samba-mirror

mirror of https://github.com/samba-team/samba.git synced 2025-02-01 05:47:28 +03:00

History

Stefan Metzmacher 3ae39afbe7 CVE-2016-2110: auth/gensec: add gensec_may_reset_crypto() infrastructure

[MS-SPNG] requires the NTLMSSP RC4 states to be reset after
the SPNEGO exchange with mechListMic verification (new_spnego).

This provides the infrastructure for this feature.

The 'reset_full' parameter is needed to support the broken
behavior that windows only resets the RC4 states but not the
sequence numbers. Which means this functionality is completely
useless... But we want to work against all windows versions...

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11644

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>

2016-03-29 16:25:39 +02:00

external.c

Add SASL/EXTERNAL gensec module

2013-09-18 19:47:55 +02:00

gensec_internal.h

CVE-2016-2110: auth/gensec: add gensec_may_reset_crypto() infrastructure

2016-03-29 16:25:39 +02:00

gensec_start.c

auth/gensec: make sure gensec_security_by_auth_type() returns NULL for AUTH_TYPE_NONE

2016-03-29 16:24:46 +02:00

gensec_util.c

lib: Use asn1_has_error()