ChangeLog revision 127808
12003-12-19  Love H�rnquist �strand  <lha@it.su.se>
2
3	* accept_sec_context.c: 1.40->1.41: Don't require timestamp to be
4	set on delegated token, its already protected by the outer token
5	(and windows doesn't alway send it) Pointed out by Zi-Bin Yang
6	<zbyang@decru.com> on heimdal-discuss
7
82003-10-21  Love H�rnquist �strand  <lha@it.su.se>
9
10	* add_cred.c: 1.3->1.4: If its a MEMORY cc, make a copy. We need
11	to do this since now gss_release_cred will destroy the cred. This
12	should be really be solved a better way.
13	
142003-10-07  Love H�rnquist �strand  <lha@it.su.se>
15
16	* release_cred.c: 1.9->1.10:
17	(gss_release_cred): if its a mcc, destroy it rather the just release it
18	Found by: "Zi-Bin Yang" <zbyang@decru.com>
19	
202003-09-19  Love H�rnquist �strand  <lha@it.su.se>
21
22	* arcfour.c: 1.13->1.14: remove depenency on gss_arcfour_mic_token
23	and gss_arcfour_warp_token
24	
25	* arcfour.h: 1.3->1.4: remove depenency on gss_arcfour_mic_token
26	and gss_arcfour_warp_token
27
28	* arcfour.c: make build
29	
30	* get_mic.c, verify_mic.c, unwrap.c, wrap.c:
31	glue in arcfour support
32
33	* gssapi_locl.h: 1.32->1.33: add _gssapi_verify_pad
34	
352003-09-18  Love H�rnquist �strand  <lha@it.su.se>
36
37	* encapsulate.c: add _gssapi_make_mech_header
38	
39	* gssapi_locl.h: add "arcfour.h" and prototype for
40	_gssapi_make_mech_header
41
42	* gssapi_locl.h: add gssapi_{en,de}code_{be_,}om_uint32
43	
44	* 8003.c: 1.12->1.13: export and rename
45	encode_om_uint32/decode_om_uint32 and start to use them
46	
472003-08-16  Love H�rnquist �strand  <lha@it.su.se>
48
49	* verify_mic.c: 1.21->1.22: make sure minor_status is always set,
50	pointed out by Luke Howard <lukeh@PADL.COM>
51	
522003-08-15  Love H�rnquist �strand  <lha@it.su.se>
53
54	* context_time.c: 1.7->1.10: return time in seconds from now
55	
56	* gssapi_locl.h: add gssapi_lifetime_left
57	
58	* init_sec_context.c: part of 1.37->1.38: (init_auth): if the cred
59	is expired before we tries to create a token, fail so the peer
60	doesn't need reject us
61	(*): make sure time is returned in seconds from now, not in
62	kerberos time
63
64	* acquire_cred.c: 1.14->1.15: (gss_aquire_cred): make sure time is
65	returned in seconds from now, not in kerberos time
66	
67	* accept_sec_context.c: 1.34->1.35: (gss_accept_sec_context): make
68	sure time is returned in seconds from now, not in kerberos time
69	
702003-05-07  Love H�rnquist �strand  <lha@it.su.se>
71
72	* gssapi.h: 1.27->1.28:
73	if __cplusplus, wrap the extern variable (just to be safe) and
74	functions in extern "C" { }
75
762003-04-30  Love H�rnquist �strand  <lha@it.su.se>
77
78	* gssapi.3: more about the des3 mic mess
79	
80	* verify_mic.c 1.19->1.20 : (verify_mic_des3): always check if the
81	mic is the correct mic or the mic that old heimdal would have
82	generated
83	
842003-04-29  Jacques Vidrine  <nectar@kth.se>
85
86	* verify_mic.c: 1.18->1.19: verify_mic_des3: If MIC verification
87	fails, retry using the `old' MIC computation (with zero IV).
88	
892003-04-28  Love H�rnquist �strand  <lha@it.su.se>
90
91	* compat.c (_gss_DES3_get_mic_compat): default to use compat
92	
93	* gssapi.3: 1.5->1.6: document [gssapi]correct_des3_mic and
94	[gssapi]broken_des3_mic
95
96	* compat.c: 1.2->1.4:
97	(gss_krb5_compat_des3_mci): return a value
98	(gss_krb5_compat_des3_mic): enable turning on/off des3 mic compat
99	(_gss_DES3_get_mic_compat): handle [gssapi]correct_des3_mic too
100
101	* gssapi.h: 1.26->1.27:
102	(gss_krb5_compat_des3_mic): new function, turn on/off des3 mic compat
103	(GSS_C_KRB5_COMPAT_DES3_MIC): cpp symbol that exists if
104	gss_krb5_compat_des3_mic exists
105	
1062003-04-23  Love H�rnquist �strand  <lha@it.su.se>
107
108	* Makefile.am: 1.44->1.45: test_acquire_cred_LDADD: use
109	libgssapi.la not ./libgssapi.la (makes make -jN work)
110	
1112003-04-16  Love H�rnquist �strand  <lha@it.su.se>
112
113	* gssapi.3: spelling
114	
115	* gss_acquire_cred.3: Change .Fd #include <header.h> to .In
116	header.h, from Thomas Klausner <wiz@netbsd.org>
117
118	
1192003-04-06  Love H�rnquist �strand  <lha@it.su.se>
120
121	* gss_acquire_cred.3: spelling
122	
123	* Makefile.am: remove stuff that sneaked in with last commit
124	
125	* acquire_cred.c (acquire_initiator_cred): if the requested name
126	isn't in the ccache, also check keytab.  Extact the krbtgt for the
127	default realm to check how long the credentials will last.
128	
129	* add_cred.c (gss_add_cred): don't create a new ccache, just open
130	the old one; better check if output handle is compatible with new
131	(copied) handle
132
133	* test_acquire_cred.c: test gss_add_cred too
134	
1352003-04-03  Love H�rnquist �strand  <lha@it.su.se>
136
137	* Makefile.am: build test_acquire_cred
138	
139	* test_acquire_cred.c: simple gss_acquire_cred test
140	
1412003-04-02  Love H�rnquist �strand  <lha@it.su.se>
142
143	* gss_acquire_cred.3: s/gssapi/GSS-API/
144	
1452003-03-19  Love H�rnquist �strand  <lha@it.su.se>
146
147	* gss_acquire_cred.3: document v1 interface (and that they are
148	obsolete)
149
1502003-03-18  Love H�rnquist �strand  <lha@it.su.se>
151
152	* gss_acquire_cred.3: list supported mechanism and nametypes
153	
1542003-03-16  Love H�rnquist �strand  <lha@it.su.se>
155	
156	* gss_acquire_cred.3: text about gss_display_name
157
158	* Makefile.am (libgssapi_la_LDFLAGS): bump to 3:6:2
159	(libgssapi_la_SOURCES): add all new functions
160
161	* gssapi.3: now that we have a functions, uncomment the missing
162	ones
163
164	* gss_acquire_cred.3: now that we have a functions, uncomment the
165	missing ones
166
167	* process_context_token.c: implement gss_process_context_token
168	
169	* inquire_names_for_mech.c: implement gss_inquire_names_for_mech
170	
171	* inquire_mechs_for_name.c: implement gss_inquire_mechs_for_name
172	
173	* inquire_cred_by_mech.c: implement gss_inquire_cred_by_mech
174	
175	* add_cred.c: implement gss_add_cred
176	
177	* acquire_cred.c (gss_acquire_cred): more testing of input
178	argument, make sure output arguments are ok, since we don't know
179	the time_rec (for now), set it to time_req
180	
181	* export_sec_context.c: send lifetime, also set minor_status
182	
183	* get_mic.c: set minor_status
184	
185	* import_sec_context.c (gss_import_sec_context): add error
186	checking, pick up lifetime (if there is no lifetime, use
187	GSS_C_INDEFINITE)
188
189	* init_sec_context.c: take care to set export value to something
190	sane before we start so caller will have harmless values in them
191	if then function fails
192
193	* release_buffer.c (gss_release_buffer): set minor_status
194	
195	* wrap.c: make sure minor_status get set
196	
197	* verify_mic.c (gss_verify_mic_internal): rename verify_mic to
198	gss_verify_mic_internal and let it take the type as an argument,
199	(gss_verify_mic): call gss_verify_mic_internal
200	set minor_status
201	
202	* unwrap.c: set minor_status
203	
204	* test_oid_set_member.c (gss_test_oid_set_member): use
205	gss_oid_equal
206
207	* release_oid_set.c (gss_release_oid_set): set minor_status
208	
209	* release_name.c (gss_release_name): set minor_status
210	
211	* release_cred.c (gss_release_cred): set minor_status
212	
213	* add_oid_set_member.c (gss_add_oid_set_member): set minor_status
214	
215	* compare_name.c (gss_compare_name): set minor_status
216	
217	* compat.c (check_compat): make sure ret have a defined value
218	
219	* context_time.c (gss_context_time): set minor_status
220	
221	* copy_ccache.c (gss_krb5_copy_ccache): set minor_status
222	
223	* create_emtpy_oid_set.c (gss_create_empty_oid_set): set
224	minor_status
225
226	* delete_sec_context.c (gss_delete_sec_context): set minor_status
227	
228	* display_name.c (gss_display_name): set minor_status
229	
230	* display_status.c (gss_display_status): use gss_oid_equal, handle
231	supplementary errors
232
233	* duplicate_name.c (gss_duplicate_name): set minor_status
234	
235	* inquire_context.c (gss_inquire_context): set lifetime_rec now
236	when we know it, set minor_status
237
238	* inquire_cred.c (gss_inquire_cred): take care to set export value
239	to something sane before we start so caller will have harmless
240	values in them if the function fails
241	
242	* accept_sec_context.c (gss_accept_sec_context): take care to set
243	export value to something sane before we start so caller will have
244	harmless values in them if then function fails, set lifetime from
245	ticket expiration date
246
247	* indicate_mechs.c (gss_indicate_mechs): use
248	gss_create_empty_oid_set and gss_add_oid_set_member
249
250	* gssapi.h (gss_ctx_id_t_desc): store the lifetime in the cred,
251	since there is no ticket transfered in the exported context
252	
253	* export_name.c (gss_export_name): export name with
254	GSS_C_NT_EXPORT_NAME wrapping, not just the principal
255	
256	* import_name.c (import_export_name): new function, parses a
257	GSS_C_NT_EXPORT_NAME
258	(import_krb5_name): factor out common code of parsing krb5 name
259	(gss_oid_equal): rename from oid_equal
260
261	* gssapi_locl.h: add prototypes for gss_oid_equal and
262	gss_verify_mic_internal
263
264	* gssapi.h: comment out the argument names
265	
2662003-03-15  Love H�rnquist �strand  <lha@it.su.se>
267
268	* gssapi.3: add LIST OF FUNCTIONS and copyright/license
269
270	* Makefile.am: s/gss_aquire_cred.3/gss_acquire_cred.3/
271	
272	* Makefile.am: man_MANS += gss_aquire_cred.3
273	
2742003-03-14  Love H�rnquist �strand  <lha@it.su.se>
275
276	* gss_aquire_cred.3: the gssapi api manpage
277	
2782003-03-03  Love H�rnquist �strand  <lha@it.su.se>
279
280	* inquire_context.c: (gss_inquire_context): rename argument open
281	to open_context
282
283	* gssapi.h (gss_inquire_context): rename argument open to open_context
284
2852003-02-27  Love H�rnquist �strand  <lha@it.su.se>
286
287	* init_sec_context.c (do_delegation): remove unused variable
288	subkey
289
290	* gssapi.3: all 0.5.x version had broken token delegation
291	
2922003-02-21  Love H�rnquist �strand  <lha@it.su.se>
293
294	* (init_auth): only generate one subkey
295
2962003-01-27  Love H�rnquist �strand  <lha@it.su.se>
297
298	* verify_mic.c (verify_mic_des3): fix 3des verify_mic to conform
299	to rfc (and mit kerberos), provide backward compat hook
300	
301	* get_mic.c (mic_des3): fix 3des get_mic to conform to rfc (and
302	mit kerberos), provide backward compat hook
303	
304	* init_sec_context.c (init_auth): check if we need compat for
305	older get_mic/verify_mic
306
307	* gssapi_locl.h: add prototype for _gss_DES3_get_mic_compat
308	
309	* gssapi.h (more_flags): add COMPAT_OLD_DES3
310	
311	* Makefile.am: add gssapi.3 and compat.c
312	
313	* gssapi.3: add gssapi COMPATIBILITY documentation
314	
315	* accept_sec_context.c (gss_accept_sec_context): check if we need
316	compat for older get_mic/verify_mic
317
318	* compat.c: check for compatiblity with other heimdal's 3des
319	get_mic/verify_mic
320
3212002-10-31  Johan Danielsson  <joda@pdc.kth.se>
322
323	* check return value from gssapi_krb5_init
324	
325	* 8003.c (gssapi_krb5_verify_8003_checksum): check size of input
326
3272002-09-03  Johan Danielsson  <joda@pdc.kth.se>
328
329	* wrap.c (wrap_des3): use ETYPE_DES3_CBC_NONE
330
331	* unwrap.c (unwrap_des3): use ETYPE_DES3_CBC_NONE
332
3332002-09-02  Johan Danielsson  <joda@pdc.kth.se>
334
335	* init_sec_context.c: we need to generate a local subkey here
336
3372002-08-20  Jacques Vidrine <n@nectar.com>
338
339	* acquire_cred.c, inquire_cred.c, release_cred.c: Use default
340	  credential resolution if gss_acquire_cred is called with
341	  GSS_C_NO_NAME.
342
3432002-06-20  Jacques Vidrine <n@nectar.com>
344
345	* import_name.c: Compare name types by value if pointers do
346	  not match.  Reported by: "Douglas E. Engert" <deengert@anl.gov>
347
3482002-05-20  Jacques Vidrine <n@nectar.com>
349
350	* verify_mic.c (gss_verify_mic), unwrap.c (gss_unwrap): initialize
351	  the qop_state parameter.  from Doug Rabson <dfr@nlsystems.com>
352
3532002-05-09  Jacques Vidrine <n@nectar.com>
354
355	* acquire_cred.c: handle GSS_C_INITIATE/GSS_C_ACCEPT/GSS_C_BOTH
356
3572002-05-08  Jacques Vidrine <n@nectar.com>
358
359	* acquire_cred.c: initialize gssapi; handle null desired_name
360
3612002-03-22  Johan Danielsson  <joda@pdc.kth.se>
362
363	* Makefile.am: remove non-functional stuff accidentally committed
364
3652002-03-11  Assar Westerlund  <assar@sics.se>
366
367	* Makefile.am (libgssapi_la_LDFLAGS): bump version to 3:5:2
368	* 8003.c (gssapi_krb5_verify_8003_checksum): handle zero channel
369	bindings
370
3712001-10-31  Jacques Vidrine <n@nectar.com>
372
373	* get_mic.c (mic_des3): MIC computation using DES3/SHA1
374	was bogusly appending the message buffer to the result,
375	overwriting a heap buffer in the process.
376
3772001-08-29  Assar Westerlund  <assar@sics.se>
378
379	* 8003.c (gssapi_krb5_verify_8003_checksum,
380	gssapi_krb5_create_8003_checksum): make more consistent by always
381	returning an gssapi error and setting minor status.  update
382	callers
383
3842001-08-28  Jacques Vidrine  <n@nectar.com>
385
386	* accept_sec_context.c: Create a cache for delegated credentials
387	  when needed.
388
3892001-08-28  Assar Westerlund  <assar@sics.se>
390
391	* Makefile.am (libgssapi_la_LDFLAGS): set version to 3:4:2
392
3932001-08-23  Assar Westerlund  <assar@sics.se>
394
395	*  *.c: handle minor_status more consistently
396
397	* display_status.c (gss_display_status): handle krb5_get_err_text
398	failing
399
4002001-08-15  Johan Danielsson  <joda@pdc.kth.se>
401
402	* gssapi_locl.h: fix prototype for gssapi_krb5_init
403
4042001-08-13  Johan Danielsson  <joda@pdc.kth.se>
405
406	* accept_sec_context.c (gsskrb5_register_acceptor_identity): init
407	context and check return value from kt_resolve
408
409	* init.c: return error code
410
4112001-07-19  Assar Westerlund  <assar@sics.se>
412
413	* Makefile.am (libgssapi_la_LDFLAGS): update to 3:3:2
414
4152001-07-12  Assar Westerlund  <assar@sics.se>
416
417	* Makefile.am (libgssapi_la_LIBADD): add required library
418	dependencies
419
4202001-07-06  Assar Westerlund  <assar@sics.se>
421
422	* accept_sec_context.c (gsskrb5_register_acceptor_identity): set
423	the keytab to be used for gss_acquire_cred too'
424
4252001-07-03  Assar Westerlund  <assar@sics.se>
426
427	* Makefile.am (libgssapi_la_LDFLAGS): set version to 3:2:2
428
4292001-06-18  Assar Westerlund  <assar@sics.se>
430
431	* wrap.c: replace gss_krb5_getsomekey with gss_krb5_get_localkey
432	and gss_krb5_get_remotekey
433	* verify_mic.c: update krb5_auth_con function names use
434	gss_krb5_get_remotekey
435	* unwrap.c: replace gss_krb5_getsomekey with gss_krb5_get_localkey
436	and gss_krb5_get_remotekey
437	* gssapi_locl.h (gss_krb5_get_remotekey, gss_krb5_get_localkey):
438	add prototypes
439	* get_mic.c: update krb5_auth_con function names. use
440	gss_krb5_get_localkey
441	* accept_sec_context.c: update krb5_auth_con function names
442
4432001-05-17  Assar Westerlund  <assar@sics.se>
444
445	* Makefile.am: bump version to 3:1:2
446
4472001-05-14  Assar Westerlund  <assar@sics.se>
448
449	* address_to_krb5addr.c: adapt to new address functions
450
4512001-05-11  Assar Westerlund  <assar@sics.se>
452
453	* try to return the error string from libkrb5 where applicable
454
4552001-05-08  Assar Westerlund  <assar@sics.se>
456
457	* delete_sec_context.c (gss_delete_sec_context): remember to free
458	the memory used by the ticket itself. from <tmartin@mirapoint.com>
459
4602001-05-04  Assar Westerlund  <assar@sics.se>
461
462	* gssapi_locl.h: add config.h for completeness
463	* gssapi.h: remove config.h, this is an installed header file
464	sys/types.h is not needed either
465	
4662001-03-12  Assar Westerlund  <assar@sics.se>
467
468	* acquire_cred.c (gss_acquire_cred): remove memory leaks.  from
469	Jason R Thorpe <thorpej@zembu.com>
470
4712001-02-18  Assar Westerlund  <assar@sics.se>
472
473	* accept_sec_context.c (gss_accept_sec_context): either return
474	gss_name NULL-ed or set
475
476	* import_name.c: set minor_status in some cases where it was not
477	done
478
4792001-02-15  Assar Westerlund  <assar@sics.se>
480
481	* wrap.c: use krb5_generate_random_block for the confounders
482
4832001-01-30  Assar Westerlund  <assar@sics.se>
484
485	* Makefile.am (libgssapi_la_LDFLAGS): bump version to 3:0:2
486	* acquire_cred.c, init_sec_context.c, release_cred.c: add support
487	for getting creds from a keytab, from fvdl@netbsd.org
488
489	* copy_ccache.c: add gss_krb5_copy_ccache
490
4912001-01-27  Assar Westerlund  <assar@sics.se>
492
493	* get_mic.c: cast parameters to des function to non-const pointers
494 	to handle the case where these functions actually take non-const
495 	des_cblock *
496
4972001-01-09  Assar Westerlund  <assar@sics.se>
498
499	* accept_sec_context.c (gss_accept_sec_context): use krb5_rd_cred2
500	instead of krb5_rd_cred
501
5022000-12-11  Assar Westerlund  <assar@sics.se>
503
504	* Makefile.am (libgssapi_la_LDFLAGS): bump to 2:3:1
505
5062000-12-08  Assar Westerlund  <assar@sics.se>
507
508	* wrap.c (wrap_des3): use the checksum as ivec when encrypting the
509	sequence number
510	* unwrap.c (unwrap_des3): use the checksum as ivec when encrypting
511	the sequence number
512	* init_sec_context.c (init_auth): always zero fwd_data
513
5142000-12-06  Johan Danielsson  <joda@pdc.kth.se>
515
516	* accept_sec_context.c: de-pointerise auth_context parameter to
517	krb5_mk_rep
518
5192000-11-15  Assar Westerlund  <assar@sics.se>
520
521	* init_sec_context.c (init_auth): update to new
522	krb5_build_authenticator
523
5242000-09-19  Assar Westerlund  <assar@sics.se>
525
526	* Makefile.am (libgssapi_la_LDFLAGS): bump to 2:2:1
527
5282000-08-27  Assar Westerlund  <assar@sics.se>
529
530	* init_sec_context.c: actually pay attention to `time_req'
531	* init_sec_context.c: re-organize.  leak less memory.
532	* gssapi_locl.h (gssapi_krb5_encapsulate, gss_krb5_getsomekey):
533	update prototypes add assert.h
534	* gssapi.h (GSS_KRB5_CONF_C_QOP_DES, GSS_KRB5_CONF_C_QOP_DES3_KD):
535	add
536	* verify_mic.c: re-organize and add 3DES code
537	* wrap.c: re-organize and add 3DES code
538	* unwrap.c: re-organize and add 3DES code
539	* get_mic.c: re-organize and add 3DES code
540	* encapsulate.c (gssapi_krb5_encapsulate): do not free `in_data',
541	let the caller do that.  fix the callers.
542
5432000-08-16  Assar Westerlund  <assar@sics.se>
544
545	* Makefile.am: bump version to 2:1:1
546
5472000-07-29  Assar Westerlund  <assar@sics.se>
548
549	* decapsulate.c (gssapi_krb5_verify_header): sanity-check length
550
5512000-07-25  Johan Danielsson  <joda@pdc.kth.se>
552
553	* Makefile.am: bump version to 2:0:1
554
5552000-07-22  Assar Westerlund  <assar@sics.se>
556
557	* gssapi.h: update OID for GSS_C_NT_HOSTBASED_SERVICE and other
558	details from rfc2744
559
5602000-06-29  Assar Westerlund  <assar@sics.se>
561
562	* address_to_krb5addr.c (gss_address_to_krb5addr): actually use
563	`int' instead of `sa_family_t' for the address family.
564
5652000-06-21  Assar Westerlund  <assar@sics.se>
566
567	* add support for token delegation.  From Daniel Kouril
568	<kouril@ics.muni.cz> and Miroslav Ruda <ruda@ics.muni.cz>
569
5702000-05-15  Assar Westerlund  <assar@sics.se>
571
572	* Makefile.am (libgssapi_la_LDFLAGS): set version to 1:1:1
573
5742000-04-12  Assar Westerlund  <assar@sics.se>
575
576	* release_oid_set.c (gss_release_oid_set): clear set for
577	robustness.  From GOMBAS Gabor <gombasg@inf.elte.hu>
578	* release_name.c (gss_release_name): reset input_name for
579	robustness.  From GOMBAS Gabor <gombasg@inf.elte.hu>
580	* release_buffer.c (gss_release_buffer): set value to NULL to be
581	more robust.  From GOMBAS Gabor <gombasg@inf.elte.hu>
582	* add_oid_set_member.c (gss_add_oid_set_member): actually check if
583	the oid is a member first.  leave the oid_set unchanged if realloc
584	fails.
585
5862000-02-13  Assar Westerlund  <assar@sics.se>
587
588	* Makefile.am: set version to 1:0:1
589
5902000-02-12  Assar Westerlund  <assar@sics.se>
591
592	* gssapi_locl.h: add flags for import/export
593	* import_sec_context.c (import_sec_context: add flags for what
594	fields are included.  do not include the authenticator for now.
595	* export_sec_context.c (export_sec_context: add flags for what
596	fields are included.  do not include the authenticator for now.
597	* accept_sec_context.c (gss_accept_sec_context): set target in
598	context_handle
599
6002000-02-11  Assar Westerlund  <assar@sics.se>
601
602	* delete_sec_context.c (gss_delete_sec_context): set context to
603	GSS_C_NO_CONTEXT
604
605	* Makefile.am: add {export,import}_sec_context.c
606	* export_sec_context.c: new file
607	* import_sec_context.c: new file
608	* accept_sec_context.c (gss_accept_sec_context): set trans flag
609
6102000-02-07  Assar Westerlund  <assar@sics.se>
611
612	* Makefile.am: set version to 0:5:0
613
6142000-01-26  Assar Westerlund  <assar@sics.se>
615
616	* delete_sec_context.c (gss_delete_sec_context): handle a NULL
617	output_token
618
619	* wrap.c: update to pseudo-standard APIs for md4,md5,sha.  some
620	changes to libdes calls to make them more portable.
621	* verify_mic.c: update to pseudo-standard APIs for md4,md5,sha.
622	some changes to libdes calls to make them more portable.
623	* unwrap.c: update to pseudo-standard APIs for md4,md5,sha.  some
624	changes to libdes calls to make them more portable.
625	* get_mic.c: update to pseudo-standard APIs for md4,md5,sha.  some
626	changes to libdes calls to make them more portable.
627	* 8003.c: update to pseudo-standard APIs for md4,md5,sha.
628
6292000-01-06  Assar Westerlund  <assar@sics.se>
630
631	* Makefile.am: set version to 0:4:0
632
6331999-12-26  Assar Westerlund  <assar@sics.se>
634
635	* accept_sec_context.c (gss_accept_sec_context): always set
636 	`output_token'
637	* init_sec_context.c (init_auth): always initialize `output_token'
638	* delete_sec_context.c (gss_delete_sec_context): always set
639 	`output_token'
640
6411999-12-06  Assar Westerlund  <assar@sics.se>
642
643	* Makefile.am: bump version to 0:3:0
644
6451999-10-20  Assar Westerlund  <assar@sics.se>
646
647	* Makefile.am: set version to 0:2:0
648
6491999-09-21  Assar Westerlund  <assar@sics.se>
650
651	* init_sec_context.c (gss_init_sec_context): initialize `ticket'
652
653	* gssapi.h (gss_ctx_id_t_desc): add ticket in here.  ick.
654
655	* delete_sec_context.c (gss_delete_sec_context): free ticket
656
657	* accept_sec_context.c (gss_accept_sec_context): stove away
658 	`krb5_ticket' in context so that ugly programs such as
659 	gss_nt_server can get at it.  uck.
660
6611999-09-20  Johan Danielsson  <joda@pdc.kth.se>
662
663	* accept_sec_context.c: set minor_status
664
6651999-08-04  Assar Westerlund  <assar@sics.se>
666
667	* display_status.c (calling_error, routine_error): right shift the
668 	code to make it possible to index into the arrays
669
6701999-07-28  Assar Westerlund  <assar@sics.se>
671
672	* gssapi.h (GSS_C_AF_INET6): add
673
674	* import_name.c (import_hostbased_name): set minor_status
675
6761999-07-26  Assar Westerlund  <assar@sics.se>
677
678	* Makefile.am: set version to 0:1:0
679
680Wed Apr  7 14:05:15 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
681
682	* display_status.c: set minor_status
683
684	* init_sec_context.c: set minor_status
685
686	* lib/gssapi/init.c: remove donep (check gssapi_krb5_context
687 	directly)
688
689