krb5.git, branch master-krb5pkgconfig Unnamed repository; edit this file 'description' to name the repository. Add gssrpc to pkg-config. 2013-04-30T15:02:53+00:00 Günther Deschner gdeschner@redhat.org 2013-04-15T12:30:03+00:00 f45444b769c40480750af22a8b6bc2cddaa2077c Signed-off-by: Günther Deschner <gdeschner@redhat.com> 
Signed-off-by: Günther Deschner <gdeschner@redhat.com>
Add gssrpc to krb5-config. 2013-04-26T13:38:18+00:00 Günther Deschner gdeschner@redhat.com 2013-04-15T10:58:03+00:00 b50213c2f7e4d06ff87066465817e3c026c91b34 Signed-off-by: Günther Deschner <gdeschner@redhat.com> 
Signed-off-by: Günther Deschner <gdeschner@redhat.com>
Add various client-authenticating PKINIT tests 2013-04-24T21:41:54+00:00 Nalin Dahyabhai nalin@redhat.com 2013-01-10T23:30:04+00:00 f42477d27dc4f6c482a23a8c29d416d830277d04 Add tests for non-anonymous PKINIT: * FILE: with no password * FILE: with a password * DIR: with no password * DIR: with a password * PKCS12: with no password * PKCS12: with a password * PKCS11: with a password, if soft-pkcs11.so is found via ctypes [ghudson@mit.edu: reformatted to 79 columns; removed intermediate success() calls] 
Add tests for non-anonymous PKINIT:
* FILE: with no password
* FILE: with a password
* DIR: with no password
* DIR: with a password
* PKCS12: with no password
* PKCS12: with a password
* PKCS11: with a password, if soft-pkcs11.so is found via ctypes

[ghudson@mit.edu: reformatted to 79 columns; removed intermediate
success() calls]
Add a script for [re]generating test PKI creds 2013-04-24T18:12:11+00:00 Nalin Dahyabhai nalin@redhat.com 2013-02-13T19:37:36+00:00 b5d76a1b42673fa06d989b7795a79a59dda4d178 [ghudson@mit.edu: reformatted to limit lines to 79 columns] 
[ghudson@mit.edu: reformatted to limit lines to 79 columns]
Include default DIR::file ccache in collection 2013-04-22T21:55:00+00:00 Greg Hudson ghudson@mit.edu 2013-04-22T21:00:35+00:00 b874882dc93e5ece4f7218617ed7942656985471 If the context's default ccache name is a subsidiary file of a directory collection, include that single cache in the cursor walk over the DIR type. ticket: 7172 
If the context's default ccache name is a subsidiary file of a
directory collection, include that single cache in the cursor walk
over the DIR type.

ticket: 7172
Fix doc build 2013-04-18T22:18:57+00:00 Ben Kaduk kaduk@mit.edu 2013-04-18T22:18:57+00:00 0949e80d63770e220dae7d778b5a0094d12e9e12 The addition of the KRB5_PADATA_AS_CHECKSUM macro in d7d74867952f caused the doxygen bridge to emit a new RST file. This file was not included in the API reference toctree, causing a build failure in maintainer-mode. 
The addition of the KRB5_PADATA_AS_CHECKSUM macro in d7d74867952f caused
the doxygen bridge to emit a new RST file.  This file was not included in
the API reference toctree, causing a build failure in maintainer-mode.
Add a few comments to `PADATA types` in krb5.hin 2013-04-18T19:27:01+00:00 Zhanna Tsitkov tsitkova@mit.edu 2013-04-18T19:21:51+00:00 b67781a8165a55f937dc53e91e28f855b8a6f4b9 Mostly, based on http://www.iana.org/assignments/kerberos-parameters/kerberos-parameters.xml 
Mostly, based on
http://www.iana.org/assignments/kerberos-parameters/kerberos-parameters.xml
Use macro for IANA assigned PA-AS-CHECKSUM number 2013-04-18T19:03:12+00:00 Zhanna Tsitkov tsitkova@mit.edu 2013-04-18T18:56:39+00:00 d7d74867952fdd7335f22981c66a67a61dc6e434 Replace numeric value '132' by the macro KRB5_PADATA_AS_CHECKSUM in preauth plugin. 
Replace numeric value '132' by the macro KRB5_PADATA_AS_CHECKSUM
in preauth plugin.
Set msg_type when decoding FAST requests 2013-04-13T05:09:36+00:00 Greg Hudson ghudson@mit.edu 2013-04-12T20:28:14+00:00 3a447c5a8c95758501cf5a20c161a2d735a02f6d An RFC 6113 KrbFastReq contains a padata sequence and a KDC-REQ-BODY, neither of which contain the msg-type field found in a KDC-REQ. So when we decode the FAST request, the resulting krb5_kdc_req structure has a msg_type of 0. Copy msg_type from the outer body, since we make use of it in further KDC processing. ticket: 7605 (new) target_version: 1.11.3 tags: pullup 
An RFC 6113 KrbFastReq contains a padata sequence and a KDC-REQ-BODY,
neither of which contain the msg-type field found in a KDC-REQ.  So
when we decode the FAST request, the resulting krb5_kdc_req structure
has a msg_type of 0.  Copy msg_type from the outer body, since we make
use of it in further KDC processing.

ticket: 7605 (new)
target_version: 1.11.3
tags: pullup
Allow config of dh_min_bits < 2048 2013-04-12T20:09:16+00:00 Tom Yu tlyu@mit.edu 2013-04-10T03:47:54+00:00 cae44d2d014985022a001924dce4a56d12c63818 Allow configuration to override the default dh_min_bits of 2048 to 1024. Disallow configuration of dh_min_bits < 1024, but continue to default to 2048. ticket: 7602 target_version: 1.11.3 tags: pullup 
Allow configuration to override the default dh_min_bits of 2048 to
1024.  Disallow configuration of dh_min_bits < 1024, but continue to
default to 2048.

ticket: 7602
target_version: 1.11.3
tags: pullup