We need an rxgk_key back from get_token

Not just an RXGK_Data.

Change-Id: Icab3f8114730cc28f03c3831279052a3f210991a
Client security object doesn't need a kvno

Only the server needs to care, I think.

Probably means we don't need to track enctype, either, as that is
tracked within the rxgk_key, but leave it for now.

Change-Id: I1102da7cb93f68115a7ddd3c38e3d58c9e5cf720
fixup gss loop refactor

Be sure to initialize things if we're always freeing them.

Change-Id: I9de6c40c064b6c59ef9d83fe5d34ff174d43b4bc
Get a token over an rxgk connection

We call through our dummy methods that always return success.
Now we can start making them not-dummy!

Change-Id: Icd6f9d64f737b02e858bcae7fcc6c008e6ddf377
Data structures for per-connection security data

Also tidy up other comments.

Change-Id: I8f0ca07580090a1857e5412d069dd04acd128294
fixup NewClientSecurityObject

Check for allocation failures in both places, not just the first time.

Change-Id: Ic8fa3cf0efb2363ac1fab6137ba197c3517f9866
Include a union for security object privateData

We have client and server versions, but alias them for the first
field, which specifies which type is in use.
The union lets this aliasing be more correct by the standard.

Change-Id: I6581cbdd9ec4aed943b7361b39526727153cb5d5
Create and destroy connections

Destroy the security object on last close.

Change-Id: Iee79f072bccd202db658771cf1e5d29c0c411761
rxgk_server: check auth, get/create challenge

Using a random nonce brings in hcrypto.
We don't check the response (and the client drops it on the floor),
so nothing new yet.

Change-Id: I88905e42c31b70379aaf4a85ac642eb9b6a92ee9
Add copy_rxgkdata

A utility function to allocate and copy data from one RXGK_Data to another.

Change-Id: I13055027fa986158dbce5391f88391f5ba24755a
fixup use RXGK_Data for cprivate token

Don't use C99 variable-length arrays just to be fancy.

Change-Id: I7b6a5e410927b037e32a9d90d98296f0272610f9
The token is just data, not an array of the same

One data blob contains the token.

Change-Id: I479e097a202f96f9df4aea6c120b792d35951ba5
The fixed-length nonce is encoded straightforwardly

Change-Id: I40f17035da77fe8c64c075f5a33745a358272375
Note need to do something with epoch and cid

Change-Id: I18f8a8eaba9c4e2684ed9febed750b0f655613d8
First crack at GetResponse

Lots of memory leaks, and needs to be refactored, but doesn't
seem to crash right away.

Change-Id: Ica44ce9a656f8e79fd033621f4f601d9475cb0f3
Refactor GetResponse

Tighten up the error handling, too.

Change-Id: I63dd143d27d4f11d1bb7e69da0369c6f2d63db72
Add decrypt_in_key

Analogous to encrypt_in_key.
No kvno is needed in the encrypted data here, as we already have the
keyblock in question.

Change-Id: I356c5fb9d6a9c04b1b93d0c57104790e977c7035
First crack at CheckResponse

Note that both we and the client are using the master key for
the connection, not a derived transport key.

Change-Id: If4994ccaee0cd60ee0e817ac015f0b01db8ab03c
Use correct field for returned token from get_token

The field named 'token' is the gss output; our token is in the
clientinfo structure.

Change-Id: Ief199300d8d979a2c4c7d2df94036da37b73c964
fixup epoch/cid handling

Just use the dummy value rx gave us; don't try to be clever about it.
This makes the checks easier.

Change-Id: Ic05a9a17f43a3136adfc837a039a0046a28cd8a2