summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* nettle: use the correct type for hash and MAC functionshash3.3Nikos Mavrogiannopoulos2016-02-139-66/+100
| | | | In addition allow for hashing of more than UINT_MAX data.
* tests: check whether large buffer hashes and MAC work as expectedNikos Mavrogiannopoulos2016-02-133-2/+200
|
* tests: set_pkcs12_cred: existing tests are disabled when in FIPS140-2 modeNikos Mavrogiannopoulos2016-02-101-0/+2
| | | | The tests require access to the RC4 cipher which is not available.
* bumped versiongnutls_3_3_21Nikos Mavrogiannopoulos2016-02-033-3/+3
|
* doc update [ci skip]Nikos Mavrogiannopoulos2016-01-311-3/+6
|
* Revert "tests: updated to account for cert generation after ↵Nikos Mavrogiannopoulos2016-01-306-50/+50
| | | | | | c1405c6e08ef55421108bd4395588368f4122dda fix" This reverts commit 09dcbe564a85c021ebcbf7a3f28075d19c399ce4.
* Revert "Fix out-of-bounds read in gnutls_x509_ext_export_key_usage"Nikos Mavrogiannopoulos2016-01-301-1/+1
| | | | | This was a false negative and not a real out-of-bounds read. This reverts commit c1405c6e08ef55421108bd4395588368f4122dda.
* .gitlab-ci.yml: Added build with ARCFOURNikos Mavrogiannopoulos2016-01-211-12/+20
|
* Added configure flag --with-arcfour128Nikos Mavrogiannopoulos2016-01-214-2/+17
| | | | | This flag will re-enable ARCFOUR in the priority strings by default.
* doc updateNikos Mavrogiannopoulos2016-01-201-0/+4
|
* Revert "Revert "tests: updated to account for ARCFOUR being disabled""Nikos Mavrogiannopoulos2016-01-204-10/+10
| | | | This reverts commit a2f907d0d4e52eb4dd24cc1f5d7d892b21abfd83.
* Revert "Revert "ARCFOUR is disabled from the default priority strings""Nikos Mavrogiannopoulos2016-01-201-2/+0
| | | | This reverts commit b3b5db319d4246e4735017cc423b92175f713a89.
* gnutls_pubkey_import_x509_raw: fixed memory leakNikos Mavrogiannopoulos2016-01-131-1/+1
|
* x509: place newline when printing unsupported othernamesNikos Mavrogiannopoulos2016-01-121-0/+1
|
* doc updateNikos Mavrogiannopoulos2016-01-101-0/+10
|
* alpn: when parsing the list of protocols return at the first mutually commonNikos Mavrogiannopoulos2016-01-101-1/+2
| | | | | | That resolves an issue where the server wouldn't select the first mutually supported. Resolves #63
* tests: mini-alpn: corrected protocol selection orderNikos Mavrogiannopoulos2016-01-101-1/+1
|
* tests: alpn: enhance the testing of ALPN negotiationNikos Mavrogiannopoulos2016-01-101-11/+13
|
* alpn: document how the selected protocol is selected [ci skip]Nikos Mavrogiannopoulos2016-01-101-0/+3
|
* tests: verify that the selected ALPN protocol is the first advertisedNikos Mavrogiannopoulos2016-01-101-2/+8
|
* released 3.3.20gnutls_3_3_20Nikos Mavrogiannopoulos2016-01-081-1/+1
|
* reverted ARCFOUR removal changeNikos Mavrogiannopoulos2016-01-081-4/+0
|
* Revert "tests: updated to account for ARCFOUR being disabled"Nikos Mavrogiannopoulos2016-01-084-10/+10
| | | | This reverts commit 45926d9561b2e888c505524663b7c7ad87c263bc.
* Revert "ARCFOUR is disabled from the default priority strings"Nikos Mavrogiannopoulos2016-01-081-0/+2
| | | | This reverts commit 76be7bda79d6785eeab3ef8e96db026ad7aac9c3.
* configure: no longer distribute lzip tarballsNikos Mavrogiannopoulos2016-01-071-1/+1
|
* libopts: use the O_BINARY flag in windows for filesNikos Mavrogiannopoulos2016-01-071-1/+3
|
* libopts: updated to 5.18.6Nikos Mavrogiannopoulos2016-01-0757-714/+763
|
* bumped versionNikos Mavrogiannopoulos2016-01-072-2/+2
|
* symbols.last: don't include internal symbols into exported listNikos Mavrogiannopoulos2016-01-072-34/+1
|
* NEWS: doc updateNikos Mavrogiannopoulos2016-01-071-1/+1
|
* tests: updated to account for cert generation after ↵Nikos Mavrogiannopoulos2016-01-056-50/+50
| | | | c1405c6e08ef55421108bd4395588368f4122dda fix
* tests: Makefile.am: removed invalid program ld flagsNikos Mavrogiannopoulos2016-01-051-2/+0
|
* doc updateNikos Mavrogiannopoulos2016-01-041-0/+3
|
* Fix out-of-bounds read in gnutls_x509_ext_export_key_usageTim Kosse2016-01-041-1/+1
|
* .gitlab-ci.yml: optimized build processNikos Mavrogiannopoulos2016-01-011-2/+2
| | | | That is, in slow asan and valgrind builds don't check the full test suite.
* pkcs11: fixes to store the imported URLNikos Mavrogiannopoulos2015-12-311-1/+12
| | | | | This ammends 603d0db776537c19bdfd907e0fc77c7321874bf0 with changes for the 3.3.x branch.
* doc update [ci skip]Nikos Mavrogiannopoulos2015-12-311-0/+3
|
* doc updateNikos Mavrogiannopoulos2015-12-311-2/+3
|
* pkcs11: import public keys from any available objectNikos Mavrogiannopoulos2015-12-311-15/+56
| | | | | | | That is, load public keys from the public key object, or the certificate object if they are present. That affects non-RSA public keys which do not contain all required fields on the private key object.
* gnutls_pkcs11_copy_x509_privkey2: corrected the writing of ECC private keyNikos Mavrogiannopoulos2015-12-311-1/+1
|
* gnutls_pkcs11_copy_x509_privkey2: corrected the type of the written objectNikos Mavrogiannopoulos2015-12-311-5/+5
| | | | Previously only RSA objects were correctly written.
* NEWS: doc update [ci skip]Nikos Mavrogiannopoulos2015-12-241-0/+3
|
* max_record: don't consider this extension on DTLSNikos Mavrogiannopoulos2015-12-231-0/+6
| | | | | That is because it doesn't work as expected, and does not fragment handshake messages. Relates with #61
* doc updateNikos Mavrogiannopoulos2015-12-201-0/+3
|
* Handle DNS name constraints with leading dotNikos Mavrogiannopoulos2015-12-202-9/+26
| | | | | | | Patch by Fotis Loukos. Resolves 3 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: updated to account for ARCFOUR being disabledNikos Mavrogiannopoulos2015-12-154-10/+10
|
* doc updateNikos Mavrogiannopoulos2015-12-151-0/+4
|
* ARCFOUR is disabled from the default priority stringsNikos Mavrogiannopoulos2015-12-151-2/+0
| | | | | | | ARCFOUR is a cipher known to be broken theoretically and practically. Configurations that depend on that cipher being on should explicitly enable it. Resolves #23
* Do not allow importing public keys from PKCS #11 private keys for DSA and ECDSANikos Mavrogiannopoulos2015-12-081-0/+8
| | | | | This prevents the reading of the public key when non-RSA keys are available. This is a much cleaner approach than 5a4e692511dc3a829eda0d7c5a87e56cbc2055f0.
* Revert "Do not allow importing public keys from PKCS #11 private keys for ↵Nikos Mavrogiannopoulos2015-12-084-45/+13
| | | | | | DSA and ECDSA" This reverts commit 0e79aabab519a6b568cf8c31b38523cce7416bd8.