[ol7_latest] krb5-pkinit-1.15.1-37.el7_6.x86_64

Kerberos is a network authentication system. The krb5-pkinit
package contains the PKINIT plugin, which allows clients
to obtain initial credentials from a KDC using a private key and a
certificate.

Changelog (Show File list) (Show related packages)

• Tue Dec 18 2018 Robbie Harwood <rharwood@redhat.com> - 1.15.1-37

  - Bring back builtin crypto (openssl broke too many FIPS setups)
  - Resolves: #1657890

• Mon Dec 17 2018 Robbie Harwood <rharwood@redhat.com> - 1.15.1-36

  - Clean up MEMORY ccache behavior to match upstream more closely
  - Resolves: #1657890

• Tue Dec 11 2018 Robbie Harwood <rharwood@redhat.com> - 1.15.1-35

  - Fix bugs with concurrent use of MEMORY ccaches
  - Resolves: #1657890

• Wed Aug 01 2018 Robbie Harwood <rharwood@redhat.com> - 1.15.1-34

  - In FIPS mode, add plaintext fallback for RC4 usages and taint
  - Resolves: #1570600

• Tue Jul 10 2018 Robbie Harwood <rharwood@redhat.com> - 1.15.1-33

  - Use SHA-256 instead of MD5 for audit ticket IDs
  - Resolves: #1570600

• Mon Jun 11 2018 Robbie Harwood <rharwood@redhat.com> - 1.15.1-32

  - Include preauth name in trace output if possible
  - Update cert generation scripts to work on modern openssl
  - Fix per-request preauth scoping
  - Add test case for PKINIT DH renegotiation
  - Echo KDC cookies in preauth tryagain
  - Fall back to other preauth mechanisms after failures
  - Resolves: #1540130

• Fri Jun 08 2018 Robbie Harwood <rharwood@redhat.com> - 1.15.1-31

  - Add German translation
  - Resolves: #1497301

• Fri Jun 08 2018 Robbie Harwood <rharwood@redhat.com> - 1.15.1-30

  - Add default pkinit_anchors value to krb5.conf
  - Resolves: #1508081

• Thu Jun 07 2018 Robbie Harwood <rharwood@redhat.com> - 1.15.1-29

  - Process profile includedir in sorted order
  - Also, ignore dotfiles in included directories
  - Resolves: #1539824

• Thu Jun 07 2018 Robbie Harwood <rharwood@redhat.com> - 1.15.1-28

  - Exit with status 0 from kadmind
  - Resolves: #1373909