Skip Menu |
 

History Show all quoted text — Show full headers
# Mon Aug 07 16:38:56 2017 ghudson@mit.edu (Greg Hudson) - Ticket created
From: ghudson@mit.edu
Subject: git commit
Download (untitled) / with headers
text/plain 874B

Remove incomplete PKINIT OCSP support

pkinit_kdc_ocsp is non-functional in the PKINIT OpenSSL crypto
implementation, so remove most traces of it, including its man page
entry. If it is present in kdc.conf, error out of PKINIT
initialization instead of silently ignoring the realm entirely.

https://github.com/krb5/krb5/commit/3ff426b9048a8024e5c175256c63cd0ad0572320
Author: Robbie Harwood <rharwood@redhat.com>
Committer: Greg Hudson <ghudson@mit.edu>
Commit: 3ff426b9048a8024e5c175256c63cd0ad0572320
Branch: master
doc/admin/conf_files/kdc_conf.rst | 3 ---
src/man/kdc.conf.man | 3 ---
src/plugins/preauth/pkinit/pkinit.h | 2 +-
src/plugins/preauth/pkinit/pkinit_identity.c | 11 -----------
src/plugins/preauth/pkinit/pkinit_srv.c | 12 ++++++++++--
5 files changed, 11 insertions(+), 20 deletions(-)
# Mon Aug 07 16:38:56 2017 ghudson@mit.edu (Greg Hudson) - Status changed from 'new' to 'review'
# Mon Aug 07 16:38:56 2017 ghudson@mit.edu (Greg Hudson) - Requestor ghudson@mit.edu (Greg Hudson) added
# Sun Sep 24 20:40:03 2017 ghudson@mit.edu (Greg Hudson) - Status changed from 'review' to 'resolved'
# Wed Oct 04 10:52:56 2017 ghudson@mit.edu (Greg Hudson) - Version_Fixed 1.16 added