From noreply at github.com  Wed Jan  1 11:00:01 2020
From: noreply at github.com (Luke Howard)
Date: Wed, 01 Jan 2020 02:00:01 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 8fd3cc: kdc: link
 test_token_validator against libgssapi
Message-ID: <heimdal/heimdal/push/refs/heads/master/1a3716-8fd3cc@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 8fd3cc84eb7675698f36d4f0a847bc39872b2106
      https://github.com/heimdal/heimdal/commit/8fd3cc84eb7675698f36d4f0a847bc39872b2106
  Author: Luke Howard <lukeh at padl.com>
  Date:   2020-01-01 (Wed, 01 Jan 2020)

  Changed paths:
    M kdc/Makefile.am

  Log Message:
  -----------
  kdc: link test_token_validator against libgssapi

The Negotiate token validation plugin links against libgssapi, but on macOS the
dynamic linker cannot find it before Heimdal is installed. This causes tests to
fail. Although test_token_validator itself does not require libgsaspi, link
against it so that the test can proceed.



From noreply at github.com  Fri Jan  3 06:52:18 2020
From: noreply at github.com (Nico Williams)
Date: Thu, 02 Jan 2020 21:52:18 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 027941: Document
 Heimdal's PKIX, kx509, bx509
Message-ID: <heimdal/heimdal/push/refs/heads/master/8fd3cc-027941@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 027941b858fad500fa91236852f6bda6500331eb
      https://github.com/heimdal/heimdal/commit/027941b858fad500fa91236852f6bda6500331eb
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2020-01-02 (Thu, 02 Jan 2020)

  Changed paths:
    M doc/heimdal.texi
    M doc/hx509.texi
    M doc/install.texi
    M doc/whatis.texi

  Log Message:
  -----------
  Document Heimdal's PKIX, kx509, bx509

This reverts commit 5c25450e504f525720b5565f5f6c5367bc238f21.



From noreply at github.com  Fri Jan  3 07:12:50 2020
From: noreply at github.com (Nico Williams)
Date: Thu, 02 Jan 2020 22:12:50 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 2b92d9: Add bx509d.8 man
 page
Message-ID: <heimdal/heimdal/push/refs/heads/master/027941-2b92d9@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 2b92d938aee10830e2954813009e667799e8a763
      https://github.com/heimdal/heimdal/commit/2b92d938aee10830e2954813009e667799e8a763
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2020-01-03 (Fri, 03 Jan 2020)

  Changed paths:
    A kdc/bx509d.8

  Log Message:
  -----------
  Add bx509d.8 man page



From noreply at github.com  Fri Jan 10 18:43:45 2020
From: noreply at github.com (Nico Williams)
Date: Fri, 10 Jan 2020 09:43:45 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 8ef971: bx509: Fix CSR
 authorizer IPC plugin bug
Message-ID: <heimdal/heimdal/push/refs/heads/master/2b92d9-1cbbca@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 8ef971786b89e13c0989eef589f92781ca6ca9f6
      https://github.com/heimdal/heimdal/commit/8ef971786b89e13c0989eef589f92781ca6ca9f6
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2020-01-10 (Fri, 10 Jan 2020)

  Changed paths:
    M kdc/ipc_csr_authorizer.c

  Log Message:
  -----------
  bx509: Fix CSR authorizer IPC plugin bug

When marking SANs authorized, mark the SAN, not some EKU, authorized!


  Commit: 8430acfe955c29f1b9cb61f089812be92c76221f
      https://github.com/heimdal/heimdal/commit/8430acfe955c29f1b9cb61f089812be92c76221f
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2020-01-10 (Fri, 10 Jan 2020)

  Changed paths:
    M kdc/test_kdc_ca.c

  Log Message:
  -----------
  kdc: implement test_kdc_ca -a option


  Commit: 62c0261cffd5b796f8f9f0b04628eca503364670
      https://github.com/heimdal/heimdal/commit/62c0261cffd5b796f8f9f0b04628eca503364670
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2020-01-10 (Fri, 10 Jan 2020)

  Changed paths:
    M kdc/test_token_validator.c

  Log Message:
  -----------
  kdc: add test_token_validator -a option


  Commit: e7ad9da3ccb17893fd10aefe7b39955f9fe937a4
      https://github.com/heimdal/heimdal/commit/e7ad9da3ccb17893fd10aefe7b39955f9fe937a4
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2020-01-10 (Fri, 10 Jan 2020)

  Changed paths:
    M kdc/bx509d.c

  Log Message:
  -----------
  bx509: Do not clobber library error info


  Commit: 1cbbca8dcfc3e763a7a4b5f4369e09ec7a32c622
      https://github.com/heimdal/heimdal/commit/1cbbca8dcfc3e763a7a4b5f4369e09ec7a32c622
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2020-01-10 (Fri, 10 Jan 2020)

  Changed paths:
    M kdc/bx509d.c

  Log Message:
  -----------
  bx509: Add /, /health for load balancer checking

A HEAD or GET of / or /health will now produce a 200 instead of a 404.

Ideally we should add configuration arguments that would allow /health
to get a token, make a CSR, and test the /bx509 (and/or /bnegotiate)
functionality, that way we'd have a real health check.  For now we defer
that work, as external health monitoring can be done using a simple
script anyways.


Compare: https://github.com/heimdal/heimdal/compare/2b92d938aee1...1cbbca8dcfc3

From noreply at github.com  Fri Jan 10 21:00:17 2020
From: noreply at github.com (Jeffrey Altman)
Date: Fri, 10 Jan 2020 12:00:17 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] cc7610: Update README.md
Message-ID: <heimdal/heimdal/push/refs/heads/master/1cbbca-cc7610@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: cc7610b77cd7e2ff3e8d880e268264a2c93b2818
      https://github.com/heimdal/heimdal/commit/cc7610b77cd7e2ff3e8d880e268264a2c93b2818
  Author: Jeffrey Altman <jaltman at auristor.com>
  Date:   2020-01-10 (Fri, 10 Jan 2020)

  Changed paths:
    M README.md

  Log Message:
  -----------
  Update README.md