From: Sam Hartman <hartmans@mit.edu>
Date: Wed, 5 Oct 2011 21:30:31 +0000 (+0000)
Subject: From: Sam Hartman <hartmans@debian.org>
X-Git-Tag: krb5-1.10-alpha1~67
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=c4deb50427a24c104458ae1439b696aee41963d2;p=krb5.git

From: Sam Hartman <hartmans@debian.org>

Pkinit: offer supported KDFs in client

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25308 dc483132-0cff-0310-8789-dd5450dbe970
---

diff --git a/src/plugins/preauth/pkinit/pkinit_clnt.c b/src/plugins/preauth/pkinit/pkinit_clnt.c
index f8cfac5ad..a6232e997 100644
--- a/src/plugins/preauth/pkinit/pkinit_clnt.c
+++ b/src/plugins/preauth/pkinit/pkinit_clnt.c
@@ -282,6 +282,7 @@ pkinit_as_req_create(krb5_context context,
         auth_pack->pkAuthenticator.paChecksum = *cksum;
         auth_pack->clientDHNonce.length = 0;
         auth_pack->clientPublicValue = info;
+        auth_pack->supportedKDFs = (krb5_octet_data **) supported_kdf_alg_ids;
 
         /* add List of CMS algorithms */
         retval = create_krb5_supportedCMSTypes(context, plgctx->cryptoctx,
@@ -454,6 +455,7 @@ pkinit_as_req_create(krb5_context context,
 cleanup:
     switch((int)reqctx->pa_type) {
     case KRB5_PADATA_PK_AS_REQ:
+        auth_pack->supportedKDFs = NULL; /*alias to global constant*/
         free_krb5_auth_pack(&auth_pack);
         free_krb5_pa_pk_as_req(&req);
         break;