Matthew John Cheetham e16ac344de spnego/gss-api: block NTLM via gss_set_neg_mechs ... Add credential-based NTLM filtering for GSS-API SPNEGO. Acquire explicit credentials, enumerate available mechanisms, filter out the NTLMSSP OID, and apply via gss_set_neg_mechs(). Also verify the negotiated mechanism after context establishment and reject NTLM if disallowed. Pass a cred_handle through Curl_gss_init_sec_context so SPNEGO can use the restricted credentials. Probe for gss_set_neg_mechs() availability (HAVE_GSS_SET_NEG_MECHS) in configure and CMake. Signed-off-by: Matthew John Cheetham <mjcheetham@outlook.com>		2026-04-14 15:12:42 +01:00
..
cleartext.c	lib: use lib source directory as base include path	2026-02-23 16:00:42 +01:00
cram.c	lib: use lib source directory as base include path	2026-02-23 16:00:42 +01:00
digest.c	digest: fix memory leak in auth_create_digest_http_message()	2026-03-09 09:24:01 +01:00
digest.h	lib: use lib source directory as base include path	2026-02-23 16:00:42 +01:00
digest_sspi.c	auth: upgrade SSPI identity to SEC_WINNT_AUTH_IDENTITY_EX	2026-04-13 12:58:52 +01:00
gsasl.c	lib: use lib source directory as base include path	2026-02-23 16:00:42 +01:00
krb5_gssapi.c	spnego/gss-api: block NTLM via gss_set_neg_mechs	2026-04-14 15:12:42 +01:00
krb5_sspi.c	docs: avoid starting sentences with However,	2026-03-07 23:49:11 +01:00
ntlm.c	clang-tidy: enable readability-math-missing-parentheses, adjust code	2026-02-23 18:57:40 +01:00
ntlm_sspi.c	lib: use lib source directory as base include path	2026-02-23 16:00:42 +01:00
oauth2.c	lib: use lib source directory as base include path	2026-02-23 16:00:42 +01:00
spnego_gssapi.c	spnego/gss-api: block NTLM via gss_set_neg_mechs	2026-04-14 15:12:42 +01:00
spnego_sspi.c	spnego/sspi: block NTLM via PackageList exclusion	2026-04-14 15:12:38 +01:00
vauth.c	lib: use lib source directory as base include path	2026-02-23 16:00:42 +01:00
vauth.h	spnego/gss-api: block NTLM via gss_set_neg_mechs	2026-04-14 15:12:42 +01:00