[krbdev.mit.edu #7680] git commit

[Greg Hudson via RT]

Add support for PKINIT deferring identity prompts

Learn to manage a list of deferred identities, for which we want to
prompt for passwords or PINs, in pkinit_identity_crypto_context
structures, along with their associated token flags.  These are opaque
outside of pkinit_crypto_openssl and pkinit_crypto_nss, so both
implementations need to provide wrapper functions that can be called
from elsewhere in the module to populate and query the lists.

https://github.com/krb5/krb5/commit/805cd6078b5970750b979bd97b4b9f6147e1fd0d
Author: Nalin Dahyabhai <nalin at redhat.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 805cd6078b5970750b979bd97b4b9f6147e1fd0d
Branch: master
 src/plugins/preauth/pkinit/pkinit.h                |   21 ++++
 src/plugins/preauth/pkinit/pkinit_crypto.h         |   11 ++
 src/plugins/preauth/pkinit/pkinit_crypto_nss.c     |   40 +++++++
 src/plugins/preauth/pkinit/pkinit_crypto_openssl.c |   38 +++++++
 src/plugins/preauth/pkinit/pkinit_crypto_openssl.h |    2 +
 src/plugins/preauth/pkinit/pkinit_identity.c       |  114 ++++++++++++++++++++
 6 files changed, 226 insertions(+), 0 deletions(-)