summaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
authorjlam <jlam>2008-02-28 14:11:55 +0000
committerjlam <jlam>2008-02-28 14:11:55 +0000
commit9a88c7dbdcec42063ecb6afbd7ce28204aaf221c (patch)
tree208a4e0f75ad5d5ef4c8fae6dc99bff8826c69fe /doc
parent9131ac52b5ae5bba52b0d9956b1cfe66d7bae100 (diff)
downloadpkgsrc-9a88c7dbdcec42063ecb6afbd7ce28204aaf221c.tar.gz
Update security/heimdal to version 1.1. Changes from version 0.7.2 include:
* Read-only PKCS11 provider built-in to hx509. * Better compatibilty with Windows 2008 Server pre-releases and Vista. * Add RFC3526 modp group14 as default. * Handle [kdc] database = { } entries without realm = stanzas. * Add gss_pseudo_random() for mechglue and krb5. * Make session key for the krbtgt be selected by the best encryption type of the client. * Better interoperability with other PK-INIT implementations. * Alias support for inital ticket requests. * Make ASN.1 library less paranoid to with regard to NUL in string to make it inter-operate with MIT Kerberos again. * PK-INIT support. * HDB extensions support, used by PK-INIT. * New ASN.1 compiler. * GSS-API mechglue from FreeBSD. * Updated SPNEGO to support RFC4178. * Support for Cryptosystem Negotiation Extension (RFC 4537). * A new X.509 library (hx509) and related crypto functions. * A new ntlm library (heimntlm) and related crypto functions. * KDC will return the "response too big" error to force TCP retries for large (default 1400 bytes) UDP replies. This is common for PK-INIT requests. * Libkafs defaults to use 2b tokens. * krb5_kuserok() also checks ~/.k5login.d directory for acl files. * Fix memory leaks. * Bugs fixes
Diffstat (limited to 'doc')
0 files changed, 0 insertions, 0 deletions