]> git.ipfire.org Git - thirdparty/krb5.git/commit
Use better name type for PKINIT KDC certs 898/head
authorGreg Hudson <ghudson@mit.edu>
Mon, 18 Feb 2019 00:51:35 +0000 (19:51 -0500)
committerGreg Hudson <ghudson@mit.edu>
Mon, 25 Feb 2019 16:25:39 +0000 (11:25 -0500)
commit3a67736bb9b7873d26a44a7d32b98a2da98d2db6
tree3472e7b0beeb2910b08a4d0368f939cc7fd3c69a
parent44b601ec43f34a6ed5bf9a737328d2ee4c438f12
Use better name type for PKINIT KDC certs

RFC 4120 recommends NT-SRV-INST for krbtgt principals; use it in
PKINIT KDC certificates rather than NT-PRINCIPAL.  Regenerate test
certificates.  Reported by Rick van Rein.

ticket: 8784 (new)
17 files changed:
doc/admin/pkinit.rst
src/tests/dejagnu/pkinit-certs/ca.pem
src/tests/dejagnu/pkinit-certs/generic.p12
src/tests/dejagnu/pkinit-certs/generic.pem
src/tests/dejagnu/pkinit-certs/kdc.pem
src/tests/dejagnu/pkinit-certs/make-certs.sh
src/tests/dejagnu/pkinit-certs/privkey-enc.pem
src/tests/dejagnu/pkinit-certs/privkey.pem
src/tests/dejagnu/pkinit-certs/user-enc.p12
src/tests/dejagnu/pkinit-certs/user-upn.p12
src/tests/dejagnu/pkinit-certs/user-upn.pem
src/tests/dejagnu/pkinit-certs/user-upn2.p12
src/tests/dejagnu/pkinit-certs/user-upn2.pem
src/tests/dejagnu/pkinit-certs/user-upn3.p12
src/tests/dejagnu/pkinit-certs/user-upn3.pem
src/tests/dejagnu/pkinit-certs/user.p12
src/tests/dejagnu/pkinit-certs/user.pem