svn rev #25308: trunk/src/plugins/preauth/pkinit/

[hartmans@MIT.EDU]

http://src.mit.edu/fisheye/changelog/krb5/?cs=25308
Commit By: hartmans
Log Message:
Pkinit: offer supported KDFs in client

From: Sam Hartman <hartmans at debian.org>


Changed Files:
U   trunk/src/plugins/preauth/pkinit/pkinit_clnt.c
Modified: trunk/src/plugins/preauth/pkinit/pkinit_clnt.c
===================================================================
--- trunk/src/plugins/preauth/pkinit/pkinit_clnt.c	2011-10-05 21:30:28 UTC (rev 25307)
+++ trunk/src/plugins/preauth/pkinit/pkinit_clnt.c	2011-10-05 21:30:31 UTC (rev 25308)
@@ -282,6 +282,7 @@
         auth_pack->pkAuthenticator.paChecksum = *cksum;
         auth_pack->clientDHNonce.length = 0;
         auth_pack->clientPublicValue = info;
+        auth_pack->supportedKDFs = (krb5_octet_data **) supported_kdf_alg_ids;
 
         /* add List of CMS algorithms */
         retval = create_krb5_supportedCMSTypes(context, plgctx->cryptoctx,
@@ -454,6 +455,7 @@
 cleanup:
     switch((int)reqctx->pa_type) {
     case KRB5_PADATA_PK_AS_REQ:
+        auth_pack->supportedKDFs = NULL; /*alias to global constant*/
         free_krb5_auth_pack(&auth_pack);
         free_krb5_pa_pk_as_req(&req);
         break;