aboutsummaryrefslogtreecommitdiff
path: root/src/plugins/preauth/pkinit
AgeCommit message (Expand)AuthorFilesLines
2018-10-29Fix incorrect TRACE usages to use {str}Robbie Harwood1-3/+3
2018-05-02make dependGreg Hudson1-7/+12
2018-05-02Fix PKINIT rule matching against UPN SANsGreg Hudson5-68/+45
2018-05-01Fix memory leak in KDC PKINIT codesashan1-0/+1
2017-11-22Expose context errors in pkinit_server_plugin_initRobbie Harwood2-6/+16
2017-10-27Fix PKINIT cert matching data constructionGreg Hudson1-42/+25
2017-08-29Fix certauth built-in module returnsGreg Hudson2-26/+27
2017-08-21Avoid repeating typedef in certauth_plugin.hGreg Hudson1-3/+6
2017-08-07Remove incomplete PKINIT OCSP supportRobbie Harwood3-14/+11
2017-04-18make dependGreg Hudson1-5/+6
2017-04-10Port pkinit debug code to OpenSSL 1.1.0 APIJakub Jelen1-3/+5
2017-04-05Convert some pkiDebug messages to TRACE macrosMatt Rogers5-45/+97
2017-03-27Remove the NSS PKINIT crypto implementationMatt Rogers4-5826/+3
2017-03-24Remove some unnecessary PKINIT codeGreg Hudson1-9/+1
2017-03-23Correct error handling bug in prior commitGreg Hudson1-2/+2
2017-03-23Add the certauth dbmatch moduleMatt Rogers5-0/+123
2017-03-23Simplify PKINIT cert iteration and selectionMatt Rogers4-417/+189
2017-03-23Add certauth pluggable interfaceMatt Rogers4-40/+334
2017-02-27Fix PKINIT two-component matching rule parsingGreg Hudson1-1/+1
2017-02-09Avoid draft 9 fallback after PKINIT failureGreg Hudson3-0/+10
2017-01-05Deindent crypto_retrieve_X509_sans()Greg Hudson1-96/+100
2017-01-03Improve PKINIT UPN SAN matchingMatt Rogers2-5/+9
2016-12-15Clean up PKINIT decode_data functionsGreg Hudson1-43/+32
2016-12-15Fix error handling in PKINIT decode_data()Greg Hudson1-10/+7
2016-10-05Set alg param correctly for PKCS1Tom Yu1-2/+1
2016-09-22Add PKINIT support for OpenSSL 1.1.0Greg Hudson2-237/+400
2016-08-10Fix memory leaks in test programsGreg Hudson1-31/+2
2016-07-28Use single-colon rules in makefilesGreg Hudson1-4/+4
2016-07-19Minimize timing leaks in PKINIT decryptionGreg Hudson1-23/+34
2016-07-19Simplify pkcs7_dataDecode() in PKINITGreg Hudson1-65/+14
2016-02-12Remove form feed charactersGreg Hudson1-4/+0
2015-10-23Use RUN_TEST and fix installed krb5.conf usesGreg Hudson1-1/+1
2015-09-10Improve PKINIT OpenSSL error reportingGreg Hudson2-61/+89
2015-07-22Add indicator support to PKINITGreg Hudson2-0/+20
2015-07-06Fix uncommon null dereference in PKINIT clientGreg Hudson1-3/+3
2015-04-27Prevent requires_preauth bypass [CVE-2015-2694]Greg Hudson1-2/+2
2015-02-19Use preauth timestamp in PKINIT clpreauth moduleGreg Hudson1-5/+7
2015-02-19Check timestamp in PKINIT kdcpreauth moduleThomas Calderon1-0/+5
2014-10-29Remove length limit on PKINIT PKCS#12 promptGreg Hudson1-7/+10
2014-08-15Autodetect OpenSSL CMS for LibreSSL compatibilitymaurerpe1-2/+2
2014-07-30Modify k5buf interfaces for easier useGreg Hudson2-9/+9
2014-07-08make dependGreg Hudson1-9/+14
2014-07-08Include autoconf.h before system headersGreg Hudson10-71/+15
2014-06-20Fix error checking in PKINIT authdata creationGreg Hudson1-20/+15
2014-06-13Remove pkinit_win2k_require_binding optionGreg Hudson3-37/+4
2014-06-12Remove PKINIT longhorn compatibility optionGreg Hudson3-239/+45
2014-06-11Remove stub pkinit_win2k codeGreg Hudson3-7/+0
2014-06-03Remove stub pkinit_mapping_file codeGreg Hudson3-7/+0
2014-05-24Properly handle PKCS11 label in PKINITGreg Hudson1-10/+18
2014-05-24Don't blindly use PKCS11 slot IDs in PKINITGreg Hudson1-14/+13