summaryrefslogtreecommitdiff
path: root/sys/src/libauthsrv
AgeCommit message (Collapse)Author
2023-05-13libauthsrv: readnvram: prompt for use of p9sk1 in nvram, with a default of noJacob Moody
By default by writing the p9sk1 key out in to nvram, factotum would read it and offer p9sk1 authentication for hostowner. This authentication will happen regardless of the authsrv configuration. This change makes readnvram ask if the user would like to use p9sk1 with a default of no.
2023-01-06libauthsrv: import better passtodeskey() function (from drawterm)cinap_lenrek
2023-01-06libauthsrv: deal with signed char in readcons()cinap_lenrek
2020-12-07libauthsrv: open internal file-descriptors with OCEXEC flagcinap_lenrek
2019-04-06libauthsrv: authdial smprint() out of memory autismcinap_lenrek
2017-10-04libauthsrv: preserve readcons() error message from read() errorcinap_lenrek
2016-08-05libauthsrv: ANAMELEN -> PASSWDLENcinap_lenrek
2016-07-31libauthsrv: export common readcons() routine and introduce PASSWDLEN constantcinap_lenrek
drawterm, factotum, secstore and the auth commands all had ther own implementation of readcons. we want to have one common function for this to avoid the duplication, so putting that in libauthsrv. introduce PASSWDLEN which makes the use more explicit than ANAMELEN.
2016-05-18libauthsrv: dont pass netroot to netmkaddr()'s defnet parameter in ↵cinap_lenrek
authdial() (thanks kenji arisawa)
2016-02-22libauthsrv: can write p = 2^448 - 2^224 - 1 now, as mpc has constant folding.cinap_lenrek
2016-01-11libauthsrv: fix ed448 goldilocks prime commentmischief
2016-01-10libauthsrv: add D in mkfileaiju
2016-01-06auth: release dp9ik implementation and reentrant factotumcinap_lenrek
2015-09-02libsec: generalize pbkdf2_hmac_sha1() to pbkdf2_x() passing the hmac as an ↵cinap_lenrek
argument
2015-08-28libauthsrv: fix _asgetresp() for passwdcinap_lenrek
2015-08-21introduce AES key into nvram and keyfscinap_lenrek
2015-08-20libauthsrv: add missing files (thanks mischief)cinap_lenrek
2015-08-19libauthsrv: generalize ticket service, not hardcoding ticket format and DES ↵cinap_lenrek
encryption this is in preparation for replacing DES ticket encryption with something better. but first need to make the code stop making assumptions. the wire encoding of the Ticket might be variable length with TICKETLEN just giving an upper bound. the details will be handled by libauthsrv _asgetticket() and _asgetresp() funciotns. the Authenticator and Passwordreq structures are encrypted with the random ticket key. The encryption schmeme will depend on the Ticket format used, so we pass the Ticket* structure instead of the DES key. introduce Authkey structure that will hold all the required cryptographic keys instead of passing DES key.
2015-08-03libauthsrv: readnvram() use vlong for nvroff, parse $nvlen/$nvoff with ↵cinap_lenrek
strtol() instead of atoi()
2015-06-09authsrv: remove unused opasstokeyftrvxmtrx
2014-09-16libauthsrv: allow multiple auth= attributes for backup auth servers, ↵cinap_lenrek
authdial() tries each one in order some of us run auth servers from home that are used by multiple servers on the internet. when the home authserver becomes unreachable, services on the outside servers stop working. so we thought about specifing a secondary auth servers for backup when the primary server is not reachable. this changes authdial() to consult multiple auth= entries in the authdom= or dom= tuples, trying each one in order until dial() succeeds.
2014-03-26libauthsrv: recognize amd64 $cputype in readnvram() to look for default ↵cinap_lenrek
locations
2012-08-01factotum: fix _adgetticket() filedescriptor race, add timeouts to all ↵cinap_lenrek
authserver transactions
2011-03-30Import sources from 2011-03-30 iso image - libTaru Karttunen
2011-03-30Import sources from 2011-03-30 iso imageTaru Karttunen