Source-Changes-HG archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[src/trunk]: src/crypto/external/bsd/heimdal/dist Release Notes - Heimdal - V...
details: https://anonhg.NetBSD.org/src/rev/1f957ce83654
branches: trunk
changeset: 821207:1f957ce83654
user: christos <christos%NetBSD.org@localhost>
date: Sat Jan 28 20:46:41 2017 +0000
description:
Release Notes - Heimdal - Version Heimdal 7.1
Security
- kx509 realm-chopping security bug
- non-authorization of alias additions/removals in kadmind
(CVE-2016-2400)
Feature
- iprop has been revamped to fix a number of race conditions that could
lead to inconsistent replication
- Hierarchical capath support
- AES Encryption with HMAC-SHA2 for Kerberos 5
draft-ietf-kitten-aes-cts-hmac-sha2-11
- hcrypto is now thread safe on all platforms
- libhcrypto has new backends: CNG (Windows), PKCS#11 (mainly for
Solaris), and OpenSSL. OpenSSL is now a first-class libhcrypto backend.
OpenSSL 1.0.x and 1.1 are both supported. AES-NI used when supported by
backend
- HDB now supports LMDB
- Thread support on Windows
- RFC 6113 Generalized Framework for Kerberos Pre-Authentication (FAST)
- New GSS APIs:
. gss_localname
- Allow setting what encryption types a principal should have with
[kadmin] default_key_rules, see krb5.conf manpage for more info
- Unify libhcrypto with LTC (libtomcrypto)
- asn1_compile 64-bit INTEGER functionality
- HDB key history support including --keepold kadmin password option
- Improved cross-realm key rollover safety
- New krb5_kuserok() and krb5_aname_to_localname() plug-in interfaces
- Improved MIT compatibility
. kadm5 API
. Migration from MIT KDB via "mitdb" HDB backend
. Capable of writing the HDB in MIT dump format
- Improved Active Directory interoperability
. Enctype selection issues for PAC and other authz-data signatures
. Cross realm key rollover (kvno 0)
- New [kdc] enctype negotiation configuration:
. tgt-use-strongest-session-key
. svc-use-strongest-session-key
. preauth-use-strongest-session-key
. use-strongest-server-key
- The KDC process now uses a multi-process model improving
resiliency and performance
- Allow batch-mode kinit with password file
- SIGINFO support added to kinit cmd
- New kx509 configuration options:
. kx509_ca
. kca_service
. kx509_include_pkinit_san
. kx509_template
- Improved Heimdal library/plugin version safety
- Name canonicalization
. DNS resolver searchlist
. Improved referral support
. Support host:port host-based services
- Pluggable libheimbase interface for DBs
- Improve IPv6 Support
- LDAP
. Bind DN and password
. Start TLS
- klist --json
- DIR credential cache type
- Updated upstream SQLite and libedit
- Removed legacy applications: ftp, kx, login, popper, push, rcp, rsh,
telnet, xnlock
- Completely remove RAND_egd support
- Moved kadmin and ktutil to /usr/bin
- Stricter fcache checks (see fcache_strict_checking krb5.conf setting)
. use O_NOFOLLOW
. don't follow symlinks
. require cache files to be owned by the user
. require sensible permissions (not group/other readable)
- Implemented gss_store_cred()
- Many more
Bug fixes
- iprop has been revamped to fix a number of race conditions that could
lead to data loss
- Include non-loopback addresses assigned to loopback interfaces
when requesting tickets with addresses
- KDC 1DES session key selection (for AFS rxkad-k5 compatibility)
- Keytab file descriptor and lock leak
- Credential cache corruption bugs
(NOTE: The FILE ccache is still not entirely safe due to the
fundamentally unsafe design of POSIX file locking)
- gss_pseudo_random() interop bug
- Plugins are now preferentially loaded from the run-time install tree
- Reauthentication after password change in init_creds_password
- Memory leak in the client kadmin library
- TGS client requests renewable/forwardable/proxiable when possible
- Locking issues in DB1 and DB3 HDB backends
- Master HDB can remain locked while waiting for network I/O
- Renewal/refresh logic when kinit is provided with a command
- KDC handling of enterprise principals
- Use correct bit for anon-pkinit
- Many more
Acknowledgements
This release of Heimdal includes contributions from:
Abhinav Upadhyay Heath Kehoe Nico Williams
Andreas Schneider Henry Jacques Patrik Lundin
Andrew Bartlett Howard Chu Philip Boulain
Andrew Tridgell Igor Sobrado Ragnar Sundblad
Antoine Jacoutot Ingo Schwarze Remi Ferrand
Arran Cudbard-Bell Jakub ?ajka Rod Widdowson
Arvid Requate James Le Cuirot Rok Pape?
Asanka Herath James Lee Roland C. Dowdeswell
Ben Kaduk Jeffrey Altman Ross L Richardson
Benjamin Kaduk Jeffrey Clark Russ Allbery
Bernard Spil Jeffrey Hutzelman Samuel Cabrero
Brian May Jelmer Vernooij Samuel Thibault
Chas Williams Ken Dreyer Santosh Kumar Pradhan
Chaskiel Grundman Kiran S J Sean Davis
Dana Koch Kumar Thangavelu Sergio Gelato
Daniel Schepler Landon Fuller Simon Wilkinson
David Mulder Linus Nordberg Stef Walter
Douglas Bagnall Love H?rnquist ?strand Stefan Metzmacher
Ed Maste Luke Howard Steffen Jaeckel
Eray Aslan Magnus Ahltorp Timothy Pearson
Florian Best Marc Balmer Tollef Fog Heen
Fredrik Pettai Marcin Cie?lak Tony Acero
Greg Hudson Marco Molteni Uri Simchoni
Gustavo Zacarias Matthieu Hautreux Viktor Dukhovni
G?nther Deschner Michael Meffie Volker Lendecke
Harald Barth Moritz Lenz
diffstat:
crypto/external/bsd/heimdal/dist/LICENSE | 2 +-
crypto/external/bsd/heimdal/dist/Makefile.am | 10 +-
crypto/external/bsd/heimdal/dist/NEWS | 131 +
crypto/external/bsd/heimdal/dist/NTMakefile | 9 +-
crypto/external/bsd/heimdal/dist/README.fast | 17 +
crypto/external/bsd/heimdal/dist/admin/Makefile.am | 6 +-
crypto/external/bsd/heimdal/dist/admin/add.c | 4 +-
crypto/external/bsd/heimdal/dist/admin/change.c | 4 +-
crypto/external/bsd/heimdal/dist/admin/copy.c | 4 +-
crypto/external/bsd/heimdal/dist/admin/get.c | 4 +-
crypto/external/bsd/heimdal/dist/admin/ktutil-commands.in | 2 +-
crypto/external/bsd/heimdal/dist/admin/ktutil.1 | 126 +
crypto/external/bsd/heimdal/dist/admin/ktutil.c | 4 +-
crypto/external/bsd/heimdal/dist/admin/list.c | 11 +-
crypto/external/bsd/heimdal/dist/admin/purge.c | 4 +-
crypto/external/bsd/heimdal/dist/admin/remove.c | 4 +-
crypto/external/bsd/heimdal/dist/admin/rename.c | 4 +-
crypto/external/bsd/heimdal/dist/appveyor.yml | 54 +
crypto/external/bsd/heimdal/dist/autogen.sh | 2 +
crypto/external/bsd/heimdal/dist/cf/Makefile.am.common | 78 +-
crypto/external/bsd/heimdal/dist/cf/check-compile-et.m4 | 9 +-
crypto/external/bsd/heimdal/dist/cf/crypto.m4 | 183 +-
crypto/external/bsd/heimdal/dist/cf/db.m4 | 83 +-
crypto/external/bsd/heimdal/dist/cf/dispatch.m4 | 29 +-
crypto/external/bsd/heimdal/dist/cf/dlopen.m4 | 8 +
crypto/external/bsd/heimdal/dist/cf/find-func-no-libs2.m4 | 1 -
crypto/external/bsd/heimdal/dist/cf/install-catman.sh | 2 +-
crypto/external/bsd/heimdal/dist/cf/krb-ipv6.m4 | 2 +-
crypto/external/bsd/heimdal/dist/cf/krb-prog-perl.m4 | 21 +
crypto/external/bsd/heimdal/dist/cf/make-proto.pl | 89 +-
crypto/external/bsd/heimdal/dist/cf/maybe-valgrind.sh | 2 +-
crypto/external/bsd/heimdal/dist/cf/misc.m4 | 2 +-
crypto/external/bsd/heimdal/dist/cf/proto-compat.m4 | 2 +-
crypto/external/bsd/heimdal/dist/cf/pthreads.m4 | 34 +-
crypto/external/bsd/heimdal/dist/cf/retsigtype.m4 | 2 +-
crypto/external/bsd/heimdal/dist/cf/roken-frag.m4 | 33 +-
crypto/external/bsd/heimdal/dist/cf/roken-h-process.pl | 9 +-
crypto/external/bsd/heimdal/dist/cf/sunos.m4 | 9 +-
crypto/external/bsd/heimdal/dist/cf/test-package.m4 | 2 +-
crypto/external/bsd/heimdal/dist/cf/valgrind-suppressions | 86 +-
crypto/external/bsd/heimdal/dist/cf/wflags.m4 | 16 +-
crypto/external/bsd/heimdal/dist/cf/with-all.m4 | 2 +-
crypto/external/bsd/heimdal/dist/configure.ac | 90 +-
crypto/external/bsd/heimdal/dist/doc/Makefile.am | 24 +-
crypto/external/bsd/heimdal/dist/doc/NTMakefile | 5 +
crypto/external/bsd/heimdal/dist/doc/ack.texi | 6 +-
crypto/external/bsd/heimdal/dist/doc/base.din | 15 +
crypto/external/bsd/heimdal/dist/doc/base.hhp | 8 +
crypto/external/bsd/heimdal/dist/doc/copyright.texi | 7 +-
crypto/external/bsd/heimdal/dist/doc/doxytmpl.dxy | 12 +-
crypto/external/bsd/heimdal/dist/doc/migration.texi | 28 +-
crypto/external/bsd/heimdal/dist/doc/setup.texi | 148 +-
crypto/external/bsd/heimdal/dist/doc/vars.tin | 1 +
crypto/external/bsd/heimdal/dist/include/Makefile.am | 20 +-
crypto/external/bsd/heimdal/dist/include/NTMakefile | 6 +-
crypto/external/bsd/heimdal/dist/include/bits.c | 49 +-
crypto/external/bsd/heimdal/dist/include/config.h.w32 | 58 +-
crypto/external/bsd/heimdal/dist/include/crypto-headers.h | 34 +-
crypto/external/bsd/heimdal/dist/include/hcrypto/Makefile.am | 3 +-
crypto/external/bsd/heimdal/dist/include/heim_threads.h | 201 +-
crypto/external/bsd/heimdal/dist/include/krb5-types.cross | 6 +
crypto/external/bsd/heimdal/dist/kadmin/Makefile.am | 8 +-
crypto/external/bsd/heimdal/dist/kadmin/add-random-users.c | 38 +-
crypto/external/bsd/heimdal/dist/kadmin/add_enctype.c | 28 +-
crypto/external/bsd/heimdal/dist/kadmin/ank.c | 33 +-
crypto/external/bsd/heimdal/dist/kadmin/check.c | 33 +-
crypto/external/bsd/heimdal/dist/kadmin/cpw.c | 41 +-
crypto/external/bsd/heimdal/dist/kadmin/del_enctype.c | 17 +-
crypto/external/bsd/heimdal/dist/kadmin/dump.c | 22 +-
crypto/external/bsd/heimdal/dist/kadmin/ext.c | 97 +-
crypto/external/bsd/heimdal/dist/kadmin/init.c | 35 +-
crypto/external/bsd/heimdal/dist/kadmin/kadm_conn.c | 11 +-
crypto/external/bsd/heimdal/dist/kadmin/kadmin-commands.in | 73 +
crypto/external/bsd/heimdal/dist/kadmin/kadmin.1 | 364 +
crypto/external/bsd/heimdal/dist/kadmin/kadmin.c | 21 +-
crypto/external/bsd/heimdal/dist/kadmin/kadmin_locl.h | 7 +-
crypto/external/bsd/heimdal/dist/kadmin/kadmind.c | 36 +-
crypto/external/bsd/heimdal/dist/kadmin/load.c | 21 +-
crypto/external/bsd/heimdal/dist/kadmin/mod.c | 52 +-
crypto/external/bsd/heimdal/dist/kadmin/server.c | 335 +-
crypto/external/bsd/heimdal/dist/kadmin/stash.c | 25 +-
crypto/external/bsd/heimdal/dist/kcm/Makefile.am | 8 +-
crypto/external/bsd/heimdal/dist/kcm/acquire.c | 24 +-
crypto/external/bsd/heimdal/dist/kcm/client.c | 25 +-
crypto/external/bsd/heimdal/dist/kcm/config.c | 49 +-
crypto/external/bsd/heimdal/dist/kcm/events.c | 19 +-
crypto/external/bsd/heimdal/dist/kcm/glue.c | 15 +-
crypto/external/bsd/heimdal/dist/kcm/kcm_locl.h | 5 +-
crypto/external/bsd/heimdal/dist/kcm/log.c | 16 +-
crypto/external/bsd/heimdal/dist/kcm/main.c | 30 +-
crypto/external/bsd/heimdal/dist/kcm/protocol.c | 26 +-
crypto/external/bsd/heimdal/dist/kcm/renew.c | 21 +-
crypto/external/bsd/heimdal/dist/kdc/Makefile.am | 61 +-
crypto/external/bsd/heimdal/dist/kdc/NTMakefile | 35 +-
crypto/external/bsd/heimdal/dist/kdc/config.c | 72 +-
crypto/external/bsd/heimdal/dist/kdc/connect.c | 412 +-
crypto/external/bsd/heimdal/dist/kdc/default_config.c | 14 +-
crypto/external/bsd/heimdal/dist/kdc/digest-service.c | 6 +-
crypto/external/bsd/heimdal/dist/kdc/digest.c | 73 +-
crypto/external/bsd/heimdal/dist/kdc/fast.c | 562 ++
crypto/external/bsd/heimdal/dist/kdc/headers.h | 7 +-
crypto/external/bsd/heimdal/dist/kdc/hprop.c | 5 +-
crypto/external/bsd/heimdal/dist/kdc/hprop.h | 4 +-
crypto/external/bsd/heimdal/dist/kdc/hpropd.c | 80 +-
crypto/external/bsd/heimdal/dist/kdc/kdc-replay.c | 8 +-
crypto/external/bsd/heimdal/dist/kdc/kdc-tester.c | 510 +
crypto/external/bsd/heimdal/dist/kdc/kdc.h | 5 +-
crypto/external/bsd/heimdal/dist/kdc/kdc_locl.h | 60 +-
crypto/external/bsd/heimdal/dist/kdc/krb5tgs.c | 373 +-
crypto/external/bsd/heimdal/dist/kdc/kstash.c | 31 +-
crypto/external/bsd/heimdal/dist/kdc/kx509.c | 173 +-
crypto/external/bsd/heimdal/dist/kdc/log.c | 4 +-
crypto/external/bsd/heimdal/dist/kdc/main.c | 36 +-
crypto/external/bsd/heimdal/dist/kdc/misc.c | 130 +-
crypto/external/bsd/heimdal/dist/kdc/mit_dump.c | 398 +-
crypto/external/bsd/heimdal/dist/kdc/pkinit-ec.c | 320 +
crypto/external/bsd/heimdal/dist/kdc/pkinit.c | 294 +-
crypto/external/bsd/heimdal/dist/kdc/process.c | 23 +-
crypto/external/bsd/heimdal/dist/kdc/string2key.c | 17 +-
crypto/external/bsd/heimdal/dist/kdc/windc.c | 171 +-
crypto/external/bsd/heimdal/dist/kdc/windc_plugin.h | 8 +-
crypto/external/bsd/heimdal/dist/kpasswd/Makefile.am | 4 +-
crypto/external/bsd/heimdal/dist/kpasswd/kpasswd-generator.c | 145 +-
crypto/external/bsd/heimdal/dist/kpasswd/kpasswd.c | 11 +-
crypto/external/bsd/heimdal/dist/kpasswd/kpasswd_locl.h | 5 +-
crypto/external/bsd/heimdal/dist/krb5.conf | 12 +-
crypto/external/bsd/heimdal/dist/kuser/Makefile.am | 35 +-
crypto/external/bsd/heimdal/dist/kuser/NTMakefile | 23 +-
crypto/external/bsd/heimdal/dist/kuser/copy_cred_cache.c | 53 +-
crypto/external/bsd/heimdal/dist/kuser/generate-requests.c | 7 +-
crypto/external/bsd/heimdal/dist/kuser/heimtools-commands.in | 249 +
crypto/external/bsd/heimdal/dist/kuser/heimtools-version.rc | 36 +
crypto/external/bsd/heimdal/dist/kuser/heimtools.c | 167 +
crypto/external/bsd/heimdal/dist/kuser/kcpytkt.c | 10 +-
crypto/external/bsd/heimdal/dist/kuser/kdecode_ticket.c | 6 +-
crypto/external/bsd/heimdal/dist/kuser/kdeltkt.c | 10 +-
crypto/external/bsd/heimdal/dist/kuser/kdigest.8 | 3 +-
crypto/external/bsd/heimdal/dist/kuser/kdigest.c | 10 +-
crypto/external/bsd/heimdal/dist/kuser/kgetcred.c | 216 +-
crypto/external/bsd/heimdal/dist/kuser/kimpersonate.c | 156 +-
crypto/external/bsd/heimdal/dist/kuser/kinit.c | 925 ++-
crypto/external/bsd/heimdal/dist/kuser/kswitch.1 | 8 +-
crypto/external/bsd/heimdal/dist/kuser/kswitch.c | 70 +-
crypto/external/bsd/heimdal/dist/kuser/kuser_locl.h | 4 +-
crypto/external/bsd/heimdal/dist/kuser/kverify.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/Makefile.am | 16 +-
crypto/external/bsd/heimdal/dist/lib/NTMakefile | 25 +-
crypto/external/bsd/heimdal/dist/lib/asn1/Makefile.am | 39 +-
crypto/external/bsd/heimdal/dist/lib/asn1/NTMakefile | 12 +-
crypto/external/bsd/heimdal/dist/lib/asn1/asn1-common.h | 23 +-
crypto/external/bsd/heimdal/dist/lib/asn1/asn1-template.h | 72 +-
crypto/external/bsd/heimdal/dist/lib/asn1/asn1_gen.c | 8 +-
crypto/external/bsd/heimdal/dist/lib/asn1/asn1_print.c | 21 +-
crypto/external/bsd/heimdal/dist/lib/asn1/asn1parse.y | 59 +-
crypto/external/bsd/heimdal/dist/lib/asn1/check-ber.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/asn1/check-common.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/asn1/check-common.h | 21 +-
crypto/external/bsd/heimdal/dist/lib/asn1/check-der.c | 193 +-
crypto/external/bsd/heimdal/dist/lib/asn1/check-gen.c | 577 ++-
crypto/external/bsd/heimdal/dist/lib/asn1/check-template.c | 266 +-
crypto/external/bsd/heimdal/dist/lib/asn1/check-timegm.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/asn1/der.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/asn1/der.h | 4 +-
crypto/external/bsd/heimdal/dist/lib/asn1/der_cmp.c | 19 +-
crypto/external/bsd/heimdal/dist/lib/asn1/der_copy.c | 18 +-
crypto/external/bsd/heimdal/dist/lib/asn1/der_format.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/asn1/der_free.c | 16 +-
crypto/external/bsd/heimdal/dist/lib/asn1/der_get.c | 148 +-
crypto/external/bsd/heimdal/dist/lib/asn1/der_length.c | 61 +-
crypto/external/bsd/heimdal/dist/lib/asn1/der_put.c | 91 +-
crypto/external/bsd/heimdal/dist/lib/asn1/digest.asn1 | 4 +-
crypto/external/bsd/heimdal/dist/lib/asn1/extra.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/asn1/fuzzer.c | 744 ++
crypto/external/bsd/heimdal/dist/lib/asn1/gen_copy.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/asn1/gen_decode.c | 40 +-
crypto/external/bsd/heimdal/dist/lib/asn1/gen_encode.c | 23 +-
crypto/external/bsd/heimdal/dist/lib/asn1/gen_free.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/asn1/gen_glue.c | 7 +-
crypto/external/bsd/heimdal/dist/lib/asn1/gen_length.c | 28 +-
crypto/external/bsd/heimdal/dist/lib/asn1/gen_locl.h | 5 +-
crypto/external/bsd/heimdal/dist/lib/asn1/gen_seq.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/asn1/gen_template.c | 181 +-
crypto/external/bsd/heimdal/dist/lib/asn1/hash.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/asn1/krb5.asn1 | 146 +-
crypto/external/bsd/heimdal/dist/lib/asn1/lex.l | 5 +-
crypto/external/bsd/heimdal/dist/lib/asn1/libasn1-exports.def | 36 +-
crypto/external/bsd/heimdal/dist/lib/asn1/main.c | 43 +-
crypto/external/bsd/heimdal/dist/lib/asn1/pkinit.asn1 | 2 +
crypto/external/bsd/heimdal/dist/lib/asn1/pku2u.asn1 | 32 +
crypto/external/bsd/heimdal/dist/lib/asn1/rfc2459.asn1 | 23 +
crypto/external/bsd/heimdal/dist/lib/asn1/roken_rename.h | 48 +
crypto/external/bsd/heimdal/dist/lib/asn1/symbol.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/asn1/symbol.h | 13 +-
crypto/external/bsd/heimdal/dist/lib/asn1/template.c | 165 +-
crypto/external/bsd/heimdal/dist/lib/asn1/test.asn1 | 60 +-
crypto/external/bsd/heimdal/dist/lib/asn1/test.opt | 1 +
crypto/external/bsd/heimdal/dist/lib/asn1/timegm.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/base/Makefile.am | 64 +
crypto/external/bsd/heimdal/dist/lib/base/NTMakefile | 82 +
crypto/external/bsd/heimdal/dist/lib/base/array.c | 480 +
crypto/external/bsd/heimdal/dist/lib/base/baselocl.h | 169 +
crypto/external/bsd/heimdal/dist/lib/base/bool.c | 61 +
crypto/external/bsd/heimdal/dist/lib/base/bsearch.c | 888 +++
crypto/external/bsd/heimdal/dist/lib/base/data.c | 167 +
crypto/external/bsd/heimdal/dist/lib/base/db.c | 1729 ++++++
crypto/external/bsd/heimdal/dist/lib/base/dict.c | 305 +
crypto/external/bsd/heimdal/dist/lib/base/dll.c | 326 +
crypto/external/bsd/heimdal/dist/lib/base/error.c | 180 +
crypto/external/bsd/heimdal/dist/lib/base/heimbase.c | 1081 ++++
crypto/external/bsd/heimdal/dist/lib/base/heimbase.h | 433 +
crypto/external/bsd/heimdal/dist/lib/base/heimbasepriv.h | 115 +
crypto/external/bsd/heimdal/dist/lib/base/heimqueue.h | 169 +
crypto/external/bsd/heimdal/dist/lib/base/json.c | 813 +++
crypto/external/bsd/heimdal/dist/lib/base/null.c | 55 +
crypto/external/bsd/heimdal/dist/lib/base/number.c | 130 +
crypto/external/bsd/heimdal/dist/lib/base/roken_rename.h | 63 +
crypto/external/bsd/heimdal/dist/lib/base/string.c | 262 +
crypto/external/bsd/heimdal/dist/lib/base/test_base.c | 963 +++
crypto/external/bsd/heimdal/dist/lib/base/version-script.map | 94 +
crypto/external/bsd/heimdal/dist/lib/com_err/Makefile.am | 3 +-
crypto/external/bsd/heimdal/dist/lib/com_err/com_right.h | 3 +-
crypto/external/bsd/heimdal/dist/lib/com_err/error.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/Makefile.am | 35 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/NTMakefile | 9 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/gen-oid.pl | 10 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/gss-commands.in | 2 +
crypto/external/bsd/heimdal/dist/lib/gssapi/gssapi/gssapi.h | 84 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/gssapi/gssapi_krb5.h | 6 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/gssapi_mech.h | 66 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/gsstool.c | 25 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/8003.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/accept_sec_context.c | 130 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/acquire_cred.c | 533 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/add_cred.c | 184 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/aeap.c | 100 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/arcfour.c | 652 ++-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/authorize_localname.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/canonicalize_name.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/cfx.c | 8 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/compare_name.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/context_time.c | 23 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/copy_ccache.c | 9 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/creds.c | 31 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/decapsulate.c | 5 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/display_name.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/duplicate_name.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/export_name.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/export_sec_context.c | 14 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/external.c | 100 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/get_mic.c | 19 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/gsskrb5_locl.h | 9 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/import_name.c | 38 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/import_sec_context.c | 8 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/inquire_context.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/inquire_cred.c | 255 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/inquire_cred_by_mech.c | 8 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/inquire_cred_by_oid.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/inquire_mechs_for_name.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/inquire_sec_context_by_oid.c | 9 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/pname_to_uid.c | 43 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/process_context_token.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/set_sec_context_option.c | 20 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/store_cred.c | 85 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/test_cfx.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/unwrap.c | 19 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/krb5/wrap.c | 36 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/libgssapi-exports.def | 3 +
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/compat.h | 8 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/doxygen.c | 25 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_accept_sec_context.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_acquire_cred.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_acquire_cred_ext.c | 26 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_acquire_cred_with_password.c | 7 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_add_cred.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_add_cred_with_password.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_aeap.c | 122 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_authorize_localname.c | 8 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_canonicalize_name.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_compare_name.c | 8 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_context_time.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_delete_sec_context.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_display_name.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_display_status.c | 28 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_duplicate_name.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_export_name.c | 18 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_get_mic.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_import_name.c | 14 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_indicate_mechs.c | 7 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_init_sec_context.c | 19 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_inquire_context.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_inquire_cred.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_inquire_cred_by_mech.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_inquire_cred_by_oid.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_inquire_mechs_for_name.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_inquire_sec_context_by_oid.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_mech_switch.c | 7 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_mo.c | 3 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_oid.c | 60 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_pname_to_uid.c | 180 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_process_context_token.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_store_cred.c | 40 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_unwrap.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_verify_mic.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_wrap.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gss_wrap_size_limit.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/mech/gssapi.asn1 | 2 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/netlogon/accept_sec_context.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/netlogon/acquire_cred.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/netlogon/add_cred.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/netlogon/canonicalize_name.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/netlogon/compare_name.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/netlogon/context_time.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/netlogon/crypto.c | 8 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/netlogon/display_name.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/netlogon/duplicate_name.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/netlogon/export_name.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/netlogon/init_sec_context.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/netlogon/inquire_context.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/netlogon/inquire_cred.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/netlogon/inquire_cred_by_mech.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/netlogon/inquire_mechs_for_name.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/netlogon/process_context_token.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/ntlm/accept_sec_context.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/ntlm/acquire_cred.c | 31 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/ntlm/add_cred.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/ntlm/canonicalize_name.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/ntlm/compare_name.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/ntlm/context_time.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/ntlm/crypto.c | 30 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/ntlm/display_name.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/ntlm/duplicate_name.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/ntlm/export_name.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/ntlm/external.c | 5 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/ntlm/init_sec_context.c | 79 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/ntlm/inquire_context.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/ntlm/inquire_cred_by_mech.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/ntlm/inquire_mechs_for_name.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/ntlm/inquire_sec_context_by_oid.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/ntlm/kdc.c | 12 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/ntlm/process_context_token.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/oid.txt | 2 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/spnego/accept_sec_context.c | 8 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/spnego/compat.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/spnego/context_stubs.c | 43 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/spnego/cred_stubs.c | 10 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/spnego/external.c | 17 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/spnego/init_sec_context.c | 14 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/test_add_store_cred.c | 181 +
crypto/external/bsd/heimdal/dist/lib/gssapi/test_common.c | 14 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/test_context.c | 198 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/test_cred.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/test_ntlm.c | 16 +-
crypto/external/bsd/heimdal/dist/lib/gssapi/version-script.map | 3 +
crypto/external/bsd/heimdal/dist/lib/hcrypto/Makefile.am | 39 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/NTMakefile | 91 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/aes.c | 8 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/bn.c | 10 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/bn.h | 11 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/camellia-ntt.c | 10 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/camellia.c | 9 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/common.c | 8 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/des.c | 9 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/destest.c | 8 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/dh-ltm.c | 11 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/dh-tfm.c | 7 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/dh.c | 7 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/dh.h | 4 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/dsa.c | 18 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/dsa.h | 4 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/ec.c | 5 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/ec.h | 8 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/engine.h | 6 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/evp-cc.c | 205 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/evp-cc.h | 6 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/evp-crypt.c | 9 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/evp-hcrypto.c | 13 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/evp-openssl.c | 646 ++
crypto/external/bsd/heimdal/dist/lib/hcrypto/evp-openssl.h | 104 +
crypto/external/bsd/heimdal/dist/lib/hcrypto/evp-pkcs11.c | 798 +++
crypto/external/bsd/heimdal/dist/lib/hcrypto/evp-pkcs11.h | 159 +
crypto/external/bsd/heimdal/dist/lib/hcrypto/evp-w32.c | 142 +
crypto/external/bsd/heimdal/dist/lib/hcrypto/evp-w32.h | 102 +
crypto/external/bsd/heimdal/dist/lib/hcrypto/evp-wincng.c | 707 ++
crypto/external/bsd/heimdal/dist/lib/hcrypto/evp-wincng.h | 99 +
crypto/external/bsd/heimdal/dist/lib/hcrypto/evp.c | 59 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/evp.h | 54 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/example_evp_cipher.c | 35 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/hash.h | 3 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/hmac.c | 9 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/libhcrypto-exports.def | 64 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/libtommath/NTMakefile | 1 -
crypto/external/bsd/heimdal/dist/lib/hcrypto/libtommath/bn_error.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/libtommath/bn_mp_find_prime.c | 20 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/libtommath/bn_mp_mod.c | 10 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/libtommath/bn_mp_prime_next_prime.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/libtommath/bn_mp_rand.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/libtommath/bn_mp_shrink.c | 13 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/libtommath/demo/demo.c | 8 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/libtommath/etc/pprime.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/libtommath/mtest/mpi.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/libtommath/mtest/mtest.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/libtommath/tommath.h | 12 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/libtommath/tommath.src | 2 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/libtommath/tommath.tex | 2 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/libtommath/tommath_class.h | 4 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/md2.h | 8 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/md4.c | 14 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/md4.h | 8 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/md5.c | 22 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/md5.h | 8 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/md5crypt_test.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/mdtest.c | 24 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/passwd_dlg.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/pkcs12.c | 8 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/pkcs5.c | 48 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/rand-fortuna.c | 32 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/rand-timer.c | 18 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/rand-unix.c | 30 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/rand-w32.c | 20 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/rand.c | 13 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/rand.h | 10 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/randi.h | 3 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/rc2.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/rc2test.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/rc4.c | 5 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/rctest.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/rijndael-alg-fst.c | 7 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/rnd_keys.c | 7 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/rsa-gmp.c | 8 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/rsa-ltm.c | 58 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/rsa-tfm.c | 8 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/rsa.c | 9 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/rsa.h | 7 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/sha.c | 14 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/sha.h | 26 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/sha256.c | 14 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/sha512.c | 23 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/test_bn.c | 9 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/test_bulk.c | 316 +
crypto/external/bsd/heimdal/dist/lib/hcrypto/test_cipher.c | 104 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/test_crypto.in | 2 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/test_dh.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/test_engine_dso.c | 5 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/test_hmac.c | 10 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/test_pkcs12.c | 9 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/test_pkcs5.c | 29 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/test_rand.c | 70 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/test_rsa.c | 17 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/ui.c | 8 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/undef.h | 171 +
crypto/external/bsd/heimdal/dist/lib/hcrypto/validate.c | 19 +-
crypto/external/bsd/heimdal/dist/lib/hcrypto/version-script.map | 44 +-
crypto/external/bsd/heimdal/dist/lib/hdb/Makefile.am | 41 +-
crypto/external/bsd/heimdal/dist/lib/hdb/NTMakefile | 17 +-
crypto/external/bsd/heimdal/dist/lib/hdb/common.c | 142 +-
crypto/external/bsd/heimdal/dist/lib/hdb/db.c | 145 +-
crypto/external/bsd/heimdal/dist/lib/hdb/db3.c | 237 +-
crypto/external/bsd/heimdal/dist/lib/hdb/dbinfo.c | 43 +-
crypto/external/bsd/heimdal/dist/lib/hdb/ext.c | 108 +-
crypto/external/bsd/heimdal/dist/lib/hdb/hdb-ldap.c | 233 +-
crypto/external/bsd/heimdal/dist/lib/hdb/hdb-mdb.c | 401 +
crypto/external/bsd/heimdal/dist/lib/hdb/hdb-mitdb.c | 1019 +++-
crypto/external/bsd/heimdal/dist/lib/hdb/hdb-sqlite.c | 446 +-
crypto/external/bsd/heimdal/dist/lib/hdb/hdb.asn1 | 27 +-
crypto/external/bsd/heimdal/dist/lib/hdb/hdb.h | 63 +-
crypto/external/bsd/heimdal/dist/lib/hdb/hdb.schema | 7 +-
crypto/external/bsd/heimdal/dist/lib/hdb/hdb_err.et | 3 +
crypto/external/bsd/heimdal/dist/lib/hdb/hdb_locl.h | 5 +-
crypto/external/bsd/heimdal/dist/lib/hdb/keytab.c | 26 +-
crypto/external/bsd/heimdal/dist/lib/hdb/libhdb-exports.def | 19 +
crypto/external/bsd/heimdal/dist/lib/hdb/mkey.c | 189 +-
crypto/external/bsd/heimdal/dist/lib/hdb/print.c | 374 +-
crypto/external/bsd/heimdal/dist/lib/hdb/test_dbinfo.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/hdb/test_hdbkeys.c | 16 +-
crypto/external/bsd/heimdal/dist/lib/hdb/test_hdbplugin.c | 109 +
crypto/external/bsd/heimdal/dist/lib/hdb/test_mkey.c | 8 +-
crypto/external/bsd/heimdal/dist/lib/hdb/version-script.map | 33 +-
crypto/external/bsd/heimdal/dist/lib/heimdal/NTMakefile | 8 +-
crypto/external/bsd/heimdal/dist/lib/hx509/Makefile.am | 107 +-
crypto/external/bsd/heimdal/dist/lib/hx509/NTMakefile | 8 +-
crypto/external/bsd/heimdal/dist/lib/hx509/ca.c | 67 +-
crypto/external/bsd/heimdal/dist/lib/hx509/cms.c | 48 +-
crypto/external/bsd/heimdal/dist/lib/hx509/crypto-ec.c | 535 ++
crypto/external/bsd/heimdal/dist/lib/hx509/crypto.c | 637 +--
crypto/external/bsd/heimdal/dist/lib/hx509/data/mkcert.sh | 84 +
crypto/external/bsd/heimdal/dist/lib/hx509/data/openssl.cnf | 2 +-
crypto/external/bsd/heimdal/dist/lib/hx509/data/secp256r1TestCA.cert.pem | 12 +
crypto/external/bsd/heimdal/dist/lib/hx509/data/secp256r1TestCA.key.pem | 5 +
crypto/external/bsd/heimdal/dist/lib/hx509/data/secp256r1TestCA.pem | 17 +
crypto/external/bsd/heimdal/dist/lib/hx509/data/secp256r2TestClient.cert.pem | 12 +
crypto/external/bsd/heimdal/dist/lib/hx509/data/secp256r2TestClient.key.pem | 5 +
crypto/external/bsd/heimdal/dist/lib/hx509/data/secp256r2TestClient.pem | 17 +
crypto/external/bsd/heimdal/dist/lib/hx509/data/secp256r2TestServer.cert.pem | 12 +
crypto/external/bsd/heimdal/dist/lib/hx509/data/secp256r2TestServer.key.pem | 5 +
crypto/external/bsd/heimdal/dist/lib/hx509/data/secp256r2TestServer.pem | 17 +
crypto/external/bsd/heimdal/dist/lib/hx509/doxygen.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/hx509/env.c | 18 +-
crypto/external/bsd/heimdal/dist/lib/hx509/error.c | 68 +-
crypto/external/bsd/heimdal/dist/lib/hx509/file.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/hx509/hx509.h | 3 +-
crypto/external/bsd/heimdal/dist/lib/hx509/hx509_err.et | 22 +-
crypto/external/bsd/heimdal/dist/lib/hx509/hx_locl.h | 105 +-
crypto/external/bsd/heimdal/dist/lib/hx509/hxtool-commands.in | 20 +-
crypto/external/bsd/heimdal/dist/lib/hx509/hxtool.c | 69 +-
crypto/external/bsd/heimdal/dist/lib/hx509/keyset.c | 32 +-
crypto/external/bsd/heimdal/dist/lib/hx509/ks_dir.c | 7 +-
crypto/external/bsd/heimdal/dist/lib/hx509/ks_file.c | 17 +-
crypto/external/bsd/heimdal/dist/lib/hx509/ks_keychain.c | 27 +-
crypto/external/bsd/heimdal/dist/lib/hx509/ks_null.c | 7 +-
crypto/external/bsd/heimdal/dist/lib/hx509/ks_p11.c | 72 +-
crypto/external/bsd/heimdal/dist/lib/hx509/ks_p12.c | 15 +-
crypto/external/bsd/heimdal/dist/lib/hx509/libhx509-exports.def | 3 +
crypto/external/bsd/heimdal/dist/lib/hx509/lock.c | 7 +-
crypto/external/bsd/heimdal/dist/lib/hx509/name.c | 22 +-
crypto/external/bsd/heimdal/dist/lib/hx509/print.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/hx509/ref/pkcs11.h | 389 +-
crypto/external/bsd/heimdal/dist/lib/hx509/sel-lex.l | 8 +-
crypto/external/bsd/heimdal/dist/lib/hx509/softp11.c | 31 +-
crypto/external/bsd/heimdal/dist/lib/hx509/test_ca.in | 28 +
crypto/external/bsd/heimdal/dist/lib/hx509/test_cert.in | 2 +-
crypto/external/bsd/heimdal/dist/lib/hx509/test_chain.in | 8 +-
crypto/external/bsd/heimdal/dist/lib/hx509/test_cms.in | 12 +-
crypto/external/bsd/heimdal/dist/lib/hx509/test_name.c | 16 +-
crypto/external/bsd/heimdal/dist/lib/hx509/test_nist_pkcs12.in | 2 +-
crypto/external/bsd/heimdal/dist/lib/hx509/test_soft_pkcs11.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/hx509/version-script.map | 7 +-
crypto/external/bsd/heimdal/dist/lib/ipc/Makefile.am | 5 +-
crypto/external/bsd/heimdal/dist/lib/ipc/client.c | 8 +-
crypto/external/bsd/heimdal/dist/lib/ipc/heim-ipc.h | 4 +-
crypto/external/bsd/heimdal/dist/lib/ipc/server.c | 19 +-
crypto/external/bsd/heimdal/dist/lib/ipc/tc.c | 8 +-
crypto/external/bsd/heimdal/dist/lib/ipc/ts-http.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/ipc/ts.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/Makefile.am | 33 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/NTMakefile | 10 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/acl.c | 7 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/admin.h | 55 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/bump_pw_expire.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/chpass_c.c | 18 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/chpass_s.c | 198 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/client_glue.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/common_glue.c | 308 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/context_s.c | 150 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/create_c.c | 14 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/create_s.c | 105 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/default_keys.c | 7 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/delete_c.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/delete_s.c | 49 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/destroy_c.c | 7 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/destroy_s.c | 25 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/ent_setup.c | 15 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/error.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/flush.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/flush_c.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/flush_s.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/free.c | 15 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/get_c.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/get_princs_c.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/get_princs_s.c | 34 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/get_s.c | 219 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/init_c.c | 37 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/init_s.c | 65 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/iprop-commands.in | 67 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/iprop-log.c | 219 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/iprop.h | 14 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/ipropd_common.c | 196 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/ipropd_master.c | 702 ++-
crypto/external/bsd/heimdal/dist/lib/kadm5/ipropd_slave.c | 731 ++-
crypto/external/bsd/heimdal/dist/lib/kadm5/kadm5_err.et | 10 +
crypto/external/bsd/heimdal/dist/lib/kadm5/kadm5_locl.h | 3 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/keys.c | 40 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/libkadm5srv-exports.def | 23 +
crypto/external/bsd/heimdal/dist/lib/kadm5/log.c | 2583 ++++++++-
crypto/external/bsd/heimdal/dist/lib/kadm5/marshall.c | 88 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/modify_c.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/modify_s.c | 90 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/password_quality.c | 23 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/private.h | 64 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/privs_c.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/privs_s.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/randkey_c.c | 80 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/randkey_s.c | 90 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/rename_c.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/rename_s.c | 78 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/send_recv.c | 10 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/server_glue.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/set_keys.c | 223 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/set_modifier.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/setkey3_s.c | 137 +
crypto/external/bsd/heimdal/dist/lib/kadm5/test_pw_quality.c | 12 +-
crypto/external/bsd/heimdal/dist/lib/kadm5/version-script-client.map | 59 +
crypto/external/bsd/heimdal/dist/lib/kadm5/version-script.map | 23 +
crypto/external/bsd/heimdal/dist/lib/kafs/Makefile.am | 5 +-
crypto/external/bsd/heimdal/dist/lib/kafs/afskrb5.c | 28 +-
crypto/external/bsd/heimdal/dist/lib/kafs/afssys.c | 61 +-
crypto/external/bsd/heimdal/dist/lib/kafs/common.c | 18 +-
crypto/external/bsd/heimdal/dist/lib/kafs/kafs.h | 5 +-
crypto/external/bsd/heimdal/dist/lib/kafs/kafs_locl.h | 7 +-
crypto/external/bsd/heimdal/dist/lib/kafs/rxkad_kdf.c | 218 +
crypto/external/bsd/heimdal/dist/lib/kdfs/k5dfspag.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/krb5/Makefile.am | 83 +-
crypto/external/bsd/heimdal/dist/lib/krb5/NTMakefile | 113 +-
crypto/external/bsd/heimdal/dist/lib/krb5/acache.c | 23 +-
crypto/external/bsd/heimdal/dist/lib/krb5/acl.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/krb5/addr_families.c | 40 +-
crypto/external/bsd/heimdal/dist/lib/krb5/aes-test.c | 222 +-
crypto/external/bsd/heimdal/dist/lib/krb5/an2ln_plugin.h | 93 +
crypto/external/bsd/heimdal/dist/lib/krb5/aname_to_localname.c | 414 +-
crypto/external/bsd/heimdal/dist/lib/krb5/asn1_glue.c | 8 +-
crypto/external/bsd/heimdal/dist/lib/krb5/build_auth.c | 15 +-
crypto/external/bsd/heimdal/dist/lib/krb5/cache.c | 311 +-
crypto/external/bsd/heimdal/dist/lib/krb5/changepw.c | 8 +-
crypto/external/bsd/heimdal/dist/lib/krb5/config_file.c | 39 +-
crypto/external/bsd/heimdal/dist/lib/krb5/config_reg.c | 19 +-
crypto/external/bsd/heimdal/dist/lib/krb5/constants.c | 19 +-
crypto/external/bsd/heimdal/dist/lib/krb5/copy_host_realm.c | 13 +-
crypto/external/bsd/heimdal/dist/lib/krb5/crc.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/krb5/creds.c | 17 +-
crypto/external/bsd/heimdal/dist/lib/krb5/crypto-aes-sha1.c | 174 +
crypto/external/bsd/heimdal/dist/lib/krb5/crypto-aes-sha2.c | 196 +
crypto/external/bsd/heimdal/dist/lib/krb5/crypto-algs.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/krb5/crypto-arcfour.c | 53 +-
crypto/external/bsd/heimdal/dist/lib/krb5/crypto-des-common.c | 23 +-
crypto/external/bsd/heimdal/dist/lib/krb5/crypto-des.c | 10 +-
crypto/external/bsd/heimdal/dist/lib/krb5/crypto-evp.c | 8 +-
crypto/external/bsd/heimdal/dist/lib/krb5/crypto-null.c | 8 +-
crypto/external/bsd/heimdal/dist/lib/krb5/crypto-pk.c | 24 +-
crypto/external/bsd/heimdal/dist/lib/krb5/crypto-rand.c | 87 +-
crypto/external/bsd/heimdal/dist/lib/krb5/crypto-stubs.c | 23 +-
crypto/external/bsd/heimdal/dist/lib/krb5/crypto.c | 1043 ++-
crypto/external/bsd/heimdal/dist/lib/krb5/crypto.h | 44 +-
crypto/external/bsd/heimdal/dist/lib/krb5/data.c | 11 +-
crypto/external/bsd/heimdal/dist/lib/krb5/db_plugin.c | 33 +
crypto/external/bsd/heimdal/dist/lib/krb5/db_plugin.h | 70 +
crypto/external/bsd/heimdal/dist/lib/krb5/dcache.c | 701 ++
crypto/external/bsd/heimdal/dist/lib/krb5/deprecated.c | 170 +-
crypto/external/bsd/heimdal/dist/lib/krb5/derived-key-test.c | 36 +-
crypto/external/bsd/heimdal/dist/lib/krb5/digest.c | 188 +-
crypto/external/bsd/heimdal/dist/lib/krb5/dll.c | 20 +-
crypto/external/bsd/heimdal/dist/lib/krb5/doxygen.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/krb5/enomem.c | 44 +
crypto/external/bsd/heimdal/dist/lib/krb5/error_string.c | 62 +-
crypto/external/bsd/heimdal/dist/lib/krb5/expand_hostname.c | 18 +-
crypto/external/bsd/heimdal/dist/lib/krb5/expand_path.c | 194 +-
crypto/external/bsd/heimdal/dist/lib/krb5/fast.c | 97 +
crypto/external/bsd/heimdal/dist/lib/krb5/fcache.c | 460 +-
crypto/external/bsd/heimdal/dist/lib/krb5/generate_subkey.c | 10 +-
crypto/external/bsd/heimdal/dist/lib/krb5/get_addrs.c | 14 +-
crypto/external/bsd/heimdal/dist/lib/krb5/get_cred.c | 667 +-
crypto/external/bsd/heimdal/dist/lib/krb5/get_default_principal.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/krb5/get_default_realm.c | 9 +-
crypto/external/bsd/heimdal/dist/lib/krb5/get_for_creds.c | 23 +-
crypto/external/bsd/heimdal/dist/lib/krb5/get_host_realm.c | 158 +-
crypto/external/bsd/heimdal/dist/lib/krb5/get_in_tkt.c | 32 +-
crypto/external/bsd/heimdal/dist/lib/krb5/heim_err.et | 6 +
crypto/external/bsd/heimdal/dist/lib/krb5/init_creds.c | 28 +-
crypto/external/bsd/heimdal/dist/lib/krb5/init_creds_pw.c | 881 +++-
crypto/external/bsd/heimdal/dist/lib/krb5/kcm.c | 23 +-
crypto/external/bsd/heimdal/dist/lib/krb5/kerberos.8 | 13 +-
crypto/external/bsd/heimdal/dist/lib/krb5/keyblock.c | 10 +-
crypto/external/bsd/heimdal/dist/lib/krb5/keytab.c | 170 +-
crypto/external/bsd/heimdal/dist/lib/krb5/keytab_any.c | 17 +-
crypto/external/bsd/heimdal/dist/lib/krb5/keytab_file.c | 55 +-
crypto/external/bsd/heimdal/dist/lib/krb5/keytab_keyfile.c | 38 +-
crypto/external/bsd/heimdal/dist/lib/krb5/keytab_memory.c | 21 +-
crypto/external/bsd/heimdal/dist/lib/krb5/krb5-plugin.7 | 247 +
crypto/external/bsd/heimdal/dist/lib/krb5/krb5.h | 72 +-
crypto/external/bsd/heimdal/dist/lib/krb5/krb5_auth_context.3 | 4 +-
crypto/external/bsd/heimdal/dist/lib/krb5/krb5_digest.3 | 4 +-
crypto/external/bsd/heimdal/dist/lib/krb5/krb5_err.et | 7 +-
crypto/external/bsd/heimdal/dist/lib/krb5/krb5_get_creds.3 | 4 +-
crypto/external/bsd/heimdal/dist/lib/krb5/krb5_get_init_creds.3 | 9 +-
crypto/external/bsd/heimdal/dist/lib/krb5/krb5_locl.h | 113 +-
crypto/external/bsd/heimdal/dist/lib/krb5/krb5_parse_name.3 | 3 +-
crypto/external/bsd/heimdal/dist/lib/krb5/krb5_set_default_realm.3 | 4 +-
crypto/external/bsd/heimdal/dist/lib/krb5/krbhst.c | 380 +-
crypto/external/bsd/heimdal/dist/lib/krb5/kuserok.c | 722 ++-
crypto/external/bsd/heimdal/dist/lib/krb5/kuserok_plugin.h | 93 +
crypto/external/bsd/heimdal/dist/lib/krb5/libkrb5-exports.def.in | 74 +-
crypto/external/bsd/heimdal/dist/lib/krb5/locate_plugin.h | 21 +-
crypto/external/bsd/heimdal/dist/lib/krb5/log.c | 90 +-
crypto/external/bsd/heimdal/dist/lib/krb5/mcache.c | 197 +-
crypto/external/bsd/heimdal/dist/lib/krb5/misc.c | 49 +-
crypto/external/bsd/heimdal/dist/lib/krb5/mit_glue.c | 9 +-
crypto/external/bsd/heimdal/dist/lib/krb5/mk_error.c | 51 +-
crypto/external/bsd/heimdal/dist/lib/krb5/mk_priv.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/krb5/mk_rep.c | 9 +-
crypto/external/bsd/heimdal/dist/lib/krb5/mk_req_ext.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/krb5/n-fold-test.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/krb5/n-fold.c | 143 +-
crypto/external/bsd/heimdal/dist/lib/krb5/net_read.c | 11 +-
crypto/external/bsd/heimdal/dist/lib/krb5/padata.c | 9 +-
crypto/external/bsd/heimdal/dist/lib/krb5/pcache.c | 52 +-
crypto/external/bsd/heimdal/dist/lib/krb5/pkinit-ec.c | 243 +
crypto/external/bsd/heimdal/dist/lib/krb5/pkinit.c | 276 +-
crypto/external/bsd/heimdal/dist/lib/krb5/plugin.c | 403 +-
crypto/external/bsd/heimdal/dist/lib/krb5/principal.c | 1246 ++++-
crypto/external/bsd/heimdal/dist/lib/krb5/pseudo-random-test.c | 114 +
crypto/external/bsd/heimdal/dist/lib/krb5/rd_cred.c | 14 +-
crypto/external/bsd/heimdal/dist/lib/krb5/rd_priv.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/krb5/rd_rep.c | 30 +-
crypto/external/bsd/heimdal/dist/lib/krb5/rd_req.c | 142 +-
crypto/external/bsd/heimdal/dist/lib/krb5/rd_safe.c | 7 +-
crypto/external/bsd/heimdal/dist/lib/krb5/recvauth.c | 62 +-
crypto/external/bsd/heimdal/dist/lib/krb5/replay.c | 22 +-
crypto/external/bsd/heimdal/dist/lib/krb5/salt-aes-sha1.c | 104 +
crypto/external/bsd/heimdal/dist/lib/krb5/salt-aes-sha2.c | 137 +
crypto/external/bsd/heimdal/dist/lib/krb5/salt-arcfour.c | 17 +-
crypto/external/bsd/heimdal/dist/lib/krb5/salt-des.c | 10 +-
crypto/external/bsd/heimdal/dist/lib/krb5/salt-des3.c | 22 +-
crypto/external/bsd/heimdal/dist/lib/krb5/scache.c | 70 +-
crypto/external/bsd/heimdal/dist/lib/krb5/send_to_kdc_plugin.h | 15 +-
crypto/external/bsd/heimdal/dist/lib/krb5/sendauth.c | 25 +-
crypto/external/bsd/heimdal/dist/lib/krb5/set_default_realm.c | 13 +-
crypto/external/bsd/heimdal/dist/lib/krb5/sp800-108-kdf.c | 99 +
crypto/external/bsd/heimdal/dist/lib/krb5/store-int.c | 15 +-
crypto/external/bsd/heimdal/dist/lib/krb5/store-int.h | 3 +-
crypto/external/bsd/heimdal/dist/lib/krb5/store.c | 221 +-
crypto/external/bsd/heimdal/dist/lib/krb5/store_emem.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/krb5/store_fd.c | 80 +-
crypto/external/bsd/heimdal/dist/lib/krb5/store_mem.c | 5 +-
crypto/external/bsd/heimdal/dist/lib/krb5/store_sock.c | 161 +
crypto/external/bsd/heimdal/dist/lib/krb5/string-to-key-test.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/krb5/test_alname.c | 105 +-
crypto/external/bsd/heimdal/dist/lib/krb5/test_canon.c | 179 +
crypto/external/bsd/heimdal/dist/lib/krb5/test_cc.c | 97 +-
crypto/external/bsd/heimdal/dist/lib/krb5/test_crypto.c | 8 +-
crypto/external/bsd/heimdal/dist/lib/krb5/test_crypto_wrapping.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/krb5/test_expand_toks.c | 106 +
crypto/external/bsd/heimdal/dist/lib/krb5/test_fx.c | 57 +-
crypto/external/bsd/heimdal/dist/lib/krb5/test_kuserok.c | 9 +-
crypto/external/bsd/heimdal/dist/lib/krb5/test_plugin.c | 9 +-
crypto/external/bsd/heimdal/dist/lib/krb5/test_rfc3961.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/krb5/test_set_kvno0.c | 181 +
crypto/external/bsd/heimdal/dist/lib/krb5/test_store.c | 30 +-
crypto/external/bsd/heimdal/dist/lib/krb5/test_time.c | 8 +-
crypto/external/bsd/heimdal/dist/lib/krb5/ticket.c | 184 +-
crypto/external/bsd/heimdal/dist/lib/krb5/transited.c | 246 +-
crypto/external/bsd/heimdal/dist/lib/krb5/verify_init.c | 23 +-
crypto/external/bsd/heimdal/dist/lib/krb5/verify_krb5_conf.c | 447 +-
crypto/external/bsd/heimdal/dist/lib/krb5/verify_user.c | 9 +-
crypto/external/bsd/heimdal/dist/lib/krb5/warn.c | 21 +-
crypto/external/bsd/heimdal/dist/lib/ntlm/Makefile.am | 7 +-
crypto/external/bsd/heimdal/dist/lib/ntlm/NTMakefile | 2 +-
crypto/external/bsd/heimdal/dist/lib/ntlm/apop.c | 69 +-
crypto/external/bsd/heimdal/dist/lib/ntlm/digest.c | 621 +-
crypto/external/bsd/heimdal/dist/lib/ntlm/heim-auth.h | 31 +-
crypto/external/bsd/heimdal/dist/lib/ntlm/heimntlm.h | 15 +-
crypto/external/bsd/heimdal/dist/lib/ntlm/ntlm.c | 600 +-
crypto/external/bsd/heimdal/dist/lib/ntlm/ntlm_err.et | 38 +-
crypto/external/bsd/heimdal/dist/lib/ntlm/test_commonauth.c | 231 +-
crypto/external/bsd/heimdal/dist/lib/ntlm/test_ntlm.c | 263 +-
crypto/external/bsd/heimdal/dist/lib/otp/Makefile.am | 17 +-
crypto/external/bsd/heimdal/dist/lib/otp/otp.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/otp/otp_challenge.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/otp/otp_db.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/otp/otp_parse.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/otp/otp_print.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/otp/otp_verify.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/otp/otptest.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/roken/Makefile.am | 34 +-
crypto/external/bsd/heimdal/dist/lib/roken/NTMakefile | 41 +-
crypto/external/bsd/heimdal/dist/lib/roken/base64-test.c | 12 +-
crypto/external/bsd/heimdal/dist/lib/roken/base64.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/roken/base64.h | 6 +-
crypto/external/bsd/heimdal/dist/lib/roken/bswap.c | 19 +-
crypto/external/bsd/heimdal/dist/lib/roken/cloexec.c | 11 +-
crypto/external/bsd/heimdal/dist/lib/roken/ct.c | 24 +-
crypto/external/bsd/heimdal/dist/lib/roken/daemon.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/roken/detach.c | 215 +
crypto/external/bsd/heimdal/dist/lib/roken/dirent.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/roken/dlfcn.hin | 12 +-
crypto/external/bsd/heimdal/dist/lib/roken/dlfcn_w32.c | 24 +-
crypto/external/bsd/heimdal/dist/lib/roken/dumpdata.c | 14 +-
crypto/external/bsd/heimdal/dist/lib/roken/getarg.3 | 4 +-
crypto/external/bsd/heimdal/dist/lib/roken/getcap.c | 195 +-
crypto/external/bsd/heimdal/dist/lib/roken/getxxyyy.c | 139 +
crypto/external/bsd/heimdal/dist/lib/roken/glob.c | 18 +-
crypto/external/bsd/heimdal/dist/lib/roken/hex-test.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/roken/issuid.c | 169 +-
crypto/external/bsd/heimdal/dist/lib/roken/memset_s.c | 53 +
crypto/external/bsd/heimdal/dist/lib/roken/mkdir.c | 58 +
crypto/external/bsd/heimdal/dist/lib/roken/ndbm_wrap.c | 14 +-
crypto/external/bsd/heimdal/dist/lib/roken/parse_bytes-test.c | 5 +-
crypto/external/bsd/heimdal/dist/lib/roken/parse_time-test.c | 5 +-
crypto/external/bsd/heimdal/dist/lib/roken/parse_time.3 | 16 +-
crypto/external/bsd/heimdal/dist/lib/roken/rand.c | 33 +-
crypto/external/bsd/heimdal/dist/lib/roken/realloc.c | 3 +-
crypto/external/bsd/heimdal/dist/lib/roken/resolve-test.c | 188 +-
crypto/external/bsd/heimdal/dist/lib/roken/rkpty.c | 12 +-
crypto/external/bsd/heimdal/dist/lib/roken/roken-common.h | 30 +-
crypto/external/bsd/heimdal/dist/lib/roken/roken.awk | 3 +
crypto/external/bsd/heimdal/dist/lib/roken/roken_gethostby.c | 5 +-
crypto/external/bsd/heimdal/dist/lib/roken/rtbl.c | 105 +-
crypto/external/bsd/heimdal/dist/lib/roken/rtbl.h | 6 +-
crypto/external/bsd/heimdal/dist/lib/roken/simple_exec.c | 28 +-
crypto/external/bsd/heimdal/dist/lib/roken/simple_exec_w32.c | 3 +-
crypto/external/bsd/heimdal/dist/lib/roken/sleep.c | 16 +-
crypto/external/bsd/heimdal/dist/lib/roken/snprintf-test.c | 12 +-
crypto/external/bsd/heimdal/dist/lib/roken/snprintf.c | 10 +-
crypto/external/bsd/heimdal/dist/lib/roken/socket.c | 24 +-
crypto/external/bsd/heimdal/dist/lib/roken/stdint.hin | 15 +
crypto/external/bsd/heimdal/dist/lib/roken/strtoll.c | 151 +
crypto/external/bsd/heimdal/dist/lib/roken/strtoull.c | 129 +
crypto/external/bsd/heimdal/dist/lib/roken/test-detach.c | 84 +
crypto/external/bsd/heimdal/dist/lib/roken/test-mem.c | 11 +-
crypto/external/bsd/heimdal/dist/lib/roken/tsearch.c | 9 +-
crypto/external/bsd/heimdal/dist/lib/roken/version-script.map | 19 +-
crypto/external/bsd/heimdal/dist/lib/roken/win32_alloc.c | 78 +
crypto/external/bsd/heimdal/dist/lib/roken/write_pid.c | 68 +-
crypto/external/bsd/heimdal/dist/lib/sl/Makefile.am | 6 +-
crypto/external/bsd/heimdal/dist/lib/sl/NTMakefile | 2 +-
crypto/external/bsd/heimdal/dist/lib/sl/sl.c | 110 +-
crypto/external/bsd/heimdal/dist/lib/sl/sl.h | 4 +-
crypto/external/bsd/heimdal/dist/lib/sl/slc-gram.y | 20 +-
crypto/external/bsd/heimdal/dist/lib/vers/Makefile.am | 2 +-
crypto/external/bsd/heimdal/dist/lib/wind/NTMakefile | 16 +-
crypto/external/bsd/heimdal/dist/lib/wind/bidi.c | 6 +-
crypto/external/bsd/heimdal/dist/lib/wind/combining.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/wind/errorlist.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/wind/gen-bidi.py | 2 +-
crypto/external/bsd/heimdal/dist/lib/wind/gen-combining.py | 2 +-
crypto/external/bsd/heimdal/dist/lib/wind/gen-errorlist.py | 2 +-
crypto/external/bsd/heimdal/dist/lib/wind/gen-normalize.py | 2 +-
crypto/external/bsd/heimdal/dist/lib/wind/libwind-exports.def | 1 +
crypto/external/bsd/heimdal/dist/lib/wind/map.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/wind/normalize.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/wind/test-normalize.c | 4 +-
crypto/external/bsd/heimdal/dist/lib/wind/test-utf8.c | 38 +-
crypto/external/bsd/heimdal/dist/packages/Makefile.am | 2 +-
crypto/external/bsd/heimdal/dist/packages/mac/mac.sh | 4 +
crypto/external/bsd/heimdal/dist/packages/windows/assembly/Heimdal.Kerberos.manifest.in | 4 +
crypto/external/bsd/heimdal/dist/packages/windows/assembly/NTMakefile | 39 +-
crypto/external/bsd/heimdal/dist/packages/windows/installer/NTMakefile | 116 +-
crypto/external/bsd/heimdal/dist/packages/windows/installer/heimdal-assemblies.wxs | 26 +-
crypto/external/bsd/heimdal/dist/packages/windows/installer/heimdal-command.wxs | 277 +
crypto/external/bsd/heimdal/dist/packages/windows/installer/heimdal-gss.wxs | 94 +
crypto/external/bsd/heimdal/dist/packages/windows/installer/heimdal-installer.wxs | 132 +-
crypto/external/bsd/heimdal/dist/packages/windows/installer/heimdal-policy.wxs | 5 +-
crypto/external/bsd/heimdal/dist/packages/windows/installer/images/Heimdal_banner.bmp | Bin
crypto/external/bsd/heimdal/dist/packages/windows/installer/images/Heimdal_banner.png | Bin
crypto/external/bsd/heimdal/dist/packages/windows/installer/images/Heimdal_dialog.bmp | Bin
crypto/external/bsd/heimdal/dist/packages/windows/installer/images/Heimdal_dialog.png | Bin
crypto/external/bsd/heimdal/dist/packages/windows/sdk/NTMakefile | 1 +
crypto/external/bsd/heimdal/dist/po/heimdal_krb5/heimdal_krb5.pot | 4 +-
crypto/external/bsd/heimdal/dist/po/heimdal_krb5/sv_SE.po | 4 +-
crypto/external/bsd/heimdal/dist/tests/Makefile.am | 2 +-
crypto/external/bsd/heimdal/dist/tests/bin/Makefile.am | 8 +
crypto/external/bsd/heimdal/dist/tests/bin/intr.c | 58 +
crypto/external/bsd/heimdal/dist/tests/bin/setup-env.in | 19 +-
crypto/external/bsd/heimdal/dist/tests/can/check-can.in | 2 +-
crypto/external/bsd/heimdal/dist/tests/can/krb5.conf.in | 4 +
crypto/external/bsd/heimdal/dist/tests/can/mit-pkinit-20070607.xf | 3 +
crypto/external/bsd/heimdal/dist/tests/can/test_can.in | 2 +-
crypto/external/bsd/heimdal/dist/tests/db/Makefile.am | 19 +-
crypto/external/bsd/heimdal/dist/tests/db/add-modify-delete.in | 5 +-
crypto/external/bsd/heimdal/dist/tests/db/check-aliases.in | 5 +-
crypto/external/bsd/heimdal/dist/tests/db/check-dbinfo.in | 5 +-
crypto/external/bsd/heimdal/dist/tests/db/have-db.in | 16 +-
crypto/external/bsd/heimdal/dist/tests/db/krb5-mit.conf.in | 4 +
crypto/external/bsd/heimdal/dist/tests/db/krb5.conf.in | 6 +-
crypto/external/bsd/heimdal/dist/tests/db/loaddump-db.in | 20 +-
crypto/external/bsd/heimdal/dist/tests/gss/Makefile.am | 30 +-
crypto/external/bsd/heimdal/dist/tests/gss/check-basic.in | 34 +-
crypto/external/bsd/heimdal/dist/tests/gss/check-context.in | 43 +-
crypto/external/bsd/heimdal/dist/tests/gss/check-gssmask.in | 13 +-
crypto/external/bsd/heimdal/dist/tests/gss/check-ntlm.in | 13 +-
crypto/external/bsd/heimdal/dist/tests/gss/check-spnego.in | 17 +-
crypto/external/bsd/heimdal/dist/tests/gss/krb5.conf.in | 6 +
crypto/external/bsd/heimdal/dist/tests/java/Makefile.am | 1 +
crypto/external/bsd/heimdal/dist/tests/java/check-kinit.in | 76 +-
crypto/external/bsd/heimdal/dist/tests/java/jaas.conf | 9 +
crypto/external/bsd/heimdal/dist/tests/java/krb5.conf.in | 4 +
crypto/external/bsd/heimdal/dist/tests/kdc/Makefile.am | 227 +-
crypto/external/bsd/heimdal/dist/tests/kdc/an2ln-db.txt | 143 +
crypto/external/bsd/heimdal/dist/tests/kdc/check-authz.in | 153 +
crypto/external/bsd/heimdal/dist/tests/kdc/check-canon.in | 210 +
crypto/external/bsd/heimdal/dist/tests/kdc/check-cc.in | 12 +-
crypto/external/bsd/heimdal/dist/tests/kdc/check-delegation.in | 12 +-
crypto/external/bsd/heimdal/dist/tests/kdc/check-des.in | 12 +-
crypto/external/bsd/heimdal/dist/tests/kdc/check-digest.in | 13 +-
crypto/external/bsd/heimdal/dist/tests/kdc/check-fast.in | 183 +
crypto/external/bsd/heimdal/dist/tests/kdc/check-hdb-mitdb.in | 111 +
crypto/external/bsd/heimdal/dist/tests/kdc/check-iprop.in | 290 +-
crypto/external/bsd/heimdal/dist/tests/kdc/check-kadmin.in | 66 +-
crypto/external/bsd/heimdal/dist/tests/kdc/check-kdc.in | 344 +-
crypto/external/bsd/heimdal/dist/tests/kdc/check-kinit.in | 149 +
crypto/external/bsd/heimdal/dist/tests/kdc/check-kpasswdd.in | 18 +-
crypto/external/bsd/heimdal/dist/tests/kdc/check-pkinit.in | 12 +-
crypto/external/bsd/heimdal/dist/tests/kdc/check-referral.in | 15 +-
crypto/external/bsd/heimdal/dist/tests/kdc/check-tester.in | 118 +
crypto/external/bsd/heimdal/dist/tests/kdc/check-uu.in | 13 +-
crypto/external/bsd/heimdal/dist/tests/kdc/hdb-mitdb | Bin
crypto/external/bsd/heimdal/dist/tests/kdc/hdb-mitdb.kadm5 | Bin
crypto/external/bsd/heimdal/dist/tests/kdc/hdb-mitdb.mkey | Bin
crypto/external/bsd/heimdal/dist/tests/kdc/heimdal.acl | 4 +
crypto/external/bsd/heimdal/dist/tests/kdc/k5login/foo | 1 +
crypto/external/bsd/heimdal/dist/tests/kdc/kdc-tester1.json | 31 +
crypto/external/bsd/heimdal/dist/tests/kdc/kdc-tester2.json | 12 +
crypto/external/bsd/heimdal/dist/tests/kdc/kdc-tester3.json | 23 +
crypto/external/bsd/heimdal/dist/tests/kdc/kdc-tester4.json.in | 22 +
crypto/external/bsd/heimdal/dist/tests/kdc/krb5-authz.conf.in | 26 +
crypto/external/bsd/heimdal/dist/tests/kdc/krb5-authz2.conf.in | 27 +
crypto/external/bsd/heimdal/dist/tests/kdc/krb5-canon.conf.in | 100 +
crypto/external/bsd/heimdal/dist/tests/kdc/krb5-canon2.conf.in | 97 +
crypto/external/bsd/heimdal/dist/tests/kdc/krb5-hdb-mitdb.conf.in | 60 +
crypto/external/bsd/heimdal/dist/tests/kdc/krb5-pkinit.conf.in | 5 +
crypto/external/bsd/heimdal/dist/tests/kdc/krb5.conf.in | 75 +-
crypto/external/bsd/heimdal/dist/tests/kdc/krb5.conf.keys.in | 5 +
crypto/external/bsd/heimdal/dist/tests/kdc/leaks-kill.sh | 45 +-
crypto/external/bsd/heimdal/dist/tests/kdc/wait-kdc.sh | 15 +-
crypto/external/bsd/heimdal/dist/tests/ldap/Makefile.am | 4 +-
crypto/external/bsd/heimdal/dist/tests/ldap/check-ldap.in | 23 +-
crypto/external/bsd/heimdal/dist/tests/ldap/krb5.conf.in | 7 +-
crypto/external/bsd/heimdal/dist/tests/ldap/slapd-init.in | 15 +-
crypto/external/bsd/heimdal/dist/tests/ldap/slapd.conf | 3 +-
crypto/external/bsd/heimdal/dist/tests/plugin/Makefile.am | 1 +
crypto/external/bsd/heimdal/dist/tests/plugin/check-pac.in | 13 +-
crypto/external/bsd/heimdal/dist/tests/plugin/krb5.conf.in | 4 +
crypto/external/bsd/heimdal/dist/tests/plugin/windc.c | 4 +-
crypto/external/bsd/heimdal/dist/tools/Makefile.am | 25 +-
crypto/external/bsd/heimdal/dist/tools/heimdal-gssapi.pc.in | 10 +-
crypto/external/bsd/heimdal/dist/tools/heimdal-kadm-client.pc.in | 11 +
crypto/external/bsd/heimdal/dist/tools/heimdal-kadm-server.pc.in | 12 +
crypto/external/bsd/heimdal/dist/tools/heimdal-krb5.pc.in | 12 +
crypto/external/bsd/heimdal/dist/tools/kadm-client.pc.in | 10 +
crypto/external/bsd/heimdal/dist/tools/kadm-server.pc.in | 10 +
crypto/external/bsd/heimdal/dist/tools/kafs.pc.in | 10 +
crypto/external/bsd/heimdal/dist/tools/krb5-config.1 | 6 +-
crypto/external/bsd/heimdal/dist/tools/krb5-config.in | 154 +-
crypto/external/bsd/heimdal/dist/tools/krb5-gssapi.pc.in | 10 +
crypto/external/bsd/heimdal/dist/tools/krb5.pc.in | 10 +
crypto/external/bsd/heimdal/dist/windows/NTMakefile.config | 39 +-
crypto/external/bsd/heimdal/dist/windows/NTMakefile.version | 35 +-
crypto/external/bsd/heimdal/dist/windows/NTMakefile.w32 | 118 +-
crypto/external/bsd/heimdal/dist/windows/README.md | 165 +
crypto/external/bsd/heimdal/dist/windows/version.rc | 4 +-
937 files changed, 55423 insertions(+), 12671 deletions(-)
diffs (truncated from 104335 to 300 lines):
diff -r 135fc123cb83 -r 1f957ce83654 crypto/external/bsd/heimdal/dist/LICENSE
--- a/crypto/external/bsd/heimdal/dist/LICENSE Sat Jan 28 19:19:41 2017 +0000
+++ b/crypto/external/bsd/heimdal/dist/LICENSE Sat Jan 28 20:46:41 2017 +0000
@@ -1,4 +1,4 @@
-Copyright (c) 1995 - 2011 Kungliga Tekniska Högskolan
+Copyright (c) 1995 - 2014 Kungliga Tekniska Högskolan
(Royal Institute of Technology, Stockholm, Sweden).
All rights reserved.
diff -r 135fc123cb83 -r 1f957ce83654 crypto/external/bsd/heimdal/dist/Makefile.am
--- a/crypto/external/bsd/heimdal/dist/Makefile.am Sat Jan 28 19:19:41 2017 +0000
+++ b/crypto/external/bsd/heimdal/dist/Makefile.am Sat Jan 28 20:46:41 2017 +0000
@@ -6,7 +6,7 @@
kcm_dir = kcm
endif
-SUBDIRS= include base lib kuser kdc admin kadmin kpasswd
+SUBDIRS= include lib kuser kdc admin kadmin kpasswd
SUBDIRS+= $(kcm_dir) appl tools tests packages etc po
if HEIMDAL_DOCUMENTATION
@@ -38,6 +38,7 @@
autogen.sh \
krb5.conf \
cf/make-proto.pl \
+ cf/roken-h-process.pl \
cf/install-catman.sh \
cf/ChangeLog \
cf/c-function.m4 \
@@ -52,6 +53,13 @@
cf/krb-version.m4 \
cf/roken.m4 \
cf/valgrind-suppressions \
+ cf/maybe-valgrind.sh \
+ cf/symbol-version.py \
+ cf/w32-check-exported-symbols.pl \
+ cf/w32-def-from-dll.pl \
+ cf/w32-detect-vc-version.pl \
+ cf/w32-hh-toc-from-info.pl \
+ cf/w32-list-externs-from-objs.pl \
cf/vararray.m4
print-distdir:
diff -r 135fc123cb83 -r 1f957ce83654 crypto/external/bsd/heimdal/dist/NEWS
--- a/crypto/external/bsd/heimdal/dist/NEWS Sat Jan 28 19:19:41 2017 +0000
+++ b/crypto/external/bsd/heimdal/dist/NEWS Sat Jan 28 20:46:41 2017 +0000
@@ -1,3 +1,134 @@
+Release Notes - Heimdal - Version Heimdal 7.1
+
+ Security
+
+ - kx509 realm-chopping security bug
+ - non-authorization of alias additions/removals in kadmind
+ (CVE-2016-2400)
+
+ Feature
+
+ - iprop has been revamped to fix a number of race conditions that could
+ lead to inconsistent replication
+ - Hierarchical capath support
+ - AES Encryption with HMAC-SHA2 for Kerberos 5
+ draft-ietf-kitten-aes-cts-hmac-sha2-11
+ - hcrypto is now thread safe on all platforms
+ - libhcrypto has new backends: CNG (Windows), PKCS#11 (mainly for
+ Solaris), and OpenSSL. OpenSSL is now a first-class libhcrypto backend.
+ OpenSSL 1.0.x and 1.1 are both supported. AES-NI used when supported by
+ backend
+ - HDB now supports LMDB
+ - Thread support on Windows
+ - RFC 6113 Generalized Framework for Kerberos Pre-Authentication (FAST)
+ - New GSS APIs:
+ . gss_localname
+ - Allow setting what encryption types a principal should have with
+ [kadmin] default_key_rules, see krb5.conf manpage for more info
+ - Unify libhcrypto with LTC (libtomcrypto)
+ - asn1_compile 64-bit INTEGER functionality
+ - HDB key history support including --keepold kadmin password option
+ - Improved cross-realm key rollover safety
+ - New krb5_kuserok() and krb5_aname_to_localname() plug-in interfaces
+ - Improved MIT compatibility
+ . kadm5 API
+ . Migration from MIT KDB via "mitdb" HDB backend
+ . Capable of writing the HDB in MIT dump format
+ - Improved Active Directory interoperability
+ . Enctype selection issues for PAC and other authz-data signatures
+ . Cross realm key rollover (kvno 0)
+ - New [kdc] enctype negotiation configuration:
+ . tgt-use-strongest-session-key
+ . svc-use-strongest-session-key
+ . preauth-use-strongest-session-key
+ . use-strongest-server-key
+ - The KDC process now uses a multi-process model improving
+ resiliency and performance
+ - Allow batch-mode kinit with password file
+ - SIGINFO support added to kinit cmd
+ - New kx509 configuration options:
+ . kx509_ca
+ . kca_service
+ . kx509_include_pkinit_san
+ . kx509_template
+ - Improved Heimdal library/plugin version safety
+ - Name canonicalization
+ . DNS resolver searchlist
+ . Improved referral support
+ . Support host:port host-based services
+ - Pluggable libheimbase interface for DBs
+ - Improve IPv6 Support
+ - LDAP
+ . Bind DN and password
+ . Start TLS
+ - klist --json
+ - DIR credential cache type
+ - Updated upstream SQLite and libedit
+ - Removed legacy applications: ftp, kx, login, popper, push, rcp, rsh,
+ telnet, xnlock
+ - Completely remove RAND_egd support
+ - Moved kadmin and ktutil to /usr/bin
+ - Stricter fcache checks (see fcache_strict_checking krb5.conf setting)
+ . use O_NOFOLLOW
+ . don't follow symlinks
+ . require cache files to be owned by the user
+ . require sensible permissions (not group/other readable)
+ - Implemented gss_store_cred()
+ - Many more
+
+ Bug fixes
+ - iprop has been revamped to fix a number of race conditions that could
+ lead to data loss
+ - Include non-loopback addresses assigned to loopback interfaces
+ when requesting tickets with addresses
+ - KDC 1DES session key selection (for AFS rxkad-k5 compatibility)
+ - Keytab file descriptor and lock leak
+ - Credential cache corruption bugs
+ (NOTE: The FILE ccache is still not entirely safe due to the
+ fundamentally unsafe design of POSIX file locking)
+ - gss_pseudo_random() interop bug
+ - Plugins are now preferentially loaded from the run-time install tree
+ - Reauthentication after password change in init_creds_password
+ - Memory leak in the client kadmin library
+ - TGS client requests renewable/forwardable/proxiable when possible
+ - Locking issues in DB1 and DB3 HDB backends
+ - Master HDB can remain locked while waiting for network I/O
+ - Renewal/refresh logic when kinit is provided with a command
+ - KDC handling of enterprise principals
+ - Use correct bit for anon-pkinit
+ - Many more
+
+ Acknowledgements
+
+ This release of Heimdal includes contributions from:
+
+ Abhinav Upadhyay Heath Kehoe Nico Williams
+ Andreas Schneider Henry Jacques Patrik Lundin
+ Andrew Bartlett Howard Chu Philip Boulain
+ Andrew Tridgell Igor Sobrado Ragnar Sundblad
+ Antoine Jacoutot Ingo Schwarze Remi Ferrand
+ Arran Cudbard-Bell Jakub Ä?ajka Rod Widdowson
+ Arvid Requate James Le Cuirot Rok Papež
+ Asanka Herath James Lee Roland C. Dowdeswell
+ Ben Kaduk Jeffrey Altman Ross L Richardson
+ Benjamin Kaduk Jeffrey Clark Russ Allbery
+ Bernard Spil Jeffrey Hutzelman Samuel Cabrero
+ Brian May Jelmer Vernooij Samuel Thibault
+ Chas Williams Ken Dreyer Santosh Kumar Pradhan
+ Chaskiel Grundman Kiran S J Sean Davis
+ Dana Koch Kumar Thangavelu Sergio Gelato
+ Daniel Schepler Landon Fuller Simon Wilkinson
+ David Mulder Linus Nordberg Stef Walter
+ Douglas Bagnall Love Hörnquist �strand Stefan Metzmacher
+ Ed Maste Luke Howard Steffen Jaeckel
+ Eray Aslan Magnus Ahltorp Timothy Pearson
+ Florian Best Marc Balmer Tollef Fog Heen
+ Fredrik Pettai Marcin CieÅ?lak Tony Acero
+ Greg Hudson Marco Molteni Uri Simchoni
+ Gustavo Zacarias Matthieu Hautreux Viktor Dukhovni
+ Günther Deschner Michael Meffie Volker Lendecke
+ Harald Barth Moritz Lenz
+
Release Notes - Heimdal - Version Heimdal 1.5.3
Bug fixes
diff -r 135fc123cb83 -r 1f957ce83654 crypto/external/bsd/heimdal/dist/NTMakefile
--- a/crypto/external/bsd/heimdal/dist/NTMakefile Sat Jan 28 19:19:41 2017 +0000
+++ b/crypto/external/bsd/heimdal/dist/NTMakefile Sat Jan 28 20:46:41 2017 +0000
@@ -29,12 +29,17 @@
# POSSIBILITY OF SUCH DAMAGE.
#
-!if exist(thirdparty/NTMakefile)
+!if exist("thirdparty\NTMakefile")
thirdparty=thirdparty
!endif
-SUBDIRS = include lib\roken base lib kuser kdc admin kadmin kpasswd appl doc \
+!ifdef APPVEYOR
+SUBDIRS = include lib kuser kdc admin kadmin kpasswd appl doc \
+ tools tests packages etc
+!else
+SUBDIRS = include lib kuser kdc admin kadmin kpasswd appl doc \
tools tests packages etc $(thirdparty) packages\windows\installer
+!endif
!include windows/NTMakefile.w32
diff -r 135fc123cb83 -r 1f957ce83654 crypto/external/bsd/heimdal/dist/README.fast
--- /dev/null Thu Jan 01 00:00:00 1970 +0000
+++ b/crypto/external/bsd/heimdal/dist/README.fast Sat Jan 28 20:46:41 2017 +0000
@@ -0,0 +1,17 @@
+
+-- in order of preference
+
+- client: support KRB5_PADATA_ENCRYPTED_CHALLENGE in lib/krb5/init_creds_pw.c
+- client: don't support ENC-TS in FAST
+
+- client: plugin support for fast plugins
+
+- kdc: plugin support for fast plugins
+ partly done with "struct kdc_patypes"
+
+- kcm: support FAST armor ticket
+-- using PK-INIT anonymous
+-- using host key
+
+- client: tgs-req fast support
+- kdc: tgs-req fast support
diff -r 135fc123cb83 -r 1f957ce83654 crypto/external/bsd/heimdal/dist/admin/Makefile.am
--- a/crypto/external/bsd/heimdal/dist/admin/Makefile.am Sat Jan 28 19:19:41 2017 +0000
+++ b/crypto/external/bsd/heimdal/dist/admin/Makefile.am Sat Jan 28 20:46:41 2017 +0000
@@ -2,11 +2,11 @@
include $(top_srcdir)/Makefile.am.common
-AM_CPPFLAGS += $(INCLUDE_readline) $(INCLUDE_hcrypto)
+AM_CPPFLAGS += $(INCLUDE_readline)
-man_MANS = ktutil.8
+man_MANS = ktutil.1
-sbin_PROGRAMS = ktutil
+bin_PROGRAMS = ktutil
dist_ktutil_SOURCES = \
add.c \
diff -r 135fc123cb83 -r 1f957ce83654 crypto/external/bsd/heimdal/dist/admin/add.c
--- a/crypto/external/bsd/heimdal/dist/admin/add.c Sat Jan 28 19:19:41 2017 +0000
+++ b/crypto/external/bsd/heimdal/dist/admin/add.c Sat Jan 28 20:46:41 2017 +0000
@@ -1,4 +1,4 @@
-/* $NetBSD: add.c,v 1.1.1.2 2014/04/24 12:45:26 pettai Exp $ */
+/* $NetBSD: add.c,v 1.1.1.3 2017/01/28 20:46:41 christos Exp $ */
/*
* Copyright (c) 1997-2005 Kungliga Tekniska Högskolan
@@ -35,7 +35,7 @@
#include "ktutil_locl.h"
-__RCSID("NetBSD");
+__RCSID("$NetBSD: add.c,v 1.1.1.3 2017/01/28 20:46:41 christos Exp $");
static char *
readstring(const char *prompt, char *buf, size_t len)
diff -r 135fc123cb83 -r 1f957ce83654 crypto/external/bsd/heimdal/dist/admin/change.c
--- a/crypto/external/bsd/heimdal/dist/admin/change.c Sat Jan 28 19:19:41 2017 +0000
+++ b/crypto/external/bsd/heimdal/dist/admin/change.c Sat Jan 28 20:46:41 2017 +0000
@@ -1,4 +1,4 @@
-/* $NetBSD: change.c,v 1.1.1.2 2014/04/24 12:45:26 pettai Exp $ */
+/* $NetBSD: change.c,v 1.1.1.3 2017/01/28 20:46:41 christos Exp $ */
/*
* Copyright (c) 1997-2005 Kungliga Tekniska Högskolan
@@ -35,7 +35,7 @@
#include "ktutil_locl.h"
-__RCSID("NetBSD");
+__RCSID("$NetBSD: change.c,v 1.1.1.3 2017/01/28 20:46:41 christos Exp $");
static krb5_error_code
change_entry (krb5_keytab keytab,
diff -r 135fc123cb83 -r 1f957ce83654 crypto/external/bsd/heimdal/dist/admin/copy.c
--- a/crypto/external/bsd/heimdal/dist/admin/copy.c Sat Jan 28 19:19:41 2017 +0000
+++ b/crypto/external/bsd/heimdal/dist/admin/copy.c Sat Jan 28 20:46:41 2017 +0000
@@ -1,4 +1,4 @@
-/* $NetBSD: copy.c,v 1.1.1.2 2014/04/24 12:45:26 pettai Exp $ */
+/* $NetBSD: copy.c,v 1.1.1.3 2017/01/28 20:46:41 christos Exp $ */
/*
* Copyright (c) 1997-2004 Kungliga Tekniska Högskolan
@@ -35,7 +35,7 @@
#include "ktutil_locl.h"
-__RCSID("NetBSD");
+__RCSID("$NetBSD: copy.c,v 1.1.1.3 2017/01/28 20:46:41 christos Exp $");
static krb5_boolean
diff -r 135fc123cb83 -r 1f957ce83654 crypto/external/bsd/heimdal/dist/admin/get.c
--- a/crypto/external/bsd/heimdal/dist/admin/get.c Sat Jan 28 19:19:41 2017 +0000
+++ b/crypto/external/bsd/heimdal/dist/admin/get.c Sat Jan 28 20:46:41 2017 +0000
Home |
Main Index |
Thread Index |
Old Index