Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

krb5 #1706

Draft
wants to merge 18 commits into
base: main
Choose a base branch
from
Draft

krb5 #1706

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
18 commits
Select commit Hold shift + click to select a range
96aaf1f
feat: Initial Kerberos integration proposal
nichtsfrei Aug 17, 2024
2a02eaf
Implement caching
nichtsfrei Aug 18, 2024
8754b82
Add check for writing krb5.conf
nichtsfrei Aug 28, 2024
4e96134
Fix: remove unnecessary creds free
nichtsfrei Aug 28, 2024
ba72f24
Seperare cache_authentication into an own function
nichtsfrei Aug 28, 2024
b24d456
Renamed keberos to kerberos.
nichtsfrei Sep 30, 2024
51a083b
Added c-nasl-binding, moved implementation to misc
nichtsfrei Oct 1, 2024
682a7be
Adds functionality to create gss context into openvas-krb5
nichtsfrei Oct 2, 2024
befcfa8
Add additional functions for krb5
nichtsfrei Oct 3, 2024
7af498d
Mhm
nichtsfrei Oct 7, 2024
5731981
Add: krb5_gss_session_key, krb5_error_code_to_string
nichtsfrei Oct 24, 2024
1804078
example/gss.nasl: send data to target and update context
nichtsfrei Nov 4, 2024
d32542a
Add: find or add realm, fixes error code handling
nichtsfrei Nov 5, 2024
a03ab02
Refactor: remove old krb5 implementation
nichtsfrei Nov 6, 2024
c86cbd8
Minor refacting
nichtsfrei Nov 6, 2024
421f686
Fix: krb5_gss_update_context and okrb5_gss_free_context
nichtsfrei Nov 7, 2024
aff0b7e
Add: releasing of gss when scan_attack is finished
nichtsfrei Nov 7, 2024
2bed824
Removes obsolete kerberos dir
nichtsfrei Nov 11, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions misc/.gitignore
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
a.out
test.sh
krb5.conf
14 changes: 8 additions & 6 deletions misc/CMakeLists.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,8 @@ pkg_check_modules (GLIB REQUIRED glib-2.0>=2.42)
pkg_check_modules (GLIB_JSON REQUIRED json-glib-1.0>=1.4.4)
pkg_check_modules (GNUTLS REQUIRED gnutls>=3.6.4)
pkg_check_modules (CURL REQUIRED libcurl>=7.74.0)
pkg_check_modules (KRB5 REQUIRED krb5)
pkg_check_modules (KRB5_GSSAPI REQUIRED krb5-gssapi)

pkg_check_modules (LIBGVM_BASE REQUIRED libgvm_base>=22.4)
pkg_check_modules (LIBGVM_UTIL REQUIRED libgvm_util>=22.4)
Expand Down Expand Up @@ -69,13 +71,13 @@ add_definitions (-DOPENVAS_MISC_VERSION="${PROJECT_VERSION_STRING}")

include_directories (${GLIB_INCLUDE_DIRS} ${GLIB_JSON_INCLUDE_DIRS}
${LIBGVM_BASE_INCLUDE_DIRS}
${GNUTLS_INCLUDE_DIRS} ${CURL_INCLUDE_DIRS})
${GNUTLS_INCLUDE_DIRS} ${CURL_INCLUDE_DIRS} ${KRB5_INCLUDE_DIRS} ${KRB5_GSSAPI_INCLUDE_DIRS})

# Library

set (FILES bpf_share.c ftp_funcs.c vendorversion.c network.c plugutils.c pcap.c
scan_id.c strutils.c table_driven_lsc.c ipc.c ipc_openvas.c ipc_pipe.c
user_agent.c scanneraux.c kb_cache.c heartbeat.c)
user_agent.c scanneraux.c kb_cache.c heartbeat.c openvas-krb5.c)

# On windows we are always PIC and stack-protector is replaces by DEP
# Also stack protection needs a shared library to work
Expand All @@ -93,7 +95,7 @@ set_target_properties (openvas_misc_shared PROPERTIES VERSION "${PROJECT_VERSION
target_link_libraries (openvas_misc_shared LINK_PRIVATE
${GNUTLS_LDFLAGS} ${UUID_LDFLAGS}
${GLIB_LDFLAGS} ${GLIB_JSON_LDFLAGS}
${PCAP_LDFLAGS} ${LIBGVM_BOREAS_LDFLAGS} ${CURL_LDFLAGS}
${PCAP_LDFLAGS} ${LIBGVM_BOREAS_LDFLAGS} ${CURL_LDFLAGS} ${KRB5_LDFLAGS} ${KRB5_GSSAPI_LDFLAGS}
${LINKER_HARDENING_FLAGS})

if (OPENVAS_STATE_DIR)
Expand Down Expand Up @@ -136,7 +138,7 @@ set (LINK_LIBS_FOR_TESTS cgreen
${LIBGVM_BASE_LDFLAGS}
${GLIB_LDFLAGS}
${PCAP_LDFLAGS}
${CURL_LDFLAGS}
${CURL_LDFLAGS} ${KRB5_LDFLAGS} ${KRB5_GSSAPI_LDFLAGS}
${LINKER_HARDENING_FLAGS} ${CMAKE_THREAD_LIBS_INIT}
${ALIVEDETECTION_TEST_LINKER_WRAP_OPTIONS})

Expand All @@ -163,7 +165,7 @@ target_include_directories (ipc-openvas-test PRIVATE ${CGREEN_INCLUDE_DIRS})
target_link_libraries (ipc-openvas-test cgreen
${GLIB_LDFLAGS}
${GLIB_JSON_LDFLAGS}
${CURL_LDFLAGS}
${CURL_LDFLAGS} ${KRB5_LDFLAGS} ${KRB5_GSSAPI_LDFLAGS}
${LINKER_HARDENING_FLAGS})

add_custom_target (tests-ipc-openvas
Expand All @@ -178,7 +180,7 @@ target_link_libraries (lsc-test cgreen
${LIBGVM_UTIL_LDFLAGS}
${GLIB_LDFLAGS}
${GLIB_JSON_LDFLAGS}
${CURL_LDFLAGS}
${CURL_LDFLAGS} ${KRB5_LDFLAGS} ${KRB5_GSSAPI_LDFLAGS}
${LINKER_HARDENING_FLAGS})

add_custom_target (tests-lsc
Expand Down
Loading
Loading