aboutsummaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
30 hoursRestore test coverage for old session key typesHEADmasterGreg Hudson1-2/+2
31 hoursRefactor GSS token header parsingGreg Hudson11-305/+198
9 daysAdd fortify flag to gcc CI buildGreg Hudson1-0/+1
9 daysRemove unused filesGreg Hudson60-35688/+6
9 daysAdd acceptor-side IAKERB realm discoveryGreg Hudson5-22/+167
9 daysMake krb5_get_default_config_files() publicGreg Hudson3-4/+29
2024-07-08Remove unused GSS codeGreg Hudson5-139/+0
2024-07-01Change krb5_get_credentials() endtime behaviorGreg Hudson2-12/+9
2024-07-01Adjust removed cred detection in FILE ccacheGreg Hudson1-3/+6
2024-06-26Fix vulnerabilities in GSS message token handlingGreg Hudson4-46/+275
2024-06-24Update copyright years to 2024Greg Hudson8-8/+8
2024-06-20Correct IAKERB protocol implementationGreg Hudson11-44/+26
2024-06-07Add cifuzz workflow for PR fuzzingArjun1-0/+38
2024-05-28Handle empty initial buffer in IAKERB initiatorAndreas Schneider1-1/+1
2024-05-28Fix formatting error in realm_config.rstJon Moore1-1/+2
2024-05-28Fix recently-introduced profile parsing bugsGreg Hudson2-5/+16
2024-05-28Add OSS-Fuzz targets and corporaArjun64-1/+1216
2024-05-22Fix Python regexp literalsArjun1-3/+3
2024-05-22Fix more non-prototype functionsArjun41-99/+100
2024-05-13Support site-local KDC discovery via DNSNicolas Williams6-10/+74
2024-05-06Add GSS flag to include KERB_AP_OPTIONS_CBTStefan Metzmacher7-21/+99
2024-04-23Don't flush libkrb5 context profilesGreg Hudson6-10/+120
2024-04-22Make profile_copy() work on dirty profilesGreg Hudson6-18/+121
2024-04-20Do not reload a modified profile data objectGreg Hudson1-1/+5
2024-04-20Improve profile final flag supportGreg Hudson9-53/+143
2024-04-17Allow modifications of empty profilesGreg Hudson4-26/+83
2024-03-26Fix OpenSSL 1.0 and 1.1 support in PKINITGreg Hudson1-1/+30
2024-03-26Improve error message for DES kadmin/history keyGreg Hudson4-8/+29
2024-03-19Fix type mismatches detected by LTOGreg Hudson8-74/+85
2024-03-18Fix two unlikely memory leaksGreg Hudson2-37/+29
2024-03-18Fix leak in KDC NDR encodingGreg Hudson1-2/+1
2024-03-18Improve PKCS11 error reporting in PKINITGreg Hudson2-129/+142
2024-03-18Support PKCS11 EC client certs in PKINITGreg Hudson20-287/+437
2024-03-18Correct PKINIT EC cert signature metadataGreg Hudson1-2/+18
2024-03-18Simplify PKINIT cert representationGreg Hudson1-54/+20
2024-03-18Remove softpkcs11Greg Hudson6-2176/+1
2024-03-18Use SoftHSMv2 for PKCS11 PKINIT testsGreg Hudson2-39/+45
2024-02-13Install yasm in CI to exercise AES-NI codeGreg Hudson1-1/+1
2024-02-13Avoid strict-prototype compiler errorsSteffen Kieß21-28/+28
2024-01-24Fix NOTICE generation and regenerate itGreg Hudson2-106/+53
2024-01-12Remove klist's defname global variableJulien Rische1-4/+4
2024-01-12Fix memory leak in macOS 11 ccache clientAnthony Sottile1-1/+1
2023-12-12Refactor PKINIT KDF internal interfacesGreg Hudson6-132/+70
2023-11-30Remove PKINIT RSA supportGreg Hudson10-882/+131
2023-11-30In PKINIT, check for null PKCS7 enveloped fieldsGreg Hudson1-1/+3
2023-10-30Make def-check.pl work with Windows git-bash perlunknown1-6/+6
2023-10-30Wait indefinitely on KDC TCP connectionsGreg Hudson2-25/+27
2023-10-30Add request_timeout configuration parameterGreg Hudson4-18/+58
2023-10-30End connection on KDC_ERR_SVC_UNAVAILABLEGreg Hudson1-1/+4
2023-10-09Fix unimportant memory leaksSteve Grubb19-672/+517