diff options
| author | Greg Hudson <ghudson@mit.edu> | 2014-06-06 17:41:51 -0400 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2014-06-12 13:14:08 -0400 |
| commit | 677c7753923e5efa078074611d4474fbcc10f6a1 (patch) | |
| tree | b2417f5ef3874f7b6aebdc94857587a61736deb4 /src/lib/gssapi/generic/gssapi_alloc.h | |
| parent | b6ec31e4e599db867ff19beef3be9b0bfa5b70eb (diff) | |
| download | krb5-677c7753923e5efa078074611d4474fbcc10f6a1.tar.gz krb5-677c7753923e5efa078074611d4474fbcc10f6a1.tar.xz krb5-677c7753923e5efa078074611d4474fbcc10f6a1.zip | |
Improve PKINIT certificate documentation
Describe how to use a commercially-issued server certificate for
anonymous PKINIT. Separate the KDC and client configuration
instructions so that the steps necessary for anonymous PKINIT are not
combined with the additional steps necessary for regular PKINIT.
Describe kpServerAuth as the EKU used in commercially issued server
certificates, not as the value used by Microsoft (which does not
appear to be true according to [MS-PKCA]).
ticket: 7931 (new)
target_version: 1.12.2
tags: pullup
Diffstat (limited to 'src/lib/gssapi/generic/gssapi_alloc.h')
0 files changed, 0 insertions, 0 deletions