Ticket History #6393: Implement TGS authenticator subkey support

Implement support for use of a subkey in the TGS req. This is needed
by FAST TGS support. The interface to krb5_send_tgs changed in order
to gain a subkey output parameter. Since this is a private interface
it was renamed to krb5int_send_tgs and removed from the export list.

* send_tgs.c: generate a subkey and return to caller
* decode_kdc_rep.c: Use subkey keyusage
* gc_via_tkt.c: pass in subkey to decode_kdc_rep
* send_tgs.c: use subkey for encrypting authorization data

https://github.com/krb5/krb5/commit/e0c545139c54d6612687b0458b56ce34419a3a36
Commit By: hartmans
Revision: 21993
Changed Files:
U trunk/src/include/k5-int.h
U trunk/src/lib/krb5/krb/decode_kdc.c
U trunk/src/lib/krb5/krb/gc_via_tkt.c
U trunk/src/lib/krb5/krb/send_tgs.c
U trunk/src/lib/krb5/libkrb5.exports

send_tgs.c:
* Move generation of subkey into krb5int_send_tgs from construct_authenticator so that it is available for encrypting authorization data.

* Initialize rep->message_type and note that rep is touched on
unsuccessful calls (this has always been true).

* Do not set *subkey until successful return.
Thanks to Greg Hudson for pointing out these problems.

https://github.com/krb5/krb5/commit/27552066f38b01e491fb92be86fab69c554351ae
Commit By: hartmans
Revision: 22044
Changed Files:
U trunk/src/lib/krb5/krb/send_tgs.c

pull up 21993 from trunk

Subject: Implement TGS authenticator subkey usage
ticket: 6393
tags: enhancement

Implement support for use of a subkey in the TGS req. This is needed
by FAST TGS support. The interface to krb5_send_tgs changed in order
to gain a subkey output parameter. Since this is a private interface
it was renamed to krb5int_send_tgs and removed from the export list.

* send_tgs.c: generate a subkey and return to caller
* decode_kdc_rep.c: Use subkey keyusage
* gc_via_tkt.c: pass in subkey to decode_kdc_rep
* send_tgs.c: use subkey for encrypting authorization data

https://github.com/krb5/krb5/commit/ec71565b159deb9d265fd78e5826bd1e3522ea33
Commit By: tlyu
Revision: 22201
Changed Files:
U branches/krb5-1-7/src/include/k5-int.h
U branches/krb5-1-7/src/lib/krb5/krb/decode_kdc.c
U branches/krb5-1-7/src/lib/krb5/krb/gc_via_tkt.c
U branches/krb5-1-7/src/lib/krb5/krb/send_tgs.c
U branches/krb5-1-7/src/lib/krb5/libkrb5.exports

pull up r22148 from trunk

------------------------------------------------------------------------
r22148 | hartmans | 2009-03-31 12:50:25 -0400 (Tue, 31 Mar 2009) | 4 lines
Changed paths:
M /trunk/src/lib/krb5/krb/send_tgs.c

ticket: 6393

in send_tgs.c:
Encrypt using local_subkey not *subkey

https://github.com/krb5/krb5/commit/53609a60bc1d59c17ed36f33f0c066952a5589e4
Commit By: tlyu
Revision: 22239
Changed Files:
U branches/krb5-1-7/src/lib/krb5/krb/send_tgs.c