ChangeLog revision 90926 
12001-10-31  Jacques Vidrine <n@nectar.com>
2
3	* get_mic.c (mic_des3): MIC computation using DES3/SHA1
4	was bogusly appending the message buffer to the result,
5	overwriting a heap buffer in the process.
6
72001-08-29  Assar Westerlund  <assar@sics.se>
8
9	* 8003.c (gssapi_krb5_verify_8003_checksum,
10	gssapi_krb5_create_8003_checksum): make more consistent by always
11	returning an gssapi error and setting minor status.  update
12	callers
13
142001-08-28  Jacques Vidrine  <n@nectar.com>
15
16	* accept_sec_context.c: Create a cache for delegated credentials
17	  when needed.
18
192001-08-28  Assar Westerlund  <assar@sics.se>
20
21	* Makefile.am (libgssapi_la_LDFLAGS): set version to 3:4:2
22
232001-08-23  Assar Westerlund  <assar@sics.se>
24
25	*  *.c: handle minor_status more consistently
26
27	* display_status.c (gss_display_status): handle krb5_get_err_text
28	failing
29
302001-08-15  Johan Danielsson  <joda@pdc.kth.se>
31
32	* gssapi_locl.h: fix prototype for gssapi_krb5_init
33
342001-08-13  Johan Danielsson  <joda@pdc.kth.se>
35
36	* accept_sec_context.c (gsskrb5_register_acceptor_identity): init
37	context and check return value from kt_resolve
38
39	* init.c: return error code
40
412001-07-19  Assar Westerlund  <assar@sics.se>
42
43	* Makefile.am (libgssapi_la_LDFLAGS): update to 3:3:2
44
452001-07-12  Assar Westerlund  <assar@sics.se>
46
47	* Makefile.am (libgssapi_la_LIBADD): add required library
48	dependencies
49
502001-07-06  Assar Westerlund  <assar@sics.se>
51
52	* accept_sec_context.c (gsskrb5_register_acceptor_identity): set
53	the keytab to be used for gss_acquire_cred too'
54
552001-07-03  Assar Westerlund  <assar@sics.se>
56
57	* Makefile.am (libgssapi_la_LDFLAGS): set version to 3:2:2
58
592001-06-18  Assar Westerlund  <assar@sics.se>
60
61	* wrap.c: replace gss_krb5_getsomekey with gss_krb5_get_localkey
62	and gss_krb5_get_remotekey
63	* verify_mic.c: update krb5_auth_con function names use
64	gss_krb5_get_remotekey
65	* unwrap.c: replace gss_krb5_getsomekey with gss_krb5_get_localkey
66	and gss_krb5_get_remotekey
67	* gssapi_locl.h (gss_krb5_get_remotekey, gss_krb5_get_localkey):
68	add prototypes
69	* get_mic.c: update krb5_auth_con function names. use
70	gss_krb5_get_localkey
71	* accept_sec_context.c: update krb5_auth_con function names
72
732001-05-17  Assar Westerlund  <assar@sics.se>
74
75	* Makefile.am: bump version to 3:1:2
76
772001-05-14  Assar Westerlund  <assar@sics.se>
78
79	* address_to_krb5addr.c: adapt to new address functions
80
812001-05-11  Assar Westerlund  <assar@sics.se>
82
83	* try to return the error string from libkrb5 where applicable
84
852001-05-08  Assar Westerlund  <assar@sics.se>
86
87	* delete_sec_context.c (gss_delete_sec_context): remember to free
88	the memory used by the ticket itself. from <tmartin@mirapoint.com>
89
902001-05-04  Assar Westerlund  <assar@sics.se>
91
92	* gssapi_locl.h: add config.h for completeness
93	* gssapi.h: remove config.h, this is an installed header file
94	sys/types.h is not needed either
95	
962001-03-12  Assar Westerlund  <assar@sics.se>
97
98	* acquire_cred.c (gss_acquire_cred): remove memory leaks.  from
99	Jason R Thorpe <thorpej@zembu.com>
100
1012001-02-18  Assar Westerlund  <assar@sics.se>
102
103	* accept_sec_context.c (gss_accept_sec_context): either return
104	gss_name NULL-ed or set
105
106	* import_name.c: set minor_status in some cases where it was not
107	done
108
1092001-02-15  Assar Westerlund  <assar@sics.se>
110
111	* wrap.c: use krb5_generate_random_block for the confounders
112
1132001-01-30  Assar Westerlund  <assar@sics.se>
114
115	* Makefile.am (libgssapi_la_LDFLAGS): bump version to 3:0:2
116	* acquire_cred.c, init_sec_context.c, release_cred.c: add support
117	for getting creds from a keytab, from fvdl@netbsd.org
118
119	* copy_ccache.c: add gss_krb5_copy_ccache
120
1212001-01-27  Assar Westerlund  <assar@sics.se>
122
123	* get_mic.c: cast parameters to des function to non-const pointers
124 	to handle the case where these functions actually take non-const
125 	des_cblock *
126
1272001-01-09  Assar Westerlund  <assar@sics.se>
128
129	* accept_sec_context.c (gss_accept_sec_context): use krb5_rd_cred2
130	instead of krb5_rd_cred
131
1322000-12-11  Assar Westerlund  <assar@sics.se>
133
134	* Makefile.am (libgssapi_la_LDFLAGS): bump to 2:3:1
135
1362000-12-08  Assar Westerlund  <assar@sics.se>
137
138	* wrap.c (wrap_des3): use the checksum as ivec when encrypting the
139	sequence number
140	* unwrap.c (unwrap_des3): use the checksum as ivec when encrypting
141	the sequence number
142	* init_sec_context.c (init_auth): always zero fwd_data
143
1442000-12-06  Johan Danielsson  <joda@pdc.kth.se>
145
146	* accept_sec_context.c: de-pointerise auth_context parameter to
147	krb5_mk_rep
148
1492000-11-15  Assar Westerlund  <assar@sics.se>
150
151	* init_sec_context.c (init_auth): update to new
152	krb5_build_authenticator
153
1542000-09-19  Assar Westerlund  <assar@sics.se>
155
156	* Makefile.am (libgssapi_la_LDFLAGS): bump to 2:2:1
157
1582000-08-27  Assar Westerlund  <assar@sics.se>
159
160	* init_sec_context.c: actually pay attention to `time_req'
161	* init_sec_context.c: re-organize.  leak less memory.
162	* gssapi_locl.h (gssapi_krb5_encapsulate, gss_krb5_getsomekey):
163	update prototypes add assert.h
164	* gssapi.h (GSS_KRB5_CONF_C_QOP_DES, GSS_KRB5_CONF_C_QOP_DES3_KD):
165	add
166	* verify_mic.c: re-organize and add 3DES code
167	* wrap.c: re-organize and add 3DES code
168	* unwrap.c: re-organize and add 3DES code
169	* get_mic.c: re-organize and add 3DES code
170	* encapsulate.c (gssapi_krb5_encapsulate): do not free `in_data',
171	let the caller do that.  fix the callers.
172
1732000-08-16  Assar Westerlund  <assar@sics.se>
174
175	* Makefile.am: bump version to 2:1:1
176
1772000-07-29  Assar Westerlund  <assar@sics.se>
178
179	* decapsulate.c (gssapi_krb5_verify_header): sanity-check length
180
1812000-07-25  Johan Danielsson  <joda@pdc.kth.se>
182
183	* Makefile.am: bump version to 2:0:1
184
1852000-07-22  Assar Westerlund  <assar@sics.se>
186
187	* gssapi.h: update OID for GSS_C_NT_HOSTBASED_SERVICE and other
188	details from rfc2744
189
1902000-06-29  Assar Westerlund  <assar@sics.se>
191
192	* address_to_krb5addr.c (gss_address_to_krb5addr): actually use
193	`int' instead of `sa_family_t' for the address family.
194
1952000-06-21  Assar Westerlund  <assar@sics.se>
196
197	* add support for token delegation.  From Daniel Kouril
198	<kouril@ics.muni.cz> and Miroslav Ruda <ruda@ics.muni.cz>
199
2002000-05-15  Assar Westerlund  <assar@sics.se>
201
202	* Makefile.am (libgssapi_la_LDFLAGS): set version to 1:1:1
203
2042000-04-12  Assar Westerlund  <assar@sics.se>
205
206	* release_oid_set.c (gss_release_oid_set): clear set for
207	robustness.  From GOMBAS Gabor <gombasg@inf.elte.hu>
208	* release_name.c (gss_release_name): reset input_name for
209	robustness.  From GOMBAS Gabor <gombasg@inf.elte.hu>
210	* release_buffer.c (gss_release_buffer): set value to NULL to be
211	more robust.  From GOMBAS Gabor <gombasg@inf.elte.hu>
212	* add_oid_set_member.c (gss_add_oid_set_member): actually check if
213	the oid is a member first.  leave the oid_set unchanged if realloc
214	fails.
215
2162000-02-13  Assar Westerlund  <assar@sics.se>
217
218	* Makefile.am: set version to 1:0:1
219
2202000-02-12  Assar Westerlund  <assar@sics.se>
221
222	* gssapi_locl.h: add flags for import/export
223	* import_sec_context.c (import_sec_context: add flags for what
224	fields are included.  do not include the authenticator for now.
225	* export_sec_context.c (export_sec_context: add flags for what
226	fields are included.  do not include the authenticator for now.
227	* accept_sec_context.c (gss_accept_sec_context): set target in
228	context_handle
229
2302000-02-11  Assar Westerlund  <assar@sics.se>
231
232	* delete_sec_context.c (gss_delete_sec_context): set context to
233	GSS_C_NO_CONTEXT
234
235	* Makefile.am: add {export,import}_sec_context.c
236	* export_sec_context.c: new file
237	* import_sec_context.c: new file
238	* accept_sec_context.c (gss_accept_sec_context): set trans flag
239
2402000-02-07  Assar Westerlund  <assar@sics.se>
241
242	* Makefile.am: set version to 0:5:0
243
2442000-01-26  Assar Westerlund  <assar@sics.se>
245
246	* delete_sec_context.c (gss_delete_sec_context): handle a NULL
247	output_token
248
249	* wrap.c: update to pseudo-standard APIs for md4,md5,sha.  some
250	changes to libdes calls to make them more portable.
251	* verify_mic.c: update to pseudo-standard APIs for md4,md5,sha.
252	some changes to libdes calls to make them more portable.
253	* unwrap.c: update to pseudo-standard APIs for md4,md5,sha.  some
254	changes to libdes calls to make them more portable.
255	* get_mic.c: update to pseudo-standard APIs for md4,md5,sha.  some
256	changes to libdes calls to make them more portable.
257	* 8003.c: update to pseudo-standard APIs for md4,md5,sha.
258
2592000-01-06  Assar Westerlund  <assar@sics.se>
260
261	* Makefile.am: set version to 0:4:0
262
2631999-12-26  Assar Westerlund  <assar@sics.se>
264
265	* accept_sec_context.c (gss_accept_sec_context): always set
266 	`output_token'
267	* init_sec_context.c (init_auth): always initialize `output_token'
268	* delete_sec_context.c (gss_delete_sec_context): always set
269 	`output_token'
270
2711999-12-06  Assar Westerlund  <assar@sics.se>
272
273	* Makefile.am: bump version to 0:3:0
274
2751999-10-20  Assar Westerlund  <assar@sics.se>
276
277	* Makefile.am: set version to 0:2:0
278
2791999-09-21  Assar Westerlund  <assar@sics.se>
280
281	* init_sec_context.c (gss_init_sec_context): initialize `ticket'
282
283	* gssapi.h (gss_ctx_id_t_desc): add ticket in here.  ick.
284
285	* delete_sec_context.c (gss_delete_sec_context): free ticket
286
287	* accept_sec_context.c (gss_accept_sec_context): stove away
288 	`krb5_ticket' in context so that ugly programs such as
289 	gss_nt_server can get at it.  uck.
290
2911999-09-20  Johan Danielsson  <joda@pdc.kth.se>
292
293	* accept_sec_context.c: set minor_status
294
2951999-08-04  Assar Westerlund  <assar@sics.se>
296
297	* display_status.c (calling_error, routine_error): right shift the
298 	code to make it possible to index into the arrays
299
3001999-07-28  Assar Westerlund  <assar@sics.se>
301
302	* gssapi.h (GSS_C_AF_INET6): add
303
304	* import_name.c (import_hostbased_name): set minor_status
305
3061999-07-26  Assar Westerlund  <assar@sics.se>
307
308	* Makefile.am: set version to 0:1:0
309
310Wed Apr  7 14:05:15 1999  Johan Danielsson  <joda@hella.pdc.kth.se>
311
312	* display_status.c: set minor_status
313
314	* init_sec_context.c: set minor_status
315
316	* lib/gssapi/init.c: remove donep (check gssapi_krb5_context
317 	directly)
318
319