<feed xmlns='http://www.w3.org/2005/Atom'>
<title>delta/gnutls.git/lib/auth.c, branch tmp-cli-buffer-term</title>
<subtitle>gitlab.com: gnutls/gnutls.git
</subtitle>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gnutls.git/'/>
<entry>
<title>handshake: store session parameters in TLS1.3 ticket</title>
<updated>2018-05-26T04:12:04+00:00</updated>
<author>
<name>Nikos Mavrogiannopoulos</name>
<email>nmav@redhat.com</email>
</author>
<published>2018-05-15T08:10:20+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gnutls.git/commit/?id=9e197e0cc1ffe9186bcdf1aff925316d93f232a2'/>
<id>9e197e0cc1ffe9186bcdf1aff925316d93f232a2</id>
<content type='text'>
This allows a TLS1.3 server to obtain certificate or other
information from the client on a resumed session.

Signed-off-by: Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This allows a TLS1.3 server to obtain certificate or other
information from the client on a resumed session.

Signed-off-by: Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>gnutls_auth_get_type: simplified</title>
<updated>2018-05-26T04:12:04+00:00</updated>
<author>
<name>Nikos Mavrogiannopoulos</name>
<email>nmav@redhat.com</email>
</author>
<published>2018-05-14T07:01:59+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gnutls.git/commit/?id=b14624d4ff71ba3d3bf3d1c95da02ab3c059a03d'/>
<id>b14624d4ff71ba3d3bf3d1c95da02ab3c059a03d</id>
<content type='text'>
Signed-off-by: Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Signed-off-by: Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>TLS 1.3: Introduced TLS 1.3 session resumption</title>
<updated>2018-05-26T04:12:04+00:00</updated>
<author>
<name>Ander Juaristi</name>
<email>a@juaristi.eus</email>
</author>
<published>2018-04-16T15:13:47+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gnutls.git/commit/?id=4b5678716f506d46da8dabdd343b268a5b9dd9b4'/>
<id>4b5678716f506d46da8dabdd343b268a5b9dd9b4</id>
<content type='text'>
This introduces session resumption under TLS 1.3. For that,
it enables the psk_ke_modes extension when we enable session
tickets. It enables sending session tickets in addition to
PSK usernames. The detection of resumption vs pure PSK is done by
comparing the indexes sent with the index received by the server.

TLS 1.3 session tickets are always sent to the peer unless the
GNUTLS_NO_TICKETS is specified.

Resolves #290

Signed-off-by: Ander Juaristi &lt;a@juaristi.eus&gt;
Signed-off-by: Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt;
Signed-off-by: Daiki Ueno &lt;dueno@redhat.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This introduces session resumption under TLS 1.3. For that,
it enables the psk_ke_modes extension when we enable session
tickets. It enables sending session tickets in addition to
PSK usernames. The detection of resumption vs pure PSK is done by
comparing the indexes sent with the index received by the server.

TLS 1.3 session tickets are always sent to the peer unless the
GNUTLS_NO_TICKETS is specified.

Resolves #290

Signed-off-by: Ander Juaristi &lt;a@juaristi.eus&gt;
Signed-off-by: Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt;
Signed-off-by: Daiki Ueno &lt;dueno@redhat.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>ext/status_request: allow more than a single OCSP response to be received</title>
<updated>2018-02-19T14:29:36+00:00</updated>
<author>
<name>Nikos Mavrogiannopoulos</name>
<email>nmav@redhat.com</email>
</author>
<published>2017-10-10T09:14:19+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gnutls.git/commit/?id=fa2fce94031902008d8a647defafef5b6c07e702'/>
<id>fa2fce94031902008d8a647defafef5b6c07e702</id>
<content type='text'>
That change allows for arbitrary number of OCSP responses
which is required in TLS1.3. The received list is now stored
in auth structure, and thus packed with it on resumption data.
The status response extension data, are now only used on server
side, when temporarily storing the OCSP response to send.

Signed-off-by: Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
That change allows for arbitrary number of OCSP responses
which is required in TLS1.3. The received list is now stored
in auth structure, and thus packed with it on resumption data.
The status response extension data, are now only used on server
side, when temporarily storing the OCSP response to send.

Signed-off-by: Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>gnutls_auth*_get_type: use gnutls_kx_get to retrieve key exchange</title>
<updated>2018-02-19T14:29:35+00:00</updated>
<author>
<name>Nikos Mavrogiannopoulos</name>
<email>nmav@redhat.com</email>
</author>
<published>2017-10-03T13:59:14+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gnutls.git/commit/?id=7b555f9f01060e18ba9e61ed86ed0c17fb3858c2'/>
<id>7b555f9f01060e18ba9e61ed86ed0c17fb3858c2</id>
<content type='text'>
That allows the functions to operate under TLS 1.3 which have
no key exchange as part of the ciphersuite.

Signed-off-by: Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
That allows the functions to operate under TLS 1.3 which have
no key exchange as part of the ciphersuite.

Signed-off-by: Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>gnutls_auth_*: check cs parameter for validity prior to use</title>
<updated>2017-08-18T09:56:30+00:00</updated>
<author>
<name>Nikos Mavrogiannopoulos</name>
<email>nmav@redhat.com</email>
</author>
<published>2017-08-18T09:22:11+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gnutls.git/commit/?id=aa86ea26580aafacfe2a338078587a47d15d01ad'/>
<id>aa86ea26580aafacfe2a338078587a47d15d01ad</id>
<content type='text'>
Signed-off-by: Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Signed-off-by: Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>security_parameters: simplified contents by keeping pointer to cipher_suite_entry_st</title>
<updated>2017-08-02T06:26:28+00:00</updated>
<author>
<name>Nikos Mavrogiannopoulos</name>
<email>nmav@redhat.com</email>
</author>
<published>2017-07-14T08:15:23+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gnutls.git/commit/?id=f9b6cfd536fc97a9fdf94e61649bffb682e78de1'/>
<id>f9b6cfd536fc97a9fdf94e61649bffb682e78de1</id>
<content type='text'>
That, in addition to simplifying the contents, it allows faster access
to ciphersuite's properties.

Signed-off-by: Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
That, in addition to simplifying the contents, it allows faster access
to ciphersuite's properties.

Signed-off-by: Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>doc: Fix some typos</title>
<updated>2016-02-06T17:01:33+00:00</updated>
<author>
<name>Attila Molnar</name>
<email>attilamolnar@hush.com</email>
</author>
<published>2016-02-06T17:01:33+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gnutls.git/commit/?id=eb84c514e572000c4b909377b4672fb9e1626f8f'/>
<id>eb84c514e572000c4b909377b4672fb9e1626f8f</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Removed the 'gnutls_' prefix from files to simplify file naming</title>
<updated>2015-08-23T17:27:01+00:00</updated>
<author>
<name>Nikos Mavrogiannopoulos</name>
<email>nmav@gnutls.org</email>
</author>
<published>2015-08-23T17:19:45+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gnutls.git/commit/?id=f84d8c0d536a1b6a160ddceadf7fade8d7b2edaa'/>
<id>f84d8c0d536a1b6a160ddceadf7fade8d7b2edaa</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
</feed>
