Max Faxälv 0a5ea09a91

spnego_gssapi: implement TLS channel bindings for openssl ...

Channel Bindings are used to tie the session context to a specific TLS
channel. This is to provide additional proof of valid identity,
mitigating authentication relay attacks.

Major web servers have the ability to require (None/Accept/Require)
GSSAPI channel binding, rendering Curl unable to connect to such
websites unless support for channel bindings is implemented.

IIS calls this feature Extended Protection (EPA), which is used in
Enterprise environments using Kerberos for authentication.

This change require krb5 >= 1.19, otherwise channel bindings won't be
forwarded through SPNEGO.

Co-Authored-By: Steffen Kieß <947515+steffen-kiess@users.noreply.github.com>
Closes #13098

2024-08-12 19:16:54 +02:00

..

cleartext.c

code: language cleanup in comments

2024-07-01 22:58:55 +02:00

cram.c

code: language cleanup in comments

2024-07-01 22:58:55 +02:00

digest_sspi.c

code: language cleanup in comments

2024-07-01 22:58:55 +02:00

digest.c

code: language cleanup in comments

2024-07-01 22:58:55 +02:00

digest.h

lib: add ability to disable auths individually

2023-09-07 17:45:06 +02:00

gsasl.c

copyright: update all copyright lines and remove year ranges

2023-01-03 09:19:21 +01:00

krb5_gssapi.c

code: language cleanup in comments

2024-07-01 22:58:55 +02:00

krb5_sspi.c

code: language cleanup in comments

2024-07-01 22:58:55 +02:00

ntlm_sspi.c

code: language cleanup in comments

2024-07-01 22:58:55 +02:00

ntlm.c

code: language cleanup in comments

2024-07-01 22:58:55 +02:00

ntlm.h

copyright: update all copyright lines and remove year ranges

2023-01-03 09:19:21 +01:00

oauth2.c

code: language cleanup in comments

2024-07-01 22:58:55 +02:00

spnego_gssapi.c

spnego_gssapi: implement TLS channel bindings for openssl

2024-08-12 19:16:54 +02:00

spnego_sspi.c

code: language cleanup in comments

2024-07-01 22:58:55 +02:00

vauth.c

code: language cleanup in comments

2024-07-01 22:58:55 +02:00

vauth.h

vauth: make two functions void that always just returned OK

2024-05-13 22:38:25 +02:00