Branch: refs/heads/master Home: https://github.com/xrootd/xrootd Commit: be975a701ce1f3987fdfa87d5877f247b8145d03 https://github.com/xrootd/xrootd/commit/be975a701ce1f3987fdfa87d5877f247b8145d03 Author: Gerardo Ganis <[log in to unmask]> Date: 2021-11-24 (Wed, 24 Nov 2021) Changed paths: M src/XrdCrypto/XrdCryptoFactory.hh M src/XrdCrypto/XrdCryptosslAux.cc M src/XrdCrypto/XrdCryptosslAux.hh Log Message: ----------- Add support for reading the private key from a separate file Commit: 3ab3390337f7aeed28aef6006aced5569bc8c699 https://github.com/xrootd/xrootd/commit/3ab3390337f7aeed28aef6006aced5569bc8c699 Author: Gerardo Ganis <[log in to unmask]> Date: 2021-11-24 (Wed, 24 Nov 2021) Changed paths: M src/XrdSecgsi/XrdSecProtocolgsi.cc M src/XrdSecgsi/XrdSecProtocolgsi.hh M src/XrdSecgsi/XrdSecgsiProxy.cc M src/XrdSecgsi/XrdSecgsitest.cc Log Message: ----------- Add support for pure cert/key authentication (no proxy) Client enforces this mode by setting XrdSecGISNOPROXY=1. Key file must be pass-less. Commit: 5bccf6305e2704a1a0259571b9bee6c06d30dd13 https://github.com/xrootd/xrootd/commit/5bccf6305e2704a1a0259571b9bee6c06d30dd13 Author: Gerardo Ganis <[log in to unmask]> Date: 2021-11-24 (Wed, 24 Nov 2021) Changed paths: M src/XrdSecgsi/XrdSecProtocolgsi.cc M src/XrdSecgsi/XrdSecProtocolgsi.hh Log Message: ----------- Reverse logic, 'no proxy' to 'create proxy' (see comments to PR#1493) Commit: d7700813ffd61b10586468f6a3f6d6562327582b https://github.com/xrootd/xrootd/commit/d7700813ffd61b10586468f6a3f6d6562327582b Author: Gerardo Ganis <[log in to unmask]> Date: 2021-11-24 (Wed, 24 Nov 2021) Changed paths: M src/XrdSecgsi/XrdSecProtocolgsi.cc M src/XrdSecgsi/XrdSecProtocolgsi.hh Log Message: ----------- Increase version and add version check Servers check the number of certificates in received chain. Pass-less authentication can still happen but requires the creation of the proxy. Commit: 6f6d11ca89941f11f5ca3000db2653d129cb9cab https://github.com/xrootd/xrootd/commit/6f6d11ca89941f11f5ca3000db2653d129cb9cab Author: Gerardo Ganis <[log in to unmask]> Date: 2021-11-25 (Thu, 25 Nov 2021) Changed paths: M src/XrdCrypto/XrdCryptosslAux.cc Log Message: ----------- Fix double-free when the key file is opened re-using the cert file pointer Commit: 5cde9c95f930553fbb814c4e0b92666e720889a6 https://github.com/xrootd/xrootd/commit/5cde9c95f930553fbb814c4e0b92666e720889a6 Author: simonmichal <[log in to unmask]> Date: 2021-11-29 (Mon, 29 Nov 2021) Changed paths: M src/XrdCrypto/XrdCryptoFactory.hh M src/XrdCrypto/XrdCryptosslAux.cc M src/XrdCrypto/XrdCryptosslAux.hh M src/XrdSecgsi/XrdSecProtocolgsi.cc M src/XrdSecgsi/XrdSecProtocolgsi.hh M src/XrdSecgsi/XrdSecgsiProxy.cc M src/XrdSecgsi/XrdSecgsitest.cc Log Message: ----------- Merge pull request #1561 from gganis/certkeyauth Rebased version of PR#1493 Compare: https://github.com/xrootd/xrootd/compare/bcd23534fa2c...5cde9c95f930 ######################################################################## Use REPLY-ALL to reply to list To unsubscribe from the XROOTD-DEV list, click the following link: https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1