[PKINIT]Invalid response for AS_REQ with win 2003 sever
akshar kanak
akshar.kerberos at gmail.com
Sun Nov 1 09:02:06 EST 2009
Dear team
I ma trying to perfrom Kerberos PKINIT authnetication with windows
2003 server .the clinet is able to send AS_REQ packet but the server is
responding with KRB5KRB_AP_ERR_MODIFIED .In RFC 4120 i could not find
whether KRB5KRB_AP_ERR_MODIFIED is a proper error response for AS_REQ .
In the MIT 1.6.3 soucre code in file Pkinit_crypto_openssl , in function
cms_signeddata_create()
/* Some tokens can only do RSAEncryption without sha1 hash */
/* to compute sha1WithRSAEncryption, encode the algorithm ID for the
hash
* function and the hash value into an ASN.1 value of type DigestInfo
* DigestInfo::=SEQUENCE {
* digestAlgorithm AlgorithmIdentifier,
* digest OCTET STRING }
*/
Are there any specific cards for which this fix needs to be appiled ?
Thanks in advance
Thanks and Regards
Akshar
More information about the Kerberos
mailing list