aboutsummaryrefslogtreecommitdiff
path: root/src/plugins
AgeCommit message (Expand)AuthorFilesLines
2024-05-22Fix more non-prototype functionsArjun3-5/+5
2024-03-26Fix OpenSSL 1.0 and 1.1 support in PKINITGreg Hudson1-1/+30
2024-03-18Improve PKCS11 error reporting in PKINITGreg Hudson2-129/+142
2024-03-18Support PKCS11 EC client certs in PKINITGreg Hudson1-113/+206
2024-03-18Correct PKINIT EC cert signature metadataGreg Hudson1-2/+18
2024-03-18Simplify PKINIT cert representationGreg Hudson1-54/+20
2024-02-13Avoid strict-prototype compiler errorsSteffen Kieß7-8/+8
2023-12-12Refactor PKINIT KDF internal interfacesGreg Hudson6-132/+70
2023-11-30Remove PKINIT RSA supportGreg Hudson7-868/+131
2023-11-30In PKINIT, check for null PKCS7 enveloped fieldsGreg Hudson1-1/+3
2023-10-09Fix unimportant memory leaksSteve Grubb1-3/+5
2023-08-22Add missing dependenciesGreg Hudson2-0/+15
2023-08-22Get rid of pkinit_crypto_openssl.hGreg Hudson3-125/+83
2023-07-24Add ecdsa-with-sha512/256 to supportedCMSTypesJulien Rische1-0/+38
2023-07-24Eliminate old-style function declarationsKen Hornstein37-583/+202
2023-07-17PKINIT ECDH supportGreg Hudson9-178/+384
2023-06-02Enable PKINIT if at least one group is availableGreg Hudson5-35/+51
2023-04-11Convey realm names to certauth modulesGreg Hudson1-9/+11
2023-04-10Squash unused variable warnings in kdb5_ldap_utilGreg Hudson1-24/+16
2023-04-10Squash a Berkeley DB warningGreg Hudson1-27/+1
2023-03-24Make k5buf more flexible for binary dataGreg Hudson4-18/+10
2023-01-13Fix PKINIT CMS error checking for older OpenSSLGreg Hudson1-11/+3
2023-01-04Fix policy DB fallback error handlingGreg Hudson1-10/+5
2022-08-18Update error checking for OpenSSL CMS_verifyJulien Rische1-3/+6
2022-07-20Remove include_certchain parameter in PKINITGreg Hudson4-51/+40
2022-07-13Remove pre-CMS PKINIT compatibility codeGreg Hudson2-42/+6
2022-07-07Set reasonable supportedCMSTypes in PKINITJulien Rische3-26/+60
2022-06-08Fix memory leak in OTP kdcpreauth moduleGreg Hudson1-2/+4
2022-06-08Fix uncommon PKINIT memory leaksashan1-1/+8
2022-05-31Fix leaks in KDB test modulesashan1-1/+4
2022-05-31Fix memory leak in SPAKE kdcpreauth modulesashan1-0/+1
2022-04-29Add configure variable for default PKCS#11 moduleJulien Rische1-1/+0
2022-03-17Use SHA-256 instead of SHA-1 for PKINIT CMS digestJulien Rische1-17/+21
2022-01-28Remove unneeded SPAKE free_modreq methodGreg Hudson1-9/+0
2022-01-27Implement replaced_reply_key input to issue_pac()Greg Hudson1-0/+8
2022-01-27Add replace_reply_key kdcpreauth callbackGreg Hudson3-69/+47
2022-01-12Replace AD-SIGNEDPATH with minimal PACsGreg Hudson4-454/+94
2022-01-12Add PAC ticket signature APIsIsaac Boukris1-3/+3
2021-12-29Use 14 instead of 9 for unkeyed SHA-1 checksumGreg Hudson3-12/+5
2021-11-15Update PKINIT for OpenSSL 3Robbie Harwood2-36/+165
2021-11-15Use OpenSSL 3 versions of remaining KDFsRobbie Harwood4-193/+186
2021-11-05Remove pkinit_kdf_constants.cGreg Hudson2-61/+2
2021-11-05Use EVP key agreement in PKINITGreg Hudson2-302/+388
2021-11-04Use OpenSSL SubjectPublicKeyInfo parsing in PKINITGreg Hudson7-336/+279
2021-11-02Use pre-encoded DH parameter constants in PKINITGreg Hudson4-303/+357
2021-10-28Support KRB5_CERTAUTH_HWAUTH_PASS in certauthKen Hornstein3-12/+72
2021-09-15Fix trivial leak in OTP kdcpreauth modulePavel Březina1-0/+1
2021-07-01Fix many unlikely memory leaksRobbie Harwood7-50/+57
2021-07-01Modernize pkinit_get_certs_pkcs11Robbie Harwood1-117/+113
2021-06-18Fix k5tls module for OpenSSL 3Robbie Harwood1-3/+14