delta/gnutls.git, branch tmp-session-ticket-timestamp

ext/pre_shared_key: don't assume ob_ticket_age < ticket_age_add

2018-10-26T08:53:55+00:00

Previously, the server treated the condition as error, while it is
possible that ob_ticket_age may have wrapped round by 2^32.

Signed-off-by: Daiki Ueno

tls13/session_ticket: calculate ticket_age in milliseconds

2018-10-26T08:53:55+00:00

Previously we calculated ticket age from the current wall clock in
seconds, multiplying by 1000.  This is conceptually wrong, because
ticket age is designed to be in milliseconds.

Signed-off-by: Daiki Ueno

str: add macros to encode/decode struct timespec value

2018-10-26T08:53:54+00:00

Signed-off-by: Daiki Ueno

system: provide a means to replace gettime implementation

2018-10-26T06:23:05+00:00

While gettime() is extensively used in the code, the library
previously hadn't provided a way to replace it for testing.  This adds
a new internal function _gnutls_global_set_gettime_function and makes
use of it through virt-time.h.

Signed-off-by: Daiki Ueno

_gnutls_timespec_cmp: new inline function

2018-10-25T10:43:47+00:00

Signed-off-by: Daiki Ueno

tls13/session_ticket: rename tls13_ticket_t type to tls13_ticket_st

2018-10-25T10:43:45+00:00

This is consistent with the coding guideline.

Signed-off-by: Daiki Ueno

gnutls-cli: do not print errors twice

2018-10-25T06:13:14+00:00

Signed-off-by: Nikos Mavrogiannopoulos

Merge branch 'tmp-fix-fips-mode' into 'master'

2018-10-24T11:16:26+00:00

fips140: aligned code with documentation

See merge request gnutls/gnutls!781

Merge branch 'tmp-initialize-so-pin-fix' into 'master'

2018-10-24T10:51:08+00:00

p11tool: fix admin user PIN initialization

Closes #561

See merge request gnutls/gnutls!776

p11tool: fix initialization of security officer's PIN

2018-10-24T09:04:25+00:00

Previously we would call gnutls_pkcs11_token_set_pin() without an
old PIN provided, which will result to the use of C_InitPIN() on the
underlying module. The C_InitPIN() in contrast with C_SetPIN() will
only work for the user and not for the administrator. As such, we
always provide the oldpin for when we change the admin's PIN.

Resolves #561

Signed-off-by: Nikos Mavrogiannopoulos