drop backported patch for disabling replay caches
- drop backported fix for disabling use of a replay cache when verifying initial credentials
This commit is contained in:
		
							parent
							
								
									e4244fc907
								
							
						
					
					
						commit
						f1f0baeb82
					
				| @ -1,17 +0,0 @@ | |||||||
| Backport from ticket 7229. |  | ||||||
| --- krb5-1.10.2/src/lib/krb5/krb/vfy_increds.c
 |  | ||||||
| +++ krb5-1.10.2/src/lib/krb5/krb/vfy_increds.c
 |  | ||||||
| @@ -194,6 +194,13 @@ krb5_verify_init_creds(krb5_context cont
 |  | ||||||
|          authcon = NULL; |  | ||||||
|      } |  | ||||||
|   |  | ||||||
| +    /* Build an auth context that won't bother with replay checks -- it's
 |  | ||||||
| +     * not as if we're going to mount a replay attack on ourselves here. */
 |  | ||||||
| +    if (ret = krb5_auth_con_init(context, &authcon))
 |  | ||||||
| +        goto cleanup;
 |  | ||||||
| +    if (ret = krb5_auth_con_setflags(context, authcon, 0))
 |  | ||||||
| +        goto cleanup;
 |  | ||||||
| +
 |  | ||||||
|      /* verify the ap_req */ |  | ||||||
|   |  | ||||||
|      if ((ret = krb5_rd_req(context, &authcon, &ap_req, server, keytab, |  | ||||||
| @ -73,7 +73,6 @@ Patch86: krb5-1.9-debuginfo.patch | |||||||
| Patch105: krb5-kvno-230379.patch | Patch105: krb5-kvno-230379.patch | ||||||
| Patch106: krb5-1.10.2-keytab-etype.patch | Patch106: krb5-1.10.2-keytab-etype.patch | ||||||
| Patch107: krb5-trunk-pkinit-anchorsign.patch | Patch107: krb5-trunk-pkinit-anchorsign.patch | ||||||
| Patch108: krb5-1.10.2-replay.patch |  | ||||||
| Patch109: krb5-1.10.3-as_rep_skew.patch | Patch109: krb5-1.10.3-as_rep_skew.patch | ||||||
| Patch110: krb5-1.10.3-keytab-etype-corners-prep.patch | Patch110: krb5-1.10.3-keytab-etype-corners-prep.patch | ||||||
| Patch111: krb5-1.10.3-keytab-etype-corners.patch | Patch111: krb5-1.10.3-keytab-etype-corners.patch | ||||||
| @ -267,7 +266,6 @@ ln -s NOTICE LICENSE | |||||||
| %patch105 -p1 -b .kvno | %patch105 -p1 -b .kvno | ||||||
| %patch106 -p1 -b .keytab-etype | %patch106 -p1 -b .keytab-etype | ||||||
| %patch107 -p1 -b .pkinit-anchorsign | %patch107 -p1 -b .pkinit-anchorsign | ||||||
| %patch108 -p1 -b .replay |  | ||||||
| %patch109 -p1 -b .as_rep_skew | %patch109 -p1 -b .as_rep_skew | ||||||
| %patch110 -p1 -b .keytab-etype-corners-prep | %patch110 -p1 -b .keytab-etype-corners-prep | ||||||
| %patch111 -p1 -b .keytab-etype-corners | %patch111 -p1 -b .keytab-etype-corners | ||||||
| @ -830,6 +828,8 @@ exit 0 | |||||||
|   - the new docs system generates PDFs, so stop including them |   - the new docs system generates PDFs, so stop including them | ||||||
|   - drop backported patch to allow deltat.y to build with the usual |   - drop backported patch to allow deltat.y to build with the usual | ||||||
|     warning flags and the current gcc |     warning flags and the current gcc | ||||||
|  |   - drop backported fix for disabling use of a replay cache when verifying | ||||||
|  |     initial credentials | ||||||
| 
 | 
 | ||||||
| * Wed Oct 17 2012 Nalin Dahyabhai <nalin@redhat.com> 1.10.3-7 | * Wed Oct 17 2012 Nalin Dahyabhai <nalin@redhat.com> 1.10.3-7 | ||||||
| - tag a couple of other patches which we still need to be applied during | - tag a couple of other patches which we still need to be applied during | ||||||
|  | |||||||
		Loading…
	
		Reference in New Issue
	
	Block a user