diff options
author | Greg Hudson <ghudson@mit.edu> | 2019-02-19 01:30:41 -0500 |
---|---|---|
committer | Greg Hudson <ghudson@mit.edu> | 2019-05-31 11:45:05 -0400 |
commit | f8bd89e4a87a758d74897e483cdc3049b5564240 (patch) | |
tree | c57ccfcb3aa866d2a77a08005a6ae5bdc97404a2 /src/include | |
parent | 4662f94c7d51e3d262381c142eccd55759a89e46 (diff) | |
download | krb5-f8bd89e4a87a758d74897e483cdc3049b5564240.zip krb5-f8bd89e4a87a758d74897e483cdc3049b5564240.tar.gz krb5-f8bd89e4a87a758d74897e483cdc3049b5564240.tar.bz2 |
Add tag to krb5_donot_replay
For each use of replay caches, supply a tag based on a ciphertext or
checksum associated with the use. Stop creating or checking replay
records for unencrypted KRB-CRED messages.
ticket: 8786
Diffstat (limited to 'src/include')
-rw-r--r-- | src/include/k5-int.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/include/k5-int.h b/src/include/k5-int.h index 6feeb2f..30e4501 100644 --- a/src/include/k5-int.h +++ b/src/include/k5-int.h @@ -1965,6 +1965,7 @@ typedef struct _krb5_donot_replay { char *server; /* null-terminated */ char *client; /* null-terminated */ char *msghash; /* null-terminated */ + krb5_data tag; krb5_int32 cusec; krb5_timestamp ctime; } krb5_donot_replay; |