This unifies language (spell-checking), Signed-off-by requirement and
icon branding across all clones and working copies.
Signed-off-by: Simon Rozman <simon@rozman.si>
NMAKE invocations are costly (slow, no-parallel support).
Rather than pinpoint cleaning of each combination of $(LANG), $(PLAT)
and $(CFG) related files, we do the wildcard cleaning of all packaging
files.
Signed-off-by: Simon Rozman <simon@rozman.si>
Renaming MSI and other output files just to unify platform designation
doesn't justify the cause. Not to break other people's installers, the
"AMD64" was renamed back to "x64" in output filenames.
This partially reverts 152e3a9176.
Signed-off-by: Simon Rozman <simon@rozman.si>
As component GUIDs changed, but the component path remained, the minor
update will no longer work correctly.
Signed-off-by: Simon Rozman <simon@rozman.si>
- .sln uses the same as .vcxproj and Makefile
- Output MSI files use the same as %PROCESSOR_ARCHITECTURE%
Signed-off-by: Simon Rozman <simon@rozman.si>
- SCH_USE_STRONG_CRYPTO is now declared in the Windows SDK included with
Visual Studio 2019. No need to enter this flag numerically any more.
- m_sc_ctx.initialize() and m_sc_ctx.process() should use same flags.
They are actually. Rather than copy&paste them, declare them in a
single place.
- Add ISC_REQ_USE_SUPPLIED_CREDS flag. Use the client certificate we
supply or none at all.
- Add ISC_REQ_MANUAL_CRED_VALIDATION flag. We validate the server
certificate.
Signed-off-by: Simon Rozman <simon@rozman.si>
By storing the client certificate the certificate became detached from
its private key stored in user certificate store. This rendered client
certificates useless for client TLS authentication.
Now, the client certificate thumbprint is stored instead. The client
certificate is looked up in the user certificate store as required.
This breaks profile XML and BLOB backward compatibility. Since the
client certificate support was broken, nobody probably used those in
the settings before.
Signed-off-by: Simon Rozman <simon@rozman.si>
To retrieve user credentials, EapHost provides us the interactive user's
token we can use to impersonate.
By doing the impersonation early in peer::get_identity(), we don't need
to pass the token down the lower methods. This is rather a
simplification than a performance optimization.
Signed-off-by: Simon Rozman <simon@rozman.si>
It is important to implement this method in derived classes. When we
provided default implementation returning NULL, introducing new methods
might leave this method not implemented without a compiler error.
Signed-off-by: Simon Rozman <simon@rozman.si>
