[Heimdal-source-changes] [heimdal/heimdal] db35ae: asn1: Fix OID resolution bug

[Nico Williams]

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: db35aeb5bee04b241c39e7dd0adb2e4f383f406a
      https://github.com/heimdal/heimdal/commit/db35aeb5bee04b241c39e7dd0adb2e4f383f406a
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2019-11-02 (Sat, 02 Nov 2019)

  Changed paths:
    M lib/asn1/oid_resolution.c

  Log Message:
  -----------
  asn1: Fix OID resolution bug


  Commit: ed1f900cfb2ac6b78dc5d2025c349ebcdda542cc
      https://github.com/heimdal/heimdal/commit/ed1f900cfb2ac6b78dc5d2025c349ebcdda542cc
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2019-11-02 (Sat, 02 Nov 2019)

  Changed paths:
    M lib/asn1/libasn1-exports.def
    M lib/asn1/rfc2459.asn1

  Log Message:
  -----------
  asn1: Add some missing OIDs from RFC5280


  Commit: b54107ee2b1f9fcfbd25962df5c374edfaf31aa9
      https://github.com/heimdal/heimdal/commit/b54107ee2b1f9fcfbd25962df5c374edfaf31aa9
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2019-11-02 (Sat, 02 Nov 2019)

  Changed paths:
    M lib/asn1/rfc2459.asn1

  Log Message:
  -----------
  asn1: Add more EKU OIDs from RFC7299, OpenSSL


  Commit: ec858b3a46e875285d044bf55b4cdb5fc06a196b
      https://github.com/heimdal/heimdal/commit/ec858b3a46e875285d044bf55b4cdb5fc06a196b
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2019-11-02 (Sat, 02 Nov 2019)

  Changed paths:
    M lib/ipc/client.c
    M lib/ipc/server.c

  Log Message:
  -----------
  ipc: Get socket dir via secure_getenv()

Using /var/run means needing privilege to run.


  Commit: 7dc134e41056451badae3c0fa2c4b1b662308eb5
      https://github.com/heimdal/heimdal/commit/7dc134e41056451badae3c0fa2c4b1b662308eb5
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2019-11-02 (Sat, 02 Nov 2019)

  Changed paths:
    M lib/krb5/common_plugin.h
    M lib/krb5/plugin.c

  Log Message:
  -----------
  krb5: Move krb5_plugin_load_t typedef to header


  Commit: ddbc36d86b4dd5f06ca648fabc3475e465974c25
      https://github.com/heimdal/heimdal/commit/ddbc36d86b4dd5f06ca648fabc3475e465974c25
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2019-11-02 (Sat, 02 Nov 2019)

  Changed paths:
    M lib/hx509/ks_file.c

  Log Message:
  -----------
  hx509: Store priv keys first in PEM stores

Most consumers of PEM files don't care about the order in which private
keys and certificates are stored.  However, Postfix does care when
multiple EE certs (and chains) are stored in a file, in which case it
requires that private keys come before their certificates.


  Commit: 6612090ba06e1b7016c0a733e590d4a469189e51
      https://github.com/heimdal/heimdal/commit/6612090ba06e1b7016c0a733e590d4a469189e51
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2019-11-02 (Sat, 02 Nov 2019)

  Changed paths:
    M lib/hx509/libhx509-exports.def
    M lib/hx509/version-script.map

  Log Message:
  -----------
  hx509: Export missing symbols


  Commit: 427751a2041b4b2fe12ded5038100d46df168337
      https://github.com/heimdal/heimdal/commit/427751a2041b4b2fe12ded5038100d46df168337
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2019-11-02 (Sat, 02 Nov 2019)

  Changed paths:
    M lib/hx509/hxtool-commands.in
    M lib/hx509/hxtool.c

  Log Message:
  -----------
  hxtool: Add "acert" (assert cert contents) command

This will prove useful in testing kx509.


  Commit: 35c91324ed828ca1fb1c1b8f9973acec5e4d4cee
      https://github.com/heimdal/heimdal/commit/35c91324ed828ca1fb1c1b8f9973acec5e4d4cee
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2019-11-02 (Sat, 02 Nov 2019)

  Changed paths:
    M lib/hx509/cert.c
    M lib/hx509/libhx509-exports.def
    M lib/hx509/version-script.map

  Log Message:
  -----------
  hx509: Add hx509_get_instance()


  Commit: 66cde3e580ef7354f4ea94b1df8df6db62504620
      https://github.com/heimdal/heimdal/commit/66cde3e580ef7354f4ea94b1df8df6db62504620
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2019-11-02 (Sat, 02 Nov 2019)

  Changed paths:
    M lib/hx509/req.c

  Log Message:
  -----------
  hx509: Fix hx509_request_get_exts()


  Commit: 94bf464f8d00c209ae2bd6ee8b71026daa76fafb
      https://github.com/heimdal/heimdal/commit/94bf464f8d00c209ae2bd6ee8b71026daa76fafb
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2019-11-02 (Sat, 02 Nov 2019)

  Changed paths:
    M lib/krb5/libkrb5-exports.def.in
    M lib/krb5/ticket.c
    M lib/krb5/version-script.map

  Log Message:
  -----------
  krb5: Add krb5_ticket_get_times()


  Commit: 0cc708ba36bdc699645e2384b335a5c3b15928fd
      https://github.com/heimdal/heimdal/commit/0cc708ba36bdc699645e2384b335a5c3b15928fd
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2019-11-02 (Sat, 02 Nov 2019)

  Changed paths:
    M kuser/heimtools-commands.in
    M kuser/kx509.1
    M kuser/kx509.c

  Log Message:
  -----------
  kx509: add time-to-live for kx509 -t option

It's useful to check for having so many seconds left in useful
credential lifetime.


Compare: https://github.com/heimdal/heimdal/compare/f717c7344bf7...0cc708ba36bd