363 lines
11 KiB
Plaintext
363 lines
11 KiB
Plaintext
2002-09-03 Johan Danielsson <joda@pdc.kth.se>
|
|
|
|
* wrap.c (wrap_des3): use ETYPE_DES3_CBC_NONE
|
|
|
|
* unwrap.c (unwrap_des3): use ETYPE_DES3_CBC_NONE
|
|
|
|
2002-09-02 Johan Danielsson <joda@pdc.kth.se>
|
|
|
|
* init_sec_context.c: we need to generate a local subkey here
|
|
|
|
2002-08-20 Jacques Vidrine <n@nectar.com>
|
|
|
|
* acquire_cred.c, inquire_cred.c, release_cred.c: Use default
|
|
credential resolution if gss_acquire_cred is called with
|
|
GSS_C_NO_NAME.
|
|
|
|
2002-06-20 Jacques Vidrine <n@nectar.com>
|
|
|
|
* import_name.c: Compare name types by value if pointers do
|
|
not match. Reported by: "Douglas E. Engert" <deengert@anl.gov>
|
|
|
|
2002-05-20 Jacques Vidrine <n@nectar.com>
|
|
|
|
* verify_mic.c (gss_verify_mic), unwrap.c (gss_unwrap): initialize
|
|
the qop_state parameter. from Doug Rabson <dfr@nlsystems.com>
|
|
|
|
2002-05-09 Jacques Vidrine <n@nectar.com>
|
|
|
|
* acquire_cred.c: handle GSS_C_INITIATE/GSS_C_ACCEPT/GSS_C_BOTH
|
|
|
|
2002-05-08 Jacques Vidrine <n@nectar.com>
|
|
|
|
* acquire_cred.c: initialize gssapi; handle null desired_name
|
|
|
|
2002-03-22 Johan Danielsson <joda@pdc.kth.se>
|
|
|
|
* Makefile.am: remove non-functional stuff accidentally committed
|
|
|
|
2002-03-11 Assar Westerlund <assar@sics.se>
|
|
|
|
* Makefile.am (libgssapi_la_LDFLAGS): bump version to 3:5:2
|
|
* 8003.c (gssapi_krb5_verify_8003_checksum): handle zero channel
|
|
bindings
|
|
|
|
2001-10-31 Jacques Vidrine <n@nectar.com>
|
|
|
|
* get_mic.c (mic_des3): MIC computation using DES3/SHA1
|
|
was bogusly appending the message buffer to the result,
|
|
overwriting a heap buffer in the process.
|
|
|
|
2001-08-29 Assar Westerlund <assar@sics.se>
|
|
|
|
* 8003.c (gssapi_krb5_verify_8003_checksum,
|
|
gssapi_krb5_create_8003_checksum): make more consistent by always
|
|
returning an gssapi error and setting minor status. update
|
|
callers
|
|
|
|
2001-08-28 Jacques Vidrine <n@nectar.com>
|
|
|
|
* accept_sec_context.c: Create a cache for delegated credentials
|
|
when needed.
|
|
|
|
2001-08-28 Assar Westerlund <assar@sics.se>
|
|
|
|
* Makefile.am (libgssapi_la_LDFLAGS): set version to 3:4:2
|
|
|
|
2001-08-23 Assar Westerlund <assar@sics.se>
|
|
|
|
* *.c: handle minor_status more consistently
|
|
|
|
* display_status.c (gss_display_status): handle krb5_get_err_text
|
|
failing
|
|
|
|
2001-08-15 Johan Danielsson <joda@pdc.kth.se>
|
|
|
|
* gssapi_locl.h: fix prototype for gssapi_krb5_init
|
|
|
|
2001-08-13 Johan Danielsson <joda@pdc.kth.se>
|
|
|
|
* accept_sec_context.c (gsskrb5_register_acceptor_identity): init
|
|
context and check return value from kt_resolve
|
|
|
|
* init.c: return error code
|
|
|
|
2001-07-19 Assar Westerlund <assar@sics.se>
|
|
|
|
* Makefile.am (libgssapi_la_LDFLAGS): update to 3:3:2
|
|
|
|
2001-07-12 Assar Westerlund <assar@sics.se>
|
|
|
|
* Makefile.am (libgssapi_la_LIBADD): add required library
|
|
dependencies
|
|
|
|
2001-07-06 Assar Westerlund <assar@sics.se>
|
|
|
|
* accept_sec_context.c (gsskrb5_register_acceptor_identity): set
|
|
the keytab to be used for gss_acquire_cred too'
|
|
|
|
2001-07-03 Assar Westerlund <assar@sics.se>
|
|
|
|
* Makefile.am (libgssapi_la_LDFLAGS): set version to 3:2:2
|
|
|
|
2001-06-18 Assar Westerlund <assar@sics.se>
|
|
|
|
* wrap.c: replace gss_krb5_getsomekey with gss_krb5_get_localkey
|
|
and gss_krb5_get_remotekey
|
|
* verify_mic.c: update krb5_auth_con function names use
|
|
gss_krb5_get_remotekey
|
|
* unwrap.c: replace gss_krb5_getsomekey with gss_krb5_get_localkey
|
|
and gss_krb5_get_remotekey
|
|
* gssapi_locl.h (gss_krb5_get_remotekey, gss_krb5_get_localkey):
|
|
add prototypes
|
|
* get_mic.c: update krb5_auth_con function names. use
|
|
gss_krb5_get_localkey
|
|
* accept_sec_context.c: update krb5_auth_con function names
|
|
|
|
2001-05-17 Assar Westerlund <assar@sics.se>
|
|
|
|
* Makefile.am: bump version to 3:1:2
|
|
|
|
2001-05-14 Assar Westerlund <assar@sics.se>
|
|
|
|
* address_to_krb5addr.c: adapt to new address functions
|
|
|
|
2001-05-11 Assar Westerlund <assar@sics.se>
|
|
|
|
* try to return the error string from libkrb5 where applicable
|
|
|
|
2001-05-08 Assar Westerlund <assar@sics.se>
|
|
|
|
* delete_sec_context.c (gss_delete_sec_context): remember to free
|
|
the memory used by the ticket itself. from <tmartin@mirapoint.com>
|
|
|
|
2001-05-04 Assar Westerlund <assar@sics.se>
|
|
|
|
* gssapi_locl.h: add config.h for completeness
|
|
* gssapi.h: remove config.h, this is an installed header file
|
|
sys/types.h is not needed either
|
|
|
|
2001-03-12 Assar Westerlund <assar@sics.se>
|
|
|
|
* acquire_cred.c (gss_acquire_cred): remove memory leaks. from
|
|
Jason R Thorpe <thorpej@zembu.com>
|
|
|
|
2001-02-18 Assar Westerlund <assar@sics.se>
|
|
|
|
* accept_sec_context.c (gss_accept_sec_context): either return
|
|
gss_name NULL-ed or set
|
|
|
|
* import_name.c: set minor_status in some cases where it was not
|
|
done
|
|
|
|
2001-02-15 Assar Westerlund <assar@sics.se>
|
|
|
|
* wrap.c: use krb5_generate_random_block for the confounders
|
|
|
|
2001-01-30 Assar Westerlund <assar@sics.se>
|
|
|
|
* Makefile.am (libgssapi_la_LDFLAGS): bump version to 3:0:2
|
|
* acquire_cred.c, init_sec_context.c, release_cred.c: add support
|
|
for getting creds from a keytab, from fvdl@netbsd.org
|
|
|
|
* copy_ccache.c: add gss_krb5_copy_ccache
|
|
|
|
2001-01-27 Assar Westerlund <assar@sics.se>
|
|
|
|
* get_mic.c: cast parameters to des function to non-const pointers
|
|
to handle the case where these functions actually take non-const
|
|
des_cblock *
|
|
|
|
2001-01-09 Assar Westerlund <assar@sics.se>
|
|
|
|
* accept_sec_context.c (gss_accept_sec_context): use krb5_rd_cred2
|
|
instead of krb5_rd_cred
|
|
|
|
2000-12-11 Assar Westerlund <assar@sics.se>
|
|
|
|
* Makefile.am (libgssapi_la_LDFLAGS): bump to 2:3:1
|
|
|
|
2000-12-08 Assar Westerlund <assar@sics.se>
|
|
|
|
* wrap.c (wrap_des3): use the checksum as ivec when encrypting the
|
|
sequence number
|
|
* unwrap.c (unwrap_des3): use the checksum as ivec when encrypting
|
|
the sequence number
|
|
* init_sec_context.c (init_auth): always zero fwd_data
|
|
|
|
2000-12-06 Johan Danielsson <joda@pdc.kth.se>
|
|
|
|
* accept_sec_context.c: de-pointerise auth_context parameter to
|
|
krb5_mk_rep
|
|
|
|
2000-11-15 Assar Westerlund <assar@sics.se>
|
|
|
|
* init_sec_context.c (init_auth): update to new
|
|
krb5_build_authenticator
|
|
|
|
2000-09-19 Assar Westerlund <assar@sics.se>
|
|
|
|
* Makefile.am (libgssapi_la_LDFLAGS): bump to 2:2:1
|
|
|
|
2000-08-27 Assar Westerlund <assar@sics.se>
|
|
|
|
* init_sec_context.c: actually pay attention to `time_req'
|
|
* init_sec_context.c: re-organize. leak less memory.
|
|
* gssapi_locl.h (gssapi_krb5_encapsulate, gss_krb5_getsomekey):
|
|
update prototypes add assert.h
|
|
* gssapi.h (GSS_KRB5_CONF_C_QOP_DES, GSS_KRB5_CONF_C_QOP_DES3_KD):
|
|
add
|
|
* verify_mic.c: re-organize and add 3DES code
|
|
* wrap.c: re-organize and add 3DES code
|
|
* unwrap.c: re-organize and add 3DES code
|
|
* get_mic.c: re-organize and add 3DES code
|
|
* encapsulate.c (gssapi_krb5_encapsulate): do not free `in_data',
|
|
let the caller do that. fix the callers.
|
|
|
|
2000-08-16 Assar Westerlund <assar@sics.se>
|
|
|
|
* Makefile.am: bump version to 2:1:1
|
|
|
|
2000-07-29 Assar Westerlund <assar@sics.se>
|
|
|
|
* decapsulate.c (gssapi_krb5_verify_header): sanity-check length
|
|
|
|
2000-07-25 Johan Danielsson <joda@pdc.kth.se>
|
|
|
|
* Makefile.am: bump version to 2:0:1
|
|
|
|
2000-07-22 Assar Westerlund <assar@sics.se>
|
|
|
|
* gssapi.h: update OID for GSS_C_NT_HOSTBASED_SERVICE and other
|
|
details from rfc2744
|
|
|
|
2000-06-29 Assar Westerlund <assar@sics.se>
|
|
|
|
* address_to_krb5addr.c (gss_address_to_krb5addr): actually use
|
|
`int' instead of `sa_family_t' for the address family.
|
|
|
|
2000-06-21 Assar Westerlund <assar@sics.se>
|
|
|
|
* add support for token delegation. From Daniel Kouril
|
|
<kouril@ics.muni.cz> and Miroslav Ruda <ruda@ics.muni.cz>
|
|
|
|
2000-05-15 Assar Westerlund <assar@sics.se>
|
|
|
|
* Makefile.am (libgssapi_la_LDFLAGS): set version to 1:1:1
|
|
|
|
2000-04-12 Assar Westerlund <assar@sics.se>
|
|
|
|
* release_oid_set.c (gss_release_oid_set): clear set for
|
|
robustness. From GOMBAS Gabor <gombasg@inf.elte.hu>
|
|
* release_name.c (gss_release_name): reset input_name for
|
|
robustness. From GOMBAS Gabor <gombasg@inf.elte.hu>
|
|
* release_buffer.c (gss_release_buffer): set value to NULL to be
|
|
more robust. From GOMBAS Gabor <gombasg@inf.elte.hu>
|
|
* add_oid_set_member.c (gss_add_oid_set_member): actually check if
|
|
the oid is a member first. leave the oid_set unchanged if realloc
|
|
fails.
|
|
|
|
2000-02-13 Assar Westerlund <assar@sics.se>
|
|
|
|
* Makefile.am: set version to 1:0:1
|
|
|
|
2000-02-12 Assar Westerlund <assar@sics.se>
|
|
|
|
* gssapi_locl.h: add flags for import/export
|
|
* import_sec_context.c (import_sec_context: add flags for what
|
|
fields are included. do not include the authenticator for now.
|
|
* export_sec_context.c (export_sec_context: add flags for what
|
|
fields are included. do not include the authenticator for now.
|
|
* accept_sec_context.c (gss_accept_sec_context): set target in
|
|
context_handle
|
|
|
|
2000-02-11 Assar Westerlund <assar@sics.se>
|
|
|
|
* delete_sec_context.c (gss_delete_sec_context): set context to
|
|
GSS_C_NO_CONTEXT
|
|
|
|
* Makefile.am: add {export,import}_sec_context.c
|
|
* export_sec_context.c: new file
|
|
* import_sec_context.c: new file
|
|
* accept_sec_context.c (gss_accept_sec_context): set trans flag
|
|
|
|
2000-02-07 Assar Westerlund <assar@sics.se>
|
|
|
|
* Makefile.am: set version to 0:5:0
|
|
|
|
2000-01-26 Assar Westerlund <assar@sics.se>
|
|
|
|
* delete_sec_context.c (gss_delete_sec_context): handle a NULL
|
|
output_token
|
|
|
|
* wrap.c: update to pseudo-standard APIs for md4,md5,sha. some
|
|
changes to libdes calls to make them more portable.
|
|
* verify_mic.c: update to pseudo-standard APIs for md4,md5,sha.
|
|
some changes to libdes calls to make them more portable.
|
|
* unwrap.c: update to pseudo-standard APIs for md4,md5,sha. some
|
|
changes to libdes calls to make them more portable.
|
|
* get_mic.c: update to pseudo-standard APIs for md4,md5,sha. some
|
|
changes to libdes calls to make them more portable.
|
|
* 8003.c: update to pseudo-standard APIs for md4,md5,sha.
|
|
|
|
2000-01-06 Assar Westerlund <assar@sics.se>
|
|
|
|
* Makefile.am: set version to 0:4:0
|
|
|
|
1999-12-26 Assar Westerlund <assar@sics.se>
|
|
|
|
* accept_sec_context.c (gss_accept_sec_context): always set
|
|
`output_token'
|
|
* init_sec_context.c (init_auth): always initialize `output_token'
|
|
* delete_sec_context.c (gss_delete_sec_context): always set
|
|
`output_token'
|
|
|
|
1999-12-06 Assar Westerlund <assar@sics.se>
|
|
|
|
* Makefile.am: bump version to 0:3:0
|
|
|
|
1999-10-20 Assar Westerlund <assar@sics.se>
|
|
|
|
* Makefile.am: set version to 0:2:0
|
|
|
|
1999-09-21 Assar Westerlund <assar@sics.se>
|
|
|
|
* init_sec_context.c (gss_init_sec_context): initialize `ticket'
|
|
|
|
* gssapi.h (gss_ctx_id_t_desc): add ticket in here. ick.
|
|
|
|
* delete_sec_context.c (gss_delete_sec_context): free ticket
|
|
|
|
* accept_sec_context.c (gss_accept_sec_context): stove away
|
|
`krb5_ticket' in context so that ugly programs such as
|
|
gss_nt_server can get at it. uck.
|
|
|
|
1999-09-20 Johan Danielsson <joda@pdc.kth.se>
|
|
|
|
* accept_sec_context.c: set minor_status
|
|
|
|
1999-08-04 Assar Westerlund <assar@sics.se>
|
|
|
|
* display_status.c (calling_error, routine_error): right shift the
|
|
code to make it possible to index into the arrays
|
|
|
|
1999-07-28 Assar Westerlund <assar@sics.se>
|
|
|
|
* gssapi.h (GSS_C_AF_INET6): add
|
|
|
|
* import_name.c (import_hostbased_name): set minor_status
|
|
|
|
1999-07-26 Assar Westerlund <assar@sics.se>
|
|
|
|
* Makefile.am: set version to 0:1:0
|
|
|
|
Wed Apr 7 14:05:15 1999 Johan Danielsson <joda@hella.pdc.kth.se>
|
|
|
|
* display_status.c: set minor_status
|
|
|
|
* init_sec_context.c: set minor_status
|
|
|
|
* lib/gssapi/init.c: remove donep (check gssapi_krb5_context
|
|
directly)
|
|
|