aboutsummaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
2010-10-02Be more parsimonious with /dev/random when using the NSS PRNGnssGreg Hudson1-3/+6
2010-10-02Make the NSS back end compile and work again in the presence of theGreg Hudson6-18/+197
2010-09-30Merge r24242:24397 from trunk to branches/nss. This will break theGreg Hudson283-4096/+13387
2010-09-30Wrap cached symkeys in a structure containing the current pid, so thatGreg Hudson1-16/+41
2010-09-30Update NSS branch readme. Give up on the code reorganization bulletGreg Hudson1-6/+0
2010-09-30Apply Red Hat copyright and license statements (using the one fromGreg Hudson15-366/+387
2010-09-30Follow-up to r24365: call both PK11_Finalize and PK11_DestroyContextGreg Hudson1-5/+16
2010-09-29Remove an NSS branch issue which has been dealt withGreg Hudson1-35/+8
2010-09-29Make DO_FAST_XOR code unconditional in the NSS back endGreg Hudson1-6/+0
2010-09-29Make USE_OPAQUE_KEYS unconditional in the NSS back endGreg Hudson1-28/+0
2010-09-29Remove NSS_LOOKUP_STRING code since we aren't likely to need itGreg Hudson1-26/+0
2010-09-28Clean up hash and digest contexts in the back end to avoid refcountGreg Hudson2-2/+2
2010-09-28Use the PK11_DestroyContext() instead of PK11_Finalize() to destroyGreg Hudson1-1/+1
2010-09-27Use the PK11_DestroyContext() instead of PK11_Finalize() to destroyGreg Hudson1-6/+6
2010-09-27Revert unintended change in last commit to k5_nss_init()Greg Hudson1-1/+1
2010-09-27Fix cleanup handler in k5_nss_init to return an error if there is oneGreg Hudson1-2/+2
2010-09-26When using stream ciphers with NSS, use a loopback pointer instead ofGreg Hudson1-15/+37
2010-09-25When NSS is the crypto implementation, use the NSS PRNG. Avoids theGreg Hudson4-12/+82
2010-09-25In the NSS crypto back end, add mutex protection and fork protectionGreg Hudson7-25/+151
2010-09-11In the NSS mit_des_string_to_key_int, zero out pbe_params beforeGreg Hudson1-0/+1
2010-08-24k5_ as an internal prefix is now formally okay, so remove that bulletGreg Hudson1-4/+0
2010-08-21Document the nss branch purpose and current issuesGreg Hudson1-0/+52
2010-08-21Style pass over the NSS back endGreg Hudson24-664/+627
2010-08-19Remove unneeded file in NSS back endGreg Hudson1-3/+0
2010-08-19Make NSS back-end build when the build directory is separate from theGreg Hudson2-2/+2
2010-08-19Simplify the nss backend configure changesGreg Hudson1-13/+9
2010-08-19Merge changes from branches/krb5-1-8-nss. Omit the t_encrypt.c changesGreg Hudson47-1/+3583
2010-08-19Create a branch for the NSS libk5crypto back endGreg Hudson0-0/+0
2010-08-19Allow krb5_gss_register_acceptor_identity to unset keytab nameGreg Hudson2-10/+8
2010-08-12Add GIC option for password/account expiration callbackGreg Hudson8-24/+273
2010-08-12In AS replies, set the key-expiration field to the minimum of accountGreg Hudson1-1/+12
2010-08-12Correct the documentation for the start_kadmind keyword in k5test.pyGreg Hudson1-1/+1
2010-08-12Remove two unused source files in lib/gssapi/genericGreg Hudson2-118/+0
2010-08-10Move the password expiry warning code out ofGreg Hudson1-84/+92
2010-07-26Use xdr_int32 instead of xdr_u_int in xdr_krb5_enctype(), sinceGreg Hudson1-1/+1
2010-07-26Fix XDR decoding of large values in xdr_u_intGreg Hudson1-1/+1
2010-07-21Addendum to r24200: fix kdb5_ldap_util call site ofGreg Hudson1-1/+1
2010-07-21Revert the part of r24157 which added the dal_version argument to theGreg Hudson7-20/+19
2010-07-20Get the kdb_hdb module to compile again. Probably still buggy,Greg Hudson4-293/+161
2010-07-19In kdb5_util's kdb5_ldap_create(), add back the assignment ofGreg Hudson1-0/+1
2010-07-19Allow Microsoft HMAC-MD5 checksum types to use non-RC4 keysGreg Hudson2-4/+6
2010-07-19In the DAL documentation, describe how a module can supply referralGreg Hudson1-1/+4
2010-07-15Add check_allowed_to_delegate to the DAL with a corresponding libkdb5Greg Hudson14-236/+72
2010-07-15Addendum to r24182: Fix a comment referencing the db_invokeGreg Hudson1-4/+2
2010-07-15Add refresh_config to the DAL with a corresponding libkdb5 API,Greg Hudson6-9/+25
2010-07-13Addendum to r24185: make audit_as_req return void, since it's anGreg Hudson8-33/+24
2010-07-13Add audit_as_req to the DAL with a corresponding libkdb5 API,Greg Hudson13-103/+77
2010-07-13Add check_policy_as and check_policy_tgs to the DAL table withGreg Hudson14-174/+156
2010-07-12Add check_transited_realms to the DAL table with a correspondingGreg Hudson6-40/+40
2010-07-12Add sign_authdata to the DAL table with a corresponding libkdb5 API,Greg Hudson8-116/+111