aboutsummaryrefslogtreecommitdiff
path: root/src/lib
AgeCommit message (Expand)AuthorFilesLines
2015-11-05Fix IAKERB context export/import [CVE-2015-2698]Greg Hudson3-8/+41
2015-11-05Fix two IAKERB commentsGreg Hudson1-5/+1
2015-10-28Zap secure cookie contents when freeingGreg Hudson2-1/+16
2015-10-26Fix build_principal memory bug [CVE-2015-2697]Greg Hudson1-4/+2
2015-10-26Fix IAKERB context aliasing bugs [CVE-2015-2696]Nicolas Williams3-41/+529
2015-10-26Fix SPNEGO context aliasing bugs [CVE-2015-2695]Nicolas Williams2-64/+192
2015-10-26Allow clock skew in krb5 gss_accept_sec_context()Greg Hudson2-15/+10
2015-10-26Use RUN_TEST and fix installed krb5.conf usesGreg Hudson12-71/+68
2015-10-26Accept new passwords as const char pointersAndreas Schneider3-9/+9
2015-10-02Fix gss_store_cred() minor code on acceptor credTomas Kuthan1-1/+1
2015-10-02Check output params on GSS OID set functionsTomas Kuthan1-0/+6
2015-10-02Correct GSS major code for non-default QOP valuesTomas Kuthan3-4/+4
2015-10-02Fix gss_inquire_names_for_mech() on MS krb5 mechTomas Kuthan1-0/+1
2015-10-02Fix typo in GSS_S_UNAUTHORIZED error messageTomas Kuthan1-1/+1
2015-10-02Define error status GSS_S_BAD_MICTomas Kuthan1-0/+1
2015-09-17make dependTom Yu2-13/+25
2015-09-17Fix error mappings for IOV MIC mechglue funcsTomas Kuthan2-6/+15
2015-09-14Fix krb5_rd_req() memory leakNicolas Williams1-0/+1
2015-09-14Fix error handling in gss_export_sec_context()Nicolas Williams1-13/+17
2015-08-31Check for null name_type in gss_display_name_extSolly Ross1-1/+3
2015-08-27Link ucrt.lib and vcruntime.lib for VS2015Thomas Sondergaard1-1/+5
2015-08-26Add ASN.1 encoder and decoder for secure cookieNathaniel McCallum4-1/+30
2015-08-25Update SPNEGO hintName value to current specGreg Hudson1-87/+11
2015-08-24Check mech in gss_accept_sec_context w/ no credGreg Hudson1-0/+28
2015-08-21Keep valgrind happy after time_rec changeSimo Sorce1-1/+1
2015-08-19Resolve krb5 GSS creds if time_rec is requestedSimo Sorce3-13/+25
2015-08-13Fix gss_inquire_name() name_is_MN resultIsaac Boukris1-1/+1
2015-08-13Make cross-realm S4U2Self workGreg Hudson1-21/+37
2015-08-11Add KDC_ERR_PREAUTH_EXPIRED supportGreg Hudson2-1/+6
2015-08-11Simplify get_in_tkt.c restart handlingGreg Hudson4-114/+61
2015-08-10Limit use of IAKERBGreg Hudson3-4/+7
2015-08-10Don't assert GSS_C_MA_NOT_DFLT_MECH in mechglueGreg Hudson1-15/+0
2015-08-10Visual Studio 2015 build fixesThomas Sondergaard2-54/+55
2015-08-10Minor spelling and grammar fixesMichael Mattioli2-2/+2
2015-08-09Add krb5_c_prfplus() and krb5_c_derive_prfplus()Nathaniel McCallum3-90/+123
2015-08-07Do not allow stream socket retries in libkradNathaniel McCallum1-0/+3
2015-08-04Allow missing authenticator checksum with GSSAPISimo Sorce1-7/+9
2015-07-29Improve krb5_cccol_have_content() error messagesGreg Hudson1-8/+46
2015-07-29Fix uncommon leak in krb5_init_creds_step()Greg Hudson1-0/+2
2015-07-22Filter CAMMAC authdata from non-KDC sourcesGreg Hudson1-0/+2
2015-07-22Add ASN.1 encoder/decoder for UTF-8 stringsGreg Hudson3-0/+17
2015-07-17Limit use of deprecated krb5 mech OIDsGreg Hudson2-5/+20
2015-07-16Fix princflags memory managementTom Yu1-8/+10
2015-07-09Add ASN.1 encoder and decoder for CAMMACGreg Hudson3-0/+55
2015-07-09Unify KDB principal flag conversion functionsTom Yu8-204/+232
2015-07-06Add rename method to kadm5_hookGreg Hudson3-1/+24
2015-07-06Use memory cache in gss_acquire_cred_with_passwordGreg Hudson1-9/+15
2015-07-02Deindent krb5_string_to_keysaltsTom Yu1-16/+17
2015-07-02Fix leak in gss_acquire_cred_with_passwordGreg Hudson1-0/+3
2015-07-02Implement GSS_KRB5_CRED_NO_CI_FLAGS_X for SPNEGOAndreas Schneider2-3/+23