aboutsummaryrefslogtreecommitdiff
path: root/src/lib
AgeCommit message (Collapse)AuthorFilesLines
2009-10-29Restored few symbols in the crypto exports list to satisfy tests.`Zhanna Tsitkov1-0/+12
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23088 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-29Rename api.3 to api.current in the libkadm5 unit tests. This way theGreg Hudson17-0/+0
main body of tests won't have to be moved every time the current API version of libkadm5 changes. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23087 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-29Rename some lingering krb5_derive_key referencesGreg Hudson3-3/+3
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23086 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-28Bump the accessor version number since we made changes.Greg Hudson5-32/+29
Take the opportunity to regularize accessor field names (no krb5 or krb5int prefixes). Fix a test program which was still using krb5_hmac. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23081 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-28Restrict libk5crypto.exports list to API and ABI. Also, include functions ↵Zhanna Tsitkov1-150/+60
needed to link kerb libs and tests properly git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23080 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-28Replace krb5_ with krb5Int_ prefix for non-API functionsZhanna Tsitkov71-304/+316
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23079 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-28Remove "verify" on make cleanEzra Peisach1-1/+1
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23076 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-27Heimdal DB bridge plugin for KDC back endGreg Hudson3-4/+76
Merge Luke's users/lhoward/heimmig branch to trunk. Implements a KDC back-end plugin which interfaces to a Heimdal HDB plugin. ticket: 6578 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23073 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-27Do not include com_err.h - not used hereEzra Peisach1-2/+0
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23060 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-27with an uninitialized entry on error exitEzra Peisach1-0/+1
k5_hmac_md5_hash_iov: Initialize keyblock.length - so we do not invoke zapfree git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23059 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-26Remove the libkadm5 api.2 unit tests which don't pertain to the cpol,Greg Hudson14-6600/+0
mpol, or gpol operations. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23043 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-25Reformat function definition headers in gss-krb5's util_crypt.c toGreg Hudson1-98/+48
meet coding standards. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23039 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-25Account lockoutGreg Hudson37-66/+8723
Merge Luke's users/lhoward/lockout2 branch to trunk. Implements account lockout policies for preauth-using principals using existing principal metadata fields and new policy fields. The kadmin API version is bumped from 2 to 3 to compatibly extend the policy_ent_rec structure. ticket: 6577 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23038 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-25make dependTom Yu11-77/+72
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23030 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-24Resurrect deleted test files. Adjust Makefile.in files to correctlyTom Yu4-0/+729
define RUN_SETUP. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23029 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-23Comment out empty definition of krb5_gss_set_sec_context_option_ops and itsLuke Howard1-0/+4
usage, because ISO C apparently forbids empty array initializers git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23002 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-23Remove #define DEBUG 1 that slipped in in S4U mergeLuke Howard1-1/+1
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23001 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-23Changed the crypto make system to add build flexibility. The update cancels ↵Zhanna Tsitkov37-1066/+333
the requirement for the dir structures to be identical in all crypto implementation and supports impl. dependent tests. Also, minor libk5crypto.exports list reduction ( from f_tables) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22995 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-22When iterating through the keytab in krb5_rd_req(), do notLuke Howard1-2/+4
return success if we did not find any matching keytab entries, otherwise we will crash upon accessing ticket->enc_part2. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22974 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-22Ensure that a GSS_C_BOTH acquired for GSS_C_NO_NAME still passesLuke Howard3-1/+3
a NULL server principal to krb5_rd_req(). Without this the name canonicalisation support in 1.7 was broken for GSS_C_BOTH credentials, because cred->name would always be set. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22973 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-20For naming extensions draft compliance, s/mspac:/urn:mspac:/Luke Howard1-12/+12
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22957 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-20Make some gss-krb5 utility functions take enctypes instead of keys,Greg Hudson8-38/+44
and adjust callers. Fixes a bug where kg_arcfour_docrypt_iov was passing a keyblock instead of a key to kg_translate_iov after the enc-perf merge. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22956 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-20use ANSI prototypes for acquire_XXX_cred, and fix cast to calling ↵Luke Howard1-14/+13
acquire_accept_cred() git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22955 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-20In k5_hmac_md5_hash_iov, initialize keyblock.contents so that we don'tGreg Hudson1-0/+2
free it prior to initialization if krb5_hmac fails. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22953 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-20In krb5_k_make_checksum, check for a null key passed with a keyedGreg Hudson1-1/+1
checksum instead of just crashing. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22952 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-20Clean up memory leaks by releasing key at endEzra Peisach2-0/+4
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22951 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-20Include des_int.h for mit_des_fixup_key_parity prototypeEzra Peisach1-0/+1
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22950 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-20Fix memory leaks in enc-perf workGreg Hudson3-0/+4
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22949 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-20fix some Coverity reported defects in naming extensionsLuke Howard4-25/+27
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22948 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-19Implement new APIs to allow improved crypto performanceGreg Hudson103-1055/+1759
Merge branches/enc-perf to trunk. Adds the krb5_key opaque type, the krb5_k_* APIs to use them, and caching of derived keys when krb5_k_* functions are used. Updates the krb5 auth context and GSS id-rec to use krb5_keys. ticket: 6576 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22944 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-18Include des_int.h for mit_des_fixup_key_parity prototype. Adjust Makefile.inEzra Peisach2-1/+2
to find the proper header. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22912 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-18Remove adb.h as it is not used in the source treeEzra Peisach1-134/+0
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22911 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-16Properly handle ivec for chaining opsZhanna Tsitkov1-175/+34
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22906 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-16Fix the value of ivec in aes_decrypt_iovZhanna Tsitkov1-3/+3
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22905 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-15Enable t_cts testZhanna Tsitkov1-4/+4
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22902 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-15Fixed aes to handle the input buffers of the various sizesZhanna Tsitkov1-140/+313
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22900 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-13Fix preauth looping in krb5_get_init_credsGreg Hudson1-2/+16
In 1.7, krb5_get_init_creds will continue attempting the same built-in preauth mechanism (e.g. encrypted timestamp) until the loop counter maxes out. Until the preauth framework can remember not to retry built-in mechanisms, only continue with preauth after a PREAUTH_FAILED error resulting from optimistic preauth. ticket: 6573 tags: pullup target_version: 1.7.1 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22890 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-13Revert a small part of r22736 which incorrectly fixed a preauthGreg Hudson1-4/+2
looping bug in krb5_get_init_creds. A more correct fix will follow. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22888 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-10Fix memory leak and init those magic number fields to prevent compiler warningEzra Peisach1-1/+4
when structure copied. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22879 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-10Clean nfold.o on make cleanEzra Peisach1-7/+8
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22878 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-10Move destest to builtin/des, because it depends on overriding someTom Yu39-1286/+1605
internals. Make depend. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22877 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-09Implement GSS naming extensions and authdata verificationGreg Hudson76-339/+5981
Merge Luke's users/lhoward/authdata branch to trunk. Implements GSS naming extensions and verification of authorization data. ticket: 6572 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22875 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-09Get aes-gen to build again (for the default back end, at least)Greg Hudson1-1/+1
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22873 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-09In asn1_decode_enc_kdc_rep_part, don't leak the enc_padata field onGreg Hudson1-0/+1
invalid representations. ticket: 6571 tags: pullup target_version: 1.7.1 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22872 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-08In krb5_c_verify_checksum, avoid the structure copy of *data since weGreg Hudson1-1/+2
don't care about data->magic. Squashes a bunch of unimportant Coverity defects. (May not be the correct long-term solution.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22868 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-08In krb5_calculate_checksum (a compatibility routine), initializeGreg Hudson1-0/+1
key.enctype to ENCTYPE_NULL. This will predictably fail to match a keyed hash's enctype, which may not be the best behavior, but is better than unpredictably failing to match it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22867 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-07In krb5_c_make_checksum, avoid the structure copy of *input since weGreg Hudson1-1/+2
don't care about input->magic. Squashes a bunch of unimportant Coverity defects. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22866 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-07Fix krb5_c_weak_enctype in the case of invalid enctypes; r22839Greg Hudson1-1/+1
simplified it a bit too much. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22865 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-06In krb5_encrypt_helper, return ENOMEM instead of 0 if we can'tGreg Hudson1-1/+1
allocate the ciphertext buffer. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22860 dc483132-0cff-0310-8789-dd5450dbe970
2009-10-06Crypto modularity proj: Populate openssl/aes dirZhanna Tsitkov10-0/+1546
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22859 dc483132-0cff-0310-8789-dd5450dbe970
generated by cgit v1.1 at 2024-09-08 04:07:36 +0000