Dear team
I ma trying to perfrom Kerberos PKINIT authnetication with windows
2003 server .the clinet is able to send AS_REQ packet but the server is
responding with KRB5KRB_AP_ERR_MODIFIED .In RFC 4120 i could not find
whether KRB5KRB_AP_ERR_MODIFIED is a proper error response for AS_REQ .
In the MIT 1.6.3 soucre code in file Pkinit_crypto_openssl , in function
cms_signeddata_create()
/* Some tokens can only do RSAEncryption without sha1 hash */
/* to compute sha1WithRSAEncryption, encode the algorithm ID for the
hash
* function and the hash value into an ASN.1 value of type DigestInfo
* DigestInfo::=SEQUENCE {
* digestAlgorithm AlgorithmIdentifier,
* digest OCTET STRING }
*/
Are there any specific cards for which this fix needs to be appiled ?
Thanks in advance
Thanks and Regards
Akshar
________________________________________________
Kerberos mailing list [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos
