12001-10-31 Jacques Vidrine <n@nectar.com> 2 3 * get_mic.c (mic_des3): MIC computation using DES3/SHA1 4 was bogusly appending the message buffer to the result, 5 overwriting a heap buffer in the process. 6 72001-08-29 Assar Westerlund <assar@sics.se> 8 9 * 8003.c (gssapi_krb5_verify_8003_checksum, 10 gssapi_krb5_create_8003_checksum): make more consistent by always 11 returning an gssapi error and setting minor status. update 12 callers 13 142001-08-28 Jacques Vidrine <n@nectar.com> 15 16 * accept_sec_context.c: Create a cache for delegated credentials 17 when needed. 18 192001-08-28 Assar Westerlund <assar@sics.se> 20 21 * Makefile.am (libgssapi_la_LDFLAGS): set version to 3:4:2 22 232001-08-23 Assar Westerlund <assar@sics.se> 24 25 * *.c: handle minor_status more consistently 26 27 * display_status.c (gss_display_status): handle krb5_get_err_text 28 failing 29 302001-08-15 Johan Danielsson <joda@pdc.kth.se> 31 32 * gssapi_locl.h: fix prototype for gssapi_krb5_init 33 342001-08-13 Johan Danielsson <joda@pdc.kth.se> 35 36 * accept_sec_context.c (gsskrb5_register_acceptor_identity): init 37 context and check return value from kt_resolve 38 39 * init.c: return error code 40 412001-07-19 Assar Westerlund <assar@sics.se> 42 43 * Makefile.am (libgssapi_la_LDFLAGS): update to 3:3:2 44 452001-07-12 Assar Westerlund <assar@sics.se> 46 47 * Makefile.am (libgssapi_la_LIBADD): add required library 48 dependencies 49 502001-07-06 Assar Westerlund <assar@sics.se> 51 52 * accept_sec_context.c (gsskrb5_register_acceptor_identity): set 53 the keytab to be used for gss_acquire_cred too' 54 552001-07-03 Assar Westerlund <assar@sics.se> 56 57 * Makefile.am (libgssapi_la_LDFLAGS): set version to 3:2:2 58 592001-06-18 Assar Westerlund <assar@sics.se> 60 61 * wrap.c: replace gss_krb5_getsomekey with gss_krb5_get_localkey 62 and gss_krb5_get_remotekey 63 * verify_mic.c: update krb5_auth_con function names use 64 gss_krb5_get_remotekey 65 * unwrap.c: replace gss_krb5_getsomekey with gss_krb5_get_localkey 66 and gss_krb5_get_remotekey 67 * gssapi_locl.h (gss_krb5_get_remotekey, gss_krb5_get_localkey): 68 add prototypes 69 * get_mic.c: update krb5_auth_con function names. use 70 gss_krb5_get_localkey 71 * accept_sec_context.c: update krb5_auth_con function names 72 732001-05-17 Assar Westerlund <assar@sics.se> 74 75 * Makefile.am: bump version to 3:1:2 76 772001-05-14 Assar Westerlund <assar@sics.se> 78 79 * address_to_krb5addr.c: adapt to new address functions 80 812001-05-11 Assar Westerlund <assar@sics.se> 82 83 * try to return the error string from libkrb5 where applicable 84 852001-05-08 Assar Westerlund <assar@sics.se> 86 87 * delete_sec_context.c (gss_delete_sec_context): remember to free 88 the memory used by the ticket itself. from <tmartin@mirapoint.com> 89 902001-05-04 Assar Westerlund <assar@sics.se> 91 92 * gssapi_locl.h: add config.h for completeness 93 * gssapi.h: remove config.h, this is an installed header file 94 sys/types.h is not needed either 95 962001-03-12 Assar Westerlund <assar@sics.se> 97 98 * acquire_cred.c (gss_acquire_cred): remove memory leaks. from 99 Jason R Thorpe <thorpej@zembu.com> 100 1012001-02-18 Assar Westerlund <assar@sics.se> 102 103 * accept_sec_context.c (gss_accept_sec_context): either return 104 gss_name NULL-ed or set 105 106 * import_name.c: set minor_status in some cases where it was not 107 done 108 1092001-02-15 Assar Westerlund <assar@sics.se> 110 111 * wrap.c: use krb5_generate_random_block for the confounders 112 1132001-01-30 Assar Westerlund <assar@sics.se> 114 115 * Makefile.am (libgssapi_la_LDFLAGS): bump version to 3:0:2 116 * acquire_cred.c, init_sec_context.c, release_cred.c: add support 117 for getting creds from a keytab, from fvdl@netbsd.org 118 119 * copy_ccache.c: add gss_krb5_copy_ccache 120 1212001-01-27 Assar Westerlund <assar@sics.se> 122 123 * get_mic.c: cast parameters to des function to non-const pointers 124 to handle the case where these functions actually take non-const 125 des_cblock * 126 1272001-01-09 Assar Westerlund <assar@sics.se> 128 129 * accept_sec_context.c (gss_accept_sec_context): use krb5_rd_cred2 130 instead of krb5_rd_cred 131 1322000-12-11 Assar Westerlund <assar@sics.se> 133 134 * Makefile.am (libgssapi_la_LDFLAGS): bump to 2:3:1 135 1362000-12-08 Assar Westerlund <assar@sics.se> 137 138 * wrap.c (wrap_des3): use the checksum as ivec when encrypting the 139 sequence number 140 * unwrap.c (unwrap_des3): use the checksum as ivec when encrypting 141 the sequence number 142 * init_sec_context.c (init_auth): always zero fwd_data 143 1442000-12-06 Johan Danielsson <joda@pdc.kth.se> 145 146 * accept_sec_context.c: de-pointerise auth_context parameter to 147 krb5_mk_rep 148 1492000-11-15 Assar Westerlund <assar@sics.se> 150 151 * init_sec_context.c (init_auth): update to new 152 krb5_build_authenticator 153 1542000-09-19 Assar Westerlund <assar@sics.se> 155 156 * Makefile.am (libgssapi_la_LDFLAGS): bump to 2:2:1 157 1582000-08-27 Assar Westerlund <assar@sics.se> 159 160 * init_sec_context.c: actually pay attention to `time_req' 161 * init_sec_context.c: re-organize. leak less memory. 162 * gssapi_locl.h (gssapi_krb5_encapsulate, gss_krb5_getsomekey): 163 update prototypes add assert.h 164 * gssapi.h (GSS_KRB5_CONF_C_QOP_DES, GSS_KRB5_CONF_C_QOP_DES3_KD): 165 add 166 * verify_mic.c: re-organize and add 3DES code 167 * wrap.c: re-organize and add 3DES code 168 * unwrap.c: re-organize and add 3DES code 169 * get_mic.c: re-organize and add 3DES code 170 * encapsulate.c (gssapi_krb5_encapsulate): do not free `in_data', 171 let the caller do that. fix the callers. 172 1732000-08-16 Assar Westerlund <assar@sics.se> 174 175 * Makefile.am: bump version to 2:1:1 176 1772000-07-29 Assar Westerlund <assar@sics.se> 178 179 * decapsulate.c (gssapi_krb5_verify_header): sanity-check length 180 1812000-07-25 Johan Danielsson <joda@pdc.kth.se> 182 183 * Makefile.am: bump version to 2:0:1 184 1852000-07-22 Assar Westerlund <assar@sics.se> 186 187 * gssapi.h: update OID for GSS_C_NT_HOSTBASED_SERVICE and other 188 details from rfc2744 189 1902000-06-29 Assar Westerlund <assar@sics.se> 191 192 * address_to_krb5addr.c (gss_address_to_krb5addr): actually use 193 `int' instead of `sa_family_t' for the address family. 194 1952000-06-21 Assar Westerlund <assar@sics.se> 196 197 * add support for token delegation. From Daniel Kouril 198 <kouril@ics.muni.cz> and Miroslav Ruda <ruda@ics.muni.cz> 199 2002000-05-15 Assar Westerlund <assar@sics.se> 201 202 * Makefile.am (libgssapi_la_LDFLAGS): set version to 1:1:1 203 2042000-04-12 Assar Westerlund <assar@sics.se> 205 206 * release_oid_set.c (gss_release_oid_set): clear set for 207 robustness. From GOMBAS Gabor <gombasg@inf.elte.hu> 208 * release_name.c (gss_release_name): reset input_name for 209 robustness. From GOMBAS Gabor <gombasg@inf.elte.hu> 210 * release_buffer.c (gss_release_buffer): set value to NULL to be 211 more robust. From GOMBAS Gabor <gombasg@inf.elte.hu> 212 * add_oid_set_member.c (gss_add_oid_set_member): actually check if 213 the oid is a member first. leave the oid_set unchanged if realloc 214 fails. 215 2162000-02-13 Assar Westerlund <assar@sics.se> 217 218 * Makefile.am: set version to 1:0:1 219 2202000-02-12 Assar Westerlund <assar@sics.se> 221 222 * gssapi_locl.h: add flags for import/export 223 * import_sec_context.c (import_sec_context: add flags for what 224 fields are included. do not include the authenticator for now. 225 * export_sec_context.c (export_sec_context: add flags for what 226 fields are included. do not include the authenticator for now. 227 * accept_sec_context.c (gss_accept_sec_context): set target in 228 context_handle 229 2302000-02-11 Assar Westerlund <assar@sics.se> 231 232 * delete_sec_context.c (gss_delete_sec_context): set context to 233 GSS_C_NO_CONTEXT 234 235 * Makefile.am: add {export,import}_sec_context.c 236 * export_sec_context.c: new file 237 * import_sec_context.c: new file 238 * accept_sec_context.c (gss_accept_sec_context): set trans flag 239 2402000-02-07 Assar Westerlund <assar@sics.se> 241 242 * Makefile.am: set version to 0:5:0 243 2442000-01-26 Assar Westerlund <assar@sics.se> 245 246 * delete_sec_context.c (gss_delete_sec_context): handle a NULL 247 output_token 248 249 * wrap.c: update to pseudo-standard APIs for md4,md5,sha. some 250 changes to libdes calls to make them more portable. 251 * verify_mic.c: update to pseudo-standard APIs for md4,md5,sha. 252 some changes to libdes calls to make them more portable. 253 * unwrap.c: update to pseudo-standard APIs for md4,md5,sha. some 254 changes to libdes calls to make them more portable. 255 * get_mic.c: update to pseudo-standard APIs for md4,md5,sha. some 256 changes to libdes calls to make them more portable. 257 * 8003.c: update to pseudo-standard APIs for md4,md5,sha. 258 2592000-01-06 Assar Westerlund <assar@sics.se> 260 261 * Makefile.am: set version to 0:4:0 262 2631999-12-26 Assar Westerlund <assar@sics.se> 264 265 * accept_sec_context.c (gss_accept_sec_context): always set 266 `output_token' 267 * init_sec_context.c (init_auth): always initialize `output_token' 268 * delete_sec_context.c (gss_delete_sec_context): always set 269 `output_token' 270 2711999-12-06 Assar Westerlund <assar@sics.se> 272 273 * Makefile.am: bump version to 0:3:0 274 2751999-10-20 Assar Westerlund <assar@sics.se> 276 277 * Makefile.am: set version to 0:2:0 278 2791999-09-21 Assar Westerlund <assar@sics.se> 280 281 * init_sec_context.c (gss_init_sec_context): initialize `ticket' 282 283 * gssapi.h (gss_ctx_id_t_desc): add ticket in here. ick. 284 285 * delete_sec_context.c (gss_delete_sec_context): free ticket 286 287 * accept_sec_context.c (gss_accept_sec_context): stove away 288 `krb5_ticket' in context so that ugly programs such as 289 gss_nt_server can get at it. uck. 290 2911999-09-20 Johan Danielsson <joda@pdc.kth.se> 292 293 * accept_sec_context.c: set minor_status 294 2951999-08-04 Assar Westerlund <assar@sics.se> 296 297 * display_status.c (calling_error, routine_error): right shift the 298 code to make it possible to index into the arrays 299 3001999-07-28 Assar Westerlund <assar@sics.se> 301 302 * gssapi.h (GSS_C_AF_INET6): add 303 304 * import_name.c (import_hostbased_name): set minor_status 305 3061999-07-26 Assar Westerlund <assar@sics.se> 307 308 * Makefile.am: set version to 0:1:0 309 310Wed Apr 7 14:05:15 1999 Johan Danielsson <joda@hella.pdc.kth.se> 311 312 * display_status.c: set minor_status 313 314 * init_sec_context.c: set minor_status 315 316 * lib/gssapi/init.c: remove donep (check gssapi_krb5_context 317 directly) 318 319