index
:
krb5.git
master
master-krb5pkgconfig
master-mechdconf
proxymech
Unnamed repository; edit this file 'description' to name the repository.
Günther Deschner
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
src
/
plugins
/
preauth
Commit message (
Expand
)
Author
Age
Files
Lines
*
Move OTP sockets to KDC_RUN_DIR
Nathaniel McCallum
2014-02-06
1
-1
/
+1
*
make depend
Tom Yu
2013-12-10
2
-18
/
+20
*
Use protocol error for PKINIT cert expiry
Greg Hudson
2013-10-17
1
-1
/
+1
*
Use constant-time comparisons for checksums
Greg Hudson
2013-10-03
2
-5
/
+5
*
Don't ask empty responder questions in PKINIT
Nalin Dahyabhai
2013-07-22
1
-0
/
+7
*
Add the error to some PKINIT NSS debug messages
Nalin Dahyabhai
2013-07-17
1
-10
/
+14
*
Support PKINIT OpenSSL deferred identity prompting
Nalin Dahyabhai
2013-07-17
1
-55
/
+159
*
Support PKINIT NSS deferred identity prompting
Nalin Dahyabhai
2013-07-17
1
-60
/
+252
*
Pass PKINIT identity prompts to the responder cb
Nalin Dahyabhai
2013-07-17
2
-19
/
+218
*
Make the PKINIT NSS path also check for NULL certs
Nalin Dahyabhai
2013-07-17
1
-1
/
+6
*
Use PKCS11_MODNAME for NSS PKINIT by default
Nalin Dahyabhai
2013-07-17
1
-0
/
+7
*
Add support for PKINIT deferring identity prompts
Nalin Dahyabhai
2013-07-17
6
-0
/
+226
*
Split pkinit_identity_initialize into two phases
Nalin Dahyabhai
2013-07-17
7
-15
/
+97
*
Fix OTP KDC module get_string error handling
Greg Hudson
2013-07-17
1
-2
/
+4
*
Fix a leak when parsing PKINIT cert SANs with NSS
Nalin Dahyabhai
2013-07-15
1
-0
/
+1
*
Don't leak PKINIT CMS signed data certs and CRLs
Nalin Dahyabhai
2013-07-15
1
-2
/
+4
*
Don't leak the reply key's memory during PKINIT
Nalin Dahyabhai
2013-07-15
1
-1
/
+3
*
Use k5calloc instead of k5alloc where appropriate
Greg Hudson
2013-07-11
1
-2
/
+2
*
Add server-side otp preauth plugin
Nathaniel McCallum
2013-07-11
6
-0
/
+1145
*
Fix various warnings
Greg Hudson
2013-06-07
4
-10
/
+10
*
Reduce boilerplate in makefiles
Greg Hudson
2013-05-16
4
-56
/
+2
*
Fixes for leaking of refcounted resources
Nalin Dahyabhai
2013-05-13
1
-11
/
+22
*
In PKINIT NSS crypto, support encrypted PEM keys
Nalin Dahyabhai
2013-05-13
1
-0
/
+26
*
Get better at locating the just-loaded certificate
Nalin Dahyabhai
2013-05-13
1
-58
/
+35
*
In PKINIT NSS crypto code, load certificates first
Nalin Dahyabhai
2013-05-13
1
-61
/
+62
*
When DEBUG=1, log why we fail to log in to a token
Nalin Dahyabhai
2013-05-10
1
-4
/
+6
*
Traverse tokens like we do with OpenSSL for NSS
Nalin Dahyabhai
2013-05-10
1
-15
/
+14
*
Only call SEC_PKCS12DecoderFinish() once
Nalin Dahyabhai
2013-05-10
1
-1
/
+0
*
Make the text of NSS's prompts look like OpenSSL's
Nalin Dahyabhai
2013-05-10
1
-4
/
+8
*
Don't fail if a candidate certificate has no SANs
Nalin Dahyabhai
2013-05-10
1
-6
/
+2
*
Make reassembled PKCS11 names parseable
Nalin Dahyabhai
2013-05-08
2
-10
/
+10
*
Fix a typo that caused us to not skip removing "."
Nalin Dahyabhai
2013-05-08
1
-1
/
+1
*
Remove some apparently-accidental debug whitespace
Nalin Dahyabhai
2013-05-08
2
-4
/
+4
*
Use macro for IANA assigned PA-AS-CHECKSUM number
Zhanna Tsitkov
2013-04-18
2
-4
/
+5
*
Allow config of dh_min_bits < 2048
Tom Yu
2013-04-12
2
-3
/
+5
*
Simplify pkinit_check_dh_params
Tom Yu
2013-04-12
1
-67
/
+47
*
Ignore missing Q in dh_params
Tom Yu
2013-04-12
1
-4
/
+4
*
Avoid passing null pointers to memcpy/memcmp
Greg Hudson
2013-04-08
1
-1
/
+2
*
make depend
Greg Hudson
2013-03-24
1
-4
/
+3
*
Add PEM password prompter callback in PKINIT
Nalin Dahyabhai
2013-03-15
1
-3
/
+45
*
Cleaner fix for #7570
Ben Kaduk
2013-02-15
1
-4
/
+2
*
PKINIT null pointer deref [CVE-2013-1415]
Xi Wang
2013-02-15
1
-2
/
+1
*
Modernize k5buf
Greg Hudson
2013-02-14
2
-40
/
+30
*
Add and use k5memdup, k5memdup0 helpers
Greg Hudson
2013-02-09
1
-2
/
+2
*
make depend
Greg Hudson
2013-01-10
1
-1
/
+1
*
Fix various result checks
Nickolai Zeldovich
2013-01-07
1
-1
/
+1
*
Separate clpreauth and kdcpreauth interfaces
Greg Hudson
2012-12-19
2
-11
/
+21
*
PKINIT (draft9) null ptr deref [CVE-2012-1016]
Nalin Dahyabhai
2012-12-14
1
-2
/
+3
*
Fix various integer issues
Greg Hudson
2012-12-10
1
-31
/
+12
*
Don't use PA_PSEUDO in pkinit client code
Greg Hudson
2012-10-22
1
-1
/
+1
[next]