Lines Matching defs:context
39 pkinit_server_get_edata(krb5_context context,
48 pkinit_server_verify_padata(krb5_context context,
61 pkinit_server_return_padata(krb5_context context,
81 (krb5_context context, void *blob);
84 (krb5_context context, const char *realmname,
88 (krb5_context context, pkinit_kdc_context plgctx);
91 (krb5_context context, void **blob, const char **realmnames);
94 (krb5_context context, void *blob);
97 (krb5_context context, void *pa_plugin_context, krb5_principal princ);
100 pkinit_create_edata(krb5_context context,
114 retval = pkinit_create_td_trusted_certifiers(context,
118 retval = pkinit_create_td_dh_parameters(context, plg_cryptoctx,
123 retval = pkinit_create_td_invalid_certificate(context,
140 pkinit_server_get_edata(krb5_context context,
154 * If we don't have a realm context for the given realm,
157 plgctx = pkinit_find_realm_context(context, pa_plugin_context,
166 verify_client_san(krb5_context context,
180 retval = crypto_retrieve_cert_sans(context, plgctx->cryptoctx,
192 retval = call_san_checking_plugins(context, plgctx, reqctx, princs,
209 krb5_unparse_name(context, client, &client_string);
214 krb5_unparse_name(context, princs[i], &san_string);
217 krb5_free_unparsed_name(context, san_string);
219 if (krb5_principal_compare(context, princs[i], client)) {
242 krb5_unparse_name(context, upns[i], &san_string);
245 krb5_free_unparsed_name(context, san_string);
247 if (krb5_principal_compare(context, upns[i], client)) {
268 krb5_free_principal(context, princs[i]);
273 krb5_free_principal(context, upns[i]);
278 krb5_free_unparsed_name(context, client_string);
286 verify_client_eku(krb5_context context,
302 retval = crypto_check_cert_eku(context, plgctx->cryptoctx,
321 pkinit_server_verify_padata(krb5_context context,
361 plgctx = pkinit_find_realm_context(context, pa_plugin_context,
369 /* create a per-request context */
370 retval = pkinit_init_kdc_req_context(context, (void **)&reqctx);
390 retval = cms_signeddata_verify(context, plgctx->cryptoctx,
411 retval = cms_signeddata_verify(context, plgctx->cryptoctx,
428 retval = verify_client_san(context, plgctx, reqctx, request->client,
438 retval = verify_client_eku(context, plgctx, reqctx, &valid_eku);
464 retval = server_check_dh(context, plgctx->cryptoctx,
491 retval = krb5_c_make_checksum(context, CKSUMTYPE_NIST_SHA, NULL,
523 retval = pkinit_check_kdc_pkid(context, plgctx->cryptoctx,
545 retval = server_check_dh(context, plgctx->cryptoctx,
632 if (pkinit_create_edata(context, plgctx->cryptoctx, reqctx->cryptoctx,
643 krb5_free_data(context, der_req);
650 k5int_krb5_free_kdc_req(context, tmp_as_req);
656 pkinit_fini_kdc_req_context(context, reqctx);
660 free_krb5_auth_pack_draft9(context, &auth_pack9);
667 pkinit_server_return_padata(krb5_context context,
716 pkiDebug("missing request context \n");
720 plgctx = pkinit_find_realm_context(context, pa_plugin_context,
723 pkiDebug("Unable to locate correct realm context\n");
796 retval = server_process_dh(context, plgctx->cryptoctx,
809 retval = pkinit_octetstring2key(context, enctype, server_key,
836 retval = cms_signeddata_create(context, plgctx->cryptoctx,
849 retval = cms_signeddata_create(context, plgctx->cryptoctx,
864 retval = krb5_c_make_random_key(context, enctype, encrypting_key);
892 retval = krb5_c_keyed_checksum_types(context,
898 retval = krb5_c_make_checksum(context, cksum_types[0],
915 krb5_copy_keyblock_contents(context, encrypting_key,
929 retval = cms_envelopeddata_create(context, plgctx->cryptoctx,
947 krb5_copy_keyblock_contents(context, encrypting_key,
959 retval = cms_envelopeddata_create(context, plgctx->cryptoctx,
1033 pkinit_fini_kdc_req_context(context, reqctx);
1039 krb5_free_data(context, encoded_dhkey_info);
1041 krb5_free_data(context, encoded_key_pack);
1088 pkinit_fini_kdc_profile(krb5_context context, pkinit_kdc_context plgctx)
1097 pkinit_init_kdc_profile(krb5_context context, pkinit_kdc_context plgctx)
1103 retval = pkinit_kdcdefault_string(context, plgctx->realmname,
1108 krb5_set_error_message(context, retval,
1114 retval = pkinit_kdcdefault_strings(context, plgctx->realmname,
1119 krb5_set_error_message(context, retval,
1126 (void) pkinit_kdcdefault_strings(context, plgctx->realmname,
1130 (void) pkinit_kdcdefault_strings(context, plgctx->realmname,
1134 (void) pkinit_kdcdefault_string(context, plgctx->realmname,
1138 (void) pkinit_kdcdefault_string(context, plgctx->realmname,
1142 (void) pkinit_kdcdefault_integer(context, plgctx->realmname,
1153 (void) pkinit_kdcdefault_boolean(context, plgctx->realmname,
1157 (void) pkinit_kdcdefault_boolean(context, plgctx->realmname,
1161 (void) pkinit_kdcdefault_string(context, plgctx->realmname,
1184 pkinit_fini_kdc_profile(context, plgctx);
1190 pkinit_find_realm_context(krb5_context context, void *pa_plugin_context,
1204 pkiDebug("%s: returning context at %p for realm '%s'\n",
1209 pkiDebug("%s: unable to find realm context for realm '%.*s'\n",
1215 pkinit_server_plugin_init_realm(krb5_context context, const char *realmname,
1227 pkiDebug("%s: initializing context at %p for realm '%s'\n",
1253 retval = pkinit_init_kdc_profile(context, plgctx);
1267 retval = pkinit_identity_initialize(context, plgctx->cryptoctx, NULL,
1272 pkiDebug("%s: returning context at %p for realm '%s'\n",
1279 pkinit_server_plugin_fini_realm(context, plgctx);
1285 pkinit_server_plugin_init(krb5_context context, void **blob,
1308 retval = pkinit_server_plugin_init_realm(context, realmnames[i], &plgctx);
1320 krb5_set_error_message(context, retval, "No realms configured "
1329 pkiDebug("%s: returning context at %p\n", __FUNCTION__, realm_contexts);
1333 pkinit_server_plugin_fini(context, realm_contexts);
1339 pkinit_server_plugin_fini_realm(krb5_context context, pkinit_kdc_context plgctx)
1344 pkinit_fini_kdc_profile(context, plgctx);
1354 pkinit_server_plugin_fini(krb5_context context, void *blob)
1363 pkinit_server_plugin_fini_realm(context, realm_contexts[i]);
1365 pkiDebug("%s: freeing context at %p\n", __FUNCTION__, realm_contexts);
1370 pkinit_init_kdc_req_context(krb5_context context, void **ctx)
1392 pkinit_fini_kdc_req_context(context, reqctx);
1398 pkinit_fini_kdc_req_context(krb5_context context, void *ctx)
1412 free_krb5_auth_pack_draft9(context, &reqctx->rcv_auth_pack9);