diff options
author | Greg Hudson <ghudson@mit.edu> | 2013-10-14 17:02:31 -0400 |
---|---|---|
committer | Greg Hudson <ghudson@mit.edu> | 2013-10-17 14:13:02 -0400 |
commit | cd59782cb32b79e4001a86b0fe47af8b6275ef0c (patch) | |
tree | c51aa7324ed3c42052ffd4572970c8843310fe50 /src/patchlevel.h | |
parent | c547bc16f2ab6ee66c076ef944c3fbac8a66f5d4 (diff) | |
download | krb5-cd59782cb32b79e4001a86b0fe47af8b6275ef0c.tar.gz krb5-cd59782cb32b79e4001a86b0fe47af8b6275ef0c.tar.xz krb5-cd59782cb32b79e4001a86b0fe47af8b6275ef0c.zip |
Use protocol error for PKINIT cert expiry
If we fail to create a cert chain in cms_signeddata_create(), return
KRB5KDC_ERR_PREAUTH_FAILED, which corresponds to a protocol code,
rather than KRB5_PREAUTH_FAILED, which doesn't. This is also more
consistent with other error clauses in the same function.
ticket: 7718 (new)
target_version: 1.12
tags: pullup
Diffstat (limited to 'src/patchlevel.h')
0 files changed, 0 insertions, 0 deletions