Re: Pkinit and proxy certificates

[Love Hörnquist Åstrand <lha@kth.se>]

Sorry about that,

I changed the configuration options to use _ intstead of -
and prefixed them with pkinit_, see manual or test/kdc/krb5.conf.in

Love


24 nov 2006 kl. 14.43 skrev Athanasios Moralis:

> I installed the newer version but the kdc does not start:
>
> # 2006-11-24T15:39:10 pkinit enabled but no identity
>
> What does this mean? The previous version works fine with
> the same configuration (without proxy certificates of course)
>
> Sakis
>
> Love Hörnquist Åstrand wrote:
>> 27 okt 2006 kl. 11.56 skrev Athanasios Moralis:
>>
>>> Has anyone used globus proxy certificates for pkinit?
>>
>> No, but I just added test for proxy certificate and with some  
>> minor code
>> changes I got it working. The snapshot generated tonight includes  
>> the changes.
>>
>> The certificate file must include both the proxy certificate(s)  
>> and the certificate,
>> please check the lib/hx509/data/pkinit-proxy-chain.crt and
>> the new test in tests/kdc/check-kdc.in.
>>
>> $ make check-kdc && ./check-kdc && echo ok!
>> [...]
>> Trying pk-init (proxy cert)
>> [...]
>> Trying pk-init (proxy cert) --pk-use-enckey
>>
>> Love
>>
>> PS Thanks for reminding me.
>>
>