Ticket History #5617: Add PKINIT support

# Wed Aug 01 18:09:23 2007 kwc@citi.umich.edu (Kevin Coffman) - Ticket created

From:	kwc@citi.umich.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 1.5KiB

Pull up PKINIT support onto the trunk.

Changes from the version in branch users/coffman/pkinit are:

- Update the preauth plugin interface version to avoid
conflict with any existing plugins.
- Add a pkcs11.h locally to the pkinit code rather than
depending on opensc being installed.

Commit By: coffman

Revision: 19745
Changed Files:
U trunk/doc/Makefile
U trunk/doc/admin.texinfo
U trunk/doc/copyright.texinfo
U trunk/src/Makefile.in
U trunk/src/clients/kinit/kinit.M
U trunk/src/clients/kinit/kinit.c
U trunk/src/configure.in
A trunk/src/include/k5-int-pkinit.h
U trunk/src/include/k5-int.h
U trunk/src/include/krb5/krb5.hin
U trunk/src/include/krb5/preauth_plugin.h
U trunk/src/kdc/do_as_req.c
U trunk/src/kdc/kdc_preauth.c
U trunk/src/lib/krb5/asn.1/asn1_k_decode.c
U trunk/src/lib/krb5/asn.1/asn1_k_decode.h
U trunk/src/lib/krb5/asn.1/asn1_k_encode.c
U trunk/src/lib/krb5/asn.1/asn1_k_encode.h
U trunk/src/lib/krb5/asn.1/krb5_decode.c
U trunk/src/lib/krb5/asn.1/krb5_encode.c
U trunk/src/lib/krb5/krb/preauth2.c
U trunk/src/lib/krb5/os/accessor.c
U trunk/src/plugins/preauth/cksum_body/cksum_body_main.c
A trunk/src/plugins/preauth/pkinit/
U trunk/src/plugins/preauth/pkinit/Makefile.in
A trunk/src/plugins/preauth/pkinit/pkcs11.h
U trunk/src/plugins/preauth/pkinit/pkinit.exports
U trunk/src/plugins/preauth/pkinit/pkinit.h
U trunk/src/plugins/preauth/pkinit/pkinit_clnt.c
U trunk/src/plugins/preauth/pkinit/pkinit_srv.c
U trunk/src/plugins/preauth/wpse/wpse_main.c

# Wed Aug 01 18:09:26 2007 kwc@citi.umich.edu (Kevin Coffman) - Requestor kwc@citi.umich.edu (Kevin Coffman) added

# Wed Aug 01 18:09:26 2007 kwc@citi.umich.edu (Kevin Coffman) - Status changed from 'new' to 'resolved'

# Wed Aug 01 18:09:27 2007 kwc@citi.umich.edu (Kevin Coffman) - Target_Version 1.6.3 added

# Thu Aug 02 22:36:38 2007 epeisach (Ezra Peisach) - Correspondence added

From:	epeisach@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 328B

Add internal prototype for krb5_preauth_supply_preauth_data(). Clean up
some shadow variable warnings, make depend...

Commit By: epeisach

Revision: 19746
Changed Files:
U trunk/src/lib/krb5/krb/Makefile.in
U trunk/src/lib/krb5/krb/gic_opt.c
U trunk/src/lib/krb5/krb/int-proto.h
U trunk/src/lib/krb5/krb/preauth2.c

# Sat Aug 04 04:37:18 2007 raeburn (Ken Raeburn) - Correspondence added

From:	raeburn@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 113B

Add missing @end quotation.
Commit By: raeburn

Revision: 19752
Changed Files:
U trunk/doc/copyright.texinfo

# Mon Aug 06 09:57:32 2007 kwc@citi.umich.edu (Kevin Coffman) - Correspondence added

From:	kwc@citi.umich.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 223B

Remove these files that were not intended to be moved onto the trunk.

Commit By: coffman

Revision: 19753
Changed Files:
D trunk/src/plugins/preauth/pkinit/README
D trunk/src/plugins/preauth/pkinit/README.developers

# Mon Aug 06 11:19:55 2007 jaltman (Jeffrey Altman) - Ticket #5626: - Ticket created

From:	jaltman@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 259B

The pkinit additions in revision 18973 left out a comma after the
last function in the list. This caused builds that did not define
DESIGNATED_INITIALIZERS to break.

Commit By: jaltman

Revision: 19755
Changed Files:
U trunk/src/lib/krb5/os/accessor.c

# Mon Aug 06 11:19:58 2007 jaltman (Jeffrey Altman) - Ticket #5626: - Requestor jaltman (Jeffrey Altman) added

# Mon Aug 06 11:19:58 2007 jaltman (Jeffrey Altman) - Ticket #5626: - Status changed from 'new' to 'resolved'

# Wed Aug 08 01:00:12 2007 raeburn (Ken Raeburn) - Correspondence added

From:	raeburn@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 164B

Only build pkinit plugin if a sufficiently recent version of OpenSSL is available.

Commit By: raeburn

Revision: 19758
Changed Files:
U trunk/src/configure.in

# Wed Aug 08 01:04:50 2007 jaltman (Jeffrey Altman) - Correspondence added

From:	jaltman@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 230B

In krb5_preauth_context ftable should be
struct krb5plugin_preauth_client_ftable_v1 *
instead of
struct krb5plugin_preauth_client_ftable_v0 *

Commit By: jaltman

Revision: 19759
Changed Files:
U trunk/src/include/k5-int.h

# Wed Aug 08 01:26:13 2007 raeburn (Ken Raeburn) - Ticket #5626: - Ticket 5626 MergedInto ticket 5617.

# Thu Aug 16 11:10:04 2007 raeburn (Ken Raeburn) - Correspondence added

From:	raeburn@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 130B

Only do fake-install in pkinit if building pkinit.
Commit By: raeburn

Revision: 19829
Changed Files:
U trunk/src/Makefile.in

# Sun Aug 26 08:30:30 2007 epeisach (Ezra Peisach) - Correspondence added

From:	epeisach@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 239B

Change use of choice_pa_pk_as_rep_UNKNOWN to
choice_pa_pk_as_rep_draft9_UNKNOWN to cleanup warning... Value of enum
same in both cases...

Commit By: epeisach

Revision: 19880
Changed Files:
U trunk/src/lib/krb5/asn.1/asn1_k_decode.c

# Mon Sep 17 23:36:20 2007 tlyu (Taylor Yu) - Correspondence added

From:	tlyu@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 2.8KiB

pull up r19745 from trunk, including manual configure.in merges

r19745@cathode-dark-space: coffman | 2007-08-01 18:09:13 -0400
ticket: new
subject: Add PKINIT support
Target_Version: 1.6.3

Pull up PKINIT support onto the trunk.

Changes from the version in branch users/coffman/pkinit are:

- Update the preauth plugin interface version to avoid
conflict with any existing plugins.
- Add a pkcs11.h locally to the pkinit code rather than
depending on opensc being installed.

Commit By: tlyu

Revision: 19938
Changed Files:
_U branches/krb5-1-6/
U branches/krb5-1-6/doc/Makefile
U branches/krb5-1-6/doc/admin.texinfo
U branches/krb5-1-6/doc/copyright.texinfo
U branches/krb5-1-6/src/Makefile.in
U branches/krb5-1-6/src/clients/kinit/kinit.M
U branches/krb5-1-6/src/clients/kinit/kinit.c
U branches/krb5-1-6/src/configure.in
A branches/krb5-1-6/src/include/k5-int-pkinit.h
U branches/krb5-1-6/src/include/k5-int.h
U branches/krb5-1-6/src/include/krb5/krb5.hin
U branches/krb5-1-6/src/include/krb5/preauth_plugin.h
U branches/krb5-1-6/src/kdc/do_as_req.c
U branches/krb5-1-6/src/kdc/kdc_preauth.c
U branches/krb5-1-6/src/lib/krb5/asn.1/asn1_k_decode.c
U branches/krb5-1-6/src/lib/krb5/asn.1/asn1_k_decode.h
U branches/krb5-1-6/src/lib/krb5/asn.1/asn1_k_encode.c
U branches/krb5-1-6/src/lib/krb5/asn.1/asn1_k_encode.h
U branches/krb5-1-6/src/lib/krb5/asn.1/krb5_decode.c
U branches/krb5-1-6/src/lib/krb5/asn.1/krb5_encode.c
U branches/krb5-1-6/src/lib/krb5/krb/preauth2.c
U branches/krb5-1-6/src/lib/krb5/os/accessor.c
U branches/krb5-1-6/src/plugins/preauth/cksum_body/cksum_body_main.c
A branches/krb5-1-6/src/plugins/preauth/pkinit/
A branches/krb5-1-6/src/plugins/preauth/pkinit/Makefile.in
A branches/krb5-1-6/src/plugins/preauth/pkinit/README
A branches/krb5-1-6/src/plugins/preauth/pkinit/README.developers
A branches/krb5-1-6/src/plugins/preauth/pkinit/configure.in
A branches/krb5-1-6/src/plugins/preauth/pkinit/pkcs11.h
A branches/krb5-1-6/src/plugins/preauth/pkinit/pkinit.exports
A branches/krb5-1-6/src/plugins/preauth/pkinit/pkinit.h
A branches/krb5-1-6/src/plugins/preauth/pkinit/pkinit_accessor.c
A branches/krb5-1-6/src/plugins/preauth/pkinit/pkinit_accessor.h
A branches/krb5-1-6/src/plugins/preauth/pkinit/pkinit_clnt.c
A branches/krb5-1-6/src/plugins/preauth/pkinit/pkinit_crypto.h
A branches/krb5-1-6/src/plugins/preauth/pkinit/pkinit_crypto_openssl.c
A branches/krb5-1-6/src/plugins/preauth/pkinit/pkinit_crypto_openssl.h
A branches/krb5-1-6/src/plugins/preauth/pkinit/pkinit_identity.c
A branches/krb5-1-6/src/plugins/preauth/pkinit/pkinit_lib.c
A branches/krb5-1-6/src/plugins/preauth/pkinit/pkinit_matching.c
A branches/krb5-1-6/src/plugins/preauth/pkinit/pkinit_profile.c
A branches/krb5-1-6/src/plugins/preauth/pkinit/pkinit_srv.c
U branches/krb5-1-6/src/plugins/preauth/wpse/wpse_main.c

# Mon Sep 17 23:36:55 2007 tlyu (Taylor Yu) - Correspondence added

From:	tlyu@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 535B

pull up r19746 from trunk, including manual merges

r19746@cathode-dark-space: epeisach | 2007-08-02 22:36:26 -0400
ticket: 5617

Add internal prototype for krb5_preauth_supply_preauth_data(). Clean up
some shadow variable warnings, make depend...

Commit By: tlyu

Revision: 19939
Changed Files:
_U branches/krb5-1-6/
U branches/krb5-1-6/src/lib/krb5/krb/Makefile.in
U branches/krb5-1-6/src/lib/krb5/krb/gic_opt.c
U branches/krb5-1-6/src/lib/krb5/krb/int-proto.h
U branches/krb5-1-6/src/lib/krb5/krb/preauth2.c

# Mon Sep 17 23:37:10 2007 tlyu (Taylor Yu) - Correspondence added

From:	tlyu@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 256B

pull up r19752 from trunk

r19752@cathode-dark-space: raeburn | 2007-08-04 04:37:13 -0400
ticket: 5617

Add missing @end quotation.

Commit By: tlyu

Revision: 19940
Changed Files:
_U branches/krb5-1-6/
U branches/krb5-1-6/doc/copyright.texinfo

# Mon Sep 17 23:37:24 2007 tlyu (Taylor Yu) - Correspondence added

From:	tlyu@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 393B

pull up r20272 from trunk

r20272@cathode-dark-space (orig r19753): coffman | 2007-08-06 09:57:26 -0400
ticket: 5617

Remove these files that were not intended to be moved onto the trunk.

Commit By: tlyu

Revision: 19941
Changed Files:
_U branches/krb5-1-6/
D branches/krb5-1-6/src/plugins/preauth/pkinit/README
D branches/krb5-1-6/src/plugins/preauth/pkinit/README.developers

# Mon Sep 17 23:37:38 2007 tlyu (Taylor Yu) - Correspondence added

From:	tlyu@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 429B

pull up r19755 from trunk

r19755@cathode-dark-space: jaltman | 2007-08-06 11:19:50 -0400
ticket: new
subject: missing comma

The pkinit additions in revision 18973 left out a comma after the
last function in the list. This caused builds that did not define
DESIGNATED_INITIALIZERS to break.

Commit By: tlyu

Revision: 19942
Changed Files:
_U branches/krb5-1-6/
U branches/krb5-1-6/src/lib/krb5/os/accessor.c

# Mon Sep 17 23:37:53 2007 tlyu (Taylor Yu) - Correspondence added

From:	tlyu@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 331B

pull up r19758 from trunk including manual merge

r19758@cathode-dark-space: raeburn | 2007-08-08 01:00:05 -0400
ticket: 5617

Only build pkinit plugin if a sufficiently recent version of OpenSSL is available.

Commit By: tlyu

Revision: 19943
Changed Files:
_U branches/krb5-1-6/
U branches/krb5-1-6/src/configure.in

# Mon Sep 17 23:38:08 2007 tlyu (Taylor Yu) - Correspondence added

From:	tlyu@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 378B

pull up r19759 from trunk

r19759@cathode-dark-space: jaltman | 2007-08-08 01:04:45 -0400
ticket: 5617

In krb5_preauth_context ftable should be
struct krb5plugin_preauth_client_ftable_v1 *
instead of
struct krb5plugin_preauth_client_ftable_v0 *

Commit By: tlyu

Revision: 19944
Changed Files:
_U branches/krb5-1-6/
U branches/krb5-1-6/src/include/k5-int.h

# Mon Sep 17 23:38:22 2007 tlyu (Taylor Yu) - Correspondence added

From:	tlyu@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 273B

pull up r19829 from trunk

r19829@cathode-dark-space: raeburn | 2007-08-16 11:09:58 -0400
ticket: 5617

Only do fake-install in pkinit if building pkinit.

Commit By: tlyu

Revision: 19945
Changed Files:
_U branches/krb5-1-6/
U branches/krb5-1-6/src/Makefile.in

# Mon Sep 17 23:38:35 2007 tlyu (Taylor Yu) - Version_Fixed 1.6.3 added

# Mon Sep 17 23:38:36 2007 tlyu (Taylor Yu) - Correspondence added

From:	tlyu@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 386B

pull up r19880 from trunk

r19880@cathode-dark-space: epeisach | 2007-08-26 08:30:24 -0400
ticket: 5617

Change use of choice_pa_pk_as_rep_UNKNOWN to
choice_pa_pk_as_rep_draft9_UNKNOWN to cleanup warning... Value of enum
same in both cases...

Commit By: tlyu

Revision: 19946
Changed Files:
_U branches/krb5-1-6/
U branches/krb5-1-6/src/lib/krb5/asn.1/asn1_k_decode.c

# Tue Sep 18 16:36:23 2007 tlyu (Taylor Yu) - Correspondence added

From:	tlyu@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 259B

Fix autoconf-related directory names to account for configure script
being in the local directory instead of at top level.

Commit By: tlyu

Revision: 19954
Changed Files:
_U branches/krb5-1-6/
U branches/krb5-1-6/src/plugins/preauth/pkinit/Makefile.in