delta/gnutls.git - gitlab.com: gnutls/gnutls.git

	Commit message (Collapse)	Author	Age	Files	Lines
*	Let check_if_signed fail if git failstmp-fail-sigcheck	Tim Rühsen	2019-03-28	2	-3/+5
\| \| \| \|	Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
*	Merge branch 'master' into 'master'	Tim Rühsen	2019-03-27	1	-0/+3
\|\ \| \| \| \| \| \| \| \|	Detect malloc failure. See merge request gnutls/gnutls!960
\| *	Update ocsptool-common.c	Elta Koepp	2019-03-27	1	-2/+1
\| \|
\| *	Detect malloc failure.	Elta Koepp	2019-03-27	1	-0/+4
\|/ \| \|	malloc(data.size + 1) maybe returns NULL on failure.
*	released 3.6.7gnutls_3_6_7	Nikos Mavrogiannopoulos	2019-03-27	1	-8/+15
\| \| \| \|	Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
*	handshake: add missing initialization of local variable	Daiki Ueno	2019-03-27	1	-0/+2
\| \| \| \| \| \| \|	Resolves: #704 Signed-off-by: Daiki Ueno <dueno@redhat.com> Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
*	fuzz: added fuzzer for certificate verification	Nikos Mavrogiannopoulos	2019-03-27	8	-2/+286
\| \| \| \| \| \| \| \|	This also adds a reproducer for CVE-2019-3829. Resolves: #694 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
*	Merge branch 'sha3_selftests' into 'master'	Nikos Mavrogiannopoulos	2019-03-26	1	-0/+25
\|\ \| \| \| \| \| \| \| \|	fips140: Perform SHA-3 self tests See merge request gnutls/gnutls!958
\| *	fips140: Perform SHA-3 self tests	Anderson Toshiyuki Sasaki	2019-03-26	1	-0/+25
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	It is required to perform the self tests to validate SHA-3 implementation. Signed-off-by: Anderson Toshiyuki Sasaki <ansasaki@redhat.com>
* \|	bumped version	Nikos Mavrogiannopoulos	2019-03-26	2	-2/+2
\| \| \| \| \| \| \| \|	Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* \|	Merge branch 'tmp-increase-nr-of-tickets' into 'master'	Nikos Mavrogiannopoulos	2019-03-26	9	-35/+67
\|\ \ \| \|/ \|/\| \| \| \| \| \| \| \| \|	handshake: increase the default number of tickets we send to 2 Closes #596 See merge request gnutls/gnutls!942
\| *	handshake: increase the default number of tickets we send to 2tmp-increase-nr-of-tickets	Nikos Mavrogiannopoulos	2019-03-20	9	-35/+67
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This makes it easier for clients which perform multiple connections to the server to use the tickets sent by a default server. That's because 2 tickets allow for 2 new connections (if one is using each ticket once as recommended), which in turn lead to 4 new and so on. Resolves: #596 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* \|	Merge branch 'tmp-security-update' into 'master'	Dmitry Eremin-Solenikov	2019-03-26	1	-5/+5
\|\ \ \| \| \| \| \| \| \| \| \| \| \| \|	SECURITY.md: updated to reflect the current practice See merge request gnutls/gnutls!951
\| * \|	SECURITY.md: updated to reflect the current practice [ci skip]tmp-security-update	Nikos Mavrogiannopoulos	2019-03-09	1	-5/+5
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This change updates the SECURITY guidelines to reflect the current practice (no special security releases), and thus refer directly to the upcoming or following release. Furthermore, it removes any mention of absolute time, as the release cadence is already fixed to bi-monthly. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* \| \|	Merge branch 'guile' into 'master'	Nikos Mavrogiannopoulos	2019-03-24	1	-22/+1
\|\ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	configure.ac: remove --with-guile-site-dir See merge request gnutls/gnutls!957
\| * \| \|	configure.ac: remove --with-guile-site-dir	Alon Bar-Lev	2019-03-23	1	-22/+1
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	The hack of distcheck is not known and should not be the default as the GUILE_SITE_DIR macro is the default expected behavior. There is little value in specifying any other location of the site-dir as it is out of the guile configuration so best to remove. Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
* \| \| \|	tools: removed unused code	Nikos Mavrogiannopoulos	2019-03-24	2	-58/+0
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* \| \| \|	gnutls-cli: Fix output with option "--logfile"	Ke Zhao	2019-03-24	2	-10/+64
\|/ / / \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	The X.509 connection would still print informational message to the stdout by default. Move that output to logfile and add x509 functionality test in the test suite. Signed-off-by: Ke Zhao <kzhao@redhat.com>
* \| \|	Merge branch 'tmp-improve-session-resumption' into 'master'	Nikos Mavrogiannopoulos	2019-03-22	7	-11/+139
\|\ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Improved estimation of wait in gnutls_session_get_data2 Closes #706 See merge request gnutls/gnutls!936
\| * \| \|	Improved estimation of wait in gnutls_session_get_data2tmp-improve-session-resumption	Nikos Mavrogiannopoulos	2019-03-19	7	-11/+139
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Previously we would wait an arbitrary value of 50ms for the server to send session tickets. This change makes the client wait for the estimated single trip time + 60 ms for the server to calculate the session tickets. This improves the chance to obtain tickets from internet servers during the call of gnutls_session_get_data2(). Resolves: #706 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* \| \| \|	_x509_en/decode_provable_seed: clarified purpose of functions [ci skip]	Nikos Mavrogiannopoulos	2019-03-20	1	-0/+6
\| \|_\|/ \|/\| \| \| \| \| \| \| \|	Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* \| \|	Merge branch 'tmp-fix-pkcs11-so' into 'master'	Nikos Mavrogiannopoulos	2019-03-19	3	-1/+25
\|\ \ \ \| \|/ / \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \|	pkcs11: security officer login implies writable session Closes #721 See merge request gnutls/gnutls!953
\| * \|	pkcs11: security officer login implies writable sessiontmp-fix-pkcs11-so	Nikos Mavrogiannopoulos	2019-03-15	3	-1/+25
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	According to the PKCS#11 v2.30, 6.7.1 there are no read-only Security Officer sessions. Resolves: #721 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* \| \|	Merge branch 'tmp-remove-fixme' into 'master'	Tim Rühsen	2019-03-16	13	-35/+14
\|\ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Removed all FIXME comments in code See merge request gnutls/gnutls!955
\| * \| \|	Removed all FIXME comments in code [ci skip]	Nikos Mavrogiannopoulos	2019-03-16	13	-35/+14
\| \|/ / \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	We expand informational comments on limitations, but with removing FIXME (keyword didn't help fixing these), and remove completely unhelpful comments, obsolete ones, or comments about ideas. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* \| \|	doc update	Nikos Mavrogiannopoulos	2019-03-16	1	-0/+2
\| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* \| \|	gnutls-cli: Add option "--logfile" to redirect information message output	Ke Zhao	2019-03-16	7	-187/+346
\|/ / \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	First, add an option "--logfile" so user could choose a specific file to store all the informational messages. In some cases, informational messages may cause unexpected result if the output is standard output. With this option, user could redirect these messages to a specific file. This will be helpful in testing and tracking. Second, replace printf() function with log_msg() function This log_msg() function is used when "--logfile" is enabled. Third, add a functionality test for "--logfile" option Add a test script to test if "--logfile" option works as it should be. Signed-off-by: Ke Zhao <kzhao@redhat.com>
* \|	Merge branch 'tmp-use-https' into 'master'	Tim Rühsen	2019-03-13	781	-1066/+1065
\|\ \ \| \| \| \| \| \| \| \| \| \| \| \|	Change HTTP:// references to HTTPs:// (generally) See merge request gnutls/gnutls!910
\| * \|	Update the GNU Free Documentation License (FDL)	Tim Rühsen	2019-03-13	1	-8/+7
\| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
\| * \|	Fix URL of ABI compliance checker	Tim Rühsen	2019-03-13	1	-1/+1
\| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
\| * \|	Fix URLs of p11-kit	Tim Rühsen	2019-03-13	2	-2/+2
\| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
\| * \|	Use https:// in lib/, src/, and m4/	Tim Rühsen	2019-03-13	18	-29/+29
\| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
\| * \|	Use https:// for arbitrary files #1	Tim Rühsen	2019-03-13	42	-242/+242
\| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
\| * \|	Use https:// for www.iana.org	Tim Rühsen	2019-03-13	3	-4/+4
\| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
\| * \|	Use https:// for csrc.nist.gov	Tim Rühsen	2019-03-13	5	-5/+5
\| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
\| * \|	Use https:// for www.gnu.org and www.example.com	Tim Rühsen	2019-03-13	735	-779/+779
\| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* \| \|	Merge branch 'inet_ntop' into 'master'	Nikos Mavrogiannopoulos	2019-03-13	1	-2/+2
\|\ \ \ \| \|/ / \|/\| \| \| \| \| \| \| \|	inet_ntop is available in Windows but not via arpa/inet.h See merge request gnutls/gnutls!947
\| * \|	inet_ntop is available in Windows but not via arpa/inet.h	Steve Lhomme	2019-03-13	1	-2/+2
\|/ / \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	It's found in ws2tcpip.h which is already included in gnutls_int.h arpa/inet.h doesn't exist on Windows, so add arpa_inet to the list of headers replaced by gnulib if not found. Signed-off-by: Steve Lhomme <robux4@ycbcr.xyz>
* \|	.gitlab-ci.yml: updated cache key name	Nikos Mavrogiannopoulos	2019-03-13	1	-1/+1
\| \| \| \| \| \| \| \|	Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* \|	Merge branch 'tmp-test-certtool' into 'master'	Tim Rühsen	2019-03-11	1	-0/+14
\|\ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	tests: verify that 'certtool -i --outder' does not output text Closes #627 See merge request gnutls/gnutls!952
\| * \|	tests: verify that 'certtool -i --outder' does not output texttmp-test-certtool	Nikos Mavrogiannopoulos	2019-03-10	1	-0/+14
\|/ / \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	A common regression in the past, was certtool outputting text while writing raw DER data. Ensure that the certificate-info option does not regress. Resolves: #627 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* \|	Merge branch 'tmp-remove-doc-cyclo' into 'master'	Nikos Mavrogiannopoulos	2019-03-10	3	-39/+1
\|\ \ \| \|/ \|/\| \| \| \| \| \| \| \| \|	doc: removed cyclo subdir Closes #727 See merge request gnutls/gnutls!950
\| *	doc: removed cyclo subdirtmp-remove-doc-cyclo	Nikos Mavrogiannopoulos	2019-03-09	3	-39/+1
\|/ \| \| \| \| \| \| \| \| \|	This directory had a makefile which was intended to calculate the cyclomatic complexity, however that was not functional, and not related with gnutls' documentation. Resolves: #727 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
*	NEWS: fix NEWS entries [ci skip]	Nikos Mavrogiannopoulos	2019-03-08	1	-8/+0
\| \| \| \|	Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
*	Merge branch 'tmp-explicit-sanity-checks' into 'master'	Nikos Mavrogiannopoulos	2019-03-06	2	-4/+24
\|\ \| \| \| \| \| \| \| \|	cleanup: _gnutls_recv_handshake: added explicit sanity checks See merge request gnutls/gnutls!937
\| *	_gnutls_recv_handshake: added explicit sanity checkstmp-explicit-sanity-checks	Nikos Mavrogiannopoulos	2019-02-23	2	-4/+24
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Although, this function acts on the message provided as expected and thus it should never call a message parsing function on unexpected messages, we make a more explicit sanity check. This unifies the sanity checks existing within the involved functions. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* \|	Merge branch 'tmp-cert-req' into 'master'	Daiki Ueno	2019-03-06	10	-13/+29
\|\ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	TLS 1.3: utilize "certificate_required" alert Closes #715 See merge request gnutls/gnutls!946
\| * \|	tls13/certificate: utilize "certificate_required" alerttmp-cert-req	Daiki Ueno	2019-03-05	10	-13/+25
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This could make errors more distinguishable when the client sends no certificates or a bad certificate. Signed-off-by: Daiki Ueno <dueno@redhat.com>
\| * \|	alert: recognize "certificate_required"	Daiki Ueno	2019-03-04	2	-0/+4
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This may be sent if the server received an empty Certificate message. Signed-off-by: Daiki Ueno <dueno@redhat.com>
* \| \|	Merge branch 'tmp-fix-cli-starttls-xmpp' into 'master'	Tim Rühsen	2019-03-05	4	-10/+59
\|\ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	gnutls-cli: Fix --starttls-proto=xmpp Closes #697 See merge request gnutls/gnutls!911