Content-Type: text/plain Content-Disposition: inline Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.427 (Entity 5.427) From: ghudson@mit.edu Subject: git commit X-RT-Original-Encoding: iso-8859-1 Content-Length: 874 Remove incomplete PKINIT OCSP support pkinit_kdc_ocsp is non-functional in the PKINIT OpenSSL crypto implementation, so remove most traces of it, including its man page entry. If it is present in kdc.conf, error out of PKINIT initialization instead of silently ignoring the realm entirely. https://github.com/krb5/krb5/commit/3ff426b9048a8024e5c175256c63cd0ad0572320 Author: Robbie Harwood Committer: Greg Hudson Commit: 3ff426b9048a8024e5c175256c63cd0ad0572320 Branch: master doc/admin/conf_files/kdc_conf.rst | 3 --- src/man/kdc.conf.man | 3 --- src/plugins/preauth/pkinit/pkinit.h | 2 +- src/plugins/preauth/pkinit/pkinit_identity.c | 11 ----------- src/plugins/preauth/pkinit/pkinit_srv.c | 12 ++++++++++-- 5 files changed, 11 insertions(+), 20 deletions(-)