diff options
| author | Sam Hartman <hartmans@mit.edu> | 2011-11-23 01:00:27 +0000 |
|---|---|---|
| committer | Sam Hartman <hartmans@mit.edu> | 2011-11-23 01:00:27 +0000 |
| commit | adfcfdce396468f93dce5fb56c7509d138a11e5c (patch) | |
| tree | 74daa40bd00c461da828adfef8fcf9ed28399eea /src/ccapi/server/win/WorkQueue.cpp | |
| parent | 01bd1cedd0fb24b7578b3c4b563f065dd113e3d7 (diff) | |
| download | krb5-adfcfdce396468f93dce5fb56c7509d138a11e5c.tar.gz krb5-adfcfdce396468f93dce5fb56c7509d138a11e5c.tar.xz krb5-adfcfdce396468f93dce5fb56c7509d138a11e5c.zip | |
ticket: new
subject: FAST PKINIT
target_version: 1.10
tags: pullup
Per RFC 6113 fast should use the inner request body for the pkinit
checksum. We did that on the KDC; now do so on the client. Remove
code that explicitly blocked pkinit under FAST.
Also, use the reply key *before* the strengthen key is applied when
verifying the PADATA_PKINIT_KX.
Add FAST pkinit test.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25486 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/ccapi/server/win/WorkQueue.cpp')
0 files changed, 0 insertions, 0 deletions