summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* extras/hex.h: do not use strlen as variable nametmp-gnutls3.5.x-fix-pkcs11-import-url4Nikos Mavrogiannopoulos2017-02-031-2/+2
| | | | | | That is, do not utilize a standard C function name as variable name. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* gnutls_pkcs11_obj_list_import_url4: always return an initialized pointerNikos Mavrogiannopoulos2017-02-031-0/+1
| | | | | | | | | When returning success, but no elements, gnutls_pkcs11_obj_list_import_url4, could have returned zero number of elements with a pointer that was uninitialized. Ensure that an initialized (i.e., null in that case), pointer is always returned. Reported by Jeremy Harris. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* .gitlab-ci.yml: use libidn2 on windows buildsNikos Mavrogiannopoulos2017-02-031-2/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* Address test suite failure due to timezone differences.Nikos Mavrogiannopoulos2017-02-021-1/+1
| | | | | | Reported by Thorsten Glaser and Andreas Metzler. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* _idn2_to_unicode_8z8z: do not err on mixed IDNA domainsNikos Mavrogiannopoulos2017-01-281-4/+1
| | | | | | | | That is allow domains of the form 'großes.xn--fa-hia.de'. The drawback is that we may not err early on invalid formatted names. We however delegate any such decisions to libidn2. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* doc updatetmp-gnutls3_5_x-libidn2Nikos Mavrogiannopoulos2017-01-261-1/+7
|
* Updated auto-generated filesNikos Mavrogiannopoulos2017-01-263-0/+8
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* str-idna: improved error handlingNikos Mavrogiannopoulos2017-01-261-2/+5
| | | | | | | In addition to detecting input with invalid characters in _idn2_to_unicode_8z8z(), we also add support for case insensitive punycode header. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* str-idna: cleanups in IDNA handlingNikos Mavrogiannopoulos2017-01-261-9/+14
| | | | | | | | Ensure safe operation even with broken libidn2, and make sure that we properly allocate memory to caller, even on complex library configuration. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* Move IDNA functionality to str-idna.c from str-unicode.cNikos Mavrogiannopoulos2017-01-263-312/+340
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* tests: use the exported API for IDNA testingNikos Mavrogiannopoulos2017-01-261-13/+28
| | | | | | | In addition group together the tests which require libidn2 >= 0.14. This allows the tests to succeed. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* tools: depend on gnutls_idna_map() instead of using directly libidn/libidn2Nikos Mavrogiannopoulos2017-01-261-30/+10
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* Exported gnutls_idna_map() and gnutls_idna_reverse_map()Nikos Mavrogiannopoulos2017-01-265-44/+47
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* .gitlab-ci.yml: added run with IDNA2003Nikos Mavrogiannopoulos2017-01-261-0/+18
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* tests: simplified str-idnaNikos Mavrogiannopoulos2017-01-261-39/+58
| | | | | | | This separates the directions that are tested (utf-8 -> punycode and vice versa). Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* configure: added flag to force IDNA2003Nikos Mavrogiannopoulos2017-01-261-7/+18
| | | | | | | That allows to compile with libidn even if libidn2 is present, and can be used to check IDNA2003 support. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* Add support for libidn2 (IDNA 2008 + TR46)Tim Rühsen2017-01-268-29/+195
| | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* heartbeat extension: doc updateNikos Mavrogiannopoulos2017-01-261-2/+3
| | | | | | Document how to calculate the total TLS data transmitted. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* .gitlab-ci.yml: add Fedora/x86_64/no-toolsAlon Bar-Lev2017-01-251-0/+18
| | | | Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
* valgrind: support separate builddir for suppressions.valgrindAlon Bar-Lev2017-01-254-11/+9
| | | | Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
* configure: remove void statementAlon Bar-Lev2017-01-251-3/+0
| | | | Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
* tests: skip tests that requires tools if tools are disabledAlon Bar-Lev2017-01-251-1/+5
| | | | | | building with --disable-tools should not cause test failure. Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
* pkcs7 decryption: addressed memory leak in PBES1-DES-CBC-MD5 handlingNikos Mavrogiannopoulos2017-01-251-0/+3
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* configure: do not disable valgrind tests unless explicitly specifiedNikos Mavrogiannopoulos2017-01-251-4/+2
| | | | | | ... or unless we are in release build. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* doc updateNikos Mavrogiannopoulos2017-01-251-0/+5
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* tests: verify that a written certificate will inherit its ID from privkeyNikos Mavrogiannopoulos2017-01-251-0/+166
| | | | | | | That is, whether p11tool will do the right thing and figure the proper ID to use for a certificate object, if the public key is available. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* p11tool: re-use ID from corresponding objects when writing certificatesNikos Mavrogiannopoulos2017-01-251-3/+284
| | | | | | | | | | | That is when writing a certificate which has a corresponding public key, or private key in the token, ensure that we use the same ID for the objects. That eases the work of someone writing objects to certificates, and does not require him to manually detect the object IDs. Resolves #160 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc: improved documentation on DH parameters [ci skip]Nikos Mavrogiannopoulos2017-01-222-14/+30
|
* tests: remove bash usageAlon Bar-Lev2017-01-2015-17/+15
| | | | Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
* tests: suite: chain: support separate builddirAlon Bar-Lev2017-01-201-1/+3
| | | | Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
* tests: skip tests that requires tools if tools are disabledAlon Bar-Lev2017-01-2020-0/+121
| | | | | | building with --disable-tools should not cause test failure. Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
* tests: skip tests that requires tools if tools are disabledAlon Bar-Lev2017-01-2042-9/+238
| | | | | | building with --disable-tools should not cause test failure. Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
* tests: cert-tests: pkcs12 drop builddir usageAlon Bar-Lev2017-01-202-4/+2
| | | | | | sync with other tests Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
* doc updateNikos Mavrogiannopoulos2017-01-181-0/+14
|
* Disable AVX support when it is not supported by the CPUNikos Mavrogiannopoulos2017-01-181-2/+31
| | | | | | This mostly affects virtual systems. Reported by Frank Chen. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* doc: removed documentation related to OpenPGPNikos Mavrogiannopoulos2017-01-1710-687/+32
| | | | | | Also added section explaining why OpenPGP is being deprecated. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* opencdk: improved error code checking in the stream reading functionsNikos Mavrogiannopoulos2017-01-171-2/+3
| | | | | | This ammends 49be4f7b82eba2363bb8d4090950dad976a77a3a Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc update [ci skip]Nikos Mavrogiannopoulos2017-01-091-2/+2
|
* tests: added missing filegnutls_3_5_8Nikos Mavrogiannopoulos2017-01-091-1/+1
|
* bumped versionNikos Mavrogiannopoulos2017-01-092-2/+2
|
* doc update [ci skip]Nikos Mavrogiannopoulos2017-01-091-0/+3
|
* doc updateNikos Mavrogiannopoulos2017-01-061-0/+3
|
* gitignore: updateAlon Bar-Lev2017-01-061-1/+15
| | | | Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
* gitignore: sort()Alon Bar-Lev2017-01-061-354/+354
| | | | Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
* opencdk: added error checking in the stream reading functionsNikos Mavrogiannopoulos2017-01-061-5/+35
| | | | | | | This addresses an out of memory error. Issue found using oss-fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=337 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: added test case with invalid openpgp certNikos Mavrogiannopoulos2017-01-062-35/+9
| | | | | | | This triggers an out of memory error. Issue found using oss-fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=337 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* opencdk: cdk_pk_get_keyid: fix stack overflowNikos Mavrogiannopoulos2017-01-061-1/+7
| | | | | | | Issue found using oss-fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=340 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: added test case with invalid openpgp certNikos Mavrogiannopoulos2017-01-063-1/+7
| | | | | | | This triggers a memory error. Issue found using oss-fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=340 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: added test case with invalid openpgp certNikos Mavrogiannopoulos2017-01-063-1/+7
| | | | | | | This triggers a memory error. Issue found using oss-fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=346 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* opencdk: read_attribute: added more precise checks when reading streamNikos Mavrogiannopoulos2017-01-061-11/+29
| | | | | | | | That addresses heap read overflows found using oss-fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=338 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=346 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
View Lorry Controller Status