1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
|
2002-09-03 Johan Danielsson <joda@pdc.kth.se>
* wrap.c (wrap_des3): use ETYPE_DES3_CBC_NONE
* unwrap.c (unwrap_des3): use ETYPE_DES3_CBC_NONE
2002-09-02 Johan Danielsson <joda@pdc.kth.se>
* init_sec_context.c: we need to generate a local subkey here
2002-08-20 Jacques Vidrine <n@nectar.com>
* acquire_cred.c, inquire_cred.c, release_cred.c: Use default
credential resolution if gss_acquire_cred is called with
GSS_C_NO_NAME.
2002-06-20 Jacques Vidrine <n@nectar.com>
* import_name.c: Compare name types by value if pointers do
not match. Reported by: "Douglas E. Engert" <deengert@anl.gov>
2002-05-20 Jacques Vidrine <n@nectar.com>
* verify_mic.c (gss_verify_mic), unwrap.c (gss_unwrap): initialize
the qop_state parameter. from Doug Rabson <dfr@nlsystems.com>
2002-05-09 Jacques Vidrine <n@nectar.com>
* acquire_cred.c: handle GSS_C_INITIATE/GSS_C_ACCEPT/GSS_C_BOTH
2002-05-08 Jacques Vidrine <n@nectar.com>
* acquire_cred.c: initialize gssapi; handle null desired_name
2002-03-22 Johan Danielsson <joda@pdc.kth.se>
* Makefile.am: remove non-functional stuff accidentally committed
2002-03-11 Assar Westerlund <assar@sics.se>
* Makefile.am (libgssapi_la_LDFLAGS): bump version to 3:5:2
* 8003.c (gssapi_krb5_verify_8003_checksum): handle zero channel
bindings
2001-10-31 Jacques Vidrine <n@nectar.com>
* get_mic.c (mic_des3): MIC computation using DES3/SHA1
was bogusly appending the message buffer to the result,
overwriting a heap buffer in the process.
2001-08-29 Assar Westerlund <assar@sics.se>
* 8003.c (gssapi_krb5_verify_8003_checksum,
gssapi_krb5_create_8003_checksum): make more consistent by always
returning an gssapi error and setting minor status. update
callers
2001-08-28 Jacques Vidrine <n@nectar.com>
* accept_sec_context.c: Create a cache for delegated credentials
when needed.
2001-08-28 Assar Westerlund <assar@sics.se>
* Makefile.am (libgssapi_la_LDFLAGS): set version to 3:4:2
2001-08-23 Assar Westerlund <assar@sics.se>
* *.c: handle minor_status more consistently
* display_status.c (gss_display_status): handle krb5_get_err_text
failing
2001-08-15 Johan Danielsson <joda@pdc.kth.se>
* gssapi_locl.h: fix prototype for gssapi_krb5_init
2001-08-13 Johan Danielsson <joda@pdc.kth.se>
* accept_sec_context.c (gsskrb5_register_acceptor_identity): init
context and check return value from kt_resolve
* init.c: return error code
2001-07-19 Assar Westerlund <assar@sics.se>
* Makefile.am (libgssapi_la_LDFLAGS): update to 3:3:2
2001-07-12 Assar Westerlund <assar@sics.se>
* Makefile.am (libgssapi_la_LIBADD): add required library
dependencies
2001-07-06 Assar Westerlund <assar@sics.se>
* accept_sec_context.c (gsskrb5_register_acceptor_identity): set
the keytab to be used for gss_acquire_cred too'
2001-07-03 Assar Westerlund <assar@sics.se>
* Makefile.am (libgssapi_la_LDFLAGS): set version to 3:2:2
2001-06-18 Assar Westerlund <assar@sics.se>
* wrap.c: replace gss_krb5_getsomekey with gss_krb5_get_localkey
and gss_krb5_get_remotekey
* verify_mic.c: update krb5_auth_con function names use
gss_krb5_get_remotekey
* unwrap.c: replace gss_krb5_getsomekey with gss_krb5_get_localkey
and gss_krb5_get_remotekey
* gssapi_locl.h (gss_krb5_get_remotekey, gss_krb5_get_localkey):
add prototypes
* get_mic.c: update krb5_auth_con function names. use
gss_krb5_get_localkey
* accept_sec_context.c: update krb5_auth_con function names
2001-05-17 Assar Westerlund <assar@sics.se>
* Makefile.am: bump version to 3:1:2
2001-05-14 Assar Westerlund <assar@sics.se>
* address_to_krb5addr.c: adapt to new address functions
2001-05-11 Assar Westerlund <assar@sics.se>
* try to return the error string from libkrb5 where applicable
2001-05-08 Assar Westerlund <assar@sics.se>
* delete_sec_context.c (gss_delete_sec_context): remember to free
the memory used by the ticket itself. from <tmartin@mirapoint.com>
2001-05-04 Assar Westerlund <assar@sics.se>
* gssapi_locl.h: add config.h for completeness
* gssapi.h: remove config.h, this is an installed header file
sys/types.h is not needed either
2001-03-12 Assar Westerlund <assar@sics.se>
* acquire_cred.c (gss_acquire_cred): remove memory leaks. from
Jason R Thorpe <thorpej@zembu.com>
2001-02-18 Assar Westerlund <assar@sics.se>
* accept_sec_context.c (gss_accept_sec_context): either return
gss_name NULL-ed or set
* import_name.c: set minor_status in some cases where it was not
done
2001-02-15 Assar Westerlund <assar@sics.se>
* wrap.c: use krb5_generate_random_block for the confounders
2001-01-30 Assar Westerlund <assar@sics.se>
* Makefile.am (libgssapi_la_LDFLAGS): bump version to 3:0:2
* acquire_cred.c, init_sec_context.c, release_cred.c: add support
for getting creds from a keytab, from fvdl@netbsd.org
* copy_ccache.c: add gss_krb5_copy_ccache
2001-01-27 Assar Westerlund <assar@sics.se>
* get_mic.c: cast parameters to des function to non-const pointers
to handle the case where these functions actually take non-const
des_cblock *
2001-01-09 Assar Westerlund <assar@sics.se>
* accept_sec_context.c (gss_accept_sec_context): use krb5_rd_cred2
instead of krb5_rd_cred
2000-12-11 Assar Westerlund <assar@sics.se>
* Makefile.am (libgssapi_la_LDFLAGS): bump to 2:3:1
2000-12-08 Assar Westerlund <assar@sics.se>
* wrap.c (wrap_des3): use the checksum as ivec when encrypting the
sequence number
* unwrap.c (unwrap_des3): use the checksum as ivec when encrypting
the sequence number
* init_sec_context.c (init_auth): always zero fwd_data
2000-12-06 Johan Danielsson <joda@pdc.kth.se>
* accept_sec_context.c: de-pointerise auth_context parameter to
krb5_mk_rep
2000-11-15 Assar Westerlund <assar@sics.se>
* init_sec_context.c (init_auth): update to new
krb5_build_authenticator
2000-09-19 Assar Westerlund <assar@sics.se>
* Makefile.am (libgssapi_la_LDFLAGS): bump to 2:2:1
2000-08-27 Assar Westerlund <assar@sics.se>
* init_sec_context.c: actually pay attention to `time_req'
* init_sec_context.c: re-organize. leak less memory.
* gssapi_locl.h (gssapi_krb5_encapsulate, gss_krb5_getsomekey):
update prototypes add assert.h
* gssapi.h (GSS_KRB5_CONF_C_QOP_DES, GSS_KRB5_CONF_C_QOP_DES3_KD):
add
* verify_mic.c: re-organize and add 3DES code
* wrap.c: re-organize and add 3DES code
* unwrap.c: re-organize and add 3DES code
* get_mic.c: re-organize and add 3DES code
* encapsulate.c (gssapi_krb5_encapsulate): do not free `in_data',
let the caller do that. fix the callers.
2000-08-16 Assar Westerlund <assar@sics.se>
* Makefile.am: bump version to 2:1:1
2000-07-29 Assar Westerlund <assar@sics.se>
* decapsulate.c (gssapi_krb5_verify_header): sanity-check length
2000-07-25 Johan Danielsson <joda@pdc.kth.se>
* Makefile.am: bump version to 2:0:1
2000-07-22 Assar Westerlund <assar@sics.se>
* gssapi.h: update OID for GSS_C_NT_HOSTBASED_SERVICE and other
details from rfc2744
2000-06-29 Assar Westerlund <assar@sics.se>
* address_to_krb5addr.c (gss_address_to_krb5addr): actually use
`int' instead of `sa_family_t' for the address family.
2000-06-21 Assar Westerlund <assar@sics.se>
* add support for token delegation. From Daniel Kouril
<kouril@ics.muni.cz> and Miroslav Ruda <ruda@ics.muni.cz>
2000-05-15 Assar Westerlund <assar@sics.se>
* Makefile.am (libgssapi_la_LDFLAGS): set version to 1:1:1
2000-04-12 Assar Westerlund <assar@sics.se>
* release_oid_set.c (gss_release_oid_set): clear set for
robustness. From GOMBAS Gabor <gombasg@inf.elte.hu>
* release_name.c (gss_release_name): reset input_name for
robustness. From GOMBAS Gabor <gombasg@inf.elte.hu>
* release_buffer.c (gss_release_buffer): set value to NULL to be
more robust. From GOMBAS Gabor <gombasg@inf.elte.hu>
* add_oid_set_member.c (gss_add_oid_set_member): actually check if
the oid is a member first. leave the oid_set unchanged if realloc
fails.
2000-02-13 Assar Westerlund <assar@sics.se>
* Makefile.am: set version to 1:0:1
2000-02-12 Assar Westerlund <assar@sics.se>
* gssapi_locl.h: add flags for import/export
* import_sec_context.c (import_sec_context: add flags for what
fields are included. do not include the authenticator for now.
* export_sec_context.c (export_sec_context: add flags for what
fields are included. do not include the authenticator for now.
* accept_sec_context.c (gss_accept_sec_context): set target in
context_handle
2000-02-11 Assar Westerlund <assar@sics.se>
* delete_sec_context.c (gss_delete_sec_context): set context to
GSS_C_NO_CONTEXT
* Makefile.am: add {export,import}_sec_context.c
* export_sec_context.c: new file
* import_sec_context.c: new file
* accept_sec_context.c (gss_accept_sec_context): set trans flag
2000-02-07 Assar Westerlund <assar@sics.se>
* Makefile.am: set version to 0:5:0
2000-01-26 Assar Westerlund <assar@sics.se>
* delete_sec_context.c (gss_delete_sec_context): handle a NULL
output_token
* wrap.c: update to pseudo-standard APIs for md4,md5,sha. some
changes to libdes calls to make them more portable.
* verify_mic.c: update to pseudo-standard APIs for md4,md5,sha.
some changes to libdes calls to make them more portable.
* unwrap.c: update to pseudo-standard APIs for md4,md5,sha. some
changes to libdes calls to make them more portable.
* get_mic.c: update to pseudo-standard APIs for md4,md5,sha. some
changes to libdes calls to make them more portable.
* 8003.c: update to pseudo-standard APIs for md4,md5,sha.
2000-01-06 Assar Westerlund <assar@sics.se>
* Makefile.am: set version to 0:4:0
1999-12-26 Assar Westerlund <assar@sics.se>
* accept_sec_context.c (gss_accept_sec_context): always set
`output_token'
* init_sec_context.c (init_auth): always initialize `output_token'
* delete_sec_context.c (gss_delete_sec_context): always set
`output_token'
1999-12-06 Assar Westerlund <assar@sics.se>
* Makefile.am: bump version to 0:3:0
1999-10-20 Assar Westerlund <assar@sics.se>
* Makefile.am: set version to 0:2:0
1999-09-21 Assar Westerlund <assar@sics.se>
* init_sec_context.c (gss_init_sec_context): initialize `ticket'
* gssapi.h (gss_ctx_id_t_desc): add ticket in here. ick.
* delete_sec_context.c (gss_delete_sec_context): free ticket
* accept_sec_context.c (gss_accept_sec_context): stove away
`krb5_ticket' in context so that ugly programs such as
gss_nt_server can get at it. uck.
1999-09-20 Johan Danielsson <joda@pdc.kth.se>
* accept_sec_context.c: set minor_status
1999-08-04 Assar Westerlund <assar@sics.se>
* display_status.c (calling_error, routine_error): right shift the
code to make it possible to index into the arrays
1999-07-28 Assar Westerlund <assar@sics.se>
* gssapi.h (GSS_C_AF_INET6): add
* import_name.c (import_hostbased_name): set minor_status
1999-07-26 Assar Westerlund <assar@sics.se>
* Makefile.am: set version to 0:1:0
Wed Apr 7 14:05:15 1999 Johan Danielsson <joda@hella.pdc.kth.se>
* display_status.c: set minor_status
* init_sec_context.c: set minor_status
* lib/gssapi/init.c: remove donep (check gssapi_krb5_context
directly)
|
