delta/gnutls.git/lib/includes, branch tmp-remove-debugging-code

sign APIs: introduce RSA-RAW signing algorithm

2017-08-17T08:43:29+00:00

This ensures that there is a signing algorithm for all the operations
we support. Previously, we required GNUTLS_SIGN_UNKNOWN to be acceptable
by signing functions to accomodate for raw RSA operations. Now we make
that explicit and in the process clean-up the API.

Signed-off-by: Nikos Mavrogiannopoulos

gnutls_privkey_import_ext4: introduced to allow signing with RSA-PSS or Ed25519 keys

2017-08-15T12:05:17+00:00

That function allows a signing callback which passes the signature
algorithm, providing all the information to callback for signing.
It also introduces GNUTLS_PRIVKEY_INFO_HAVE_SIGN_ALGO flag which
allows the library to query the private key of the supported
signature algorithms.

Signed-off-by: Nikos Mavrogiannopoulos

extensions: simplified requirements from send callback

2017-08-11T06:18:07+00:00

The callback no longer needs to return the number of sent data;
they are now calculated by the caller.

Signed-off-by: Nikos Mavrogiannopoulos

gnutls_x509_privkey_verify_seed: improved error on missing validation parameters

2017-08-07T12:51:19+00:00

Signed-off-by: Nikos Mavrogiannopoulos

base64: introduced new functions for base64 encoding

2017-08-04T14:53:54+00:00

Signed-off-by: Nikos Mavrogiannopoulos

gnutls_pkcs11_token_check_mechanism: introduced function to check token for a particular mechanism

2017-08-04T11:54:42+00:00

Signed-off-by: Nikos Mavrogiannopoulos

spki: combined all exported functions to a single set and get

2017-08-04T10:04:52+00:00

This simplifies setting parameters for a particular key type,
as well as getting them. The advantage is that they are set
atomically, preventing an inadverterly half-filled structure.

Signed-off-by: Nikos Mavrogiannopoulos

introduced error code GNUTLS_E_PK_INVALID_PUBKEY_PARAMS

2017-08-04T09:08:51+00:00

This is being use to indicate errors in the public key parameters
such as the RSA-PSS salt size or digest algorithm.

Signed-off-by: Nikos Mavrogiannopoulos

gnutls_x509_privkey_generate*: allow specifying the SPKI parameters for key generation

2017-08-04T09:08:51+00:00

This in turn removes the need for reading the flag GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE
on the key generation process. The flag is now only used during key signing
which is also its documented purpose.

Signed-off-by: Nikos Mavrogiannopoulos

Added convention for missing SubjectPublicKeyInfo params field

2017-08-03T09:57:52+00:00

That is, when that field is missing, the spki_st structure field
pk will be set to GNUTLS_PK_UNKNOWN. In that case other fields
are undefined.

Signed-off-by: Nikos Mavrogiannopoulos