]> git.ipfire.org Git - thirdparty/krb5.git/commit
Check names in the server's cert when using KKDCP
authorNalin Dahyabhai <nalin@dahyabhai.net>
Thu, 17 Apr 2014 21:19:03 +0000 (17:19 -0400)
committerGreg Hudson <ghudson@mit.edu>
Mon, 2 Jun 2014 22:38:54 +0000 (18:38 -0400)
commitf7825e81b1ebf533c1dba9f84ae9ad36073a89cf
treefa7b9e2995e1923fac2b7788fbcc1d989fd761be
parentf220067c2969aab107bd1300ad1cb8d4855389a7
Check names in the server's cert when using KKDCP

When we connect to a KDC using an HTTPS proxy, check that the naming
information in the certificate matches the name or address which we
extracted from the server URL in the configuration.

ticket: 7929
src/include/k5-trace.h
src/lib/krb5/os/Makefile.in
src/lib/krb5/os/checkhost.c [new file with mode: 0644]
src/lib/krb5/os/checkhost.h [new file with mode: 0644]
src/lib/krb5/os/deps
src/lib/krb5/os/sendto_kdc.c