r21880: pkinit and k5-int.h

Sam Hartman hartmans at painless-security.com
Sat Mar 21 07:35:49 EDT 2009


>>>>> "Greg" == Greg Hudson <ghudson at MIT.EDU> writes:

    Greg> On Fri, 2009-03-20 at 16:47 -0400, Sam Hartman wrote:
    >> One of the goals of the pkinit plugin was to try and minimize
    >> internal dependencies and to use public interfaces where
    >> possible.  We made an explicit decision that there was no good
    >> way to get pkinit ASN.1 encoders and decoders using public
    >> interfaces, so k5-int-pkinit.h was created.

    Greg> No argument with your proposed change, but:

    Greg> pkinit_profile.c also uses k5-int.h and references
    Greg> context->profile.  I assume it should be using
    Greg> krb5_get_profile?

Yes.



More information about the krbdev mailing list