[ol7_latest] krb5-pkinit-1.15.1-18.el7.aarch64

Kerberos is a network authentication system. The krb5-pkinit
package contains the PKINIT plugin, which allows clients
to obtain initial credentials from a KDC using a private key and a
certificate.

Changelog (Show File list) (Show related packages)

• Tue Nov 28 2017 Robbie Harwood <rharwood@redhat.com> - 1.15.1-18

  - Expose context errors in pkinit_server_plugin_init
  - Resolves: #1460089

• Thu Nov 02 2017 Robbie Harwood <rharwood@redhat.com> - 1.15.1-17

  - Drop certauth test changes that prevented runnig it
  - Resolves: #1498767

• Thu Nov 02 2017 Robbie Harwood <rharwood@redhat.com> - 1.15.1-16

  - Drop irrelevant DIR trigger logic
  - Resolves: #1431198

• Thu Oct 05 2017 Robbie Harwood <rharwood@redhat.com> - 1.15.1-15

  - Fix CVE-2017-7562 (certauth eku bypass)
  - Resolves: #1498767

• Thu Oct 05 2017 Robbie Harwood <rharwood@redhat.com> - 1.15.1-14

  - Fix CVE-2017-11368 (s4u2 request assertion failures)
  - Resolves: #1498768

• Tue Oct 03 2017 Robbie Harwood <rharwood@redhat.com> - 1.15.1-13

  - Force-add /etc/krb5.conf.d so we can guarantee it exists
  - Resolves: #1431198

• Tue Sep 26 2017 Robbie Harwood <rharwood@redhat.com> - 1.15.1-12

  - Add krb5 policy plugin interface
  - Remove soname downgrade
  - Resolves: #1462982

• Wed Sep 06 2017 Robbie Harwood <rharwood@redhat.com> - 1.15.1-11

  - Make t_certauth.py runnable
  - Resolves: #1443388

• Tue Sep 05 2017 Robbie Harwood <rharwood@redhat.com> - 1.15.1-10

  - Add context SSF query support
  - Resolves: #1472956

• Thu Aug 17 2017 Robbie Harwood <rharwood@redhat.com> - 1.15.1-9

  - Remove incomplete PKINIT OCSP support
  - Resolves: #1460089