]> git.ipfire.org Git - thirdparty/krb5.git/commit
Use OpenSSL SubjectPublicKeyInfo parsing in PKINIT 1227/head
authorGreg Hudson <ghudson@mit.edu>
Mon, 25 Oct 2021 05:51:59 +0000 (01:51 -0400)
committerGreg Hudson <ghudson@mit.edu>
Thu, 4 Nov 2021 15:27:33 +0000 (11:27 -0400)
commit4936bdc7b9ead67e28eae4cf268fd55d3e424ae4
tree19c48e2dc81d799c20bb24044bd26eefd484fd09
parent9a0575f84e988a23709429f7d4e626db833ab562
Use OpenSSL SubjectPublicKeyInfo parsing in PKINIT

Shift responsibility for encoding and decoding SubjectPublicKeyInfo
from libkrb5 to the PKINIT ASN.1 module.  OpenSSL 1.0 does not support
DHX (RFC 3279 section 3), so for that version use custom ASN.1
marshalling of the parameters and compose that into
SubjectPublicKeyInfo marshalling using X509_PUBKEY.
14 files changed:
src/include/k5-int-pkinit.h
src/lib/krb5/asn.1/asn1_k_encode.c
src/plugins/preauth/pkinit/pkinit.h
src/plugins/preauth/pkinit/pkinit_clnt.c
src/plugins/preauth/pkinit/pkinit_crypto.h
src/plugins/preauth/pkinit/pkinit_crypto_openssl.c
src/plugins/preauth/pkinit/pkinit_crypto_openssl.h
src/plugins/preauth/pkinit/pkinit_lib.c
src/plugins/preauth/pkinit/pkinit_srv.c
src/tests/asn.1/krb5_decode_test.c
src/tests/asn.1/ktest.c
src/tests/asn.1/ktest_equal.c
src/tests/asn.1/pkinit_encode.out
src/tests/asn.1/pkinit_trval.out