git: 4e44a84dcc9a - main - security/heimdal-devel: New port tracking Heimdal develpment

From: Cy Schubert <cy_at_FreeBSD.org>
Date: Fri, 18 Nov 2022 00:01:58 UTC
The branch main has been updated by cy:

URL: https://cgit.FreeBSD.org/ports/commit/?id=4e44a84dcc9abab445f7cd2dc37346338bfd9691

commit 4e44a84dcc9abab445f7cd2dc37346338bfd9691
Author:     Cy Schubert <cy@FreeBSD.org>
AuthorDate: 2022-11-17 23:57:46 +0000
Commit:     Cy Schubert <cy@FreeBSD.org>
CommitDate: 2022-11-18 00:01:41 +0000

    security/heimdal-devel: New port tracking Heimdal develpment
    
    This new heimdal port tracks the Heimdal development branch. The
    last security advisory showed us we might want to track its development.
---
 security/Makefile                                  |    1 +
 security/heimdal-devel/Makefile                    |  131 ++
 security/heimdal-devel/distinfo                    |    3 +
 security/heimdal-devel/files/ipropd_master.in      |   45 +
 security/heimdal-devel/files/ipropd_slave.in       |   37 +
 security/heimdal-devel/files/kpasswdd-Makefile     |   15 +
 security/heimdal-devel/files/kpasswdd-cracklib.c   |   22 +
 .../heimdal-devel/files/patch-cf-make-proto.pl     |   11 +
 .../files/patch-cf_check-compile-et.m4             |   11 +
 security/heimdal-devel/files/patch-ch_pthreads.m4  |   11 +
 security/heimdal-devel/files/patch-configure.ac    |   10 +
 .../heimdal-devel/files/patch-lib-krb5-krb5_locl.h |   20 +
 .../heimdal-devel/files/patch-lib__sl__slc-lex.l   |   11 +
 .../files/patch-tools-heimdal-gssapi.pc.in         |   10 +
 .../heimdal-devel/files/patch-tools-krb5-config.in |   10 +
 security/heimdal-devel/pkg-descr                   |    3 +
 security/heimdal-devel/pkg-message                 |   11 +
 security/heimdal-devel/pkg-plist                   | 1258 ++++++++++++++++++++
 18 files changed, 1620 insertions(+)

diff --git a/security/Makefile b/security/Makefile
index 276b83d3a083..d007ea104370 100644
--- a/security/Makefile
+++ b/security/Makefile
@@ -204,6 +204,7 @@
     SUBDIR += heaan
     SUBDIR += headscale
     SUBDIR += heimdal
+    SUBDIR += heimdal-devel
     SUBDIR += helib
     SUBDIR += hexl
     SUBDIR += highwayhash
diff --git a/security/heimdal-devel/Makefile b/security/heimdal-devel/Makefile
new file mode 100644
index 000000000000..2b6486aeb434
--- /dev/null
+++ b/security/heimdal-devel/Makefile
@@ -0,0 +1,131 @@
+PORTNAME=	heimdal
+PORTVERSION=	${HEIMDAL_COMMIT_DATE}
+CATEGORIES=	security
+PKGNAMESUFFIX=	-devel
+HASH=		c132e6ff4
+HEIMDAL_COMMIT_DATE=	2022.11.17
+
+MAINTAINER=	cy@FreeBSD.org
+COMMENT=	Popular BSD-licensed implementation of Kerberos 5
+WWW=		https://www.h5l.org/
+
+LICENSE=	BSD3CLAUSE
+LICENSE_FILE=	${WRKSRC}/LICENSE
+
+USE_GITHUB=	yes
+GH_TAGNAME=	${HASH}
+
+CONFLICTS=	krb5 krb5-*
+
+USES=		cpe gettext-runtime gssapi:bootstrap,heimdal libtool pathfix \
+		pkgconfig python:build readline makeinfo ssl
+CPE_VENDOR=	${PORTNAME}_project
+USE_LDCONFIG=	${GSSAPILIBDIR}
+
+# Needs clang-format which is only provided by the port.
+# Else asm1_fails resulting in a command not found error.
+BUILD_DEPENDS=	clang${LLVM_DEFAULT}:devel/llvm${LLVM_DEFAULT}
+
+LIB_DEPENDS=	liblockfile.so:devel/liblockfile
+
+GNU_CONFIGURE=	yes
+CONFIGURE_ENV=	ac_cv_header_fnmatch_h=yes \
+		ac_cv_header_db_h=no \
+		ac_cv_header_db3_db_h=no \
+		ac_cv_header_db4_db_h=no \
+		ac_cv_header_db5_db_h=no \
+		ac_cv_header_db6_db_h=no \
+		ac_cv_prog_COMPILE_ET=${WRKSRC}/lib/com_err/compile_et
+CONFIGURE_ARGS=	--with-berkeley-db \
+		--with-libintl \
+		--with-libintl-include="${LOCALBASE}/include" \
+		--with-libintl-lib="${LOCALBASE}/lib" \
+		--libdir="${GSSAPILIBDIR}" \
+		--includedir="${GSSAPIINCDIR}" \
+		--with-kcm \
+		--with-openssl \
+		--with-openssl-include="${OPENSSLINC}" \
+		--with-openssl-lib="${OPENSSLLIB}" \
+		--enable-otp \
+		--enable-pthread-support \
+		--with-readline="${LOCALBASE}" \
+		--with-hdbdir="/var/${PORTNAME}" \
+		--sysconfdir="${PREFIX}/etc" \
+		CLANG_FORMAT="${LOCALBASE}/bin/clang-format${LLVM_DEFAULT}" \
+		--enable-kx509
+# XXX --with-readline picks up libreadline even if found in /usr/lib.
+MAKE_ENV=	INSTALL_CATPAGES=no
+INSTALL_TARGET=	install-strip
+.if !exists(/etc/rc.d/ipropd_master)
+USE_RC_SUBR=	ipropd_master ipropd_slave
+.endif
+INFO=		heimdal hx509
+
+MAKE_JOBS_UNSAFE=	yes
+
+OPTIONS_DEFINE=	IPV6 BDB LMDB SQLITE LDAP PKINIT DIGEST KX509 CRACKLIB
+OPTIONS_DEFAULT=IPV6 BDB                  PKINIT DIGEST KX509
+OPTIONS_SUB=	yes
+
+IPV6_CONFIGURE_WITH=	ipv6
+
+BDB_DESC=		Enable BerkeleyDB KDC backend support
+BDB_USES=		bdb:5 localbase
+BDB_CONFIGURE_ENV=	ac_cv_header_db${BDB_VER}_db_h=yes \
+			ac_cv_func_db_create=yes \
+			ac_cv_funclib_db_create="-l${BDB_LIB_NAME}"
+BDB_CONFIGURE_ON=	--disable-ndbm-db
+BDB_CONFIGURE_ENV_OFF=	ac_cv_header_db_h=yes \
+			ac_cv_func_db_create=no \
+			ac_cv_funclib_db_create=no
+BDB_CONFIGURE_OFF=	--enable-ndbm-db
+
+LMDB_DESC=		Enable LMDB KDC backend support
+LMDB_CONFIGURE_ENABLE=	mdb_db
+LMDB_LIB_DEPENDS=	liblmdb.so:databases/lmdb
+
+SQLITE_DESC=		Enable SQLite KDC backend support
+SQLITE_USES=		sqlite
+SQLITE_CONFIGURE_ON=	--with-sqlite3-include="${LOCALBASE}/include" \
+			--with-sqlite3-lib="${LOCALBASE}/lib"
+SQLITE_CONFIGURE_WITH=	sqlite3
+
+LDAP_DESC=		Enable OpenLDAP KDC backend support
+LDAP_USE=		OPENLDAP=yes
+LDAP_CONFIGURE_ON=	--with-openldap-include="${LOCALBASE}/include" \
+			--with-openldap-lib="${LOCALBASE}/lib"
+LDAP_CONFIGURE_WITH=	openldap
+
+PKINIT_DESC=		Enable PK-INIT support
+PKINIT_CONFIGURE_ENABLE=pk-init
+
+DIGEST_DESC=		Enable DIGEST support
+DIGEST_CONFIGURE_ENABLE=digest
+
+KX509_DESC=		Enable kx509 support
+KX509_CONFIGURE_ENABLE=	kx509
+
+CRACKLIB_DESC=		Use CrackLib for password quality checking
+CRACKLIB_LIB_DEPENDS=	libcrack.so:security/cracklib
+
+.include <bsd.port.options.mk>
+
+post-extract:
+	@${MKDIR} ${WRKSRC}/kpasswdd-cracklib
+	${INSTALL_DATA} ${FILESDIR}/kpasswdd-cracklib.c \
+	    ${WRKSRC}/kpasswdd-cracklib
+	${INSTALL_DATA} ${FILESDIR}/kpasswdd-Makefile \
+	    ${WRKSRC}/kpasswdd-cracklib/Makefile
+
+pre-configure:
+	cd ${WRKSRC} && ./autogen.sh
+
+post-build-CRACKLIB-on:
+	cd ${WRKSRC}/kpasswdd-cracklib && \
+	    ${SETENV} ${MAKE_ENV} ${MAKE} ${MAKE_ARGS} ${BUILD_TARGET}
+
+post-install-CRACKLIB-on:
+	cd ${WRKSRC}/kpasswdd-cracklib && \
+	    ${SETENV} ${MAKE_ENV} ${MAKE} ${MAKE_ARGS} ${INSTALL_TARGET}
+
+.include <bsd.port.mk>
diff --git a/security/heimdal-devel/distinfo b/security/heimdal-devel/distinfo
new file mode 100644
index 000000000000..0fac28169091
--- /dev/null
+++ b/security/heimdal-devel/distinfo
@@ -0,0 +1,3 @@
+TIMESTAMP = 1668725642
+SHA256 (heimdal-heimdal-2022.11.17-c132e6ff4_GH0.tar.gz) = 333ea842bc604c972e2b9b508f3962de01acae6d356222f274ded298f67fb8d8
+SIZE (heimdal-heimdal-2022.11.17-c132e6ff4_GH0.tar.gz) = 13069492
diff --git a/security/heimdal-devel/files/ipropd_master.in b/security/heimdal-devel/files/ipropd_master.in
new file mode 100644
index 000000000000..274d6e01303f
--- /dev/null
+++ b/security/heimdal-devel/files/ipropd_master.in
@@ -0,0 +1,45 @@
+#!/bin/sh
+
+# PROVIDE: ipropd_master
+# REQUIRE: kerberos
+# KEYWORD: shutdown
+
+# ipropd_master_keytab:
+#	Keytab file for iprop service.
+# ipropd_master_slaves:
+#	A list of slave nodes (hostname).
+
+. /etc/rc.subr
+
+name=ipropd_master
+rcvar=${name}_enable
+: ${ipropd_master_enable:=NO}
+: ${ipropd_master_program:=%%PREFIX%%/libexec/ipropd-master}
+: ${ipropd_master_keytab:="/etc/krb5.keytab"}
+required_files="$ipropd_master_keytab"
+start_precmd=${name}_start_precmd
+start_postcmd=${name}_start_postcmd
+
+ipropd_master_start_precmd()
+{
+
+	if [ -z "$ipropd_master_slaves" ]; then
+		warn "\$ipropd_master_slaves is empty."
+		return 1
+	fi
+	for _slave in $ipropd_master_slaves; do
+		echo $_slave
+	done > /var/heimdal/slaves || return 1
+	command_args="$command_args \
+	    --keytab=\"$ipropd_master_keytab\" \
+	    --detach \
+	"
+}
+ipropd_master_start_postcmd()
+{
+
+	echo "${name}: slave nodes: $ipropd_master_slaves"
+}
+
+load_rc_config $name
+run_rc_command "$1"
diff --git a/security/heimdal-devel/files/ipropd_slave.in b/security/heimdal-devel/files/ipropd_slave.in
new file mode 100644
index 000000000000..482409573aca
--- /dev/null
+++ b/security/heimdal-devel/files/ipropd_slave.in
@@ -0,0 +1,37 @@
+#!/bin/sh
+
+# PROVIDE: ipropd_slave
+# REQUIRE: kerberos
+# KEYWORD: shutdown
+
+# ipropd_slave_keytab:
+#	Keytab file for iprop service.
+# ipropd_slave_master:
+#	Hostname of the master node.
+
+. /etc/rc.subr
+
+name=ipropd_slave
+rcvar=${name}_enable
+: ${ipropd_slave_enable:=NO}
+: ${ipropd_slave_program:=%%PREFIX%%/libexec/ipropd-slave}
+: ${ipropd_slave_keytab:="/etc/krb5.keytab"}
+required_files="$ipropd_slave_keytab"
+start_precmd=${name}_start_precmd
+
+ipropd_slave_start_precmd()
+{
+
+	if [ -z "$ipropd_slave_master" ]; then
+		warn "\$ipropd_slave_master is empty."
+		return 1
+	fi
+	command_args=" \
+	    $command_args \
+	    --keytab=\"$ipropd_slave_keytab\" \
+	    --detach \
+	    $ipropd_slave_master"
+}
+
+load_rc_config $name
+run_rc_command "$1"
diff --git a/security/heimdal-devel/files/kpasswdd-Makefile b/security/heimdal-devel/files/kpasswdd-Makefile
new file mode 100644
index 000000000000..2ef50e5253f8
--- /dev/null
+++ b/security/heimdal-devel/files/kpasswdd-Makefile
@@ -0,0 +1,15 @@
+all: kpasswdd-cracklib.so
+
+kpasswdd-cracklib.so: kpasswdd-cracklib.c
+	${CC} ${CFLAGS} -fPIC -shared \
+	    -DLOCALBASE=\"${LOCALBASE}\" \
+	    -I${LOCALBASE}/include -I./include \
+	    -o ${.TARGET} ${.ALLSRC} \
+	    -lcrack -L${LOCALBASE}/lib
+
+install-strip: install
+
+install: ${DESTDIR}${PREFIX}/lib/heimdal/kpasswdd-cracklib.so
+
+${DESTDIR}${PREFIX}/lib/heimdal/kpasswdd-cracklib.so: kpasswdd-cracklib.so
+	${BSD_INSTALL_LIB} ${.ALLSRC} ${.TARGET}
diff --git a/security/heimdal-devel/files/kpasswdd-cracklib.c b/security/heimdal-devel/files/kpasswdd-cracklib.c
new file mode 100644
index 000000000000..83be6904ebb3
--- /dev/null
+++ b/security/heimdal-devel/files/kpasswdd-cracklib.c
@@ -0,0 +1,22 @@
+#include <stdlib.h>
+#include <string.h>
+#include <krb5.h>
+#include <packer.h>
+
+int version = 0;
+
+const char *
+passwd_check(krb5_context context, krb5_principal principal,
+    krb5_data *password)
+{
+		char *p, *result;
+
+		p = malloc(password->length + 1);
+		if (p == NULL)
+				return "out of memory";
+		memcpy(p, password->data, password->length);
+		p[password->length] = '\0';
+		result = FascistCheck(p, LOCALBASE "/libdata/cracklib/cracklib-words");
+		free(p);
+		return result;
+}
diff --git a/security/heimdal-devel/files/patch-cf-make-proto.pl b/security/heimdal-devel/files/patch-cf-make-proto.pl
new file mode 100644
index 000000000000..bf6fd1447cdc
--- /dev/null
+++ b/security/heimdal-devel/files/patch-cf-make-proto.pl
@@ -0,0 +1,11 @@
+--- cf/make-proto.pl.orig	2019-06-07 06:21:35 UTC
++++ cf/make-proto.pl
+@@ -4,7 +4,7 @@
+ use Getopt::Std;
+ use File::Compare;
+ 
+-use JSON;
++# use JSON;
+ 
+ my $comment = 0;
+ my $doxygen = 0;
diff --git a/security/heimdal-devel/files/patch-cf_check-compile-et.m4 b/security/heimdal-devel/files/patch-cf_check-compile-et.m4
new file mode 100644
index 000000000000..49dd2ffeaacc
--- /dev/null
+++ b/security/heimdal-devel/files/patch-cf_check-compile-et.m4
@@ -0,0 +1,11 @@
+--- cf/check-compile-et.m4.orig	2022-11-17 06:42:48.000000000 -0800
++++ cf/check-compile-et.m4	2022-11-17 15:10:14.877952000 -0800
+@@ -7,7 +7,7 @@
+ 
+ krb_cv_compile_et="no"
+ krb_cv_com_err_need_r=""
+-krb_cv_compile_et_cross=no
++krb_cv_compile_et_cross=yes
+ if test "${COMPILE_ET}" != "no"; then
+ 
+ dnl We have compile_et.  Now let's see if it supports `prefix' and `index'.
diff --git a/security/heimdal-devel/files/patch-ch_pthreads.m4 b/security/heimdal-devel/files/patch-ch_pthreads.m4
new file mode 100644
index 000000000000..60ada3bc55ac
--- /dev/null
+++ b/security/heimdal-devel/files/patch-ch_pthreads.m4
@@ -0,0 +1,11 @@
+--- cf/pthreads.m4.orig	2022-11-17 06:42:48.000000000 -0800
++++ cf/pthreads.m4	2022-11-17 15:04:24.219994000 -0800
+@@ -34,7 +34,7 @@
+     ;;
+ *-*-freebsd*)
+ 	native_pthread_support=yes
+-	PTHREAD_LIBADD="-pthread"
++	PTHREAD_LIBADD="-lpthread"
+ 	;;
+ *-*-openbsd*)
+ 	native_pthread_support=yes
diff --git a/security/heimdal-devel/files/patch-configure.ac b/security/heimdal-devel/files/patch-configure.ac
new file mode 100644
index 000000000000..048b6c83b622
--- /dev/null
+++ b/security/heimdal-devel/files/patch-configure.ac
@@ -0,0 +1,10 @@
+--- configure.ac.orig	2019-06-07 06:21:39 UTC
++++ configure.ac
+@@ -153,6 +153,7 @@ AC_ARG_ENABLE(kx509, 
+ if test "$enable_kx509" != no ;then
+ 	AC_DEFINE([KX509], 1, [Define to enable kx509.])
+ fi
++AM_CONDITIONAL(KX509, test "$enable_kx509" != no)
+ 
+ dnl Need to test if pkg-config exists
+ PKG_PROG_PKG_CONFIG
diff --git a/security/heimdal-devel/files/patch-lib-krb5-krb5_locl.h b/security/heimdal-devel/files/patch-lib-krb5-krb5_locl.h
new file mode 100644
index 000000000000..7c1d29183477
--- /dev/null
+++ b/security/heimdal-devel/files/patch-lib-krb5-krb5_locl.h
@@ -0,0 +1,20 @@
+--- lib/krb5/krb5_locl.h.orig	2019-06-07 06:21:39 UTC
++++ lib/krb5/krb5_locl.h
+@@ -143,7 +143,7 @@ struct _krb5_krb_auth_data;
+ #include <krb5.h>
+ #include <krb5_err.h>
+ #include <asn1_err.h>
+-#ifdef PKINIT
++#if defined(PKINIT) || defined(KX509)
+ #include <hx509.h>
+ #endif
+ 
+@@ -271,7 +271,7 @@ typedef struct krb5_context_data {
+ #define KRB5_CTX_F_RD_REQ_IGNORE		16
+ #define KRB5_CTX_F_FCACHE_STRICT_CHECKING	32
+     struct send_to_kdc *send_to_kdc;
+-#ifdef PKINIT
++#if defined(PKINIT) || defined(KX509)
+     hx509_context hx509ctx;
+ #endif
+     unsigned int num_kdc_requests;
diff --git a/security/heimdal-devel/files/patch-lib__sl__slc-lex.l b/security/heimdal-devel/files/patch-lib__sl__slc-lex.l
new file mode 100644
index 000000000000..c9d450472321
--- /dev/null
+++ b/security/heimdal-devel/files/patch-lib__sl__slc-lex.l
@@ -0,0 +1,11 @@
+--- lib/sl/slc-lex.l.orig	2017-04-11 21:38:21 UTC
++++ lib/sl/slc-lex.l
+@@ -47,8 +47,6 @@ unsigned lineno = 1;
+ static void handle_comment(void);
+ static char * handle_string(void);
+ 
+-#define YY_NO_UNPUT
+-
+ #undef ECHO
+ 
+ %}
diff --git a/security/heimdal-devel/files/patch-tools-heimdal-gssapi.pc.in b/security/heimdal-devel/files/patch-tools-heimdal-gssapi.pc.in
new file mode 100644
index 000000000000..8e133986b39d
--- /dev/null
+++ b/security/heimdal-devel/files/patch-tools-heimdal-gssapi.pc.in
@@ -0,0 +1,10 @@
+--- tools/heimdal-gssapi.pc.in.orig	2017-04-11 21:38:21 UTC
++++ tools/heimdal-gssapi.pc.in
+@@ -9,6 +9,6 @@ Description: Heimdal is an implementatio
+ Version: @VERSION@
+ URL: http://www.pdc.kth.se/heimdal/
+ Requires.private: heimdal-krb5
+-Libs: -L${libdir} -lgssapi
++Libs: -L${libdir} -Wl,-rpath=${libdir} -lgssapi
+ Libs.private: -lheimntlm @LIB_crypt@
+ Cflags: -I${includedir}
diff --git a/security/heimdal-devel/files/patch-tools-krb5-config.in b/security/heimdal-devel/files/patch-tools-krb5-config.in
new file mode 100644
index 000000000000..30d434611fe3
--- /dev/null
+++ b/security/heimdal-devel/files/patch-tools-krb5-config.in
@@ -0,0 +1,10 @@
+--- tools/krb5-config.in.orig	2017-04-11 21:38:21 UTC
++++ tools/krb5-config.in
+@@ -85,6 +85,7 @@ for i in $*; do
+     ;;
+   --libs)
+     do_libs=yes
++    do_lib_deps=yes
+     ;;
+   --deps)
+     do_lib_deps=yes
diff --git a/security/heimdal-devel/pkg-descr b/security/heimdal-devel/pkg-descr
new file mode 100644
index 000000000000..5f407e6fc487
--- /dev/null
+++ b/security/heimdal-devel/pkg-descr
@@ -0,0 +1,3 @@
+Heimdal is an implementation of Kerberos 5, largely written in Sweden
+(due to crypto export legal issues in the US at the time). It is freely
+available under a three clause BSD style license.
diff --git a/security/heimdal-devel/pkg-message b/security/heimdal-devel/pkg-message
new file mode 100644
index 000000000000..e9c263eac41b
--- /dev/null
+++ b/security/heimdal-devel/pkg-message
@@ -0,0 +1,11 @@
+[
+{ type: install
+  message: <<EOM
+heimdal-7.1.0_1 uses a new database format which is incompatible
+with Heimdal in the base system and heimdal-1.5.3_6 or prior.
+
+Please read 20161112 in /usr/ports/UPDATING carefully to upgrade
+your database.
+EOM
+}
+]
diff --git a/security/heimdal-devel/pkg-plist b/security/heimdal-devel/pkg-plist
new file mode 100644
index 000000000000..7c19b3414004
--- /dev/null
+++ b/security/heimdal-devel/pkg-plist
@@ -0,0 +1,1258 @@
+bin/afslog
+bin/bsearch
+bin/gsstool
+bin/heimtools
+bin/hxtool
+bin/idn-lookup
+bin/kadmin
+bin/kdestroy
+bin/kf
+bin/kgetcred
+bin/kinit
+bin/klist
+bin/kpasswd
+bin/krb5-config
+bin/kswitch
+bin/ktutil
+bin/otp
+bin/otpprint
+bin/pagsh
+bin/string2key
+bin/su
+bin/verify_krb5_conf
+include/heimdal/asn1-common.h
+include/heimdal/asn1_err.h
+include/heimdal/base64.h
+include/heimdal/cms_asn1.h
+include/heimdal/com_err.h
+include/heimdal/com_right.h
+include/heimdal/crmf_asn1.h
+include/heimdal/der-private.h
+include/heimdal/der-protos.h
+include/heimdal/der.h
+include/heimdal/digest_asn1.h
+include/heimdal/getarg.h
+include/heimdal/gssapi.h
+include/heimdal/gssapi/gkrb5_err.h
+include/heimdal/gssapi/gssapi.h
+include/heimdal/gssapi/gssapi_krb5.h
+include/heimdal/gssapi/gssapi_ntlm.h
+include/heimdal/gssapi/gssapi_oid.h
+include/heimdal/gssapi/gssapi_spnego.h
+include/heimdal/hcrypto/aes.h
+include/heimdal/hcrypto/bn.h
+include/heimdal/hcrypto/des.h
+include/heimdal/hcrypto/dh.h
+include/heimdal/hcrypto/dsa.h
+include/heimdal/hcrypto/ec.h
+include/heimdal/hcrypto/ecdh.h
+include/heimdal/hcrypto/ecdsa.h
+include/heimdal/hcrypto/engine.h
+include/heimdal/hcrypto/evp-cc.h
+include/heimdal/hcrypto/evp-hcrypto.h
+include/heimdal/hcrypto/evp-openssl.h
+include/heimdal/hcrypto/evp-pkcs11.h
+include/heimdal/hcrypto/evp.h
+include/heimdal/hcrypto/hmac.h
+include/heimdal/hcrypto/md4.h
+include/heimdal/hcrypto/md5.h
+include/heimdal/hcrypto/pkcs12.h
+include/heimdal/hcrypto/rand.h
+include/heimdal/hcrypto/rc2.h
+include/heimdal/hcrypto/rc4.h
+include/heimdal/hcrypto/rsa.h
+include/heimdal/hcrypto/sha.h
+include/heimdal/hcrypto/ui.h
+include/heimdal/hcrypto/undef.h
+include/heimdal/hdb-protos.h
+include/heimdal/hdb.h
+include/heimdal/hdb_asn1.h
+include/heimdal/hdb_err.h
+include/heimdal/heim-ipc.h
+include/heimdal/heim_asn1.h
+include/heimdal/heim_err.h
+include/heimdal/heimbase.h
+include/heimdal/heimntlm-protos.h
+include/heimdal/heimntlm.h
+include/heimdal/hex.h
+include/heimdal/hx509-protos.h
+include/heimdal/hx509.h
+include/heimdal/hx509_err.h
+include/heimdal/k524_err.h
+include/heimdal/kadm5/admin.h
+include/heimdal/kadm5/kadm5-private.h
+include/heimdal/kadm5/kadm5-protos.h
+include/heimdal/kadm5/kadm5-pwcheck.h
+include/heimdal/kadm5/kadm5_err.h
+include/heimdal/kadm5/private.h
+include/heimdal/kafs.h
+include/heimdal/kdc-protos.h
+include/heimdal/kdc.h
+include/heimdal/krb5-protos.h
+include/heimdal/krb5-types.h
+include/heimdal/krb5.h
+include/heimdal/krb5/an2ln_plugin.h
+include/heimdal/krb5/ccache_plugin.h
+include/heimdal/krb5/db_plugin.h
+include/heimdal/krb5/locate_plugin.h
+include/heimdal/krb5/send_to_kdc_plugin.h
+include/heimdal/krb5/windc_plugin.h
+include/heimdal/krb5_asn1.h
+include/heimdal/krb5_ccapi.h
+include/heimdal/krb5_err.h
+include/heimdal/kx509_asn1.h
+include/heimdal/ntlm_err.h
+include/heimdal/ocsp_asn1.h
+include/heimdal/otp.h
+include/heimdal/parse_bytes.h
+include/heimdal/parse_time.h
+include/heimdal/parse_units.h
+include/heimdal/pkcs10_asn1.h
+include/heimdal/pkcs12_asn1.h
+include/heimdal/pkcs8_asn1.h
+include/heimdal/pkcs9_asn1.h
+include/heimdal/pkinit_asn1.h
+include/heimdal/resolve.h
+include/heimdal/rfc2459_asn1.h
+include/heimdal/roken-common.h
+include/heimdal/roken.h
+include/heimdal/rtbl.h
+include/heimdal/sl.h
+include/heimdal/wind.h
+include/heimdal/wind_err.h
+include/heimdal/xdbm.h
+%%CRACKLIB%%lib/heimdal/kpasswdd-cracklib.so
+lib/heimdal/libasn1.a
+lib/heimdal/libasn1.so
+lib/heimdal/libasn1.so.8
+lib/heimdal/libasn1.so.8.0.0
+lib/heimdal/libcom_err.a
+lib/heimdal/libcom_err.so
+lib/heimdal/libcom_err.so.1
+lib/heimdal/libcom_err.so.1.1.3
+lib/heimdal/libgssapi.a
+lib/heimdal/libgssapi.so
+lib/heimdal/libgssapi.so.3
+lib/heimdal/libgssapi.so.3.0.0
+lib/heimdal/libhcrypto.a
+lib/heimdal/libhcrypto.so
+lib/heimdal/libhcrypto.so.4
+lib/heimdal/libhcrypto.so.4.1.0
+lib/heimdal/libhdb.a
+lib/heimdal/libhdb.so
+lib/heimdal/libhdb.so.9
+lib/heimdal/libhdb.so.9.2.0
+lib/heimdal/libheimbase.a
+lib/heimdal/libheimbase.so
+lib/heimdal/libheimbase.so.1
+lib/heimdal/libheimbase.so.1.0.0
+lib/heimdal/libheimntlm.a
+lib/heimdal/libheimntlm.so
+lib/heimdal/libheimntlm.so.0
+lib/heimdal/libheimntlm.so.0.1.0
+%%NO_SQLITE%%lib/heimdal/libheimsqlite.a
+%%NO_SQLITE%%lib/heimdal/libheimsqlite.so
+%%NO_SQLITE%%lib/heimdal/libheimsqlite.so.0
+%%NO_SQLITE%%lib/heimdal/libheimsqlite.so.0.0.0
+lib/heimdal/libhx509.a
+lib/heimdal/libhx509.so
+lib/heimdal/libhx509.so.5
+lib/heimdal/libhx509.so.5.0.0
+lib/heimdal/libkadm5clnt.a
+lib/heimdal/libkadm5clnt.so
+lib/heimdal/libkadm5clnt.so.7
+lib/heimdal/libkadm5clnt.so.7.0.1
+lib/heimdal/libkadm5srv.a
+lib/heimdal/libkadm5srv.so
+lib/heimdal/libkadm5srv.so.8
+lib/heimdal/libkadm5srv.so.8.0.1
+lib/heimdal/libkafs.a
+lib/heimdal/libkafs.so
+lib/heimdal/libkafs.so.0
+lib/heimdal/libkafs.so.0.5.1
+lib/heimdal/libkdc.a
+lib/heimdal/libkdc.so
+lib/heimdal/libkdc.so.2
+lib/heimdal/libkdc.so.2.0.0
+lib/heimdal/libkrb5.a
+lib/heimdal/libkrb5.so
+lib/heimdal/libkrb5.so.26
+lib/heimdal/libkrb5.so.26.0.0
+lib/heimdal/libotp.a
+lib/heimdal/libotp.so
+lib/heimdal/libotp.so.0
+lib/heimdal/libotp.so.0.1.5
+lib/heimdal/libroken.a
+lib/heimdal/libroken.so
+lib/heimdal/libroken.so.18
+lib/heimdal/libroken.so.18.1.0
+lib/heimdal/libsl.a
+lib/heimdal/libsl.so
+lib/heimdal/libsl.so.0
+lib/heimdal/libsl.so.0.2.1
+lib/heimdal/libwind.a
+lib/heimdal/libwind.so
+lib/heimdal/libwind.so.0
+lib/heimdal/libwind.so.0.0.0
+lib/heimdal/windc.a
+lib/heimdal/windc.so
+lib/heimdal/windc.so.0
+lib/heimdal/windc.so.0.0.0
+libdata/pkgconfig/heimdal-gssapi.pc
+libdata/pkgconfig/heimdal-kadm-client.pc
+libdata/pkgconfig/heimdal-kadm-server.pc
+libdata/pkgconfig/heimdal-krb5.pc
+libdata/pkgconfig/kadm-client.pc
+libdata/pkgconfig/kadm-server.pc
+libdata/pkgconfig/kafs.pc
+libdata/pkgconfig/krb5-gssapi.pc
+libdata/pkgconfig/krb5.pc
+libexec/digest-service
+libexec/heimdal/asn1_compile
+libexec/heimdal/asn1_print
+libexec/heimdal/slc
+libexec/hprop
+libexec/hpropd
+libexec/ipropd-master
+libexec/ipropd-slave
+libexec/kadmind
+libexec/kcm
+libexec/kdc
+libexec/kdigest
+libexec/kfd
+libexec/kimpersonate
+libexec/kpasswdd
+man/man1/afslog.1.gz
+man/man1/bsearch.1.gz
+man/man1/kadmin.1.gz
+man/man1/kdestroy.1.gz
+man/man1/kf.1.gz
+man/man1/kgetcred.1.gz
+man/man1/kinit.1.gz
+man/man1/klist.1.gz
+man/man1/kpasswd.1.gz
+man/man1/krb5-config.1.gz
+man/man1/kswitch.1.gz
+man/man1/ktutil.1.gz
+man/man1/otp.1.gz
+man/man1/otpprint.1.gz
+man/man1/pagsh.1.gz
+man/man1/su.1.gz
+man/man3/HDB.3.gz
+man/man3/arg_printusage.3.gz
+man/man3/data.3.gz
+man/man3/ecalloc.3.gz
+man/man3/emalloc.3.gz
+man/man3/eread.3.gz
+man/man3/erealloc.3.gz
+man/man3/esetenv.3.gz
+man/man3/estrdup.3.gz
+man/man3/ewrite.3.gz
+man/man3/getarg.3.gz
+man/man3/gss_accept_sec_context.3.gz
+man/man3/gss_acquire_cred.3.gz
+man/man3/gss_add_cred.3.gz
+man/man3/gss_add_oid_set_member.3.gz
+man/man3/gss_canonicalize_name.3.gz
+man/man3/gss_compare_name.3.gz
+man/man3/gss_context_time.3.gz
+man/man3/gss_create_empty_oid_set.3.gz
+man/man3/gss_delete_sec_context.3.gz
+man/man3/gss_display_name.3.gz
+man/man3/gss_display_status.3.gz
+man/man3/gss_duplicate_name.3.gz
+man/man3/gss_export_name.3.gz
+man/man3/gss_export_sec_context.3.gz
+man/man3/gss_get_mic.3.gz
+man/man3/gss_import_name.3.gz
+man/man3/gss_import_sec_context.3.gz
+man/man3/gss_indicate_mechs.3.gz
+man/man3/gss_init_sec_context.3.gz
+man/man3/gss_inquire_attrs_for_mech.3.gz
+man/man3/gss_inquire_context.3.gz
+man/man3/gss_inquire_cred.3.gz
+man/man3/gss_inquire_cred_by_mech.3.gz
+man/man3/gss_inquire_mechs_for_name.3.gz
+man/man3/gss_inquire_names_for_mech.3.gz
+man/man3/gss_inquire_saslname_for_mech.3.gz
+man/man3/gss_krb5_ccache_name.3.gz
+man/man3/gss_krb5_compat_des3_mic.3.gz
+man/man3/gss_krb5_copy_ccache.3.gz
+man/man3/gss_krb5_get_tkt_flags.3.gz
+man/man3/gss_krb5_import_ccache.3.gz
+man/man3/gss_krb5_import_cred.3.gz
+man/man3/gss_oid_equal.3.gz
+man/man3/gss_process_context_token.3.gz
+man/man3/gss_release_buffer.3.gz
+man/man3/gss_release_cred.3.gz
+man/man3/gss_release_iov_buffer.3.gz
+man/man3/gss_release_name.3.gz
+man/man3/gss_release_oid_set.3.gz
+man/man3/gss_seal.3.gz
+man/man3/gss_sign.3.gz
+man/man3/gss_test_oid_set_member.3.gz
+man/man3/gss_unseal.3.gz
+man/man3/gss_unwrap.3.gz
+man/man3/gss_unwrap_iov.3.gz
+man/man3/gss_verify.3.gz
+man/man3/gss_verify_mic.3.gz
+man/man3/gss_wrap.3.gz
+man/man3/gss_wrap_iov.3.gz
+man/man3/gss_wrap_iov_length.3.gz
+man/man3/gss_wrap_size_limit.3.gz
+man/man3/gssapi.3.gz
+man/man3/gssapi_mechs_intro.3.gz
+man/man3/gssapi_services_intro.3.gz
+man/man3/gsskrb5_extract_authz_data_from_sec_context.3.gz
+man/man3/gsskrb5_register_acceptor_identity.3.gz
+man/man3/hdb__del.3.gz
+man/man3/hdb__get.3.gz
+man/man3/hdb__put.3.gz
+man/man3/hdb_auth_status.3.gz
+man/man3/hdb_check_constrained_delegation.3.gz
+man/man3/hdb_check_pkinit_ms_upn_match.3.gz
+man/man3/hdb_check_s4u2self.3.gz
+man/man3/hdb_close.3.gz
+man/man3/hdb_destroy.3.gz
+man/man3/hdb_entry_ex.3.gz
+man/man3/hdb_fetch_kvno.3.gz
+man/man3/hdb_firstkey.3.gz
+man/man3/hdb_free.3.gz
+man/man3/hdb_get_realms.3.gz
+man/man3/hdb_lock.3.gz
+man/man3/hdb_name.3.gz
+man/man3/hdb_nextkey.3.gz
+man/man3/hdb_open.3.gz
+man/man3/hdb_password.3.gz
+man/man3/hdb_remove.3.gz
+man/man3/hdb_rename.3.gz
+man/man3/hdb_set_sync.3.gz
+man/man3/hdb_store.3.gz
+man/man3/hdb_unlock.3.gz
+man/man3/heim_ntlm_build_ntlm1_master.3.gz
+man/man3/heim_ntlm_build_ntlm2_master.3.gz
+man/man3/heim_ntlm_calculate_lm2.3.gz
+man/man3/heim_ntlm_calculate_ntlm1.3.gz
+man/man3/heim_ntlm_calculate_ntlm2.3.gz
+man/man3/heim_ntlm_decode_targetinfo.3.gz
+man/man3/heim_ntlm_encode_targetinfo.3.gz
+man/man3/heim_ntlm_encode_type1.3.gz
+man/man3/heim_ntlm_encode_type2.3.gz
+man/man3/heim_ntlm_encode_type3.3.gz
+man/man3/heim_ntlm_free_buf.3.gz
+man/man3/heim_ntlm_free_targetinfo.3.gz
+man/man3/heim_ntlm_free_type1.3.gz
+man/man3/heim_ntlm_free_type2.3.gz
+man/man3/heim_ntlm_free_type3.3.gz
+man/man3/heim_ntlm_keyex_unwrap.3.gz
+man/man3/heim_ntlm_nt_key.3.gz
+man/man3/heim_ntlm_ntlmv2_key.3.gz
+man/man3/heim_ntlm_verify_ntlm2.3.gz
+man/man3/heimbase.3.gz
+man/man3/hx509.3.gz
+man/man3/hx509_bitstring_print.3.gz
+man/man3/hx509_ca.3.gz
+man/man3/hx509_ca_sign.3.gz
+man/man3/hx509_ca_sign_self.3.gz
+man/man3/hx509_ca_tbs_add_crl_dp_uri.3.gz
+man/man3/hx509_ca_tbs_add_eku.3.gz
+man/man3/hx509_ca_tbs_add_san_hostname.3.gz
+man/man3/hx509_ca_tbs_add_san_jid.3.gz
+man/man3/hx509_ca_tbs_add_san_ms_upn.3.gz
+man/man3/hx509_ca_tbs_add_san_otherName.3.gz
+man/man3/hx509_ca_tbs_add_san_pkinit.3.gz
+man/man3/hx509_ca_tbs_add_san_rfc822name.3.gz
+man/man3/hx509_ca_tbs_free.3.gz
+man/man3/hx509_ca_tbs_init.3.gz
+man/man3/hx509_ca_tbs_set_ca.3.gz
+man/man3/hx509_ca_tbs_set_domaincontroller.3.gz
+man/man3/hx509_ca_tbs_set_notAfter.3.gz
+man/man3/hx509_ca_tbs_set_notAfter_lifetime.3.gz
+man/man3/hx509_ca_tbs_set_notBefore.3.gz
+man/man3/hx509_ca_tbs_set_proxy.3.gz
+man/man3/hx509_ca_tbs_set_serialnumber.3.gz
+man/man3/hx509_ca_tbs_set_signature_algorithm.3.gz
+man/man3/hx509_ca_tbs_set_spki.3.gz
+man/man3/hx509_ca_tbs_set_subject.3.gz
+man/man3/hx509_ca_tbs_set_template.3.gz
+man/man3/hx509_ca_tbs_set_unique.3.gz
+man/man3/hx509_ca_tbs_subject_expand.3.gz
+man/man3/hx509_ca_tbs_template_units.3.gz
+man/man3/hx509_cert.3.gz
+man/man3/hx509_cert_binary.3.gz
+man/man3/hx509_cert_check_eku.3.gz
+man/man3/hx509_cert_cmp.3.gz
+man/man3/hx509_cert_find_subjectAltName_otherName.3.gz
+man/man3/hx509_cert_free.3.gz
+man/man3/hx509_cert_get_SPKI.3.gz
+man/man3/hx509_cert_get_SPKI_AlgorithmIdentifier.3.gz
+man/man3/hx509_cert_get_attribute.3.gz
+man/man3/hx509_cert_get_base_subject.3.gz
+man/man3/hx509_cert_get_friendly_name.3.gz
+man/man3/hx509_cert_get_issuer.3.gz
+man/man3/hx509_cert_get_issuer_unique_id.3.gz
+man/man3/hx509_cert_get_notAfter.3.gz
+man/man3/hx509_cert_get_notBefore.3.gz
+man/man3/hx509_cert_get_serialnumber.3.gz
+man/man3/hx509_cert_get_subject.3.gz
+man/man3/hx509_cert_get_subject_unique_id.3.gz
+man/man3/hx509_cert_init.3.gz
+man/man3/hx509_cert_init_data.3.gz
+man/man3/hx509_cert_keyusage_print.3.gz
+man/man3/hx509_cert_ref.3.gz
+man/man3/hx509_cert_set_friendly_name.3.gz
+man/man3/hx509_certs_add.3.gz
+man/man3/hx509_certs_append.3.gz
+man/man3/hx509_certs_end_seq.3.gz
+man/man3/hx509_certs_filter.3.gz
+man/man3/hx509_certs_find.3.gz
+man/man3/hx509_certs_free.3.gz
+man/man3/hx509_certs_info.3.gz
+man/man3/hx509_certs_init.3.gz
+man/man3/hx509_certs_iter_f.3.gz
+man/man3/hx509_certs_merge.3.gz
+man/man3/hx509_certs_next_cert.3.gz
+man/man3/hx509_certs_start_seq.3.gz
+man/man3/hx509_certs_store.3.gz
+man/man3/hx509_ci_print_names.3.gz
+man/man3/hx509_clear_error_string.3.gz
+man/man3/hx509_cms.3.gz
+man/man3/hx509_cms_create_signed_1.3.gz
+man/man3/hx509_cms_envelope_1.3.gz
+man/man3/hx509_cms_unenvelope.3.gz
+man/man3/hx509_cms_unwrap_ContentInfo.3.gz
+man/man3/hx509_cms_verify_signed.3.gz
+man/man3/hx509_cms_wrap_ContentInfo.3.gz
+man/man3/hx509_context_free.3.gz
+man/man3/hx509_context_init.3.gz
+man/man3/hx509_context_set_missing_revoke.3.gz
+man/man3/hx509_crl_add_revoked_certs.3.gz
+man/man3/hx509_crl_alloc.3.gz
+man/man3/hx509_crl_free.3.gz
+man/man3/hx509_crl_lifetime.3.gz
+man/man3/hx509_crl_sign.3.gz
+man/man3/hx509_crypto.3.gz
+man/man3/hx509_env.3.gz
+man/man3/hx509_env_add.3.gz
+man/man3/hx509_env_add_binding.3.gz
+man/man3/hx509_env_find.3.gz
+man/man3/hx509_env_find_binding.3.gz
+man/man3/hx509_env_free.3.gz
+man/man3/hx509_env_lfind.3.gz
+man/man3/hx509_err.3.gz
+man/man3/hx509_error.3.gz
+man/man3/hx509_free_error_string.3.gz
+man/man3/hx509_free_octet_string_list.3.gz
+man/man3/hx509_general_name_unparse.3.gz
+man/man3/hx509_get_error_string.3.gz
+man/man3/hx509_get_one_cert.3.gz
+man/man3/hx509_keyset.3.gz
+man/man3/hx509_lock.3.gz
+man/man3/hx509_misc.3.gz
+man/man3/hx509_name.3.gz
+man/man3/hx509_name_binary.3.gz
+man/man3/hx509_name_cmp.3.gz
+man/man3/hx509_name_copy.3.gz
+man/man3/hx509_name_expand.3.gz
+man/man3/hx509_name_free.3.gz
+man/man3/hx509_name_is_null_p.3.gz
+man/man3/hx509_name_to_Name.3.gz
+man/man3/hx509_name_to_string.3.gz
+man/man3/hx509_ocsp_request.3.gz
+man/man3/hx509_ocsp_verify.3.gz
+man/man3/hx509_oid_print.3.gz
+man/man3/hx509_oid_sprint.3.gz
+man/man3/hx509_parse_name.3.gz
+man/man3/hx509_peer.3.gz
+man/man3/hx509_peer_info_add_cms_alg.3.gz
+man/man3/hx509_peer_info_alloc.3.gz
+man/man3/hx509_peer_info_free.3.gz
+man/man3/hx509_peer_info_set_cert.3.gz
+man/man3/hx509_peer_info_set_cms_algs.3.gz
+man/man3/hx509_print.3.gz
+man/man3/hx509_print_cert.3.gz
+man/man3/hx509_print_stdout.3.gz
+man/man3/hx509_query.3.gz
+man/man3/hx509_query_alloc.3.gz
+man/man3/hx509_query_free.3.gz
*** 781 LINES SKIPPED ***