aboutsummaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
2022-05-25Update for krb5-1.20krb5-1.20-finalGreg Hudson3-6/+8
2022-05-24Read GSS configuration files with mtime 0Simo Sorce1-5/+6
2022-05-24Fix iprop with fallbackGreg Hudson1-2/+6
2022-03-25Update for krb5-1.20-beta1-postreleaseGreg Hudson1-2/+2
2022-03-24Update for krb5-1.20-beta1krb5-1.20-beta1Greg Hudson2-4/+4
2022-03-23Update README for krb5-1.20Greg Hudson1-4/+130
2022-03-23Update config.guess, config.subGreg Hudson2-630/+723
2022-03-23Update features list for 1.20Greg Hudson1-2/+51
2022-03-18make regenGreg Hudson28-475/+507
2022-03-17Try harder to avoid password change replay errorsGreg Hudson3-5/+17
2022-03-17Use SHA-256 instead of SHA-1 for PKINIT CMS digestJulien Rische1-17/+21
2022-03-07Make kprop work for dump files larger than 4GBJulien Rische5-28/+130
2022-03-02Replace macros with typedefs in gssrpc types.hTianjiao Yin1-2/+2
2022-03-02Clarify certauth interface documentationGreg Hudson2-15/+24
2022-02-23In k5test, look for lldb if gdb is not foundGreg Hudson1-3/+11
2022-02-23Update copyright years to 2022Greg Hudson8-8/+8
2022-02-23Run Windows CI on windows-2019 image for nowGreg Hudson1-1/+1
2022-01-28Remove unneeded SPAKE free_modreq methodGreg Hudson1-9/+0
2022-01-27Avoid passing null for asprintf stringsGreg Hudson4-28/+26
2022-01-27Pass client flag to KDB for client preauth matchGreg Hudson1-1/+1
2022-01-27Implement replaced_reply_key input to issue_pac()Greg Hudson8-64/+105
2022-01-27Add replace_reply_key kdcpreauth callbackGreg Hudson7-81/+92
2022-01-27Add k5test.py facilities for PKINITGreg Hudson4-90/+76
2022-01-27Remove unimplemented GSSRPC symbolsGreg Hudson3-15/+0
2022-01-26Factor out PAC checksum verificationGreg Hudson1-127/+55
2022-01-12Replace AD-SIGNEDPATH with minimal PACsGreg Hudson35-2325/+957
2022-01-12Add minimal KDC MS-RPCE (NDR) encoder/decoderGreg Hudson5-2/+516
2022-01-12Add PAC ticket signature APIsIsaac Boukris11-41/+534
2022-01-07Correct CKSUMTYPE_SHA1 value and commentGreg Hudson1-1/+1
2022-01-01Don't fail krb5_cc_select() for no default realmIsaac Boukris2-11/+21
2021-12-29Add PA-REDHAT-IDP-OAUTH2 padata typePavel Březina3-0/+3
2021-12-29Remove unnecessary flag in macOS buildNikhil Benesch1-4/+0
2021-12-29Use 14 instead of 9 for unkeyed SHA-1 checksumGreg Hudson9-16/+21
2021-12-05Fix PAC handling of authtimes after y2038Greg Hudson1-15/+5
2021-12-05Fix OpenSSL conditionals for two filesIsaac Boukris2-3/+7
2021-12-05Issue an error from KDC on S4U2Self failuresAndreas Schneider1-3/+2
2021-11-15Use OpenSSL CMAC implementation with OpenSSL 3Greg Hudson13-61/+169
2021-11-15Update PKINIT for OpenSSL 3Robbie Harwood2-36/+165
2021-11-15Use the supported version of openssl 3's CTS modeRobbie Harwood2-0/+180
2021-11-15Prefer openssl's EVP_MAC interface for HMACRobbie Harwood1-6/+68
2021-11-15Use OpenSSL 3 versions of remaining KDFsRobbie Harwood13-382/+685
2021-11-10Support larger RADIUS attributes in libkradSumit Bose2-1/+14
2021-11-10More python3 fixes for t_daemon.pySumit Bose1-3/+3
2021-11-10Avoid use after free during libkrad cleanupGreg Hudson3-31/+26
2021-11-05Remove pkinit_kdf_constants.cGreg Hudson2-61/+2
2021-11-05Use EVP key agreement in PKINITGreg Hudson2-302/+388
2021-11-04Use OpenSSL SubjectPublicKeyInfo parsing in PKINITGreg Hudson14-398/+288
2021-11-02Use pre-encoded DH parameter constants in PKINITGreg Hudson4-303/+357
2021-10-28Support KRB5_CERTAUTH_HWAUTH_PASS in certauthKen Hornstein6-34/+121
2021-10-28Use builtin MD4, RC4 for OpenSSL 3.0Greg Hudson1-3/+18