summaryrefslogtreecommitdiffstats
path: root/src/plugins/preauth
Commit message (Expand)AuthorAgeFilesLines
* In PKINIT NSS crypto, support encrypted PEM keysNalin Dahyabhai2013-05-131-0/+26
* Get better at locating the just-loaded certificateNalin Dahyabhai2013-05-131-58/+35
* In PKINIT NSS crypto code, load certificates firstNalin Dahyabhai2013-05-131-61/+62
* When DEBUG=1, log why we fail to log in to a tokenNalin Dahyabhai2013-05-101-4/+6
* Traverse tokens like we do with OpenSSL for NSSNalin Dahyabhai2013-05-101-15/+14
* Only call SEC_PKCS12DecoderFinish() onceNalin Dahyabhai2013-05-101-1/+0
* Make the text of NSS's prompts look like OpenSSL'sNalin Dahyabhai2013-05-101-4/+8
* Don't fail if a candidate certificate has no SANsNalin Dahyabhai2013-05-101-6/+2
* Make reassembled PKCS11 names parseableNalin Dahyabhai2013-05-082-10/+10
* Fix a typo that caused us to not skip removing "."Nalin Dahyabhai2013-05-081-1/+1
* Remove some apparently-accidental debug whitespaceNalin Dahyabhai2013-05-082-4/+4
* Use macro for IANA assigned PA-AS-CHECKSUM numberZhanna Tsitkov2013-04-182-4/+5
* Allow config of dh_min_bits < 2048Tom Yu2013-04-122-3/+5
* Simplify pkinit_check_dh_paramsTom Yu2013-04-121-67/+47
* Ignore missing Q in dh_paramsTom Yu2013-04-121-4/+4
* Avoid passing null pointers to memcpy/memcmpGreg Hudson2013-04-081-1/+2
* make dependGreg Hudson2013-03-241-4/+3
* Add PEM password prompter callback in PKINITNalin Dahyabhai2013-03-151-3/+45
* Cleaner fix for #7570Ben Kaduk2013-02-151-4/+2
* PKINIT null pointer deref [CVE-2013-1415]Xi Wang2013-02-151-2/+1
* Modernize k5bufGreg Hudson2013-02-142-40/+30
* Add and use k5memdup, k5memdup0 helpersGreg Hudson2013-02-091-2/+2
* make dependGreg Hudson2013-01-101-1/+1
* Fix various result checksNickolai Zeldovich2013-01-071-1/+1
* Separate clpreauth and kdcpreauth interfacesGreg Hudson2012-12-192-11/+21
* PKINIT (draft9) null ptr deref [CVE-2012-1016]Nalin Dahyabhai2012-12-141-2/+3
* Fix various integer issuesGreg Hudson2012-12-101-31/+12
* Don't use PA_PSEUDO in pkinit client codeGreg Hudson2012-10-221-1/+1
* make dependGreg Hudson2012-10-171-6/+6
* Use config storage for client identity selectionNalin Dahyabhai2012-10-178-40/+403
* Handle anonymous-as-signed-data-with-no-signersNalin Dahyabhai2012-10-151-27/+28
* Make sure that pkinit_octetstring_hkdf() inits NSSNalin Dahyabhai2012-10-151-0/+15
* Don't try to free an uninitialized keyblockNalin Dahyabhai2012-10-151-2/+0
* Sanity-check loading keys and certs from PEM filesNalin Dahyabhai2012-10-151-0/+15
* Reset the prompt_types list after calling prompterNalin Dahyabhai2012-10-151-0/+1
* Simplify pkinit_server_verify_padata slightlyGreg Hudson2012-07-051-7/+2
* Simplify and fix pkinit_as_req_create cleanupGreg Hudson2012-07-051-11/+5
* Fix minor memory leaks in PKINIT codeGreg Hudson2012-07-051-0/+2
* Fix PKINIT verify_kdc_eku trace loggingGreg Hudson2012-07-051-1/+1
* Clean up const usage for supported_kdf_alg_idsBen Kaduk2012-07-032-2/+2
* Handle PKINIT DH replies with no certsGreg Hudson2012-06-221-1/+8
* First pass at PKINIT client trace logsGreg Hudson2012-05-084-25/+156
* Improve traced error messages from PKINIT clientGreg Hudson2012-05-082-2/+9
* Make it easier to test SAM-2 client codeGreg Hudson2012-04-266-120/+407
* Minimize draft9 PKINIT code by removing dead codeGreg Hudson2012-02-118-156/+9
* Make dh_key_info encoder and decoder symmetricGreg Hudson2012-01-092-56/+7
* Remove unneeded kdcRealm field in PKINIT structureGreg Hudson2012-01-081-3/+0
* Convert securid module edata methodGreg Hudson2012-01-071-4/+9
* Remove some unneeded accessor fieldsGreg Hudson2012-01-072-13/+0
* Stop using krb5_typed_data structure typeGreg Hudson2011-12-214-17/+0