Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Add CRC32 function using Zlib's crc32 | Simo Sorce | 2013-10-23 | 4 | -0/+161 | |
| | ||||||
* | Fix URLs with new upstream locations | Simo Sorce | 2013-10-23 | 1 | -2/+2 | |
| | ||||||
* | Release 0.2.0v0.2.0 | Simo Sorce | 2013-10-18 | 1 | -1/+1 | |
| | ||||||
* | Test connectionless contextsconnectionless | Simo Sorce | 2013-10-18 | 1 | -2/+233 | |
| | ||||||
* | Support connectionless signing and sealing. | Simo Sorce | 2013-10-18 | 3 | -11/+104 | |
| | | | | | In connectionless mode (GSS_C_DATAGRAM_FLAG on) sealing keys ust be rotated for each message. | |||||
* | Add way to set sequence numbres. | Simo Sorce | 2013-10-18 | 5 | -0/+81 | |
| | | | | | | | | | | | In NTLMSSP connectionless mode applications are supposed to provide the sequence number, however GSSAPI's get_mic and verify_mic functions do not allow to pass an explicit sequence number. Allow to override the context sequence numbers using a custom oid and implemnting gss_set_sec_context_option() Allows the operation only if the context is in connectionless mode. | |||||
* | Add support for connectionless mode | Simo Sorce | 2013-10-18 | 1 | -46/+117 | |
| | | | | | This needs a new GSSAPI flag, for now grab a number and define GSS_C_DATAGRAM_FLAG ourselves. | |||||
* | Add public devel header file | Simo Sorce | 2013-10-18 | 4 | -7/+60 | |
| | | | | | This contains definitions for various OIDs and flags needed to implemented non-standard features like NTLMSSP Connectionless mode. | |||||
* | Add special case for enterprise names | Simo Sorce | 2013-10-18 | 1 | -1/+42 | |
| | | | | | | | | | | | | | | | | | | | | | | | | When enterprise names are used they need to be passed with the embedded '@' signed escaped with a '\', when that is done the whole name is used as the user name and the name is not split on the @ or \ characters. These forms are now supported: foo USERNAME: foo DOMAIN: <null> BAR\foo USERNAME: foo DOMAIN: BAR foo@BAR USERNAME: foo DOMAIN: BAR foo\@bar.example.com USERNAME: foo\@bar.example.com DOMAIN: <null> | |||||
* | Treat NO OID as GSS_C_NT_USER_NAME on import | Simo Sorce | 2013-10-18 | 1 | -3/+6 | |
| | ||||||
* | Fix potential segfault condition in RC4_FREE | Simo Sorce | 2013-10-18 | 1 | -1/+1 | |
| | ||||||
* | Fix generation of signing keys and add tests | Simo Sorce | 2013-10-18 | 2 | -1/+184 | |
| | ||||||
* | Fix symbols export regex to include gssspi_ too. | Simo Sorce | 2013-10-18 | 1 | -1/+1 | |
| | | | | Thanks to David Woodhouse for finding out. | |||||
* | Test acquire_cred_with_password | Simo Sorce | 2013-10-17 | 1 | -12/+36 | |
| | ||||||
* | Add support for gss_acquire_cred_with_password() | Simo Sorce | 2013-10-17 | 3 | -0/+60 | |
| | ||||||
* | Fix handling of NULL domain | Simo Sorce | 2013-10-17 | 2 | -10/+17 | |
| | | | | | | | | | Fix segafult in NTOWFv2. When domain is NULL it is just omitted from the NTOWFv2 computation. Fix segfault in accept_sec_context, just make dom_name be an empty string. Fix also memory leaks. | |||||
* | Fix acquiring creds via cred_store | Simo Sorce | 2013-10-17 | 1 | -0/+26 | |
| | | | | Make sure to set the cred type and copy in the name. | |||||
* | Streamline spec file. | Simo Sorce | 2013-10-17 | 1 | -22/+10 | |
| | | | | Fixes as requested by Fedora review | |||||
* | Bump up version number afeter 0.1.0 release | Simo Sorce | 2013-10-17 | 1 | -1/+1 | |
| | ||||||
* | Correct upstream page in spec | Simo Sorce | 2013-10-14 | 1 | -2/+2 | |
| | ||||||
* | Make version 0.1.0v0.1.0 | Simo Sorce | 2013-10-13 | 1 | -1/+1 | |
| | ||||||
* | Fix typos in README.txt | Simo Sorce | 2013-10-13 | 1 | -1/+1 | |
| | ||||||
* | Add more tests. | Simo Sorce | 2013-08-21 | 1 | -0/+30 | |
| | | | | Cover gss_inquire_context and gss_display_name implementations. | |||||
* | Add gss_display_name implementation | Simo Sorce | 2013-08-21 | 3 | -0/+85 | |
| | ||||||
* | Add implementation of gss_inquire_context | Simo Sorce | 2013-08-21 | 4 | -0/+154 | |
| | | | | Also add source and target names to the context. | |||||
* | Test Integrity and Confidentiality | Simo Sorce | 2013-08-19 | 1 | -0/+69 | |
| | ||||||
* | Add integrity and confidentiality functions | Simo Sorce | 2013-08-19 | 10 | -7/+548 | |
| | ||||||
* | Add testsing of gssntlm mechglue functions | Simo Sorce | 2013-08-18 | 3 | -4/+138 | |
| | ||||||
* | Basic implementation of accept_sec_context | Simo Sorce | 2013-08-18 | 8 | -41/+625 | |
| | | | | For now works only for satndalone server with access to a password file. | |||||
* | Add support for server credentials | Simo Sorce | 2013-07-28 | 1 | -1/+40 | |
| | ||||||
* | Add helper to copy names and gss_duplicate_name | Simo Sorce | 2013-07-28 | 3 | -0/+92 | |
| | ||||||
* | Internal release name | Simo Sorce | 2013-07-28 | 2 | -9/+14 | |
| | ||||||
* | Helper function to check lm compatibility level | Simo Sorce | 2013-07-28 | 4 | -17/+21 | |
| | | | | Also stop associating it with th creds struct. | |||||
* | Fix message type check | Simo Sorce | 2013-07-28 | 3 | -5/+5 | |
| | ||||||
* | Add gss_context_time() implementation | Simo Sorce | 2013-07-28 | 3 | -1/+35 | |
| | ||||||
* | Helper function to check security context validity | Simo Sorce | 2013-07-28 | 3 | -0/+20 | |
| | ||||||
* | Add expiration time checks | Simo Sorce | 2013-07-28 | 2 | -0/+16 | |
| | | | | | | | | | Check Maxlife for challenge response messages. Also add a Maximum lifetime for the context itself based on the same challene/response maximum life. According to MS-NLMP MaxLifetime is 36h on modern Windows OSs, use the same for now. | |||||
* | Add Credential Store support | Simo Sorce | 2013-07-28 | 3 | -84/+203 | |
| | | | | | This allows a program to feed crdentials directly to GSSAPI from a configuration file, or other means. | |||||
* | Fix some comments | Simo Sorce | 2013-07-28 | 1 | -3/+2 | |
| | ||||||
* | Fix target_info length calculation | Simo Sorce | 2013-07-28 | 1 | -10/+10 | |
| | | | | | The size of the AV filed itself was missing for each field resulting in a shorter than needed buffer size. | |||||
* | Always request NTLMSSP_REQUEST_TARGET | Simo Sorce | 2013-07-19 | 1 | -0/+1 | |
| | | | | | | | Otherwise Windows 2003 may not return a target_info field for NTLMv2 or a server name for NTLMv1 in the challenge message. Thanks to David Woodhouse for providing help to debug this issue. | |||||
* | Add README.txt with section on Testing | Simo Sorce | 2013-07-19 | 2 | -5/+85 | |
| | ||||||
* | Add NTLMv1 support to context initialization | Simo Sorce | 2013-07-18 | 3 | -6/+73 | |
| | ||||||
* | Add NTLM Crypto support functions for NTLMv1 | Simo Sorce | 2013-07-18 | 6 | -7/+713 | |
| | ||||||
* | Add basic NTLMv2 crypto tests | Simo Sorce | 2013-07-18 | 2 | -1/+556 | |
| | ||||||
* | Implement basic naming functions | Simo Sorce | 2013-07-18 | 4 | -1/+311 | |
| | ||||||
* | Implement credential handling | Simo Sorce | 2013-07-18 | 7 | -93/+298 | |
| | ||||||
* | Initial GSS Mechanism code. | Simo Sorce | 2013-07-18 | 5 | -2/+856 | |
| | | | | Implements init sec context and basic mechanism initialization. | |||||
* | NTLM Crypto functions | Simo Sorce | 2013-07-18 | 11 | -58/+1089 | |
| | | | | Adds crypto function helpers needed by NTLM authentication | |||||
* | Initial NTLM message parsing library | Simo Sorce | 2013-07-16 | 3 | -0/+1723 | |
| | | | | Implements functions to encode/decode NTLMSSP packets |