aboutsummaryrefslogtreecommitdiff
path: root/src/plugins/preauth
AgeCommit message (Expand)AuthorFilesLines
2017-08-21Avoid repeating typedef in certauth_plugin.hGreg Hudson1-3/+6
2017-08-07Remove incomplete PKINIT OCSP supportRobbie Harwood3-14/+11
2017-04-18make dependGreg Hudson1-5/+6
2017-04-10Port pkinit debug code to OpenSSL 1.1.0 APIJakub Jelen1-3/+5
2017-04-06Use the canonical client principal name for OTPMatt Rogers1-1/+2
2017-04-05Convert some pkiDebug messages to TRACE macrosMatt Rogers5-45/+97
2017-03-27Remove the NSS PKINIT crypto implementationMatt Rogers4-5826/+3
2017-03-24Remove some unnecessary PKINIT codeGreg Hudson1-9/+1
2017-03-23Correct error handling bug in prior commitGreg Hudson1-2/+2
2017-03-23Add the certauth dbmatch moduleMatt Rogers5-0/+123
2017-03-23Simplify PKINIT cert iteration and selectionMatt Rogers4-417/+189
2017-03-23Add certauth pluggable interfaceMatt Rogers4-40/+334
2017-02-27Fix PKINIT two-component matching rule parsingGreg Hudson1-1/+1
2017-02-23Add test cases for preauth fallback behaviorGreg Hudson6-66/+236
2017-02-09Avoid draft 9 fallback after PKINIT failureGreg Hudson3-0/+10
2017-01-05Deindent crypto_retrieve_X509_sans()Greg Hudson1-96/+100
2017-01-03Improve PKINIT UPN SAN matchingMatt Rogers2-5/+9
2016-12-15Clean up PKINIT decode_data functionsGreg Hudson1-43/+32
2016-12-15Fix error handling in PKINIT decode_data()Greg Hudson1-10/+7
2016-10-05Set alg param correctly for PKCS1Tom Yu1-2/+1
2016-09-22Add PKINIT support for OpenSSL 1.1.0Greg Hudson2-237/+400
2016-08-10Fix memory leaks in test programsGreg Hudson1-31/+2
2016-08-04Remove unnecessary directoriesGreg Hudson8-1159/+0
2016-08-03Remove all makefiles in make distcleanGreg Hudson2-4/+6
2016-07-30Fix build system hygiene issuesGreg Hudson1-1/+1
2016-07-28Use single-colon rules in makefilesGreg Hudson6-15/+15
2016-07-19Minimize timing leaks in PKINIT decryptionGreg Hudson1-23/+34
2016-07-19Simplify pkcs7_dataDecode() in PKINITGreg Hudson1-65/+14
2016-02-12Remove form feed charactersGreg Hudson1-4/+0
2015-12-11make dependGreg Hudson1-0/+25
2015-10-26Fix memory leak in test kdcpreauth moduleGreg Hudson1-0/+1
2015-10-23Use RUN_TEST and fix installed krb5.conf usesGreg Hudson1-1/+1
2015-09-10Improve PKINIT OpenSSL error reportingGreg Hudson2-61/+89
2015-08-27Add etype-info2 to MORE_PREAUTH_DATA_REQUIREDGreg Hudson2-5/+23
2015-08-26Add cookie testsGreg Hudson2-18/+93
2015-08-09Support OTP auth indicators in string attributeGreg Hudson1-4/+69
2015-07-27Simplify test preauth module useGreg Hudson1-5/+0
2015-07-22Add indicator support to PKINITGreg Hudson2-0/+20
2015-07-22Add indicator support to OTPGreg Hudson3-7/+38
2015-07-22Test auth indicator functionalityGreg Hudson2-12/+83
2015-07-08Test client_keyblock kdcpreauth callbackGreg Hudson5-0/+267
2015-07-06Fix uncommon null dereference in PKINIT clientGreg Hudson1-3/+3
2015-04-27Prevent requires_preauth bypass [CVE-2015-2694]Greg Hudson2-5/+9
2015-02-19Use preauth timestamp in PKINIT clpreauth moduleGreg Hudson1-5/+7
2015-02-19Check timestamp in PKINIT kdcpreauth moduleThomas Calderon1-0/+5
2014-10-29Remove length limit on PKINIT PKCS#12 promptGreg Hudson1-7/+10
2014-08-15Autodetect OpenSSL CMS for LibreSSL compatibilitymaurerpe1-2/+2
2014-07-30Modify k5buf interfaces for easier useGreg Hudson2-9/+9
2014-07-08make dependGreg Hudson1-9/+14
2014-07-08Include autoconf.h before system headersGreg Hudson10-71/+15