Make KRB5SignedPath less fragile, only sign trivial parts of the encTicketPart
commitc1a54a5e3713fd760d0994dbdb2dee97d353f906
authorLove Hornquist Astrand <lha@h5l.org>
Wed, 12 Aug 2009 21:05:36 +0000 (12 23:05 +0200)
committerLove Hornquist Astrand <lha@h5l.org>
Wed, 12 Aug 2009 21:05:36 +0000 (12 23:05 +0200)
tree66373a6c63df9cd0249b20e8eb02cdc51573581e
parent1011050f654051c6e51b7b04167280e18af4a602
Make KRB5SignedPath less fragile, only sign trivial parts of the encTicketPart

Sign the client and auth time (like its done in the PAC) and let that
be ehough for now. Add a Typed hole so that we don't break wireprotocol
next time.
kdc/kerberos5.c
kdc/krb5tgs.c
lib/asn1/krb5.asn1