]> git.ipfire.org Git - thirdparty/krb5.git/commit
Modernize pkinit_get_certs_pkcs11
authorRobbie Harwood <rharwood@redhat.com>
Sat, 29 May 2021 18:54:56 +0000 (14:54 -0400)
committerGreg Hudson <ghudson@mit.edu>
Thu, 1 Jul 2021 15:40:35 +0000 (11:40 -0400)
commitcddd5c589b1a13561e75c647cd51067c16a5697d
tree9d6b80cb70aa5b3e1d6ce05ca57565e67560d666
parent8c88defb16b34937d5b72b4832c854ce2dbe32d1
Modernize pkinit_get_certs_pkcs11

Remove unusable PKINIT_USE_MECH_LIST code since there's no build
system support and it would leak mechp.  Factor out the code to load a
cert from the card.  Avoid mixing PKCS11 and krb5 error codes.  Fix
leaks of cert and cert_id reported by Coverity.
src/plugins/preauth/pkinit/pkinit_crypto_openssl.c