]> git.ipfire.org Git - thirdparty/krb5.git/commit
Add support to query the SSF of a GSS context 625/head
authorSimo Sorce <simo@redhat.com>
Thu, 30 Mar 2017 15:27:09 +0000 (11:27 -0400)
committerGreg Hudson <ghudson@mit.edu>
Mon, 10 Apr 2017 15:32:51 +0000 (11:32 -0400)
commit7feb7da54c0321b5a3eeb6c3797846a3cf7eda28
tree7e55bf2b2fa50f3616452f3cededd32c8a99cad1
parentc6a9fe0e7035f2f7ec98e696e549349601f05941
Add support to query the SSF of a GSS context

Cyrus SASL provides a Security Strength Factor number to assess the
relative "strength" of the negotiated mechanism, and applications
sometimes make access control decisions based on it.

Add a call that allows us to query the mechanism that established the
GSS security context to ask what is the current SSF, based on the
enctype of the session key.

ticket: 8569 (new)
14 files changed:
src/include/k5-int.h
src/lib/crypto/krb/crypto_int.h
src/lib/crypto/krb/enctype_util.c
src/lib/crypto/krb/etypes.c
src/lib/crypto/libk5crypto.exports
src/lib/gssapi/generic/gssapi_ext.h
src/lib/gssapi/generic/gssapi_generic.c
src/lib/gssapi/krb5/gssapiP_krb5.h
src/lib/gssapi/krb5/gssapi_krb5.c
src/lib/gssapi/krb5/inq_context.c
src/lib/gssapi/libgssapi_krb5.exports
src/lib/gssapi32.def
src/lib/krb5_32.def
src/tests/gssapi/t_enctypes.c