Bernie Hackett
Bernie Hackett
It's not easy, and not well documented. You have to use [cryptography's ocsp module](https://cryptography.io/en/latest/x509/ocsp/) to validate the stapled response. This is how we did it in PyMongo: https://github.com/mongodb/mongo-python-driver/blob/master/pymongo/ocsp_support.py https://github.com/mongodb/mongo-python-driver/blob/3.12.0/pymongo/pyopenssl_context.py#L183-L185
This should be resolved with the release of 1.3.0.
@wokis can you provide some hints for testing the server side API? Particularly any configuration changes you had to make to the dev machine, like running setspn to configure the...
I noticed that the spn passed to authGSSServerInit isn't actually used anywhere. Looking at other implementations, it seems that the spn should be passed to the principal field in AcquireCredentialsHandle...
@Yrlish what features were added that you need?
Good to hear. As you can probably tell from this ticket I have no environment to test the server side code in. If you can confirm that it works for...
It's pretty common for applications to use UUIDs or GUIDs for _id.
Renaming the so from kerberos.so to pykerberos.so is going to break every application that currently uses this package.
It looks like Apple is actively developing pykerberos again (and releasing on pypi). They just did a release January 25. https://pypi.python.org/pypi/kerberos http://www.calendarserver.org/log/PyKerberos/trunk?rev=15501
Adding the vnc user to the video group, then rebooting the Raspberry Pi (Raspberry Pi 3 Model B Plus Rev 1.3) fixed this problem for me. Thanks @any1.