Commit Graph

  • 1cae0b7e96 Remove 3DES support Robbie Harwood 2019-06-03 17:33:31 -0400
  • 19e2656c15 Remove 3des support Robbie Harwood 2019-06-03 17:25:49 -0400
  • 48af99c1f7 Remove krb5int_c_combine_keys() and no-flags SAM-2 preauth Robbie Harwood 2019-05-30 13:32:37 -0400
  • 3f80a77313 Remove support for single-DES and CRC Robbie Harwood 2019-05-28 15:22:45 -0400
  • f50ceacadf Add missing newlines to deprecation warnings Robbie Harwood 2019-05-22 10:59:16 -0400
  • 79613952e3 Update default krb5kdc mkey manual-entry enctype Robbie Harwood 2019-05-21 12:59:56 -0400
  • 39ba823db6 Test & docs fixes in preparation for DES removal Robbie Harwood 2019-05-20 16:49:04 -0400
  • f91545040c Drop krb5_realm_compare() etc. NULL check patches Robbie Harwood 2019-05-15 17:01:26 -0400
  • bebe7bd29f Re-provide krb5-kdb-version in -devel as well (IPA wants it) Robbie Harwood 2019-05-15 15:16:18 +0000
  • aa55266a84 (Patch consolidation; hopefully no changes) Robbie Harwood 2019-05-14 12:34:12 -0400
  • 4b3d9079ae Remove checksum type profile variables Robbie Harwood 2019-05-14 11:07:43 -0400
  • 0b0d802a54 Pull in 2019-05-02 static analysis updates Robbie Harwood 2019-05-10 13:50:56 -0400
  • d1b5e24f4c Drop --with-pkinit-crypto-impl Robbie Harwood 2019-05-06 14:38:08 -0400
  • 85664dde3d Move krb5-kdb-version provide into krb5-server for freeipa Robbie Harwood 2019-05-03 18:36:31 +0000
  • 4c5654d0fb Use secure_getenv() where appropriate Robbie Harwood 2019-05-01 12:47:31 -0400
  • cdfd42332f Get that squeaky rpmlint clean Robbie Harwood 2019-04-24 17:50:42 +0000
  • 0555bc87c8 Add dns_canonicalize_hostname=fallback support Robbie Harwood 2019-04-24 11:45:11 -0400
  • 9d9730eb07 Check more errors in OpenSSL crypto backend Robbie Harwood 2019-04-24 11:39:04 -0400
  • aa800df204 Fix potential close(-1) in cc_file.c Robbie Harwood 2019-04-22 13:09:23 -0400
  • 707673a505 Remove ovsec_adm_export and confvalidator Robbie Harwood 2019-04-17 16:17:17 -0400
  • 5ebfb70254 Fix config realm change logic in FILE remove_cred Robbie Harwood 2019-04-17 16:16:38 -0400
  • 05efb47898 Remove Kerberos v4 support vestiges (including ktany support) Robbie Harwood 2019-04-11 16:42:55 -0400
  • 7f7eba0cef Implement krb5_cc_remove_cred for remaining types Robbie Harwood 2019-04-11 13:18:46 -0400
  • caa2dd1a26 FIPS-aware SPAKE group negotiation Robbie Harwood 2019-04-01 13:13:49 -0400
  • bf081fdccd Fix memory leak in 'none' replay cache type Robbie Harwood 2019-02-25 15:24:36 -0500
  • ae3b432439 Update FIPS blocking for RC4 Robbie Harwood 2019-02-01 16:11:20 -0500
  • f417500667 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild Fedora Release Engineering 2019-02-01 06:00:21 +0000
  • acad58ce13 Remove obsolete Group tag Igor Gnatenko 2019-01-28 20:17:50 +0100
  • 1458a863a4 enctype logging and explicit_bzero() Robbie Harwood 2019-01-17 13:44:00 -0500
  • 658f28f754 New upstream version (1.17) Robbie Harwood 2019-01-08 19:15:01 +0000
  • 7e29fac83e Use openssl's PRNG in FIPS mode Robbie Harwood 2019-01-04 17:01:07 -0500
  • 645562ea2f Address some optimized-out memset() calls Robbie Harwood 2019-01-04 10:52:20 -0500
  • 7338b669da Remove incorrect KDC assertion Robbie Harwood 2018-12-20 18:00:42 -0500
  • 6c692d18f2 Fix syntax on pkinit_anchors field in default krb5.conf Robbie Harwood 2018-12-20 21:46:31 +0000
  • 8968aa45c7 Restore pdfs source file Resolves: #1659716 Robbie Harwood 2018-12-17 20:39:53 +0000
  • 56c48beaec Forgot to bump prerelease... Robbie Harwood 2018-12-06 18:35:50 +0000
  • 59f64bf750 New upstream release (1.17-beta2) Robbie Harwood 2018-12-06 12:59:15 -0500
  • fef40744ec Add tests for KCM ccache type Robbie Harwood 2018-11-29 14:58:18 -0500
  • 83e3cdfc7d Gain FIPS awareness Robbie Harwood 2018-11-12 15:38:14 -0500
  • d401b30b5f Fix spurious errors from kcmio_unix_socket_write Robbie Harwood 2018-11-08 11:22:27 -0500
  • f745542b78 New upstream beta release (1.17-beta1) Robbie Harwood 2018-11-01 15:55:31 -0400
  • 5f59f89111 Package kerberos(7) Robbie Harwood 2018-10-24 15:36:36 -0400
  • 3ce8c381c3 Update man pages to reference kerberos(7) Robbie Harwood 2018-10-24 15:07:14 -0400
  • d760ebeab2 Use port-sockets.h macros in cc_kcm, sendto_kdc Robbie Harwood 2018-10-17 15:27:45 -0400
  • c0ac611ad3 Correct kpasswd_server description in krb5.conf(5) Robbie Harwood 2018-10-17 13:49:20 -0400
  • 0eeac3abaf Prefer TCP to UDP for password changes Robbie Harwood 2018-10-15 13:26:07 -0400
  • 4a2dfb104c Revert the patch from -20 as it seems to make FreeIPA worse Adam Williamson 2018-10-09 13:57:21 -0700
  • af8b6635d6 Fix bugs with concurrent use of MEMORY ccaches Robbie Harwood 2018-10-02 13:36:43 -0400
  • ef8eae7c7b In FIPS mode, add plaintext fallback for RC4 usages and taint Robbie Harwood 2018-08-01 15:11:35 -0400
  • d21edd514c Fix k5test prompts for Python 3 Robbie Harwood 2018-07-26 14:23:13 -0400
  • 29b7ff3bb1 Remove outdated note in krb5kdc man page Robbie Harwood 2018-07-19 16:43:33 -0400
  • e506fad693 Make krb5kdc -p affect TCP ports Robbie Harwood 2018-07-19 16:43:21 -0400
  • e3ab2c3591 Eliminate preprocessor-disabled dead code Robbie Harwood 2018-07-19 16:43:06 -0400
  • b5615f9f2c Fix some broken tests for Python 3 Robbie Harwood 2018-07-18 17:25:00 -0400
  • c0f34c36f8 Zap copy of secret in RC4 string-to-key Robbie Harwood 2018-07-16 10:38:52 -0400
  • 6bb371b555 Convert Python tests to Python 3 Robbie Harwood 2018-07-12 13:08:20 -0400
  • 18245c6b0f Actually add the dependency this time Robbie Harwood 2018-07-11 12:56:14 -0400
  • 50f81aad57 Add build dependency on gcc Robbie Harwood 2018-07-11 16:49:24 +0000
  • 40a05d0347 Use SHA-256 instead of MD5 for audit ticket IDs Robbie Harwood 2018-07-10 17:34:02 -0400
  • 816afcf8e2 Remove needless use of %defattr Jason Tibbitts 2018-07-10 01:32:54 -0500
  • 2fc18e9142 Add BuildRequires on python2 so we can run tests at build-time Robbie Harwood 2018-07-06 15:27:21 +0000
  • 97d3fa66d0 Explicitly look for python2 in configure.in Robbie Harwood 2018-07-06 10:59:48 -0400
  • 32e71bc9e7 Updated tests for Fedora pipeline changes Bruno Goncalves 2018-06-15 14:24:33 +0200
  • ff388043f1 Add flag to disable encrypted timestamp on client Robbie Harwood 2018-06-14 17:45:09 -0400
  • d6ae33b85a Switch to python3-sphinx for docs Resolves: #1590928 Robbie Harwood 2018-06-14 16:56:44 +0000
  • 367b100b3b Make docs build python3-compatible Robbie Harwood 2018-06-14 10:49:23 -0400
  • 6dd406494d Update includedir processing to match upstream Robbie Harwood 2018-06-07 12:37:24 -0400
  • 6e3058a9c5 Log when non-root ksu authorization fails Robbie Harwood 2018-06-01 14:04:16 -0400
  • 9467290bc7 Remove "-nodes" option from make-certs scripts Robbie Harwood 2018-05-04 10:59:52 -0400
  • 88ba66fe53 New upstream release - 1.16.1 Robbie Harwood 2018-05-04 10:46:27 -0400
  • ab1e0477e9 Fix indentation in krb5.conf of default_ccache_name Robbie Harwood 2018-05-03 13:01:11 -0400
  • ace60f7773 Set error message on KCM get_princ failure Robbie Harwood 2018-04-30 12:08:36 -0400
  • c150a97555 Set error message on KCM get_princ failure Robbie Harwood 2018-04-30 12:08:15 -0400
  • 1dc2c64cf3 Fix KDC null dereference on large TGS replies Robbie Harwood 2018-04-24 11:19:31 -0400
  • 58b0bd97d4 Explicitly use openssl rather than builtin crypto Robbie Harwood 2018-04-23 17:11:51 +0000
  • a48c97c32b Merge duplicate subsections in profile library Robbie Harwood 2018-04-17 13:28:40 -0400
  • 492b9109aa Formatting changes (no code changes) Robbie Harwood 2018-04-17 17:27:54 +0000
  • 8ed07abedf Restrict pre-authentication fallback cases Robbie Harwood 2018-04-09 12:12:08 -0400
  • 9f52d3d29f Be more careful asking for AS key in SPAKE client Robbie Harwood 2018-04-03 15:05:13 -0400
  • 091dcbf794 Zap data when freeing krb5_spake_factor Robbie Harwood 2018-04-02 12:37:37 -0400
  • 09f9308fd8 Continue after KRB5_CC_END in KCM cache iteration Robbie Harwood 2018-03-29 10:43:22 -0400
  • 27ca1f2678 Fix SPAKE memory leak Robbie Harwood 2018-03-27 13:55:07 -0400
  • 99cea2e511 Fix gitignore problem with previous patchset Robbie Harwood 2018-03-27 11:13:24 -0400
  • 2c340efca2 Add SPAKE support Robbie Harwood 2018-03-27 11:02:50 -0400
  • 8b49b0644c Fix problem with ccache_name logic in previous build Robbie Harwood 2018-03-20 18:20:01 +0000
  • 6b1b652d4d Add pkinit_anchors default value to krb5.conf Robbie Harwood 2018-03-20 17:53:36 +0000
  • 2eafc4d8aa Include preauth names in trace output where possible Robbie Harwood 2018-03-20 11:20:09 -0400
  • a387becbf5 Add PKINIT KDC support for freshness token Robbie Harwood 2018-03-19 18:15:48 -0400
  • ed142b51b1 Exit with status 0 from kadmind Robbie Harwood 2018-03-14 14:44:04 -0400
  • 5f3f6ef19b Fix hex conversion of PKINIT certid strings Robbie Harwood 2018-03-13 17:45:47 -0400
  • 4b5cd8c1f8 Fix capaths "." values on client Robbie Harwood 2018-03-07 12:40:49 -0500
  • 03afcfa42c
    Remove %clean section Igor Gnatenko 2018-02-14 09:55:56 +0100
  • 307e1c3fab Remove BuildRoot definition Igor Gnatenko 2018-02-13 23:36:56 +0100
  • 392309c493 Fix flaws in LDAP DN checking Robbie Harwood 2018-02-13 11:09:41 -0500
  • c4848e3332 Fix a leak in the previous commit Robbie Harwood 2018-02-12 12:35:25 -0500
  • bfe3c598b5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild Fedora Release Engineering 2018-02-07 20:27:38 +0000
  • caf02999e0
    Switch to %ldconfig_scriptlets Igor Gnatenko 2018-02-03 17:31:01 +0100
  • 85d9f736b5 Process included directories in alphabetical order Robbie Harwood 2018-01-29 17:48:17 +0100
  • 30d56290b3 Fix network service dependencies Resolves: #1525230 Robbie Harwood 2017-12-12 21:45:17 +0000
  • e714c57927 Fix copr rule sop that the spec file builds Robbie Harwood 2017-12-06 18:10:36 +0000