Robbie Harwood
|
6d60b0827f
|
Remove 3des from kdc.conf example
|
2019-06-07 08:52:53 -04:00 |
|
Robbie Harwood
|
1cae0b7e96
|
Remove 3DES support
|
2019-06-03 17:33:31 -04:00 |
|
Robbie Harwood
|
19e2656c15
|
Remove 3des support
|
2019-06-03 17:25:49 -04:00 |
|
Robbie Harwood
|
48af99c1f7
|
Remove krb5int_c_combine_keys() and no-flags SAM-2 preauth
|
2019-05-30 13:32:37 -04:00 |
|
Robbie Harwood
|
3f80a77313
|
Remove support for single-DES and CRC
|
2019-05-28 15:22:45 -04:00 |
|
Robbie Harwood
|
f50ceacadf
|
Add missing newlines to deprecation warnings
Switch to upstream's ksu path patch
|
2019-05-22 10:59:16 -04:00 |
|
Robbie Harwood
|
79613952e3
|
Update default krb5kdc mkey manual-entry enctype
Also update account lockout patch to upstream version
|
2019-05-21 12:59:56 -04:00 |
|
Robbie Harwood
|
39ba823db6
|
Test & docs fixes in preparation for DES removal
|
2019-05-20 16:49:04 -04:00 |
|
Robbie Harwood
|
f91545040c
|
Drop krb5_realm_compare() etc. NULL check patches
|
2019-05-15 17:01:26 -04:00 |
|
Robbie Harwood
|
bebe7bd29f
|
Re-provide krb5-kdb-version in -devel as well (IPA wants it)
|
2019-05-15 15:16:18 +00:00 |
|
Robbie Harwood
|
aa55266a84
|
(Patch consolidation; hopefully no changes)
|
2019-05-14 12:34:12 -04:00 |
|
Robbie Harwood
|
4b3d9079ae
|
Remove checksum type profile variables
|
2019-05-14 11:07:43 -04:00 |
|
Robbie Harwood
|
0b0d802a54
|
Pull in 2019-05-02 static analysis updates
|
2019-05-10 13:50:56 -04:00 |
|
Robbie Harwood
|
d1b5e24f4c
|
Drop --with-pkinit-crypto-impl
|
2019-05-06 14:38:08 -04:00 |
|
Robbie Harwood
|
85664dde3d
|
Move krb5-kdb-version provide into krb5-server for freeipa
|
2019-05-03 18:36:31 +00:00 |
|
Robbie Harwood
|
4c5654d0fb
|
Use secure_getenv() where appropriate
|
2019-05-01 12:47:31 -04:00 |
|
Robbie Harwood
|
cdfd42332f
|
Get that squeaky rpmlint clean
|
2019-04-24 15:51:18 -04:00 |
|
Robbie Harwood
|
0555bc87c8
|
Add dns_canonicalize_hostname=fallback support
|
2019-04-24 11:45:11 -04:00 |
|
Robbie Harwood
|
9d9730eb07
|
Check more errors in OpenSSL crypto backend
|
2019-04-24 11:39:04 -04:00 |
|
Robbie Harwood
|
aa800df204
|
Fix potential close(-1) in cc_file.c
|
2019-04-22 13:09:23 -04:00 |
|
Robbie Harwood
|
707673a505
|
Remove ovsec_adm_export and confvalidator
|
2019-04-17 16:17:17 -04:00 |
|
Robbie Harwood
|
5ebfb70254
|
Fix config realm change logic in FILE remove_cred
|
2019-04-17 16:16:38 -04:00 |
|
Robbie Harwood
|
05efb47898
|
Remove Kerberos v4 support vestiges (including ktany support)
|
2019-04-11 16:44:09 -04:00 |
|
Robbie Harwood
|
7f7eba0cef
|
Implement krb5_cc_remove_cred for remaining types
Resolves: #1693836
|
2019-04-11 13:18:46 -04:00 |
|
Robbie Harwood
|
caa2dd1a26
|
FIPS-aware SPAKE group negotiation
|
2019-04-01 13:13:49 -04:00 |
|
Robbie Harwood
|
bf081fdccd
|
Fix memory leak in 'none' replay cache type
Silence a coverity warning while we're here.
|
2019-02-25 15:24:36 -05:00 |
|
Robbie Harwood
|
ae3b432439
|
Update FIPS blocking for RC4
|
2019-02-01 16:11:20 -05:00 |
|
Fedora Release Engineering
|
f417500667
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
|
2019-02-01 06:00:21 +00:00 |
|
Igor Gnatenko
|
acad58ce13
|
Remove obsolete Group tag
References: https://fedoraproject.org/wiki/Changes/Remove_Group_Tag
|
2019-01-28 20:24:10 +01:00 |
|
Robbie Harwood
|
1458a863a4
|
enctype logging and explicit_bzero()
|
2019-01-17 13:44:00 -05:00 |
|
Robbie Harwood
|
658f28f754
|
New upstream version (1.17)
|
2019-01-08 19:15:01 +00:00 |
|
Robbie Harwood
|
7e29fac83e
|
Use openssl's PRNG in FIPS mode
|
2019-01-04 17:01:07 -05:00 |
|
Robbie Harwood
|
645562ea2f
|
Address some optimized-out memset() calls
|
2019-01-04 10:52:20 -05:00 |
|
Robbie Harwood
|
7338b669da
|
Remove incorrect KDC assertion
|
2018-12-20 18:00:42 -05:00 |
|
Robbie Harwood
|
6c692d18f2
|
Fix syntax on pkinit_anchors field in default krb5.conf
|
2018-12-20 21:46:31 +00:00 |
|
Robbie Harwood
|
8968aa45c7
|
Restore pdfs source file
Resolves: #1659716
|
2018-12-17 20:39:53 +00:00 |
|
Robbie Harwood
|
56c48beaec
|
Forgot to bump prerelease...
|
2018-12-06 18:35:50 +00:00 |
|
Robbie Harwood
|
59f64bf750
|
New upstream release (1.17-beta2)
Drop pdfs source file
|
2018-12-06 18:31:06 +00:00 |
|
Robbie Harwood
|
fef40744ec
|
Add tests for KCM ccache type
|
2018-11-29 14:58:18 -05:00 |
|
Robbie Harwood
|
83e3cdfc7d
|
Gain FIPS awareness
|
2018-11-12 20:39:38 +00:00 |
|
Robbie Harwood
|
d401b30b5f
|
Fix spurious errors from kcmio_unix_socket_write
Resolves: #1645912
|
2018-11-08 11:22:27 -05:00 |
|
Robbie Harwood
|
f745542b78
|
New upstream beta release (1.17-beta1)
|
2018-11-01 20:07:33 +00:00 |
|
Robbie Harwood
|
5f59f89111
|
Package kerberos(7)
|
2018-10-24 15:36:36 -04:00 |
|
Robbie Harwood
|
3ce8c381c3
|
Update man pages to reference kerberos(7)
Resolves: #1143767
|
2018-10-24 15:07:14 -04:00 |
|
Robbie Harwood
|
d760ebeab2
|
Use port-sockets.h macros in cc_kcm, sendto_kdc
Resolves: #1631998
|
2018-10-17 15:27:45 -04:00 |
|
Robbie Harwood
|
c0ac611ad3
|
Correct kpasswd_server description in krb5.conf(5)
Resolves: #1640272
|
2018-10-17 13:49:20 -04:00 |
|
Robbie Harwood
|
0eeac3abaf
|
Prefer TCP to UDP for password changes
Resolves: #1637611
|
2018-10-15 13:26:07 -04:00 |
|
Adam Williamson
|
4a2dfb104c
|
Revert the patch from -20 as it seems to make FreeIPA worse
|
2018-10-09 13:57:21 -07:00 |
|
Robbie Harwood
|
af8b6635d6
|
Fix bugs with concurrent use of MEMORY ccaches
|
2018-10-02 13:36:43 -04:00 |
|
Robbie Harwood
|
ef8eae7c7b
|
In FIPS mode, add plaintext fallback for RC4 usages and taint
|
2018-08-01 15:11:35 -04:00 |
|