summaryrefslogtreecommitdiff
path: root/src/plugins/preauth
Commit message (Expand)AuthorAgeFilesLines
* Convey realm names to certauth modulesGreg Hudson2023-04-111-9/+11
* Make k5buf more flexible for binary dataGreg Hudson2023-03-241-7/+1
* Fix PKINIT CMS error checking for older OpenSSLGreg Hudson2023-01-131-11/+3
* Update error checking for OpenSSL CMS_verifyJulien Rische2022-08-181-3/+6
* Remove include_certchain parameter in PKINITGreg Hudson2022-07-204-51/+40
* Remove pre-CMS PKINIT compatibility codeGreg Hudson2022-07-132-42/+6
* Set reasonable supportedCMSTypes in PKINITJulien Rische2022-07-073-26/+60
* Fix memory leak in OTP kdcpreauth moduleGreg Hudson2022-06-081-2/+4
* Fix uncommon PKINIT memory leaksashan2022-06-081-1/+8
* Fix memory leak in SPAKE kdcpreauth modulesashan2022-05-311-0/+1
* Add configure variable for default PKCS#11 moduleJulien Rische2022-04-291-1/+0
* Use SHA-256 instead of SHA-1 for PKINIT CMS digestJulien Rische2022-03-171-17/+21
* Remove unneeded SPAKE free_modreq methodGreg Hudson2022-01-281-9/+0
* Add replace_reply_key kdcpreauth callbackGreg Hudson2022-01-273-69/+47
* Use 14 instead of 9 for unkeyed SHA-1 checksumGreg Hudson2021-12-292-11/+4
* Update PKINIT for OpenSSL 3Robbie Harwood2021-11-152-36/+165
* Use OpenSSL 3 versions of remaining KDFsRobbie Harwood2021-11-154-193/+186
* Remove pkinit_kdf_constants.cGreg Hudson2021-11-052-61/+2
* Use EVP key agreement in PKINITGreg Hudson2021-11-052-302/+388
* Use OpenSSL SubjectPublicKeyInfo parsing in PKINITGreg Hudson2021-11-047-336/+279
* Use pre-encoded DH parameter constants in PKINITGreg Hudson2021-11-024-303/+357
* Support KRB5_CERTAUTH_HWAUTH_PASS in certauthKen Hornstein2021-10-281-2/+4
* Fix trivial leak in OTP kdcpreauth modulePavel Březina2021-09-151-0/+1
* Fix many unlikely memory leaksRobbie Harwood2021-07-012-29/+39
* Modernize pkinit_get_certs_pkcs11Robbie Harwood2021-07-011-117/+113
* Add additional KRB5_TRACE pointsKen Hornstein2021-04-074-78/+129
* Fix multiple UPN handling in PKINIT client certsKen Hornstein2021-04-071-3/+2
* Fix PKINIT memory leaksGreg Hudson2021-03-222-2/+5
* Use krb5int_open_plugin for PKCS#11 moduleKen Hornstein2021-03-164-21/+20
* Only require one valid pkinit anchor/pool valueKen Hornstein2021-03-082-5/+25
* Infer name type when creating principalsFraser Tweedale2021-02-111-0/+4
* Load certs when checking pkinit_identities valuesKen Hornstein2021-02-112-21/+19
* Use PKG_CHECK_MODULES for system library com_errAnonymous Maarten2020-10-222-3/+3
* Fix typos in commentsGreg Hudson2020-04-084-5/+5
* Make fiat 128-bit typedefs work with older gccGreg Hudson2020-03-262-3/+5
* Eliminate redundant PKINIT responder invocationGreg Hudson2020-03-262-6/+12
* Allow certauth modules to set hw-authent flagGreg Hudson2020-02-271-8/+16
* Use k5-buf.h integer helpers where appropriateGreg Hudson2019-11-131-11/+4
* Update edwards25519 code from BoringSSLGreg Hudson2019-07-113-1073/+1470
* Fix typosAntoine Cœur2019-07-111-1/+1
* Remove PKINIT draft 9 supportGreg Hudson2019-06-269-805/+275
* Update HTTP linksMichael Mattioli2019-06-072-3/+3
* Remove more dead codeRobbie Harwood2019-05-101-8/+0
* Simply OpenSSL PKCS7 decryption codeRobbie Harwood2019-05-101-149/+62
* Use secure_getenv() where appropriateGreg Hudson2019-04-301-8/+3
* Fix build issues with Solaris native compilersashan2019-01-032-10/+4
* Update auto-generated filesGreg Hudson2018-10-261-2/+7
* Fix incorrect TRACE usages to use {str}Robbie Harwood2018-09-272-4/+4
* Fix null deref on some invalid PKINIT identitiesGreg Hudson2018-09-261-6/+15
* Eliminate preprocessor-disabled dead codeRobbie Harwood2018-07-183-47/+0
View Lorry Controller Status