aboutsummaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Expand)AuthorFilesLines
2022-01-28Remove unneeded SPAKE free_modreq methodGreg Hudson1-9/+0
2022-01-27Avoid passing null for asprintf stringsGreg Hudson4-28/+26
2022-01-27Pass client flag to KDB for client preauth matchGreg Hudson1-1/+1
2022-01-27Implement replaced_reply_key input to issue_pac()Greg Hudson8-64/+105
2022-01-27Add replace_reply_key kdcpreauth callbackGreg Hudson7-81/+92
2022-01-27Add k5test.py facilities for PKINITGreg Hudson4-90/+76
2022-01-27Remove unimplemented GSSRPC symbolsGreg Hudson3-15/+0
2022-01-26Factor out PAC checksum verificationGreg Hudson1-127/+55
2022-01-12Replace AD-SIGNEDPATH with minimal PACsGreg Hudson34-2325/+951
2022-01-12Add minimal KDC MS-RPCE (NDR) encoder/decoderGreg Hudson4-2/+515
2022-01-12Add PAC ticket signature APIsIsaac Boukris9-41/+526
2022-01-07Correct CKSUMTYPE_SHA1 value and commentGreg Hudson1-1/+1
2022-01-01Don't fail krb5_cc_select() for no default realmIsaac Boukris2-11/+21
2021-12-29Add PA-REDHAT-IDP-OAUTH2 padata typePavel Březina2-0/+2
2021-12-29Remove unnecessary flag in macOS buildNikhil Benesch1-4/+0
2021-12-29Use 14 instead of 9 for unkeyed SHA-1 checksumGreg Hudson8-16/+20
2021-12-05Fix PAC handling of authtimes after y2038Greg Hudson1-15/+5
2021-12-05Fix OpenSSL conditionals for two filesIsaac Boukris2-3/+7
2021-12-05Issue an error from KDC on S4U2Self failuresAndreas Schneider1-3/+2
2021-11-15Use OpenSSL CMAC implementation with OpenSSL 3Greg Hudson13-61/+169
2021-11-15Update PKINIT for OpenSSL 3Robbie Harwood2-36/+165
2021-11-15Use the supported version of openssl 3's CTS modeRobbie Harwood2-0/+180
2021-11-15Prefer openssl's EVP_MAC interface for HMACRobbie Harwood1-6/+68
2021-11-15Use OpenSSL 3 versions of remaining KDFsRobbie Harwood13-382/+685
2021-11-10Support larger RADIUS attributes in libkradSumit Bose2-1/+14
2021-11-10More python3 fixes for t_daemon.pySumit Bose1-3/+3
2021-11-10Avoid use after free during libkrad cleanupGreg Hudson3-31/+26
2021-11-05Remove pkinit_kdf_constants.cGreg Hudson2-61/+2
2021-11-05Use EVP key agreement in PKINITGreg Hudson2-302/+388
2021-11-04Use OpenSSL SubjectPublicKeyInfo parsing in PKINITGreg Hudson14-398/+288
2021-11-02Use pre-encoded DH parameter constants in PKINITGreg Hudson4-303/+357
2021-10-28Support KRB5_CERTAUTH_HWAUTH_PASS in certauthKen Hornstein5-33/+117
2021-10-28Use builtin MD4, RC4 for OpenSSL 3.0Greg Hudson1-3/+18
2021-10-18Make test PKINIT certs work with OpenSSL 3.0Greg Hudson16-209/+204
2021-10-18Allow selective overrides in crypto back-endsGreg Hudson97-793/+595
2021-10-12Always use platform PRNGGreg Hudson31-1300/+51
2021-09-25Fix verification of RODC-issued PAC KDC signatureIsaac Boukris1-2/+11
2021-09-20Restore OpenSSL 1.0 compatibility in softpkcs11Greg Hudson1-3/+6
2021-09-15Fix trivial leak in OTP kdcpreauth modulePavel Březina1-0/+1
2021-09-15Fix link line for GSSAPI reload testGreg Hudson1-1/+1
2021-09-13Improve gss_store_cred() behaviorGreg Hudson6-86/+273
2021-09-10Constify name field in four plugin vtablesPavel Březina4-4/+4
2021-08-29Increase use of expected_msg in GSS testsRobbie Harwood2-22/+16
2021-08-29Update gss_config explanation in mglueP.hRobbie Harwood1-9/+4
2021-08-29Find gss_get_mic_iov extensions in GSS modulesRobbie Harwood1-0/+8
2021-08-25Remove unused internal DES functionsRobbie Harwood4-34/+0
2021-08-25Add more dump.c bounds checksGreg Hudson1-1/+13
2021-08-25Perform atomic ccache refreshes when possibleGreg Hudson15-164/+661
2021-08-23Fix conformance issue in GSSAPI testsGreg Hudson1-4/+3
2021-08-19Fix KDC null deref on TGS inner body null serverGreg Hudson1-0/+5