xref: /freebsd/crypto/heimdal/lib/gssapi/ChangeLog (revision adb0ddaeac0a71a08d6af3a711387b59efcc94b6)
1adb0ddaeSAssar Westerlund2001-05-17  Assar Westerlund  <assar@sics.se>
2adb0ddaeSAssar Westerlund
3adb0ddaeSAssar Westerlund	* Makefile.am: bump version to 3:1:2
4adb0ddaeSAssar Westerlund
5adb0ddaeSAssar Westerlund2001-05-14  Assar Westerlund  <assar@sics.se>
6adb0ddaeSAssar Westerlund
7adb0ddaeSAssar Westerlund	* address_to_krb5addr.c: adapt to new address functions
8adb0ddaeSAssar Westerlund
9adb0ddaeSAssar Westerlund2001-05-11  Assar Westerlund  <assar@sics.se>
10adb0ddaeSAssar Westerlund
11adb0ddaeSAssar Westerlund	* try to return the error string from libkrb5 where applicable
12adb0ddaeSAssar Westerlund
13adb0ddaeSAssar Westerlund2001-05-08  Assar Westerlund  <assar@sics.se>
14adb0ddaeSAssar Westerlund
15adb0ddaeSAssar Westerlund	* delete_sec_context.c (gss_delete_sec_context): remember to free
16adb0ddaeSAssar Westerlund	the memory used by the ticket itself. from <tmartin@mirapoint.com>
17adb0ddaeSAssar Westerlund
18adb0ddaeSAssar Westerlund2001-05-04  Assar Westerlund  <assar@sics.se>
19adb0ddaeSAssar Westerlund
20adb0ddaeSAssar Westerlund	* gssapi_locl.h: add config.h for completeness
21adb0ddaeSAssar Westerlund	* gssapi.h: remove config.h, this is an installed header file
22adb0ddaeSAssar Westerlund	sys/types.h is not needed either
23adb0ddaeSAssar Westerlund
24adb0ddaeSAssar Westerlund2001-03-12  Assar Westerlund  <assar@sics.se>
25adb0ddaeSAssar Westerlund
26adb0ddaeSAssar Westerlund	* acquire_cred.c (gss_acquire_cred): remove memory leaks.  from
27adb0ddaeSAssar Westerlund	Jason R Thorpe <thorpej@zembu.com>
28adb0ddaeSAssar Westerlund
29adb0ddaeSAssar Westerlund2001-02-18  Assar Westerlund  <assar@sics.se>
30adb0ddaeSAssar Westerlund
31adb0ddaeSAssar Westerlund	* accept_sec_context.c (gss_accept_sec_context): either return
32adb0ddaeSAssar Westerlund	gss_name NULL-ed or set
33adb0ddaeSAssar Westerlund
34adb0ddaeSAssar Westerlund	* import_name.c: set minor_status in some cases where it was not
35adb0ddaeSAssar Westerlund	done
36adb0ddaeSAssar Westerlund
37adb0ddaeSAssar Westerlund2001-02-15  Assar Westerlund  <assar@sics.se>
38adb0ddaeSAssar Westerlund
39adb0ddaeSAssar Westerlund	* wrap.c: use krb5_generate_random_block for the confounders
40adb0ddaeSAssar Westerlund
415e9cd1aeSAssar Westerlund2001-01-30  Assar Westerlund  <assar@sics.se>
425e9cd1aeSAssar Westerlund
435e9cd1aeSAssar Westerlund	* Makefile.am (libgssapi_la_LDFLAGS): bump version to 3:0:2
445e9cd1aeSAssar Westerlund	* acquire_cred.c, init_sec_context.c, release_cred.c: add support
455e9cd1aeSAssar Westerlund	for getting creds from a keytab, from fvdl@netbsd.org
465e9cd1aeSAssar Westerlund
475e9cd1aeSAssar Westerlund	* copy_ccache.c: add gss_krb5_copy_ccache
485e9cd1aeSAssar Westerlund
495e9cd1aeSAssar Westerlund2001-01-27  Assar Westerlund  <assar@sics.se>
505e9cd1aeSAssar Westerlund
515e9cd1aeSAssar Westerlund	* get_mic.c: cast parameters to des function to non-const pointers
525e9cd1aeSAssar Westerlund 	to handle the case where these functions actually take non-const
535e9cd1aeSAssar Westerlund 	des_cblock *
545e9cd1aeSAssar Westerlund
555e9cd1aeSAssar Westerlund2001-01-09  Assar Westerlund  <assar@sics.se>
565e9cd1aeSAssar Westerlund
575e9cd1aeSAssar Westerlund	* accept_sec_context.c (gss_accept_sec_context): use krb5_rd_cred2
585e9cd1aeSAssar Westerlund	instead of krb5_rd_cred
595e9cd1aeSAssar Westerlund
605e9cd1aeSAssar Westerlund2000-12-11  Assar Westerlund  <assar@sics.se>
615e9cd1aeSAssar Westerlund
625e9cd1aeSAssar Westerlund	* Makefile.am (libgssapi_la_LDFLAGS): bump to 2:3:1
635e9cd1aeSAssar Westerlund
645e9cd1aeSAssar Westerlund2000-12-08  Assar Westerlund  <assar@sics.se>
655e9cd1aeSAssar Westerlund
665e9cd1aeSAssar Westerlund	* wrap.c (wrap_des3): use the checksum as ivec when encrypting the
675e9cd1aeSAssar Westerlund	sequence number
685e9cd1aeSAssar Westerlund	* unwrap.c (unwrap_des3): use the checksum as ivec when encrypting
695e9cd1aeSAssar Westerlund	the sequence number
705e9cd1aeSAssar Westerlund	* init_sec_context.c (init_auth): always zero fwd_data
715e9cd1aeSAssar Westerlund
725e9cd1aeSAssar Westerlund2000-12-06  Johan Danielsson  <joda@pdc.kth.se>
735e9cd1aeSAssar Westerlund
745e9cd1aeSAssar Westerlund	* accept_sec_context.c: de-pointerise auth_context parameter to
755e9cd1aeSAssar Westerlund	krb5_mk_rep
765e9cd1aeSAssar Westerlund
775e9cd1aeSAssar Westerlund2000-11-15  Assar Westerlund  <assar@sics.se>
785e9cd1aeSAssar Westerlund
795e9cd1aeSAssar Westerlund	* init_sec_context.c (init_auth): update to new
805e9cd1aeSAssar Westerlund	krb5_build_authenticator
815e9cd1aeSAssar Westerlund
825e9cd1aeSAssar Westerlund2000-09-19  Assar Westerlund  <assar@sics.se>
835e9cd1aeSAssar Westerlund
845e9cd1aeSAssar Westerlund	* Makefile.am (libgssapi_la_LDFLAGS): bump to 2:2:1
855e9cd1aeSAssar Westerlund
865e9cd1aeSAssar Westerlund2000-08-27  Assar Westerlund  <assar@sics.se>
875e9cd1aeSAssar Westerlund
885e9cd1aeSAssar Westerlund	* init_sec_context.c: actually pay attention to `time_req'
895e9cd1aeSAssar Westerlund	* init_sec_context.c: re-organize.  leak less memory.
905e9cd1aeSAssar Westerlund	* gssapi_locl.h (gssapi_krb5_encapsulate, gss_krb5_getsomekey):
915e9cd1aeSAssar Westerlund	update prototypes add assert.h
925e9cd1aeSAssar Westerlund	* gssapi.h (GSS_KRB5_CONF_C_QOP_DES, GSS_KRB5_CONF_C_QOP_DES3_KD):
935e9cd1aeSAssar Westerlund	add
945e9cd1aeSAssar Westerlund	* verify_mic.c: re-organize and add 3DES code
955e9cd1aeSAssar Westerlund	* wrap.c: re-organize and add 3DES code
965e9cd1aeSAssar Westerlund	* unwrap.c: re-organize and add 3DES code
975e9cd1aeSAssar Westerlund	* get_mic.c: re-organize and add 3DES code
985e9cd1aeSAssar Westerlund	* encapsulate.c (gssapi_krb5_encapsulate): do not free `in_data',
995e9cd1aeSAssar Westerlund	let the caller do that.  fix the callers.
1005e9cd1aeSAssar Westerlund
1015e9cd1aeSAssar Westerlund2000-08-16  Assar Westerlund  <assar@sics.se>
1025e9cd1aeSAssar Westerlund
1035e9cd1aeSAssar Westerlund	* Makefile.am: bump version to 2:1:1
1045e9cd1aeSAssar Westerlund
1055e9cd1aeSAssar Westerlund2000-07-29  Assar Westerlund  <assar@sics.se>
1065e9cd1aeSAssar Westerlund
1075e9cd1aeSAssar Westerlund	* decapsulate.c (gssapi_krb5_verify_header): sanity-check length
1085e9cd1aeSAssar Westerlund
1095e9cd1aeSAssar Westerlund2000-07-25  Johan Danielsson  <joda@pdc.kth.se>
1105e9cd1aeSAssar Westerlund
1115e9cd1aeSAssar Westerlund	* Makefile.am: bump version to 2:0:1
1125e9cd1aeSAssar Westerlund
1135e9cd1aeSAssar Westerlund2000-07-22  Assar Westerlund  <assar@sics.se>
1145e9cd1aeSAssar Westerlund
1155e9cd1aeSAssar Westerlund	* gssapi.h: update OID for GSS_C_NT_HOSTBASED_SERVICE and other
1165e9cd1aeSAssar Westerlund	details from rfc2744
1175e9cd1aeSAssar Westerlund
1185e9cd1aeSAssar Westerlund2000-06-29  Assar Westerlund  <assar@sics.se>
1195e9cd1aeSAssar Westerlund
1205e9cd1aeSAssar Westerlund	* address_to_krb5addr.c (gss_address_to_krb5addr): actually use
1215e9cd1aeSAssar Westerlund	`int' instead of `sa_family_t' for the address family.
1225e9cd1aeSAssar Westerlund
1235e9cd1aeSAssar Westerlund2000-06-21  Assar Westerlund  <assar@sics.se>
1245e9cd1aeSAssar Westerlund
1255e9cd1aeSAssar Westerlund	* add support for token delegation.  From Daniel Kouril
1265e9cd1aeSAssar Westerlund	<kouril@ics.muni.cz> and Miroslav Ruda <ruda@ics.muni.cz>
1275e9cd1aeSAssar Westerlund
1285e9cd1aeSAssar Westerlund2000-05-15  Assar Westerlund  <assar@sics.se>
1295e9cd1aeSAssar Westerlund
1305e9cd1aeSAssar Westerlund	* Makefile.am (libgssapi_la_LDFLAGS): set version to 1:1:1
1315e9cd1aeSAssar Westerlund
1325e9cd1aeSAssar Westerlund2000-04-12  Assar Westerlund  <assar@sics.se>
1335e9cd1aeSAssar Westerlund
1345e9cd1aeSAssar Westerlund	* release_oid_set.c (gss_release_oid_set): clear set for
1355e9cd1aeSAssar Westerlund	robustness.  From GOMBAS Gabor <gombasg@inf.elte.hu>
1365e9cd1aeSAssar Westerlund	* release_name.c (gss_release_name): reset input_name for
1375e9cd1aeSAssar Westerlund	robustness.  From GOMBAS Gabor <gombasg@inf.elte.hu>
1385e9cd1aeSAssar Westerlund	* release_buffer.c (gss_release_buffer): set value to NULL to be
1395e9cd1aeSAssar Westerlund	more robust.  From GOMBAS Gabor <gombasg@inf.elte.hu>
1405e9cd1aeSAssar Westerlund	* add_oid_set_member.c (gss_add_oid_set_member): actually check if
1415e9cd1aeSAssar Westerlund	the oid is a member first.  leave the oid_set unchanged if realloc
1425e9cd1aeSAssar Westerlund	fails.
1435e9cd1aeSAssar Westerlund
144283d988cSMark Murray2000-02-13  Assar Westerlund  <assar@sics.se>
145283d988cSMark Murray
146283d988cSMark Murray	* Makefile.am: set version to 1:0:1
147283d988cSMark Murray
148283d988cSMark Murray2000-02-12  Assar Westerlund  <assar@sics.se>
149283d988cSMark Murray
150283d988cSMark Murray	* gssapi_locl.h: add flags for import/export
151283d988cSMark Murray	* import_sec_context.c (import_sec_context: add flags for what
152283d988cSMark Murray	fields are included.  do not include the authenticator for now.
153283d988cSMark Murray	* export_sec_context.c (export_sec_context: add flags for what
154283d988cSMark Murray	fields are included.  do not include the authenticator for now.
155283d988cSMark Murray	* accept_sec_context.c (gss_accept_sec_context): set target in
156283d988cSMark Murray	context_handle
157283d988cSMark Murray
158283d988cSMark Murray2000-02-11  Assar Westerlund  <assar@sics.se>
159283d988cSMark Murray
160283d988cSMark Murray	* delete_sec_context.c (gss_delete_sec_context): set context to
161283d988cSMark Murray	GSS_C_NO_CONTEXT
162283d988cSMark Murray
163283d988cSMark Murray	* Makefile.am: add {export,import}_sec_context.c
164283d988cSMark Murray	* export_sec_context.c: new file
165283d988cSMark Murray	* import_sec_context.c: new file
166283d988cSMark Murray	* accept_sec_context.c (gss_accept_sec_context): set trans flag
167283d988cSMark Murray
16813e3f4d6SMark Murray2000-02-07  Assar Westerlund  <assar@sics.se>
16913e3f4d6SMark Murray
17013e3f4d6SMark Murray	* Makefile.am: set version to 0:5:0
17113e3f4d6SMark Murray
17213e3f4d6SMark Murray2000-01-26  Assar Westerlund  <assar@sics.se>
17313e3f4d6SMark Murray
17413e3f4d6SMark Murray	* delete_sec_context.c (gss_delete_sec_context): handle a NULL
17513e3f4d6SMark Murray	output_token
17613e3f4d6SMark Murray
17713e3f4d6SMark Murray	* wrap.c: update to pseudo-standard APIs for md4,md5,sha.  some
17813e3f4d6SMark Murray	changes to libdes calls to make them more portable.
17913e3f4d6SMark Murray	* verify_mic.c: update to pseudo-standard APIs for md4,md5,sha.
18013e3f4d6SMark Murray	some changes to libdes calls to make them more portable.
18113e3f4d6SMark Murray	* unwrap.c: update to pseudo-standard APIs for md4,md5,sha.  some
18213e3f4d6SMark Murray	changes to libdes calls to make them more portable.
18313e3f4d6SMark Murray	* get_mic.c: update to pseudo-standard APIs for md4,md5,sha.  some
18413e3f4d6SMark Murray	changes to libdes calls to make them more portable.
18513e3f4d6SMark Murray	* 8003.c: update to pseudo-standard APIs for md4,md5,sha.
18613e3f4d6SMark Murray
187b528cefcSMark Murray2000-01-06  Assar Westerlund  <assar@sics.se>
188b528cefcSMark Murray
189b528cefcSMark Murray	* Makefile.am: set version to 0:4:0
190b528cefcSMark Murray
191b528cefcSMark Murray1999-12-26  Assar Westerlund  <assar@sics.se>
192b528cefcSMark Murray
193b528cefcSMark Murray	* accept_sec_context.c (gss_accept_sec_context): always set
194b528cefcSMark Murray 	`output_token'
195b528cefcSMark Murray	* init_sec_context.c (init_auth): always initialize `output_token'
196b528cefcSMark Murray	* delete_sec_context.c (gss_delete_sec_context): always set
197b528cefcSMark Murray 	`output_token'
198b528cefcSMark Murray
199b528cefcSMark Murray1999-12-06  Assar Westerlund  <assar@sics.se>
200b528cefcSMark Murray
201b528cefcSMark Murray	* Makefile.am: bump version to 0:3:0
202b528cefcSMark Murray
203b528cefcSMark Murray1999-10-20  Assar Westerlund  <assar@sics.se>
204b528cefcSMark Murray
205b528cefcSMark Murray	* Makefile.am: set version to 0:2:0
206b528cefcSMark Murray
207b528cefcSMark Murray1999-09-21  Assar Westerlund  <assar@sics.se>
208b528cefcSMark Murray
209b528cefcSMark Murray	* init_sec_context.c (gss_init_sec_context): initialize `ticket'
210b528cefcSMark Murray
211b528cefcSMark Murray	* gssapi.h (gss_ctx_id_t_desc): add ticket in here.  ick.
212b528cefcSMark Murray
213b528cefcSMark Murray	* delete_sec_context.c (gss_delete_sec_context): free ticket
214b528cefcSMark Murray
215b528cefcSMark Murray	* accept_sec_context.c (gss_accept_sec_context): stove away
216b528cefcSMark Murray 	`krb5_ticket' in context so that ugly programs such as
217b528cefcSMark Murray 	gss_nt_server can get at it.  uck.
218b528cefcSMark Murray
219b528cefcSMark Murray1999-09-20  Johan Danielsson  <joda@pdc.kth.se>
220b528cefcSMark Murray
221b528cefcSMark Murray	* accept_sec_context.c: set minor_status
222b528cefcSMark Murray
223b528cefcSMark Murray1999-08-04  Assar Westerlund  <assar@sics.se>
224b528cefcSMark Murray
225b528cefcSMark Murray	* display_status.c (calling_error, routine_error): right shift the
226b528cefcSMark Murray 	code to make it possible to index into the arrays
227b528cefcSMark Murray
228b528cefcSMark Murray1999-07-28  Assar Westerlund  <assar@sics.se>
229b528cefcSMark Murray
230b528cefcSMark Murray	* gssapi.h (GSS_C_AF_INET6): add
231b528cefcSMark Murray
232b528cefcSMark Murray	* import_name.c (import_hostbased_name): set minor_status
233b528cefcSMark Murray
234b528cefcSMark Murray1999-07-26  Assar Westerlund  <assar@sics.se>
235b528cefcSMark Murray
236b528cefcSMark Murray	* Makefile.am: set version to 0:1:0
237b528cefcSMark Murray
238b528cefcSMark MurrayWed Apr  7 14:05:15 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
239b528cefcSMark Murray
240b528cefcSMark Murray	* display_status.c: set minor_status
241b528cefcSMark Murray
242b528cefcSMark Murray	* init_sec_context.c: set minor_status
243b528cefcSMark Murray
244b528cefcSMark Murray	* lib/gssapi/init.c: remove donep (check gssapi_krb5_context
245b528cefcSMark Murray 	directly)
246b528cefcSMark Murray
247