Commit 73f10963 authored by Steve Holme's avatar Steve Holme
Browse files

krb5: Fixed missing client response when mutual authentication enabled 

Although mutual authentication is currently turned off and can only be
enabled by changing libcurl source code, authentication using Kerberos
5 has been broken since commit 79543caf in this use case.
parent 61152e7d

lib/vauth/krb5_gssapi.c

+5 −0
Original line number Diff line number Diff line
@@ -163,6 +163,11 @@ CURLcode Curl_auth_create_gssapi_user_message(struct SessionHandle *data, 


    gss_release_buffer(&unused_status, &output_token);

  }

  else if(mutual_auth) {

    *outptr = strdup("");

    if(!*outptr)

      result = CURLE_OUT_OF_MEMORY;

  }



  return result;

}

lib/vauth/krb5_sspi.c

+5 −0
Original line number Diff line number Diff line
@@ -212,6 +212,11 @@ CURLcode Curl_auth_create_gssapi_user_message(struct SessionHandle *data, 
    result = Curl_base64_encode(data, (char *) resp_buf.pvBuffer,

                                resp_buf.cbBuffer, outptr, outlen);

  }

  else if(mutual_auth) {

    *outptr = strdup("");

    if(!*outptr)

      result = CURLE_OUT_OF_MEMORY;

  }



  /* Free the decoded challenge */

  free(chlg);