aboutsummaryrefslogtreecommitdiff
path: root/src/plugins/preauth/pkinit/pkinit_clnt.c
AgeCommit message (Expand)AuthorFilesLines
2023-12-12Refactor PKINIT KDF internal interfacesGreg Hudson1-28/+7
2023-11-30Remove PKINIT RSA supportGreg Hudson1-167/+68
2023-07-17PKINIT ECDH supportGreg Hudson1-12/+5
2023-06-02Enable PKINIT if at least one group is availableGreg Hudson1-1/+1
2022-07-20Remove include_certchain parameter in PKINITGreg Hudson1-1/+1
2021-12-29Use 14 instead of 9 for unkeyed SHA-1 checksumGreg Hudson1-9/+2
2021-11-04Use OpenSSL SubjectPublicKeyInfo parsing in PKINITGreg Hudson1-14/+4
2021-03-22Fix PKINIT memory leaksGreg Hudson1-2/+0
2021-03-16Use krb5int_open_plugin for PKCS#11 moduleKen Hornstein1-1/+0
2021-03-08Only require one valid pkinit anchor/pool valueKen Hornstein1-0/+5
2020-04-08Fix typos in commentsGreg Hudson1-1/+1
2020-03-26Eliminate redundant PKINIT responder invocationGreg Hudson1-0/+5
2019-06-26Remove PKINIT draft 9 supportGreg Hudson1-167/+64
2018-07-18Eliminate preprocessor-disabled dead codeRobbie Harwood1-18/+0
2018-04-09Restrict pre-authentication fallback casesGreg Hudson1-0/+1
2018-03-19Add PKINIT client support for freshness tokenGreg Hudson1-1/+18
2018-02-26Free cert info in pkinit_identity_initialize()sashan1-2/+0
2017-02-09Avoid draft 9 fallback after PKINIT failureGreg Hudson1-0/+7
2015-07-06Fix uncommon null dereference in PKINIT clientGreg Hudson1-3/+3
2015-02-19Use preauth timestamp in PKINIT clpreauth moduleGreg Hudson1-5/+7
2014-07-08Include autoconf.h before system headersGreg Hudson1-10/+4
2014-06-13Remove pkinit_win2k_require_binding optionGreg Hudson1-34/+4
2014-06-12Remove PKINIT longhorn compatibility optionGreg Hudson1-50/+20
2014-06-11Remove stub pkinit_win2k codeGreg Hudson1-4/+0
2014-05-19Use case insensitive DNS SAN matching in PKINITTomas Kuthan1-1/+1
2014-03-18Improve PKINIT client memory managementGreg Hudson1-80/+54
2014-03-18Fix unlikely double free in PKINIT client codeGreg Hudson1-2/+1
2013-10-03Use constant-time comparisons for checksumsGreg Hudson1-2/+2
2013-07-22Don't ask empty responder questions in PKINITNalin Dahyabhai1-0/+7
2013-07-17Pass PKINIT identity prompts to the responder cbNalin Dahyabhai1-19/+215
2013-07-17Split pkinit_identity_initialize into two phasesNalin Dahyabhai1-6/+20
2013-07-15Don't leak the reply key's memory during PKINITNalin Dahyabhai1-1/+3
2013-04-18Use macro for IANA assigned PA-AS-CHECKSUM numberZhanna Tsitkov1-1/+1
2012-12-10Fix various integer issuesGreg Hudson1-31/+12
2012-10-22Don't use PA_PSEUDO in pkinit client codeGreg Hudson1-1/+1
2012-10-17Use config storage for client identity selectionNalin Dahyabhai1-2/+17
2012-07-05Simplify and fix pkinit_as_req_create cleanupGreg Hudson1-11/+5
2012-07-05Fix PKINIT verify_kdc_eku trace loggingGreg Hudson1-1/+1
2012-05-08First pass at PKINIT client trace logsGreg Hudson1-3/+34
2012-02-11Minimize draft9 PKINIT code by removing dead codeGreg Hudson1-8/+0
2012-01-08Remove unneeded kdcRealm field in PKINIT structureGreg Hudson1-3/+0
2011-12-21Stop using krb5_octet_dataGreg Hudson1-19/+31
2011-11-23 ticket: newSam Hartman1-5/+1
2011-11-21Clean up client-side preauth error data handlingGreg Hudson1-61/+52
2011-10-17Make reindentTom Yu1-2/+2
2011-10-15Hide gak_fct interface and arguments in clpreauthGreg Hudson1-8/+6
2011-10-06Ditch fast_factor.h since it contains only stubsGreg Hudson1-3/+0
2011-10-06Use type-safe callbacks in preauth interfaceGreg Hudson1-22/+8
2011-10-05From: Sam Hartman <hartmans@debian.org>Sam Hartman1-0/+2
2011-10-05Use an opaque handle in the kdcpreauth callbackGreg Hudson1-1/+1
generated by cgit v1.1 at 2024-10-20 00:35:21 +0000