Print

Print


  Branch: refs/heads/master
  Home:   https://github.com/xrootd/xrootd
  Commit: be975a701ce1f3987fdfa87d5877f247b8145d03
      https://github.com/xrootd/xrootd/commit/be975a701ce1f3987fdfa87d5877f247b8145d03
  Author: Gerardo Ganis <[log in to unmask]>
  Date:   2021-11-24 (Wed, 24 Nov 2021)

  Changed paths:
    M src/XrdCrypto/XrdCryptoFactory.hh
    M src/XrdCrypto/XrdCryptosslAux.cc
    M src/XrdCrypto/XrdCryptosslAux.hh

  Log Message:
  -----------
  Add support for reading the private key from a separate file


  Commit: 3ab3390337f7aeed28aef6006aced5569bc8c699
      https://github.com/xrootd/xrootd/commit/3ab3390337f7aeed28aef6006aced5569bc8c699
  Author: Gerardo Ganis <[log in to unmask]>
  Date:   2021-11-24 (Wed, 24 Nov 2021)

  Changed paths:
    M src/XrdSecgsi/XrdSecProtocolgsi.cc
    M src/XrdSecgsi/XrdSecProtocolgsi.hh
    M src/XrdSecgsi/XrdSecgsiProxy.cc
    M src/XrdSecgsi/XrdSecgsitest.cc

  Log Message:
  -----------
  Add support for pure cert/key authentication (no proxy)

Client enforces this mode by setting XrdSecGISNOPROXY=1.
Key file must be pass-less.


  Commit: 5bccf6305e2704a1a0259571b9bee6c06d30dd13
      https://github.com/xrootd/xrootd/commit/5bccf6305e2704a1a0259571b9bee6c06d30dd13
  Author: Gerardo Ganis <[log in to unmask]>
  Date:   2021-11-24 (Wed, 24 Nov 2021)

  Changed paths:
    M src/XrdSecgsi/XrdSecProtocolgsi.cc
    M src/XrdSecgsi/XrdSecProtocolgsi.hh

  Log Message:
  -----------
  Reverse logic, 'no proxy' to 'create proxy' (see comments to PR#1493)


  Commit: d7700813ffd61b10586468f6a3f6d6562327582b
      https://github.com/xrootd/xrootd/commit/d7700813ffd61b10586468f6a3f6d6562327582b
  Author: Gerardo Ganis <[log in to unmask]>
  Date:   2021-11-24 (Wed, 24 Nov 2021)

  Changed paths:
    M src/XrdSecgsi/XrdSecProtocolgsi.cc
    M src/XrdSecgsi/XrdSecProtocolgsi.hh

  Log Message:
  -----------
  Increase version and add version check

Servers check the number of certificates in received chain.
Pass-less authentication can still happen but requires the creation of the
proxy.


  Commit: 6f6d11ca89941f11f5ca3000db2653d129cb9cab
      https://github.com/xrootd/xrootd/commit/6f6d11ca89941f11f5ca3000db2653d129cb9cab
  Author: Gerardo Ganis <[log in to unmask]>
  Date:   2021-11-25 (Thu, 25 Nov 2021)

  Changed paths:
    M src/XrdCrypto/XrdCryptosslAux.cc

  Log Message:
  -----------
  Fix double-free when the key file is opened re-using the cert file pointer


  Commit: 5cde9c95f930553fbb814c4e0b92666e720889a6
      https://github.com/xrootd/xrootd/commit/5cde9c95f930553fbb814c4e0b92666e720889a6
  Author: simonmichal <[log in to unmask]>
  Date:   2021-11-29 (Mon, 29 Nov 2021)

  Changed paths:
    M src/XrdCrypto/XrdCryptoFactory.hh
    M src/XrdCrypto/XrdCryptosslAux.cc
    M src/XrdCrypto/XrdCryptosslAux.hh
    M src/XrdSecgsi/XrdSecProtocolgsi.cc
    M src/XrdSecgsi/XrdSecProtocolgsi.hh
    M src/XrdSecgsi/XrdSecgsiProxy.cc
    M src/XrdSecgsi/XrdSecgsitest.cc

  Log Message:
  -----------
  Merge pull request #1561 from gganis/certkeyauth

Rebased version of PR#1493


Compare: https://github.com/xrootd/xrootd/compare/bcd23534fa2c...5cde9c95f930

########################################################################
Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1