5tgs.c

heimdal: handle referrals for 3 part DRSUAPI SPNs

2014-03-24 23:07:49 -05:00

kstash-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

kstash.8

remove trailing whitespace

2011-05-21 11:57:31 -07:00

kstash.c

Add -Wshadow and deal with the warnings.

2012-02-21 11:17:55 +00:00

kx509.c

Add option to require initial kca_service tickets

2013-12-05 16:00:21 -06:00

libkdc-exports.def

Windows: Fix export lists

2010-11-29 10:53:49 -05:00

libkdc-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

log.c

Error/warning cleanups for clang (LLVM)

2011-11-28 14:42:06 -06:00

main.c

add HDBGET: that only supports get, iteration doesnt really make sense for the HDB keytab except when dumping

2013-10-15 12:40:39 +02:00

Makefile.am

use noinst_HEADERS for kdc-private.h

2014-02-16 09:16:18 -08:00

misc.c

Really bug in KDC handling of enterprise princs

2013-08-01 20:17:17 -05:00

mit_dump.c

Fix MIT dump entry parsing bug that forced 2048 sz

2013-11-20 01:08:22 -06:00

NTMakefile

Windows: ktutil.exe requires libkadmsrv and libhdb

2013-09-13 22:17:43 -04:00

pkinit.c

When using PKINIT with DH, compute session key

2014-07-03 12:24:08 -04:00

process.c

drain pool for each request

2012-04-05 22:55:01 -07:00

rx.h

remove trailing whitespace

2008-09-13 09:21:03 +00:00

set_dbinfo.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

string2key-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

string2key.8

remove trailing whitespace

2011-05-21 11:57:31 -07:00

string2key.c

catch error value from krb5_ functions and exit

2013-06-28 08:40:49 +02:00

version-script.map

add _kdc_db_fetch and _kdc_free_ent for digest-service

2011-01-30 12:12:30 -08:00

windc_plugin.h

change client access message

2011-07-24 20:24:35 -07:00

windc.c

switch to new plugin handler

2013-06-04 00:04:16 -07:00