]> git.ipfire.org Git - thirdparty/krb5.git/commit
Use config storage for client identity selection
authorNalin Dahyabhai <nalin@redhat.com>
Tue, 24 Jul 2012 21:49:05 +0000 (17:49 -0400)
committerGreg Hudson <ghudson@mit.edu>
Wed, 17 Oct 2012 19:26:10 +0000 (15:26 -0400)
commit5349a2b129cd569d903fe698d2857881d3c05a43
tree2ffef20811920bd33aacfc137da56723b340c9c0
parentf6a42c26d14ca71eb942e2eca5e1c7b50715e250
Use config storage for client identity selection

* Keep track of the names of client identities when we load them.
* Store the client identity we just used when we create or retry a
  client request.
* If we read a client identity from the configuration, treat it like the
  KDC does: pick the "this is it, there is no other" logic branch.
src/plugins/preauth/pkinit/pkinit.h
src/plugins/preauth/pkinit/pkinit_clnt.c
src/plugins/preauth/pkinit/pkinit_crypto.h
src/plugins/preauth/pkinit/pkinit_crypto_nss.c
src/plugins/preauth/pkinit/pkinit_crypto_openssl.c
src/plugins/preauth/pkinit/pkinit_crypto_openssl.h
src/plugins/preauth/pkinit/pkinit_identity.c
src/plugins/preauth/pkinit/pkinit_srv.c