Robbie Harwood
|
b9ea889e2a
|
Add runtime openssl version requirement too
|
2019-11-20 21:13:58 +00:00 |
|
Robbie Harwood
|
4b8056ef08
|
Fix kadmin addprinc -randkey -kvno
|
2019-11-20 14:16:04 -05:00 |
|
Robbie Harwood
|
1404656ded
|
Use OpenSSL's backported KDFs
Restore MD4 in FIPS mode (for samba)
|
2019-11-19 14:45:23 -05:00 |
|
Robbie Harwood
|
cbf35c8b1f
|
Add default_principal_flags to example kdc.conf
|
2019-11-08 20:45:40 +00:00 |
|
Robbie Harwood
|
9ce53b906d
|
Log unknown enctypes as unsupported in KDC
|
2019-10-02 11:19:07 -04:00 |
|
Robbie Harwood
|
1a6673d2ee
|
Fix KDC crash when logging PKINIT enctypes (CVE-2019-14844)
|
2019-09-25 13:15:11 -04:00 |
|
Robbie Harwood
|
bff738a25d
|
Static analyzer appeasement
|
2019-09-12 10:15:52 -04:00 |
|
Robbie Harwood
|
6ea5e5fa9a
|
Simplify krb5_dbe_def_search_enctype()
|
2019-08-27 11:24:25 -04:00 |
|
Robbie Harwood
|
2dabf02464
|
Update FIPS patches to remove SPAKE
|
2019-08-22 15:54:34 -04:00 |
|
Robbie Harwood
|
4906d9dae9
|
Support building in COPR now that %{copr_username} is gone
|
2019-08-16 12:24:27 -04:00 |
|
Robbie Harwood
|
cdaea01dc8
|
Fix KCM client time offset propagation
|
2019-08-15 16:32:06 -04:00 |
|
Robbie Harwood
|
6fb26c9d3d
|
Initialize life/rlife in kdcpolicy interface
|
2019-08-09 16:05:18 -04:00 |
|
Robbie Harwood
|
e73c24bb36
|
Fix memory leaks in soft-pkcs11 code
|
2019-08-06 09:46:36 -04:00 |
|
Robbie Harwood
|
f4c04f8cde
|
Add soft-pkcs11 and use it for testing
|
2019-07-30 08:56:06 -04:00 |
|
Fedora Release Engineering
|
52c0e4ab88
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
|
2019-07-25 12:06:52 +00:00 |
|
Robbie Harwood
|
7c5b49f828
|
Filter enctypes in gss_set_allowable_enctypes()
|
2019-07-18 12:49:23 -04:00 |
|
Robbie Harwood
|
4c8ed38666
|
Don't error on invalid enctypes in keytab
Resolves: #1724380
|
2019-07-15 13:07:54 -04:00 |
|
Robbie Harwood
|
a0277fd396
|
Remove now-unused checksum functions
|
2019-07-02 11:42:28 -04:00 |
|
Robbie Harwood
|
490a817464
|
Fix typo in 3des commit
|
2019-06-26 18:23:02 -04:00 |
|
Robbie Harwood
|
7bee5f19e1
|
Remove PKINIT draft9 support (compat with EOL, pre-2008 Windows)
|
2019-06-26 18:07:12 -04:00 |
|
Robbie Harwood
|
2843572c2f
|
Remove strerror() calls from k5_get_error()
|
2019-06-10 12:41:26 -04:00 |
|
Robbie Harwood
|
6d60b0827f
|
Remove 3des from kdc.conf example
|
2019-06-07 08:52:53 -04:00 |
|
Robbie Harwood
|
1cae0b7e96
|
Remove 3DES support
|
2019-06-03 17:33:31 -04:00 |
|
Robbie Harwood
|
19e2656c15
|
Remove 3des support
|
2019-06-03 17:25:49 -04:00 |
|
Robbie Harwood
|
48af99c1f7
|
Remove krb5int_c_combine_keys() and no-flags SAM-2 preauth
|
2019-05-30 13:32:37 -04:00 |
|
Robbie Harwood
|
3f80a77313
|
Remove support for single-DES and CRC
|
2019-05-28 15:22:45 -04:00 |
|
Robbie Harwood
|
f50ceacadf
|
Add missing newlines to deprecation warnings
Switch to upstream's ksu path patch
|
2019-05-22 10:59:16 -04:00 |
|
Robbie Harwood
|
79613952e3
|
Update default krb5kdc mkey manual-entry enctype
Also update account lockout patch to upstream version
|
2019-05-21 12:59:56 -04:00 |
|
Robbie Harwood
|
39ba823db6
|
Test & docs fixes in preparation for DES removal
|
2019-05-20 16:49:04 -04:00 |
|
Robbie Harwood
|
f91545040c
|
Drop krb5_realm_compare() etc. NULL check patches
|
2019-05-15 17:01:26 -04:00 |
|
Robbie Harwood
|
bebe7bd29f
|
Re-provide krb5-kdb-version in -devel as well (IPA wants it)
|
2019-05-15 15:16:18 +00:00 |
|
Robbie Harwood
|
aa55266a84
|
(Patch consolidation; hopefully no changes)
|
2019-05-14 12:34:12 -04:00 |
|
Robbie Harwood
|
4b3d9079ae
|
Remove checksum type profile variables
|
2019-05-14 11:07:43 -04:00 |
|
Robbie Harwood
|
0b0d802a54
|
Pull in 2019-05-02 static analysis updates
|
2019-05-10 13:50:56 -04:00 |
|
Robbie Harwood
|
d1b5e24f4c
|
Drop --with-pkinit-crypto-impl
|
2019-05-06 14:38:08 -04:00 |
|
Robbie Harwood
|
85664dde3d
|
Move krb5-kdb-version provide into krb5-server for freeipa
|
2019-05-03 18:36:31 +00:00 |
|
Robbie Harwood
|
4c5654d0fb
|
Use secure_getenv() where appropriate
|
2019-05-01 12:47:31 -04:00 |
|
Robbie Harwood
|
cdfd42332f
|
Get that squeaky rpmlint clean
|
2019-04-24 15:51:18 -04:00 |
|
Robbie Harwood
|
0555bc87c8
|
Add dns_canonicalize_hostname=fallback support
|
2019-04-24 11:45:11 -04:00 |
|
Robbie Harwood
|
9d9730eb07
|
Check more errors in OpenSSL crypto backend
|
2019-04-24 11:39:04 -04:00 |
|
Robbie Harwood
|
aa800df204
|
Fix potential close(-1) in cc_file.c
|
2019-04-22 13:09:23 -04:00 |
|
Robbie Harwood
|
707673a505
|
Remove ovsec_adm_export and confvalidator
|
2019-04-17 16:17:17 -04:00 |
|
Robbie Harwood
|
5ebfb70254
|
Fix config realm change logic in FILE remove_cred
|
2019-04-17 16:16:38 -04:00 |
|
Robbie Harwood
|
05efb47898
|
Remove Kerberos v4 support vestiges (including ktany support)
|
2019-04-11 16:44:09 -04:00 |
|
Robbie Harwood
|
7f7eba0cef
|
Implement krb5_cc_remove_cred for remaining types
Resolves: #1693836
|
2019-04-11 13:18:46 -04:00 |
|
Robbie Harwood
|
caa2dd1a26
|
FIPS-aware SPAKE group negotiation
|
2019-04-01 13:13:49 -04:00 |
|
Robbie Harwood
|
bf081fdccd
|
Fix memory leak in 'none' replay cache type
Silence a coverity warning while we're here.
|
2019-02-25 15:24:36 -05:00 |
|
Robbie Harwood
|
ae3b432439
|
Update FIPS blocking for RC4
|
2019-02-01 16:11:20 -05:00 |
|
Fedora Release Engineering
|
f417500667
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
|
2019-02-01 06:00:21 +00:00 |
|
Igor Gnatenko
|
acad58ce13
|
Remove obsolete Group tag
References: https://fedoraproject.org/wiki/Changes/Remove_Group_Tag
|
2019-01-28 20:24:10 +01:00 |
|