ChangeLog revision 102644
1102644Snectar2002-08-20 Jacques Vidrine <n@nectar.com> 2102644Snectar 3102644Snectar * acquire_cred.c, inquire_cred.c, release_cred.c: Use default 4102644Snectar credential resolution if gss_acquire_cred is called with 5102644Snectar GSS_C_NO_NAME. 6102644Snectar 7102644Snectar2002-06-20 Jacques Vidrine <n@nectar.com> 8102644Snectar 9102644Snectar * import_name.c: Compare name types by value if pointers do 10102644Snectar not match. Reported by: "Douglas E. Engert" <deengert@anl.gov> 11102644Snectar 12102644Snectar2002-05-20 Jacques Vidrine <n@nectar.com> 13102644Snectar 14102644Snectar * verify_mic.c (gss_verify_mic), unwrap.c (gss_unwrap): initialize 15102644Snectar the qop_state parameter. from Doug Rabson <dfr@nlsystems.com> 16102644Snectar 17102644Snectar2002-05-09 Jacques Vidrine <n@nectar.com> 18102644Snectar 19102644Snectar * acquire_cred.c: handle GSS_C_INITIATE/GSS_C_ACCEPT/GSS_C_BOTH 20102644Snectar 21102644Snectar2002-05-08 Jacques Vidrine <n@nectar.com> 22102644Snectar 23102644Snectar * acquire_cred.c: initialize gssapi; handle null desired_name 24102644Snectar 25102644Snectar2002-03-22 Johan Danielsson <joda@pdc.kth.se> 26102644Snectar 27102644Snectar * Makefile.am: remove non-functional stuff accidentally committed 28102644Snectar 29102644Snectar2002-03-11 Assar Westerlund <assar@sics.se> 30102644Snectar 31102644Snectar * Makefile.am (libgssapi_la_LDFLAGS): bump version to 3:5:2 32102644Snectar * 8003.c (gssapi_krb5_verify_8003_checksum): handle zero channel 33102644Snectar bindings 34102644Snectar 3590926Snectar2001-10-31 Jacques Vidrine <n@nectar.com> 3690926Snectar 3790926Snectar * get_mic.c (mic_des3): MIC computation using DES3/SHA1 3890926Snectar was bogusly appending the message buffer to the result, 3990926Snectar overwriting a heap buffer in the process. 4090926Snectar 4190926Snectar2001-08-29 Assar Westerlund <assar@sics.se> 4290926Snectar 4390926Snectar * 8003.c (gssapi_krb5_verify_8003_checksum, 4490926Snectar gssapi_krb5_create_8003_checksum): make more consistent by always 4590926Snectar returning an gssapi error and setting minor status. update 4690926Snectar callers 4790926Snectar 4890926Snectar2001-08-28 Jacques Vidrine <n@nectar.com> 4990926Snectar 5090926Snectar * accept_sec_context.c: Create a cache for delegated credentials 5190926Snectar when needed. 5290926Snectar 5390926Snectar2001-08-28 Assar Westerlund <assar@sics.se> 5490926Snectar 5590926Snectar * Makefile.am (libgssapi_la_LDFLAGS): set version to 3:4:2 5690926Snectar 5790926Snectar2001-08-23 Assar Westerlund <assar@sics.se> 5890926Snectar 5990926Snectar * *.c: handle minor_status more consistently 6090926Snectar 6190926Snectar * display_status.c (gss_display_status): handle krb5_get_err_text 6290926Snectar failing 6390926Snectar 6490926Snectar2001-08-15 Johan Danielsson <joda@pdc.kth.se> 6590926Snectar 6690926Snectar * gssapi_locl.h: fix prototype for gssapi_krb5_init 6790926Snectar 6890926Snectar2001-08-13 Johan Danielsson <joda@pdc.kth.se> 6990926Snectar 7090926Snectar * accept_sec_context.c (gsskrb5_register_acceptor_identity): init 7190926Snectar context and check return value from kt_resolve 7290926Snectar 7390926Snectar * init.c: return error code 7490926Snectar 7590926Snectar2001-07-19 Assar Westerlund <assar@sics.se> 7690926Snectar 7790926Snectar * Makefile.am (libgssapi_la_LDFLAGS): update to 3:3:2 7890926Snectar 7990926Snectar2001-07-12 Assar Westerlund <assar@sics.se> 8090926Snectar 8190926Snectar * Makefile.am (libgssapi_la_LIBADD): add required library 8290926Snectar dependencies 8390926Snectar 8490926Snectar2001-07-06 Assar Westerlund <assar@sics.se> 8590926Snectar 8690926Snectar * accept_sec_context.c (gsskrb5_register_acceptor_identity): set 8790926Snectar the keytab to be used for gss_acquire_cred too' 8890926Snectar 8990926Snectar2001-07-03 Assar Westerlund <assar@sics.se> 9090926Snectar 9190926Snectar * Makefile.am (libgssapi_la_LDFLAGS): set version to 3:2:2 9290926Snectar 9390926Snectar2001-06-18 Assar Westerlund <assar@sics.se> 9490926Snectar 9590926Snectar * wrap.c: replace gss_krb5_getsomekey with gss_krb5_get_localkey 9690926Snectar and gss_krb5_get_remotekey 9790926Snectar * verify_mic.c: update krb5_auth_con function names use 9890926Snectar gss_krb5_get_remotekey 9990926Snectar * unwrap.c: replace gss_krb5_getsomekey with gss_krb5_get_localkey 10090926Snectar and gss_krb5_get_remotekey 10190926Snectar * gssapi_locl.h (gss_krb5_get_remotekey, gss_krb5_get_localkey): 10290926Snectar add prototypes 10390926Snectar * get_mic.c: update krb5_auth_con function names. use 10490926Snectar gss_krb5_get_localkey 10590926Snectar * accept_sec_context.c: update krb5_auth_con function names 10690926Snectar 10778527Sassar2001-05-17 Assar Westerlund <assar@sics.se> 10878527Sassar 10978527Sassar * Makefile.am: bump version to 3:1:2 11078527Sassar 11178527Sassar2001-05-14 Assar Westerlund <assar@sics.se> 11278527Sassar 11378527Sassar * address_to_krb5addr.c: adapt to new address functions 11478527Sassar 11578527Sassar2001-05-11 Assar Westerlund <assar@sics.se> 11678527Sassar 11778527Sassar * try to return the error string from libkrb5 where applicable 11878527Sassar 11978527Sassar2001-05-08 Assar Westerlund <assar@sics.se> 12078527Sassar 12178527Sassar * delete_sec_context.c (gss_delete_sec_context): remember to free 12278527Sassar the memory used by the ticket itself. from <tmartin@mirapoint.com> 12378527Sassar 12478527Sassar2001-05-04 Assar Westerlund <assar@sics.se> 12578527Sassar 12678527Sassar * gssapi_locl.h: add config.h for completeness 12778527Sassar * gssapi.h: remove config.h, this is an installed header file 12878527Sassar sys/types.h is not needed either 12978527Sassar 13078527Sassar2001-03-12 Assar Westerlund <assar@sics.se> 13178527Sassar 13278527Sassar * acquire_cred.c (gss_acquire_cred): remove memory leaks. from 13378527Sassar Jason R Thorpe <thorpej@zembu.com> 13478527Sassar 13578527Sassar2001-02-18 Assar Westerlund <assar@sics.se> 13678527Sassar 13778527Sassar * accept_sec_context.c (gss_accept_sec_context): either return 13878527Sassar gss_name NULL-ed or set 13978527Sassar 14078527Sassar * import_name.c: set minor_status in some cases where it was not 14178527Sassar done 14278527Sassar 14378527Sassar2001-02-15 Assar Westerlund <assar@sics.se> 14478527Sassar 14578527Sassar * wrap.c: use krb5_generate_random_block for the confounders 14678527Sassar 14772445Sassar2001-01-30 Assar Westerlund <assar@sics.se> 14872445Sassar 14972445Sassar * Makefile.am (libgssapi_la_LDFLAGS): bump version to 3:0:2 15072445Sassar * acquire_cred.c, init_sec_context.c, release_cred.c: add support 15172445Sassar for getting creds from a keytab, from fvdl@netbsd.org 15272445Sassar 15372445Sassar * copy_ccache.c: add gss_krb5_copy_ccache 15472445Sassar 15572445Sassar2001-01-27 Assar Westerlund <assar@sics.se> 15672445Sassar 15772445Sassar * get_mic.c: cast parameters to des function to non-const pointers 15872445Sassar to handle the case where these functions actually take non-const 15972445Sassar des_cblock * 16072445Sassar 16172445Sassar2001-01-09 Assar Westerlund <assar@sics.se> 16272445Sassar 16372445Sassar * accept_sec_context.c (gss_accept_sec_context): use krb5_rd_cred2 16472445Sassar instead of krb5_rd_cred 16572445Sassar 16672445Sassar2000-12-11 Assar Westerlund <assar@sics.se> 16772445Sassar 16872445Sassar * Makefile.am (libgssapi_la_LDFLAGS): bump to 2:3:1 16972445Sassar 17072445Sassar2000-12-08 Assar Westerlund <assar@sics.se> 17172445Sassar 17272445Sassar * wrap.c (wrap_des3): use the checksum as ivec when encrypting the 17372445Sassar sequence number 17472445Sassar * unwrap.c (unwrap_des3): use the checksum as ivec when encrypting 17572445Sassar the sequence number 17672445Sassar * init_sec_context.c (init_auth): always zero fwd_data 17772445Sassar 17872445Sassar2000-12-06 Johan Danielsson <joda@pdc.kth.se> 17972445Sassar 18072445Sassar * accept_sec_context.c: de-pointerise auth_context parameter to 18172445Sassar krb5_mk_rep 18272445Sassar 18372445Sassar2000-11-15 Assar Westerlund <assar@sics.se> 18472445Sassar 18572445Sassar * init_sec_context.c (init_auth): update to new 18672445Sassar krb5_build_authenticator 18772445Sassar 18872445Sassar2000-09-19 Assar Westerlund <assar@sics.se> 18972445Sassar 19072445Sassar * Makefile.am (libgssapi_la_LDFLAGS): bump to 2:2:1 19172445Sassar 19272445Sassar2000-08-27 Assar Westerlund <assar@sics.se> 19372445Sassar 19472445Sassar * init_sec_context.c: actually pay attention to `time_req' 19572445Sassar * init_sec_context.c: re-organize. leak less memory. 19672445Sassar * gssapi_locl.h (gssapi_krb5_encapsulate, gss_krb5_getsomekey): 19772445Sassar update prototypes add assert.h 19872445Sassar * gssapi.h (GSS_KRB5_CONF_C_QOP_DES, GSS_KRB5_CONF_C_QOP_DES3_KD): 19972445Sassar add 20072445Sassar * verify_mic.c: re-organize and add 3DES code 20172445Sassar * wrap.c: re-organize and add 3DES code 20272445Sassar * unwrap.c: re-organize and add 3DES code 20372445Sassar * get_mic.c: re-organize and add 3DES code 20472445Sassar * encapsulate.c (gssapi_krb5_encapsulate): do not free `in_data', 20572445Sassar let the caller do that. fix the callers. 20672445Sassar 20772445Sassar2000-08-16 Assar Westerlund <assar@sics.se> 20872445Sassar 20972445Sassar * Makefile.am: bump version to 2:1:1 21072445Sassar 21172445Sassar2000-07-29 Assar Westerlund <assar@sics.se> 21272445Sassar 21372445Sassar * decapsulate.c (gssapi_krb5_verify_header): sanity-check length 21472445Sassar 21572445Sassar2000-07-25 Johan Danielsson <joda@pdc.kth.se> 21672445Sassar 21772445Sassar * Makefile.am: bump version to 2:0:1 21872445Sassar 21972445Sassar2000-07-22 Assar Westerlund <assar@sics.se> 22072445Sassar 22172445Sassar * gssapi.h: update OID for GSS_C_NT_HOSTBASED_SERVICE and other 22272445Sassar details from rfc2744 22372445Sassar 22472445Sassar2000-06-29 Assar Westerlund <assar@sics.se> 22572445Sassar 22672445Sassar * address_to_krb5addr.c (gss_address_to_krb5addr): actually use 22772445Sassar `int' instead of `sa_family_t' for the address family. 22872445Sassar 22972445Sassar2000-06-21 Assar Westerlund <assar@sics.se> 23072445Sassar 23172445Sassar * add support for token delegation. From Daniel Kouril 23272445Sassar <kouril@ics.muni.cz> and Miroslav Ruda <ruda@ics.muni.cz> 23372445Sassar 23472445Sassar2000-05-15 Assar Westerlund <assar@sics.se> 23572445Sassar 23672445Sassar * Makefile.am (libgssapi_la_LDFLAGS): set version to 1:1:1 23772445Sassar 23872445Sassar2000-04-12 Assar Westerlund <assar@sics.se> 23972445Sassar 24072445Sassar * release_oid_set.c (gss_release_oid_set): clear set for 24172445Sassar robustness. From GOMBAS Gabor <gombasg@inf.elte.hu> 24272445Sassar * release_name.c (gss_release_name): reset input_name for 24372445Sassar robustness. From GOMBAS Gabor <gombasg@inf.elte.hu> 24472445Sassar * release_buffer.c (gss_release_buffer): set value to NULL to be 24572445Sassar more robust. From GOMBAS Gabor <gombasg@inf.elte.hu> 24672445Sassar * add_oid_set_member.c (gss_add_oid_set_member): actually check if 24772445Sassar the oid is a member first. leave the oid_set unchanged if realloc 24872445Sassar fails. 24972445Sassar 25057419Smarkm2000-02-13 Assar Westerlund <assar@sics.se> 25157419Smarkm 25257419Smarkm * Makefile.am: set version to 1:0:1 25357419Smarkm 25457419Smarkm2000-02-12 Assar Westerlund <assar@sics.se> 25557419Smarkm 25657419Smarkm * gssapi_locl.h: add flags for import/export 25757419Smarkm * import_sec_context.c (import_sec_context: add flags for what 25857419Smarkm fields are included. do not include the authenticator for now. 25957419Smarkm * export_sec_context.c (export_sec_context: add flags for what 26057419Smarkm fields are included. do not include the authenticator for now. 26157419Smarkm * accept_sec_context.c (gss_accept_sec_context): set target in 26257419Smarkm context_handle 26357419Smarkm 26457419Smarkm2000-02-11 Assar Westerlund <assar@sics.se> 26557419Smarkm 26657419Smarkm * delete_sec_context.c (gss_delete_sec_context): set context to 26757419Smarkm GSS_C_NO_CONTEXT 26857419Smarkm 26957419Smarkm * Makefile.am: add {export,import}_sec_context.c 27057419Smarkm * export_sec_context.c: new file 27157419Smarkm * import_sec_context.c: new file 27257419Smarkm * accept_sec_context.c (gss_accept_sec_context): set trans flag 27357419Smarkm 27457416Smarkm2000-02-07 Assar Westerlund <assar@sics.se> 27557416Smarkm 27657416Smarkm * Makefile.am: set version to 0:5:0 27757416Smarkm 27857416Smarkm2000-01-26 Assar Westerlund <assar@sics.se> 27957416Smarkm 28057416Smarkm * delete_sec_context.c (gss_delete_sec_context): handle a NULL 28157416Smarkm output_token 28257416Smarkm 28357416Smarkm * wrap.c: update to pseudo-standard APIs for md4,md5,sha. some 28457416Smarkm changes to libdes calls to make them more portable. 28557416Smarkm * verify_mic.c: update to pseudo-standard APIs for md4,md5,sha. 28657416Smarkm some changes to libdes calls to make them more portable. 28757416Smarkm * unwrap.c: update to pseudo-standard APIs for md4,md5,sha. some 28857416Smarkm changes to libdes calls to make them more portable. 28957416Smarkm * get_mic.c: update to pseudo-standard APIs for md4,md5,sha. some 29057416Smarkm changes to libdes calls to make them more portable. 29157416Smarkm * 8003.c: update to pseudo-standard APIs for md4,md5,sha. 29257416Smarkm 29355682Smarkm2000-01-06 Assar Westerlund <assar@sics.se> 29455682Smarkm 29555682Smarkm * Makefile.am: set version to 0:4:0 29655682Smarkm 29755682Smarkm1999-12-26 Assar Westerlund <assar@sics.se> 29855682Smarkm 29955682Smarkm * accept_sec_context.c (gss_accept_sec_context): always set 30055682Smarkm `output_token' 30155682Smarkm * init_sec_context.c (init_auth): always initialize `output_token' 30255682Smarkm * delete_sec_context.c (gss_delete_sec_context): always set 30355682Smarkm `output_token' 30455682Smarkm 30555682Smarkm1999-12-06 Assar Westerlund <assar@sics.se> 30655682Smarkm 30755682Smarkm * Makefile.am: bump version to 0:3:0 30855682Smarkm 30955682Smarkm1999-10-20 Assar Westerlund <assar@sics.se> 31055682Smarkm 31155682Smarkm * Makefile.am: set version to 0:2:0 31255682Smarkm 31355682Smarkm1999-09-21 Assar Westerlund <assar@sics.se> 31455682Smarkm 31555682Smarkm * init_sec_context.c (gss_init_sec_context): initialize `ticket' 31655682Smarkm 31755682Smarkm * gssapi.h (gss_ctx_id_t_desc): add ticket in here. ick. 31855682Smarkm 31955682Smarkm * delete_sec_context.c (gss_delete_sec_context): free ticket 32055682Smarkm 32155682Smarkm * accept_sec_context.c (gss_accept_sec_context): stove away 32255682Smarkm `krb5_ticket' in context so that ugly programs such as 32355682Smarkm gss_nt_server can get at it. uck. 32455682Smarkm 32555682Smarkm1999-09-20 Johan Danielsson <joda@pdc.kth.se> 32655682Smarkm 32755682Smarkm * accept_sec_context.c: set minor_status 32855682Smarkm 32955682Smarkm1999-08-04 Assar Westerlund <assar@sics.se> 33055682Smarkm 33155682Smarkm * display_status.c (calling_error, routine_error): right shift the 33255682Smarkm code to make it possible to index into the arrays 33355682Smarkm 33455682Smarkm1999-07-28 Assar Westerlund <assar@sics.se> 33555682Smarkm 33655682Smarkm * gssapi.h (GSS_C_AF_INET6): add 33755682Smarkm 33855682Smarkm * import_name.c (import_hostbased_name): set minor_status 33955682Smarkm 34055682Smarkm1999-07-26 Assar Westerlund <assar@sics.se> 34155682Smarkm 34255682Smarkm * Makefile.am: set version to 0:1:0 34355682Smarkm 34455682SmarkmWed Apr 7 14:05:15 1999 Johan Danielsson <joda@hella.pdc.kth.se> 34555682Smarkm 34655682Smarkm * display_status.c: set minor_status 34755682Smarkm 34855682Smarkm * init_sec_context.c: set minor_status 34955682Smarkm 35055682Smarkm * lib/gssapi/init.c: remove donep (check gssapi_krb5_context 35155682Smarkm directly) 35255682Smarkm 353