[16248] in Kerberos-V5-bugs

home help back first fref pref prev next nref lref last post

[krbdev.mit.edu #8784] git commit

daemon@ATHENA.MIT.EDU (Greg Hudson via RT)
Mon Feb 25 12:08:24 2019

Mail-followup-to: rt@krbdev.mit.edu
mail-copies-to: never
From: Greg Hudson via RT <rt-comment@KRBDEV-PROD-APP-1.mit.edu>
In-Reply-To: <rt-8784@krbdev.mit.edu>
Message-ID: <rt-8784-49296.14.9227355847349@krbdev.mit.edu>
To: "'AdminCc of krbdev.mit.edu Ticket #8784'":;
Date: Mon, 25 Feb 2019 12:08:13 -0500
MIME-Version: 1.0
Reply-To: rt-comment@KRBDEV-PROD-APP-1.mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu


Use better name type for PKINIT KDC certs

RFC 4120 recommends NT-SRV-INST for krbtgt principals; use it in
PKINIT KDC certificates rather than NT-PRINCIPAL.  Regenerate test
certificates.  Reported by Rick van Rein.

https://github.com/krb5/krb5/commit/3a67736bb9b7873d26a44a7d32b98a2da98d2db6
Author: Greg Hudson <ghudson@mit.edu>
Commit: 3a67736bb9b7873d26a44a7d32b98a2da98d2db6
Branch: master
 doc/admin/pkinit.rst                           |    2 +-
 src/tests/dejagnu/pkinit-certs/ca.pem          |   32 +++++++-------
 src/tests/dejagnu/pkinit-certs/generic.p12     |  Bin 2477 -> 2477 bytes
 src/tests/dejagnu/pkinit-certs/generic.pem     |   26 ++++++------
 src/tests/dejagnu/pkinit-certs/kdc.pem         |   34 ++++++++--------
 src/tests/dejagnu/pkinit-certs/make-certs.sh   |    3 +-
 src/tests/dejagnu/pkinit-certs/privkey-enc.pem |   52 ++++++++++++------------
 src/tests/dejagnu/pkinit-certs/privkey.pem     |   50 +++++++++++-----------
 src/tests/dejagnu/pkinit-certs/user-enc.p12    |  Bin 2837 -> 2837 bytes
 src/tests/dejagnu/pkinit-certs/user-upn.p12    |  Bin 2829 -> 2829 bytes
 src/tests/dejagnu/pkinit-certs/user-upn.pem    |   30 +++++++-------
 src/tests/dejagnu/pkinit-certs/user-upn2.p12   |  Bin 2813 -> 2813 bytes
 src/tests/dejagnu/pkinit-certs/user-upn2.pem   |   32 +++++++-------
 src/tests/dejagnu/pkinit-certs/user-upn3.p12   |  Bin 2829 -> 2829 bytes
 src/tests/dejagnu/pkinit-certs/user-upn3.pem   |   30 +++++++-------
 src/tests/dejagnu/pkinit-certs/user.p12        |  Bin 2837 -> 2837 bytes
 src/tests/dejagnu/pkinit-certs/user.pem        |   30 +++++++-------
 17 files changed, 161 insertions(+), 160 deletions(-)

_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs

home help back first fref pref prev next nref lref last post