Add support for PKINIT deferring identity prompts Learn to manage a list of deferred identities, for which we want to prompt for passwords or PINs, in pkinit_identity_crypto_context structures, along with their associated token flags. These are opaque outside of pkinit_crypto_openssl and pkinit_crypto_nss, so both implementations need to provide wrapper functions that can be called from elsewhere in the module to populate and query the lists. https://github.com/krb5/krb5/commit/805cd6078b5970750b979bd97b4b9f6147e1fd0d Author: Nalin Dahyabhai Committer: Greg Hudson Commit: 805cd6078b5970750b979bd97b4b9f6147e1fd0d Branch: master src/plugins/preauth/pkinit/pkinit.h | 21 ++++ src/plugins/preauth/pkinit/pkinit_crypto.h | 11 ++ src/plugins/preauth/pkinit/pkinit_crypto_nss.c | 40 +++++++ src/plugins/preauth/pkinit/pkinit_crypto_openssl.c | 38 +++++++ src/plugins/preauth/pkinit/pkinit_crypto_openssl.h | 2 + src/plugins/preauth/pkinit/pkinit_identity.c | 114 ++++++++++++++++++++ 6 files changed, 226 insertions(+), 0 deletions(-)