krb5.git - MIT Kerberos patches

	Commit message (Collapse)	Author	Age	Files	Lines
*	Combine PKINIT test scripts	Greg Hudson	2013-07-18	1	-311/+0
\|
*	Test that password preauth works without PKINIT	Nalin Dahyabhai	2013-07-17	1	-0/+12
\| \| \| \| \| \|	Before we test authenticated PKINIT, slip in a test to check that password-based preauthentication still works when the KDC is offering PKINIT, but the client has no PKINIT credentials.
*	Add tests for PKINIT using responder functionality	Nalin Dahyabhai	2013-07-17	1	-0/+160
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	We now also test that the PKINIT challenge looks like we expect it to look, that PKINIT fails if we don't provide a response or a prompter callback, and that PKINIT succeeds with a response provided using either the raw responder API or the PKINIT responder functions. One thing that we don't check is which specific error code we get when PKINIT fails: the OpenSSL and NSS versions return different error codes (some mixture of EIO, ENOMEM, ENOENT, and KRB5KDC_ERR_PREAUTH_FAILED) when they encounter trouble loading client credentials. ticket: 7680
*	Untabify and reindent t_authpkinit.py	Greg Hudson	2013-06-03	1	-17/+16
\|
*	Fix checking unencrypted PKCS12: twice	Nalin Dahyabhai	2013-05-08	1	-1/+1
\| \| \| \| \| \|	The test, as submitted, included a copy/paste error which caused it to test PKINIT using unencrypted PKCS12 bundles twice, and to not test a DIR: location containing unencrypted PEM-formatted keys at all.
*	Add various client-authenticating PKINIT tests	Nalin Dahyabhai	2013-04-24	1	-0/+140
	Add tests for non-anonymous PKINIT: * FILE: with no password * FILE: with a password * DIR: with no password * DIR: with a password * PKCS12: with no password * PKCS12: with a password * PKCS11: with a password, if soft-pkcs11.so is found via ctypes [ghudson@mit.edu: reformatted to 79 columns; removed intermediate success() calls]