[31639] in Kerberos
[PKINIT]Invalid response for AS_REQ with win 2003 sever
daemon@ATHENA.MIT.EDU (akshar kanak)
Sun Nov 1 09:03:01 2009
MIME-Version: 1.0
Date: Sun, 1 Nov 2009 19:32:06 +0530
Message-ID: <5ff84dca0911010602y42967b06y154064a249c819ed@mail.gmail.com>
From: akshar kanak <akshar.kerberos@gmail.com>
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Dear team
I ma trying to perfrom Kerberos PKINIT authnetication with windows
2003 server .the clinet is able to send AS_REQ packet but the server is
responding with KRB5KRB_AP_ERR_MODIFIED .In RFC 4120 i could not find
whether KRB5KRB_AP_ERR_MODIFIED is a proper error response for AS_REQ .
In the MIT 1.6.3 soucre code in file Pkinit_crypto_openssl , in function
cms_signeddata_create()
/* Some tokens can only do RSAEncryption without sha1 hash */
/* to compute sha1WithRSAEncryption, encode the algorithm ID for the
hash
* function and the hash value into an ASN.1 value of type DigestInfo
* DigestInfo::=SEQUENCE {
* digestAlgorithm AlgorithmIdentifier,
* digest OCTET STRING }
*/
Are there any specific cards for which this fix needs to be appiled ?
Thanks in advance
Thanks and Regards
Akshar
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
