index
:
krb5.git
gss_cs
keyring
kinit-c
master
msspng_ntlmssp
proxymech
spnego
MIT Kerberos patches
Simo Sorce
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
src
/
plugins
/
preauth
/
pkinit
/
pkinit_srv.c
Commit message (
Expand
)
Author
Age
Files
Lines
*
Use constant-time comparisons for checksums
Greg Hudson
2013-10-03
1
-3
/
+3
*
Split pkinit_identity_initialize into two phases
Nalin Dahyabhai
2013-07-17
1
-1
/
+6
*
Remove some apparently-accidental debug whitespace
Nalin Dahyabhai
2013-05-08
1
-2
/
+2
*
Use macro for IANA assigned PA-AS-CHECKSUM number
Zhanna Tsitkov
2013-04-18
1
-3
/
+4
*
Allow config of dh_min_bits < 2048
Tom Yu
2013-04-12
1
-3
/
+4
*
Add and use k5memdup, k5memdup0 helpers
Greg Hudson
2013-02-09
1
-2
/
+2
*
PKINIT (draft9) null ptr deref [CVE-2012-1016]
Nalin Dahyabhai
2012-12-14
1
-2
/
+3
*
Use config storage for client identity selection
Nalin Dahyabhai
2012-10-17
1
-1
/
+2
*
Simplify pkinit_server_verify_padata slightly
Greg Hudson
2012-07-05
1
-7
/
+2
*
Stop using krb5_octet_data
Greg Hudson
2011-12-21
1
-25
/
+38
*
ticket: new
Sam Hartman
2011-11-23
1
-33
/
+1
*
Make reindent
Tom Yu
2011-10-17
1
-1
/
+1
*
Make kdcpreauth edata method respond via callback
Greg Hudson
2011-10-15
1
-5
/
+9
*
Ditch fast_factor.h since it contains only stubs
Greg Hudson
2011-10-06
1
-3
/
+0
*
Use type-safe callbacks in preauth interface
Greg Hudson
2011-10-06
1
-14
/
+9
*
Make pkinit fall back to octetstring2key() if there are not matching KDFs
Sam Hartman
2011-10-05
1
-7
/
+5
*
Treat the client's list of supported KDFs as an unordered list
Sam Hartman
2011-10-05
1
-4
/
+5
*
Use an opaque handle in the kdcpreauth callback
Greg Hudson
2011-10-05
1
-13
/
+9
*
Create e_data as pa_data in KDC interfaces
Greg Hudson
2011-10-04
1
-6
/
+6
*
Make kdcpreauth verify respond via callback
Greg Hudson
2011-10-03
1
-24
/
+22
*
Remove variables set but not used
Ezra Peisach
2011-09-26
1
-3
/
+0
*
If the client offers the alg agility KDF, use it
Sam Hartman
2011-09-21
1
-7
/
+91
*
Reordered pkinit_server_return_padata(), so that the alg-agility
Sam Hartman
2011-09-21
1
-8
/
+20
*
Support pkinit: SignedData with no signers (KDC)
Sam Hartman
2011-09-19
1
-1
/
+1
*
Silence various "may be used uninitialized" warnings from GCC caused
Ken Raeburn
2011-09-05
1
-1
/
+1
*
Change output type of pkinit_init_kdc_req_context so as not to require
Ken Raeburn
2011-09-05
1
-3
/
+3
*
Convert preauth_plugin.h to new plugin framework
Greg Hudson
2011-06-17
1
-48
/
+60
*
Mark up strings for translation
Greg Hudson
2011-06-10
1
-7
/
+11
*
SA-2010-007 Checksum vulnerabilities (CVE-2010-1324 and others)
Greg Hudson
2010-11-30
1
-10
/
+1
*
Other changes in this ticket guarantee that the padata argument to
Sam Hartman
2010-01-04
1
-1
/
+1
*
Remove an inoperable error check in return_pkinit_kx
Greg Hudson
2009-12-29
1
-2
/
+0
*
Whitespace fixes for new anonymous support
Greg Hudson
2009-12-28
1
-21
/
+25
*
Anonymous support for Kerberos
Sam Hartman
2009-12-28
1
-82
/
+107
*
Mark and reindent the pkinit plugin code, except for the header files
Greg Hudson
2009-11-25
1
-754
/
+757
*
make mark-cstyle
Tom Yu
2009-10-31
1
-22
/
+22
*
Minor code cleanups in pkinit plugin, mostly around malloc/free
Greg Hudson
2009-08-18
1
-21
/
+12
*
In pkinit_clnt.c, make private functions static. There and in
Greg Hudson
2009-08-10
1
-46
/
+0
*
Restore limited support for static linking
Greg Hudson
2009-06-08
1
-1
/
+5
*
Temporarily disable FAST PKINIT for 1.7 release
Greg Hudson
2009-05-25
1
-0
/
+23
*
Revert r21880 which included k5-int.h in several pkinit source files.
Greg Hudson
2009-03-24
1
-1
/
+0
*
Include k5-int.h in several pkinit source files, in order to define
Greg Hudson
2009-02-04
1
-0
/
+1
*
Use macros for config parameters
Zhanna Tsitkov
2009-02-04
1
-11
/
+11
*
Add PKINIT support
Kevin Coffman
2007-08-01
1
-0
/
+1399