| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | examples: added explicit 3.5.0 dependency in ex-client-x509 | Nikos Mavrogiannopoulos | 2016-04-24 | 1 | -2/+2 | |
| | | ||||||
| * | examples: added error checks and updated verify_certificate_chain() | Nikos Mavrogiannopoulos | 2016-04-24 | 1 | -24/+26 | |
| | | ||||||
| * | .gitlab-ci.yml: made the linux tag explicit for our runners | Nikos Mavrogiannopoulos | 2016-04-24 | 1 | -0/+9 | |
| | | ||||||
| * | doc update | Nikos Mavrogiannopoulos | 2016-04-24 | 1 | -15/+19 | |
| | | ||||||
| * | doc: document curve X25519 | Nikos Mavrogiannopoulos | 2016-04-24 | 1 | -1/+2 | |
| | | ||||||
| * | doc: clarify what catch all means in all scenarios | Nikos Mavrogiannopoulos | 2016-04-24 | 1 | -3/+6 | |
| | | ||||||
| * | gnutls-cli-debug: added tests for supported curves | Nikos Mavrogiannopoulos | 2016-04-24 | 3 | -17/+56 | |
| | | ||||||
| * | tests: include self tests with CURVE-X25519 | Nikos Mavrogiannopoulos | 2016-04-24 | 3 | -64/+117 | |
| | | ||||||
| * | gnutls-cli: enhanced KX benchmark with X25519 | Nikos Mavrogiannopoulos | 2016-04-24 | 1 | -11/+12 | |
| | | ||||||
| * | handshake: added support for ECDH with curve X25519 | Nikos Mavrogiannopoulos | 2016-04-24 | 16 | -86/+333 | |
| | | | | | This follows draft-ietf-tls-rfc4492bis-07 and rfc7748 | |||||
| * | tests: updated the openssl compat check to make explicit the used curves | Nikos Mavrogiannopoulos | 2016-04-24 | 1 | -23/+32 | |
| | | ||||||
| * | ecdhe: print the received curve from the server on debug mode | Nikos Mavrogiannopoulos | 2016-04-24 | 1 | -0/+7 | |
| | | ||||||
| * | gnutls-cli-debug: added CHACHA20-POLY1305 detection | Nikos Mavrogiannopoulos | 2016-04-24 | 3 | -6/+23 | |
| | | ||||||
| * | tests: on out of memory conditions do not fail the hash-large test | Nikos Mavrogiannopoulos | 2016-04-23 | 1 | -0/+13 | |
| | | | | | | | This test may require a large amount of memory which some CI systems cannot provide. When an out-of-memory-error is detected skip the test instead of failing. | |||||
| * | session: removed unused parameters from RSA-EXPORT era | Nikos Mavrogiannopoulos | 2016-04-23 | 2 | -7/+0 | |
| | | ||||||
| * | README-alpha.md: updated badges with the new gitlab URLs | Nikos Mavrogiannopoulos | 2016-04-23 | 1 | -3/+3 | |
| | | ||||||
| * | doc: document the TPM 1.2 limitation | Nikos Mavrogiannopoulos | 2016-04-22 | 1 | -0/+1 | |
| | | ||||||
| * | doc: tpm: include short instructions on initializing the TPM chip | Nikos Mavrogiannopoulos | 2016-04-21 | 1 | -1/+3 | |
| | | ||||||
| * | tests: hash-large: use private mmap() | Nikos Mavrogiannopoulos | 2016-04-20 | 1 | -1/+1 | |
| | | | | | This reduces the memory usage of the test significantly on Linux. | |||||
| * | tests: use mmap() for large memory allocations in systems that support it | Nikos Mavrogiannopoulos | 2016-04-20 | 2 | -3/+27 | |
| | | | | | | That allows the hash-large test to run on systems which its calloc() is attempting to allocate an impossible amount of memory. | |||||
| * | tests: use /bin/bash for tests that use bashisms | Nikos Mavrogiannopoulos | 2016-04-20 | 2 | -2/+2 | |
| | | ||||||
| * | tests: don't run danetool.sh if danetool is not present | Nikos Mavrogiannopoulos | 2016-04-20 | 1 | -2/+4 | |
| | | | | | That prevents test suite failure in systems without libunbound. | |||||
| * | gnutls_int.h: allow compiling with system (gnutls) headers | Nikos Mavrogiannopoulos | 2016-04-20 | 1 | -11/+6 | |
| | | ||||||
| * | .gitlab-ci.yml: added build rule on freebsd | Nikos Mavrogiannopoulos | 2016-04-20 | 1 | -0/+8 | |
| | | ||||||
| * | certtool: document sha3 functions in manpage [ci skip] | Nikos Mavrogiannopoulos | 2016-04-19 | 1 | -1/+1 | |
| | | ||||||
| * | doc: added missing @end example in danetool documentation | Nikos Mavrogiannopoulos | 2016-04-19 | 1 | -0/+1 | |
| | | ||||||
| * | doc: updated documentation on false start | Nikos Mavrogiannopoulos | 2016-04-19 | 1 | -7/+15 | |
| | | ||||||
| * | doc update | Nikos Mavrogiannopoulos | 2016-04-19 | 1 | -1/+2 | |
| | | ||||||
| * | gnutls-cli-debug: enable socket verbosity when --verbose is given | Nikos Mavrogiannopoulos | 2016-04-19 | 1 | -0/+2 | |
| | | ||||||
| * | tools: explicitly initialize socket struct to zero | Nikos Mavrogiannopoulos | 2016-04-19 | 1 | -0/+2 | |
| | | | | | That resolves issue where verbose was enabled by default. | |||||
| * | tools: avoid extracting the value of the app-proto alias | Nikos Mavrogiannopoulos | 2016-04-19 | 2 | -6/+6 | |
| | | | | | | | Instead always extract the starttls-proto value, as it seems that libopts doesn't report any value for the former. This corrects the starttls capability of danetool and gnutls-cli-debug. | |||||
| * | tools: document the starttls capability | Nikos Mavrogiannopoulos | 2016-04-19 | 3 | -2/+15 | |
| | | ||||||
| * | tests: do not run danetool.sh on windows | Nikos Mavrogiannopoulos | 2016-04-19 | 1 | -1/+5 | |
| | | | | | The test fails due to CRLF. | |||||
| * | tools: avoid relying on static buffers for service name | Nikos Mavrogiannopoulos | 2016-04-18 | 4 | -11/+15 | |
| | | ||||||
| * | tests: added basic check on danetool --tlsa-rr option | Nikos Mavrogiannopoulos | 2016-04-18 | 2 | -1/+80 | |
| | | ||||||
| * | danetool: Allow specifying a service name into port option | Nikos Mavrogiannopoulos | 2016-04-18 | 3 | -25/+24 | |
| | | | | | This makes the tool similar to gnutls-cli. | |||||
| * | Fix library build on Chrome Native Client (NaCl) | Kevin Cernekee | 2016-04-18 | 1 | -1/+1 | |
| | | | | | | | | Some supported toolchains define DT_UNKNOWN but do not define _DIRENT_HAVE_D_TYPE (and do not have the d_type field). On other platforms GnuTLS may need to second-guess what the library is reporting, but on NaCl this is unsafe. | |||||
| * | gnutls-serv: don't send closure messages in failed handshakes | Nikos Mavrogiannopoulos | 2016-04-18 | 1 | -1/+6 | |
| | | ||||||
| * | client key exchange: fail if the client KX message is padded with additional ↵ | Nikos Mavrogiannopoulos | 2016-04-18 | 2 | -1/+7 | |
| | | | | | bytes | |||||
| * | _wrap_nettle_pk_derive: reject values of public key that are over the prime | Nikos Mavrogiannopoulos | 2016-04-18 | 1 | -10/+4 | |
| | | | | | | | | | | That is do not canonicalise the value we get from the network, but rather check it for validity. This saves a modular reduction on handshake and performs a sanity check on the peer's (client) parameters. Reported by Hubert Kario. Resolves #84 | |||||
| * | tests: suite: disable any openssl cpu optimizations | Nikos Mavrogiannopoulos | 2016-04-15 | 1 | -1/+2 | |
| | | | | | | | This prevents from valgrind failures on softhsm usage due to any new instruction optimizations which are not supported by valgrind. | |||||
| * | doc: further updated documentation on false start [ci skip] | Nikos Mavrogiannopoulos | 2016-04-15 | 1 | -0/+5 | |
| | | ||||||
| * | doc: updated documentation on false start | Nikos Mavrogiannopoulos | 2016-04-15 | 2 | -13/+15 | |
| | | ||||||
| * | tests: enhanced the false start checks | Nikos Mavrogiannopoulos | 2016-04-15 | 1 | -81/+153 | |
| | | | | | | | These now check whether sending and receiving is performed as expected after handshake, DTLS, as well as test explicit handshake called by the application. | |||||
| * | Updated false start support to be transparent to applications. | Nikos Mavrogiannopoulos | 2016-04-15 | 7 | -82/+90 | |
| | | | | | | | | That is, an additional flag GNUTLS_ENABLE_FALSE_START is introduced for gnutls_init(), and that enables support for false start. At this point false start will be performed by the handshake if possible, and gnutls_record_recv() will handle handshake completion. | |||||
| * | doc update | Nikos Mavrogiannopoulos | 2016-04-14 | 1 | -2/+2 | |
| | | ||||||
| * | doc: updated docs related to private key generation | Nikos Mavrogiannopoulos | 2016-04-14 | 3 | -13/+18 | |
| | | ||||||
| * | certtool: do not allow combining --provable with --ecc in key generation | Nikos Mavrogiannopoulos | 2016-04-14 | 1 | -0/+6 | |
| | | | | | There is no such support in the library. | |||||
| * | updated auto-generated files for new APIs | Nikos Mavrogiannopoulos | 2016-04-14 | 3 | -17/+143 | |
| | | ||||||
| * | doc: added tlsproxy example reference into documentation | Nikos Mavrogiannopoulos | 2016-04-14 | 5 | -9/+19 | |
| | | ||||||
 |
index : delta/gnutls.git | |
| gitlab.com: gnutls/gnutls.git |
| summaryrefslogtreecommitdiff |