1
0
mirror of https://git.FreeBSD.org/src.git synced 2024-10-18 02:19:39 +00:00
freebsd/crypto
Cy Schubert 60616b445e heimdal: always confirm PA-PKINIT-KX for anon PKINIT
Import upstream 38c797e1a.

Upstream notes:

    RFC8062 Section 7 requires verification of the PA-PKINIT-KX key
    excahnge when anonymous PKINIT is used.  Failure to do so can
    permit an active attacker to become a man-in-the-middle.

Reported by:	emaste
Obtained from:	upstream 38c797e1a
Security:	CVE-2019-12098
MFC after:	1 week
2024-02-15 13:27:55 -08:00
..
heimdal heimdal: always confirm PA-PKINIT-KX for anon PKINIT 2024-02-15 13:27:55 -08:00
openssh ssh: Update to OpenSSH 9.6p1 2024-01-04 22:16:30 -05:00
openssl OpenSSL: Update date string 2024-02-05 12:09:08 -08:00
README Two more $FreeBSD$ stragglers 2023-08-25 15:14:19 -06:00

This directory is for the EXACT same use as src/contrib, except it
holds crypto sources.  In other words, this holds raw sources obtained
from various third party vendors, with FreeBSD patches applied.  No
compilation is done from this directory, it is all done from the
src/secure directory.  The separation between src/contrib and src/crypto
is the result of an old USA law, which made these sources export
controlled, so they had to be kept separate.