summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* gnutls_priority_init: ignore CTYPE-OPENPGP optionstmp-ignore-ctypesNikos Mavrogiannopoulos2018-11-016-1/+17
| | | | | | | | | | | | In GnuTLS 3.6.0 we dropped support for openpgp keys, however the CTYPE-OPENPGP is often seen in applications, sometimes as -CTYPE-OPENPGP to ensure it is not enabled. We simply ignore this priority string when seen, to avoid preventing these applications from running. Resolves #593 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* gnutls_priority_init: fixed indentation according to project rulesNikos Mavrogiannopoulos2018-11-011-22/+25
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* Merge branch 'tmp-fix-priority-set' into 'master'Nikos Mavrogiannopoulos2018-10-313-23/+160
|\ | | | | | | | | gnutls_priority_set: do not override the version after handshake is complete See merge request gnutls/gnutls!777
| * gnutls_priority_set: re-organizedtmp-fix-priority-setNikos Mavrogiannopoulos2018-10-311-22/+22
| | | | | | | | | | | | | | | | | | The sanity tests we moved prior to setting these priorities and the %GNUTLS_E_NO_PRIORITIES_WERE_SET error code is returned consistently to indicate that the existing priorities were not overwritten. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
| * gnutls_priority_set: do not override the version after handshake is completeNikos Mavrogiannopoulos2018-10-303-5/+142
|/ | | | | | | | | | | When an application would re-set priorities prior to a rehandshake we would override the negotiated version with the highest supported, something which may lead to issues. This disables that unnecessary version override. See: https://bugzilla.redhat.com/show_bug.cgi?id=1634736 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* gnutls-serv: use default priorities when none are givenNikos Mavrogiannopoulos2018-10-302-10/+19
| | | | | | This makes it in par with gnutls-cli. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* Merge branch 'tmp-cli-reduce-output' into 'master'Dmitry Eremin-Solenikov2018-10-301-86/+92
|\ | | | | | | | | gnutls-cli: reduce printed session information See merge request gnutls/gnutls!784
| * gnutls-cli: reduce printed session informationtmp-cli-reduce-outputNikos Mavrogiannopoulos2018-10-251-86/+92
| | | | | | | | | | | | | | | | When connecting to a server we were printing a lot of duplicate information that was already part of the "Description" string. No longer print that information unless --verbose is given. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* | Merge branch 'gost-selfcheck' into 'master'Dmitry Eremin-Solenikov2018-10-291-2/+88
|\ \ | | | | | | | | | | | | | | | | | | self-tests: add GOST public key tests Closes #492 See merge request gnutls/gnutls!788
| * | self-tests: add GOST public key testsDmitry Eremin-Solenikov2018-10-291-2/+88
|/ / | | | | | | | | | | | | | | | | | | Test vectors provided in standard are not that usefull (they use unsupported curves with a != -3), so these test vectors were generated by hand. Fixes #492 Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* | NEWS: added CMAC entries [ci skip]Nikos Mavrogiannopoulos2018-10-291-0/+2
| | | | | | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* | Merge branch 'cmac' into 'master'Dmitry Eremin-Solenikov2018-10-2910-0/+440
|\ \ | | | | | | | | | | | | | | | | | | Add support for AES CMAC mac Closes #351 See merge request gnutls/gnutls!786
| * | Add NEWS entry about AES-CMACSimo Sorce2018-10-281-0/+2
| | | | | | | | | | | | Signed-off-by: Simo Sorce <simo@redhat.com>
| * | Add selftests for CMACSimo Sorce2018-10-282-0/+29
| | | | | | | | | | | | Signed-off-by: Simo Sorce <simo@redhat.com>
| * | Vendor in CMAC functionality from NettleSimo Sorce2018-10-285-0/+365
| | | | | | | | | | | | | | | | | | | | | | | | If nettle's CMAC is not available, use a vendored in version from master. This is necessary as long as we need to link against 3.4 for ABI compatibility reasons. Signed-off-by: Simo Sorce <simo@redhat.com>
| * | Add CMAC SupportSimo Sorce2018-10-283-0/+44
|/ / | | | | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* | Merge branch 'gost-selfcheck' into 'master'Nikos Mavrogiannopoulos2018-10-283-3/+204
|\ \ | | | | | | | | | | | | Selftests for symmetric GOST algorithms See merge request gnutls/gnutls!787
| * | NEWS: Add entry mentioning fix of S-BOXes for CryptoPro-B,-C,-D variantsDmitry Eremin-Solenikov2018-10-281-0/+4
| | | | | | | | | | | | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
| * | self-tests: add GOST symmetric algorithms testsDmitry Eremin-Solenikov2018-10-281-0/+197
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add tests for: - GOST 28147-89 CFB cipher - GOST R 34.11-94 hash function - Streebog-256/-512 hash functions - HMAC using GOST R 34.11-94/Streebog functions Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
| * | nettle: fix s-boxes selection for rare GOST 28147-89 variantsDmitry Eremin-Solenikov2018-10-281-3/+3
|/ / | | | | | | | | | | | | gost28147-89 code contained c&p error, which resulted in using S-BOX CryptoPro-A instead of -B, -C, -D. Fix that. Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* | doc update [ci skip]Nikos Mavrogiannopoulos2018-10-261-0/+5
| | | | | | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* | Merge branch 'cfb8' into 'master'Dmitry Eremin-Solenikov2018-10-269-1/+369
|\ \ | | | | | | | | | | | | | | | | | | Add support for AES CFB8 cipher Closes #357 See merge request gnutls/gnutls!783
| * | Add selftest for CFB8Simo Sorce2018-10-253-0/+80
| | |
| * | Vendor in CFB8 functionality from NettleSimo Sorce2018-10-245-1/+225
| | | | | | | | | | | | | | | | | | | | | | | | If nettle's CFB8 is not available, use a vendored in version from master. This is necessary as long as we need to link against 3.4 for ABI compatibility reasons. Signed-off-by: Simo Sorce <simo@redhat.com>
| * | Add AES-CFB8 SupportSimo Sorce2018-10-242-0/+64
| | | | | | | | | | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* | | Merge branch 'tmp-session-ticket-timestamp' into 'master'Nikos Mavrogiannopoulos2018-10-2617-73/+158
|\ \ \ | |_|/ |/| | | | | | | | TLS 1.3: calculate ticket age based on higher precision time See merge request gnutls/gnutls!785
| * | ext/pre_shared_key: don't assume ob_ticket_age < ticket_age_addtmp-session-ticket-timestampDaiki Ueno2018-10-261-6/+0
| | | | | | | | | | | | | | | | | | | | | Previously, the server treated the condition as error, while it is possible that ob_ticket_age may have wrapped round by 2^32. Signed-off-by: Daiki Ueno <dueno@redhat.com>
| * | tls13/session_ticket: calculate ticket_age in millisecondsDaiki Ueno2018-10-264-12/+19
| | | | | | | | | | | | | | | | | | | | | | | | Previously we calculated ticket age from the current wall clock in seconds, multiplying by 1000. This is conceptually wrong, because ticket age is designed to be in milliseconds. Signed-off-by: Daiki Ueno <dueno@redhat.com>
| * | str: add macros to encode/decode struct timespec valueDaiki Ueno2018-10-261-0/+42
| | | | | | | | | | | | Signed-off-by: Daiki Ueno <dueno@redhat.com>
| * | system: provide a means to replace gettime implementationDaiki Ueno2018-10-2611-36/+66
| | | | | | | | | | | | | | | | | | | | | | | | | | | While gettime() is extensively used in the code, the library previously hadn't provided a way to replace it for testing. This adds a new internal function _gnutls_global_set_gettime_function and makes use of it through virt-time.h. Signed-off-by: Daiki Ueno <dueno@redhat.com>
| * | _gnutls_timespec_cmp: new inline functionDaiki Ueno2018-10-251-0/+12
| | | | | | | | | | | | Signed-off-by: Daiki Ueno <dueno@redhat.com>
| * | tls13/session_ticket: rename tls13_ticket_t type to tls13_ticket_stDaiki Ueno2018-10-255-19/+19
|/ / | | | | | | | | | | This is consistent with the coding guideline. Signed-off-by: Daiki Ueno <dueno@redhat.com>
* | gnutls-cli: do not print errors twiceNikos Mavrogiannopoulos2018-10-253-3/+5
|/ | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* Merge branch 'tmp-fix-fips-mode' into 'master'Nikos Mavrogiannopoulos2018-10-243-7/+27
|\ | | | | | | | | fips140: aligned code with documentation See merge request gnutls/gnutls!781
| * fips140: aligned code with documentationtmp-fix-fips-modeNikos Mavrogiannopoulos2018-10-233-7/+27
| | | | | | | | | | | | | | That is, we introduce the documented but unimplemented macros GNUTLS_FIPS140_SET_LAX_MODE() and GNUTLS_FIPS140_SET_STRICT_MODE(). Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* | Merge branch 'tmp-initialize-so-pin-fix' into 'master'Nikos Mavrogiannopoulos2018-10-249-64/+264
|\ \ | |/ |/| | | | | | | | | p11tool: fix admin user PIN initialization Closes #561 See merge request gnutls/gnutls!776
| * p11tool: fix initialization of security officer's PINtmp-initialize-so-pin-fixNikos Mavrogiannopoulos2018-10-249-64/+264
|/ | | | | | | | | | | | Previously we would call gnutls_pkcs11_token_set_pin() without an old PIN provided, which will result to the use of C_InitPIN() on the underlying module. The C_InitPIN() in contrast with C_SetPIN() will only work for the user and not for the administrator. As such, we always provide the oldpin for when we change the admin's PIN. Resolves #561 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* Merge branch 'tmp_cleanup_and_fixes' into 'master'Nikos Mavrogiannopoulos2018-10-2331-228/+227
|\ | | | | | | | | | | | | Cleanup and fixes Closes #453 See merge request gnutls/gnutls!779
| * Simplified check for NULL pointer to reduce code changes.Tom Vrancken2018-10-221-10/+11
| | | | | | | | Signed-off-by: Tom Vrancken <dev@tomvrancken.nl>
| * Unified abbreviation for certificate type priorities in code.Tom Vrancken2018-10-222-18/+18
| | | | | | | | Signed-off-by: Tom Vrancken <dev@tomvrancken.nl>
| * Renamed CHECK_AUTH macro to CHECK_AUTH_TYPE to be more clear what it checks.Tom Vrancken2018-10-184-10/+10
| | | | | | | | Signed-off-by: Tom Vrancken <dev@tomvrancken.nl>
| * Renamed _gnutls_server_select_cert() to _gnutls_select_server_cert() for ↵Tom Vrancken2018-10-183-5/+5
| | | | | | | | | | | | consistency reasons with its client couterpart. Signed-off-by: Tom Vrancken <dev@tomvrancken.nl>
| * Renamed certificate_credential_append_crt_list() to ↵Tom Vrancken2018-10-181-7/+7
| | | | | | | | | | | | certificate_credential_append_keypair(). Signed-off-by: Tom Vrancken <dev@tomvrancken.nl>
| * Renamed _gnutls_auth_info_set() to _gnutls_auth_info_init().Tom Vrancken2018-10-1814-27/+27
| | | | | | | | Signed-off-by: Tom Vrancken <dev@tomvrancken.nl>
| * Renamed fields in priority_st to improve code readability. Fixes #453.Tom Vrancken2018-10-189-140/+140
| | | | | | | | Signed-off-by: Tom Vrancken <dev@tomvrancken.nl>
| * Added NULL pointer check in gnutls_certificate_free_credentials for safety.Tom Vrancken2018-10-181-11/+14
| | | | | | | | Signed-off-by: Tom Vrancken <dev@tomvrancken.nl>
| * Renamed _gnutls_proc_x509_server_crt to _gnutls_proc_x509_crt.Tom Vrancken2018-10-181-2/+2
| | | | | | | | Signed-off-by: Tom Vrancken <dev@tomvrancken.nl>
| * Small fixes for comments and log strings.Tom Vrancken2018-10-184-29/+24
| | | | | | | | Signed-off-by: Tom Vrancken <dev@tomvrancken.nl>
* | Merge branch 'tmp-update-tlsfuzzer' into 'master'Nikos Mavrogiannopoulos2018-10-1911-15/+115
|\ \ | |/ |/| | | | | | | | | update tlsfuzzer scripts to latest version Closes #591 See merge request gnutls/gnutls!774
| * tlsfuzzer: updated to latest upstream and enabled new teststmp-update-tlsfuzzerNikos Mavrogiannopoulos2018-10-165-4/+72
| | | | | | | | | | | | Resolves: #591 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
View Lorry Controller Status