Commit Graph

459 Commits

Author SHA1 Message Date
Nalin Dahyabhai
cbdf0e37a6 - throw in a not-applied-by-default patch to try to make pkinit debugging into a run-time boolean option named "pkinit_debug" 2011-02-17 11:31:49 -05:00
Nalin Dahyabhai
b77e5a0e35 turn on NSS as the backend for libk5crypto, adding nss-devel as a build dependency when that switch is flipped 2011-02-16 19:05:39 -05:00
Nalin Dahyabhai
08f510b379 - krb5kdc init script: prototype some changes to do a quick spot-check
of the TGS and kadmind keys and warn if there aren't any non-weak keys
  on file for them (to flush out parts of #651466)
2011-02-09 15:25:17 -05:00
Nalin Dahyabhai
62cb58fe6f reference the raw hide bug ID for CVE-2011-0283 in the changelog 2011-02-08 16:38:16 -05:00
Nalin Dahyabhai
be633bbbb2 - add upstream patches to fix standalone kpropd exiting if the per-client
child process exits with an error (MITKRB5-SA-2011-001), a hang or crash
  in the KDC when using the LDAP kdb backend, and an uninitialized pointer
  use in the KDC (MITKRB5-SA-2011-002) (CVE-2010-4022, #664009,
  CVE-2011-0281, #668719, CVE-2011-0282, #668726, CVE-2011-0283, #670567)
2011-02-08 14:37:19 -05:00
Dennis Gilmore
4fe1ed04f8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild 2011-02-07 21:09:16 -06:00
Nalin Dahyabhai
9fed313d79 fix a compile error in the SELinux labeling patch when -DDEBUG is used (Sumit Bose) 2011-02-07 11:24:03 -05:00
Nalin Dahyabhai
293e1a6e51 - properly advertise that the kpropd init script now supports force-reload (Zbysek Mraz #630587) 2011-02-01 10:38:05 -05:00
Nalin Dahyabhai
3442cb8a33 - pkinit: when verifying signed data, use the CMS APIs for better interoperability (#636985, RT#6851) 2011-01-26 13:59:56 -05:00
Nalin Dahyabhai
8c3bae0303 update to 1.9 final 2010-12-22 17:22:08 -05:00
Nalin Dahyabhai
09a9ac8a63 - fix link flags and permissions on shared libraries (ausil) 2010-12-20 15:20:01 -05:00
Nalin Dahyabhai
0207b5b4fc - fix link flags and permissions on shared libraries (ausil) 2010-12-20 15:19:23 -05:00
Nalin Dahyabhai
ce5e3836b2 - update to 1.9 beta 3 2010-12-16 14:43:53 -05:00
Nalin Dahyabhai
78ee0957ae - update to 1.9 beta 3 2010-12-16 14:43:36 -05:00
Nalin Dahyabhai
3ea0e361a2 Merge branch 'master-f15-1.9' of ssh://pkgs.fedoraproject.org/krb5 into master-f15-1.9
Conflicts:
	krb5.spec
	sources
2010-12-06 17:02:02 -05:00
Nalin Dahyabhai
695c21dd42 - update to beta 2 2010-12-06 16:55:35 -05:00
Nalin Dahyabhai
478f86fe1e add tweaks for initial whitespace that cause 389-ds to choke on the schema ldif 2010-12-06 16:55:34 -05:00
Nalin Dahyabhai
eb90866aa9 - drop not-needed-since-1.8 build dependency on rsh (ssorce) 2010-12-06 16:55:34 -05:00
Nalin Dahyabhai
b9f9657a15 - if WITH_NSS is set, built with --with-crypto-impl=nss (requires NSS 3.12.9) 2010-12-06 16:55:34 -05:00
Nalin Dahyabhai
678164812e - add 1.9-beta1 sources 2010-12-06 16:55:34 -05:00
Nalin Dahyabhai
3c41ea7400 - drop 1.8.3 sources 2010-12-06 16:55:34 -05:00
Nalin Dahyabhai
66b6f44b6c - initial jump to 1.9 beta 1 2010-12-06 16:55:33 -05:00
Nalin Dahyabhai
4ddc28e6c6 - fix included in 1.9 2010-12-06 16:54:18 -05:00
Nalin Dahyabhai
96c33d14c4 - fix included in 1.9 2010-12-06 16:54:17 -05:00
Nalin Dahyabhai
82a9da834d - fix included in 1.9 2010-12-06 16:54:17 -05:00
Nalin Dahyabhai
7655a00cac - fix included in 1.9 2010-12-06 16:54:17 -05:00
Nalin Dahyabhai
f3166d601b - fix included in 1.9 2010-12-06 16:54:17 -05:00
Nalin Dahyabhai
426053212c - update to apply to 1.9 2010-12-06 16:54:17 -05:00
Nalin Dahyabhai
256e37e476 - update to match current context in krb5.conf(5) 2010-12-06 16:54:16 -05:00
Nalin Dahyabhai
20bd607a02 - fix context for applying to krb5.conf(5) 2010-12-06 16:54:16 -05:00
Nalin Dahyabhai
5faba5957f - right, renamed the patch 2010-11-30 14:28:42 -05:00
Nalin Dahyabhai
ee3bb042af Merge branch 'master-f15-1.9' of ssh://pkgs.fedoraproject.org/krb5 into master-f15-1.9 2010-11-30 14:23:45 -05:00
Nalin Dahyabhai
483e8c5bce go with the final patch 2010-11-30 14:22:30 -05:00
Nalin Dahyabhai
786702d87a add upstream patch to fix various issues from MITKRB5-SA-2010-007 2010-11-30 12:00:23 -05:00
Nalin Dahyabhai
b5f2ca0389 add tweaks for initial whitespace that cause 389-ds to choke on the schema ldif 2010-11-30 11:46:12 -05:00
Nalin Dahyabhai
3515095a61 - drop not-needed-since-1.8 build dependency on rsh (ssorce) 2010-11-09 10:30:57 -05:00
Nalin Dahyabhai
eab0a264a6 - if WITH_NSS is set, built with --with-crypto-impl=nss (requires NSS 3.12.9) 2010-11-05 15:41:19 -04:00
Nalin Dahyabhai
d8eebf32f7 - add 1.9-beta1 sources 2010-11-05 15:21:49 -04:00
Nalin Dahyabhai
72245b6dbe - drop 1.8.3 sources 2010-11-05 15:19:30 -04:00
Nalin Dahyabhai
f5a4e92a95 - initial jump to 1.9 beta 1 2010-11-05 15:18:45 -04:00
Nalin Dahyabhai
eb1f8e54b9 - fix included in 1.9 2010-11-05 15:09:31 -04:00
Nalin Dahyabhai
a048f0f12e - fix included in 1.9 2010-11-05 15:09:04 -04:00
Nalin Dahyabhai
c4fcdebf25 - fix included in 1.9 2010-11-05 15:07:40 -04:00
Nalin Dahyabhai
01711b78ff - fix included in 1.9 2010-11-05 15:06:39 -04:00
Nalin Dahyabhai
7bf6313a47 - fix included in 1.9 2010-11-05 15:06:01 -04:00
Nalin Dahyabhai
e2734a2f40 - update to apply to 1.9 2010-11-05 15:03:55 -04:00
Nalin Dahyabhai
99e4741184 - update to match current context in krb5.conf(5) 2010-11-05 15:00:13 -04:00
Nalin Dahyabhai
cd6903bceb - fix context for applying to krb5.conf(5) 2010-11-05 14:59:48 -04:00
Nalin Dahyabhai
60f5ea8eaf - incorporate upstream patch to fix uninitialized pointer crash in the KDC's authorization data handling (CVE-2010-1322, #636335) 2010-10-05 15:29:32 -04:00
Nalin Dahyabhai
e84327e216 - pull down patches from trunk to implement k5login_authoritative and k5login_directory settings for krb5.conf (#539423) 2010-10-04 19:01:38 -04:00