Permalink
Switch branches/tags
Nothing to show
Commits on Sep 30, 2010
  1. Make test cleaner

    tsitkova
    tsitkova committed Sep 30, 2010
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/fortuna@24396 dc483132-0cff-0310-8789-dd5450dbe970
  2. educed the size of the test buffer

    tsitkova
    tsitkova committed Sep 30, 2010
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/fortuna@24389 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Sep 28, 2010
  1. Added deterministic test to fortuna prng. To test, one should configu…

    tsitkova
    tsitkova committed Sep 28, 2010
    …re with --enable-fortuna-test option
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/fortuna@24369 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Sep 16, 2010
  1. Added mutex protection

    tsitkova
    tsitkova committed Sep 16, 2010
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/fortuna@24325 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Sep 15, 2010
  1. Addition of a new Fortuna prng.

    tsitkova
    tsitkova committed Sep 15, 2010
    To invoke the algorithm: ./configure --with-prng-alg=fortuna. 
    Note that Yarrow stays the default prng.
    
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/fortuna@24321 dc483132-0cff-0310-8789-dd5450dbe970
  2. Branch for fortuna prng alg

    tsitkova
    tsitkova committed Sep 15, 2010
    git-svn-id: svn://anonsvn.mit.edu/krb5/branches/fortuna@24320 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Sep 9, 2010
  1. Allow a zero checksum type to be passed into krb5_k_verify_checksum_iov;

    lhoward
    lhoward committed Sep 9, 2010
    this indicates that the mandatory checksum type for the key is to be used.
    This interface is necessary because there is no public interface through
    which the mandatory checksum type for an encryption type can be determined.
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24304 dc483132-0cff-0310-8789-dd5450dbe970
  2. krb5_k_make_checksum will use the mandatory checksum type if 0 is

    lhoward
    lhoward committed Sep 9, 2010
    passed in as the checksum type; however krb5_k_make_checksum_iov
    does not support this. Add the same logic for the behaviour is
    consistent.
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24303 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Sep 8, 2010
  1. Add dummy camellia subdir to openssl back end makefile.

    ghudson
    ghudson committed Sep 8, 2010
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24299 dc483132-0cff-0310-8789-dd5450dbe970
  2. Make depend.

    ghudson
    ghudson committed Sep 8, 2010
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24298 dc483132-0cff-0310-8789-dd5450dbe970
  3. Don't build the built-in Camellia block cipher code if Camellia-CCM

    ghudson
    ghudson committed Sep 8, 2010
    enctypes aren't enabled.
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24297 dc483132-0cff-0310-8789-dd5450dbe970
  4. X509_verify_cert can return without setting cert_ctx.current_cert. If

    ghudson
    ghudson committed Sep 8, 2010
    it does, don't dereference a null pointer when creating the pkiDebug
    message.
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24296 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Sep 7, 2010
  1. Merge the camellia-ccm branch to trunk. Since there are no IANA

    ghudson
    ghudson committed Sep 7, 2010
    assignments for Camellia-CCM enctypes or cksumtypes yet, they are
    disabled in a default build.  They can be made available by defining
    (via CPPFLAGS) local-use enctype numbers for the enctypes and
    cksumtypes.
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24295 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Sep 4, 2010
  1. ticket: 6772

    epeisach
    epeisach committed Sep 4, 2010
    subject: Ensure valid key in krb5int_yarrow_cipher_encrypt_block
    
    Under low memory conditions (or when testing memory allocation failures), 
    the key pointer will be 0 - and not initialized. Test and return failure
    before deref a NULL.
    
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24292 dc483132-0cff-0310-8789-dd5450dbe970
  2. ticket: 6771

    epeisach
    epeisach committed Sep 4, 2010
    subject: Fix memory leaks in kdb5_verify
    
    Minor leaks.  Just cleaning up code.
    
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24291 dc483132-0cff-0310-8789-dd5450dbe970
  3. In k5_pwqual_load(), if the last vtable initializer fails, return 0

    ghudson
    ghudson committed Sep 4, 2010
    and not its exit value.
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24290 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Sep 3, 2010
  1. Fix output argument ordering and handling in k5_pwqual_load().

    ghudson
    ghudson committed Sep 3, 2010
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24289 dc483132-0cff-0310-8789-dd5450dbe970
  2. Prevent a double free in k5_pwqual_load().

    ghudson
    ghudson committed Sep 3, 2010
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24288 dc483132-0cff-0310-8789-dd5450dbe970
  3. ticket: 6769

    epeisach
    epeisach committed Sep 3, 2010
    subject: clean up memory leak and potential unused variable in crypto tests
    
    t_prf.c:  Ensure prfsz is set before use (not exercised in current tests)
    
    t_short.c: Fix memory leak
    
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24287 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Sep 2, 2010
  1. ticket: 6764

    ghudson
    ghudson committed Sep 2, 2010
    tags: pullup
    target_version: 1.8.4
    
    Properly search for MANDATORY-FOR-KDC authdata elements.  Reported by
    Mike Roszkowski.
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24286 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Sep 1, 2010
  1. Oops, pwqual_combo wasn't supposed to make it out of the plugins2

    ghudson
    ghudson committed Sep 1, 2010
    branch.  Delete it.
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24285 dc483132-0cff-0310-8789-dd5450dbe970
  2. ticket: 6765

    ghudson
    ghudson committed Sep 1, 2010
    subject: Password quality pluggable interface
    
    Merge branches/plugins2 to trunk.  Adds a password quality pluggable
    interface described in this project page:
    
    http://k5wiki.kerberos.org/wiki/Projects/Password_quality_pluggable_interface
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24284 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Aug 31, 2010
  1. ticket: 6761

    ghudson
    ghudson committed Aug 31, 2010
    Make the new profile tcl tests work with tcl 8.3.
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24282 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Aug 30, 2010
  1. ticket: 6763

    ghudson
    ghudson committed Aug 30, 2010
    Make relative plugin module paths be interpreted as relative to
    LIBDIR/krb5/plugins.
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24277 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Aug 29, 2010
  1. ticket: 6761

    ghudson
    ghudson committed Aug 29, 2010
    Fix a resource leak in the profile include support.
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24274 dc483132-0cff-0310-8789-dd5450dbe970
  2. Add simple automated tests for account lockout support.

    ghudson
    ghudson committed Aug 29, 2010
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24269 dc483132-0cff-0310-8789-dd5450dbe970
  3. Fix an account lockout error-handling regression by converting the

    ghudson
    ghudson committed Aug 29, 2010
    result of krb5_db_check_policy_as/tgs from a krb5_error_code to a
    protocol error number.
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24268 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Aug 27, 2010
  1. ticket: 6763

    tlyu
    tlyu committed Aug 27, 2010
    Add plugin.o to T_ETYPES_OBJS because init_ctx.o needs it now.
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24264 dc483132-0cff-0310-8789-dd5450dbe970
  2. ticket: 6763

    ghudson
    ghudson committed Aug 27, 2010
    subject: New plugin infrastructure
    
    Merge domain-independent plugin framework code from branches/plugins2,
    leaving out the password quality interface.
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24263 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Aug 26, 2010
  1. Add an expansion error table for libkrb5, since krb5_err.et is full.

    ghudson
    ghudson committed Aug 26, 2010
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24258 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Aug 25, 2010
  1. rd_req_decoded: clarify behavior in comment

    hartmans
    hartmans committed Aug 25, 2010
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24257 dc483132-0cff-0310-8789-dd5450dbe970
  2. ticket: 6761

    ghudson
    ghudson committed Aug 25, 2010
    Revise the profile include design so that included files are
    syntactically independent of parent files.
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24256 dc483132-0cff-0310-8789-dd5450dbe970
Commits on Aug 24, 2010
  1. ticket: 6761

    ghudson
    ghudson committed Aug 24, 2010
    Correct a comment.
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24255 dc483132-0cff-0310-8789-dd5450dbe970
  2. ticket: 6762

    ghudson
    ghudson committed Aug 24, 2010
    In the LDAP KDB module's populate_krb5_db_entry, fix the checks for
    the KDB_PRINC_EXPIRE_TIME_ATTR and KDB_PWD_EXPIRE_TIME_ATTR flags so
    that they properly succeed when the flags are set.  Bug report from
    Rob Crittenden, patch from nalin@redhat.com.
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24254 dc483132-0cff-0310-8789-dd5450dbe970
  3. ticket: 6761

    ghudson
    ghudson committed Aug 24, 2010
    subject: add profile include support
    
    Add support for "include" and "includedir" directives in profile files.
    See http://k5wiki.kerberos.org/wiki/Projects/Profile_Includes for more
    details.
    
    
    git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24253 dc483132-0cff-0310-8789-dd5450dbe970