summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* | | Merge branch 'master' into 'master'Nikos Mavrogiannopoulos2019-11-014-0/+109
|\ \ \ | |_|/ |/| | | | | | | | nettle: Support sysctl(KERN_ARND) for random number generation on NetBSD. See merge request gnutls/gnutls!1109
| * | Add NEWS entry for the NetBSD KERN_ARND change.nia2019-10-311-0/+5
| | | | | | | | | | | | Signed-off-by: Nia Alarie <nia@NetBSD.org>
| * | nettle: Support sysctl(KERN_ARND) for RNG on NetBSD.nia2019-10-263-0/+104
| | | | | | | | | | | | | | | | | | | | | | | | This system call will never block and does not require a file descriptor to be opened. It provides an endless stream of random numbers from the kernel's ChaCha20-based random number generator. Signed-off-by: Nia Alarie <nia@NetBSD.org>
* | | Merge branch 'logfile-doc-improvement' into 'master'Nikos Mavrogiannopoulos2019-10-311-1/+1
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | doc: describe how to make gnutls-cli quiet for pipe usage Closes #845 See merge request gnutls/gnutls!1108
| * | | doc: describe how to make gnutls-cli quiet for pipe usageBjörn Jacke2019-10-251-1/+1
| |/ / | | | | | | | | | Signed-off-by: Bjoern Jacke <bjacke@samba.org>
* | | Merge branch 'remove-uint24' into 'master'Dmitry Eremin-Solenikov2019-10-302-47/+4
|\ \ \ | |_|/ |/| | | | | | | | lib: simplify uint24 handling See merge request gnutls/gnutls!1107
| * | lib: simplify uint24 handlingDmitry Eremin-Solenikov2019-10-242-47/+4
| | | | | | | | | | | | | | | | | | | | | | | | Drop separate uint24 type and functions to convert between it and uint32_t. This makes _gnutls_read/_write_uint24 simpler and easier to understand. And with faster assembly code. Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* | | Merge branch 'fix-gost-curves' into 'master'Dmitry Eremin-Solenikov2019-10-292-4/+27
|\ \ \ | | | | | | | | | | | | | | | | ecc: fix curve sizes for TC26-256 gost curves See merge request gnutls/gnutls!1110
| * | | ecc: fix curve sizes for TC26-256 gost curvesDmitry Eremin-Solenikov2019-10-272-4/+27
| | |/ | |/| | | | | | | | | | | | | | | | Fix curve size being incorrectly set to 64 instead of 32 for several GOST curves. Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* | | Merge branch 'serv-fix-table' into 'master'Nikos Mavrogiannopoulos2019-10-291-1/+3
|\ \ \ | |/ / |/| | | | | | | | serv: move closing TABLE tag after actual table end See merge request gnutls/gnutls!1111
| * | serv: move closing TABLE tag after actual table endDmitry Eremin-Solenikov2019-10-271-1/+3
|/ / | | | | | | | | | | Move closing TABLE tag after printing information on cipher and MAC. Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* | Merge branch 'remove-guint64' into 'master'tmp-draft-ietf-quic-tls-23Dmitry Eremin-Solenikov2019-10-2416-358/+223
|\ \ | |/ | | | | | | lib: drop gnutls_uint64 usage as sequence number See merge request gnutls/gnutls!1102
| * lib: drop gnutls_uint64 usage as sequence numberDmitry Eremin-Solenikov2019-10-2416-358/+223
|/ | | | | | | | GnuTLS is depending already on uint64_t being a properly defined type. So there is no need to have a special byte-array type for 8-byte integers. Use uint64_t instead, thus simplifying a code quite heavily. Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* Merge branch 'tls-continuous-mac' into 'master'Dmitry Eremin-Solenikov2019-10-239-28/+46
|\ | | | | | | | | Support GOST cipher suite MAC calculation See merge request gnutls/gnutls!1098
| * mac: mark GOST28147-TC26Z-IMIT as using CONTINUOUS_MACDmitry Eremin-Solenikov2019-10-211-1/+2
| | | | | | | | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
| * Support GOST cipher suite MAC calculationDmitry Eremin-Solenikov2019-10-213-3/+18
| | | | | | | | | | | | | | | | GOST ciphersuites require that MAC is calculated over _all_ packets, rather than just current packet. Add flag to auth_cipher_hd_st controlling this behaviour. Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
| * mac: change preimage_insecure to be a flagDmitry Eremin-Solenikov2019-10-213-7/+8
| | | | | | | | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
| * cipher: replace several bools with single flags instanceDmitry Eremin-Solenikov2019-10-215-17/+18
| | | | | | | | | | | | Replace bools in cipher_entry_st with flags field. Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* | Merge branch 'new-crt-vrfy' into 'master'Dmitry Eremin-Solenikov2019-10-235-90/+126
|\ \ | | | | | | | | | | | | Split CertVerify code. Switch sign_entry_st to use flags See merge request gnutls/gnutls!1103
| * | sign: convert tls13_ok to flags fieldDmitry Eremin-Solenikov2019-10-214-16/+16
| | | | | | | | | | | | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
| * | tls-sig: split TLS 1.0/1.1 CertificateVerify codeDmitry Eremin-Solenikov2019-10-211-74/+110
| |/ | | | | | | | | | | | | For the symmetry split the TLS 1.[01] CertificateVerify code, so that main functions work as pure multiplexors. Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* | Merge branch 'key-compat' into 'master'Dmitry Eremin-Solenikov2019-10-231-0/+13
|\ \ | |/ |/| | | | | lib: pubkey vs TLS signature compatibility for GOST algorithms See merge request gnutls/gnutls!1101
| * lib: pubkey vs TLS signature compatibility for GOST algorithmsDmitry Eremin-Solenikov2019-10-181-0/+13
| | | | | | | | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* | Merge branch 'fix-noreturn' into 'master'Dmitry Eremin-Solenikov2019-10-182-2/+2
|\ \ | |/ |/| | | | | src: fix noreturn-related warning See merge request gnutls/gnutls!1100
| * src: fix noreturn-related warningDmitry Eremin-Solenikov2019-10-182-2/+2
|/ | | | | | | | | | | | | Recent autogen started adding '#include <stdnoreturn.h>' into -args.h files. However in GnuTLS tools code this results in the following warnings, because stdnoreturn.h unconditionally redefines 'noreturn' to _Noreturn: warning: '_Noreturn' attribute directive ignored Use __noreturn__ attribute instead as does Gnulib. Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* Merge branch 'stream-iv' into 'master'Dmitry Eremin-Solenikov2019-10-171-2/+6
|\ | | | | | | | | Allow using implicit IV for stream ciphers with TLS See merge request gnutls/gnutls!1099
| * Allow using implicit IV for stream ciphers with TLSDmitry Eremin-Solenikov2019-10-171-2/+6
| | | | | | | | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* | Merge branch 'gost-prf' into 'master'Nikos Mavrogiannopoulos2019-10-172-26/+69
|\ \ | | | | | | | | | | | | prf: add Streebog PRF support See merge request gnutls/gnutls!1088
| * | prf: add Streebog (GOST R 34.11-2012) PRF supportDmitry Eremin-Solenikov2019-10-152-26/+69
| | | | | | | | | | | | | | | | | | | | | Add support and tests for PRF generated using both Streebog versions. This is necessary for adding GOST TLS ciphersuites support. Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* | | Merge branch 'tmp-fix-coverity' into 'master'Nikos Mavrogiannopoulos2019-10-1720-149/+244
|\ \ \ | |_|/ |/| | | | | | | | Fix coverity in lib/ See merge request gnutls/gnutls!1092
| * | Add const to several read-only packet sequence paramstmp-fix-coverityTim Rühsen2019-10-159-17/+17
| | | | | | | | | | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
| * | tests/buffer.c: Add unit test for _gnutls_buffer_unescape()Tim Rühsen2019-10-154-1/+90
| | | | | | | | | | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
| * | lib/x509/x509.c: Check before pointer dereference in get_alt_name()Tim Rühsen2019-10-131-1/+1
| | | | | | | | | | | | | | | | | | Fixes Coverity issue 1361513 Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
| * | cipher: Let _gnutls_auth_cipher_setiv() return intTim Rühsen2019-10-132-4/+8
| | | | | | | | | | | | | | | | | | Fixes Coverity issue 1454646 Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
| * | lib/record.c: Use assignment instead of memcpy()Tim Rühsen2019-10-131-1/+1
| | | | | | | | | | | | | | | | | | Fixes Coverity issue 1454647 Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
| * | lib/sslv2_compat.c: Check return value of _gnutls_generate_session_id()Tim Rühsen2019-10-131-4/+6
| | | | | | | | | | | | | | | | | | Fixes Coverity issue 1454649 Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
| * | lib/x509/output.c: Remove unneeded NULL check in print_crt_pubkey()Tim Rühsen2019-10-131-2/+1
| | | | | | | | | | | | | | | | | | Fixes Coverity issue 1454670 Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
| * | lib/auth/srp_passwd.c: Fix NULL dereference in _gnutls_srp_pwd_read_entry()Tim Rühsen2019-10-131-2/+4
| | | | | | | | | | | | | | | | | | Fixes Coverity issue 1454652 Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
| * | lib/str.c: Replace sscanf() in _gnutls_buffer_unescape()Tim Rühsen2019-10-131-14/+11
| | | | | | | | | | | | | | | | | | Fixes Coverity issue 1454651 Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
| * | lib/handshake.c: Check return value of _gnutls_version_max()Tim Rühsen2019-10-121-0/+2
| | | | | | | | | | | | | | | | | | | | | Fixes Coverity issue 1454674 Fixes Coverity issue 1454658 Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
| * | Remove trailing spaces in several filesTim Rühsen2019-10-126-103/+103
|/ / | | | | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* | Merge branch 'tmp-remove-coverity' into 'master'Nikos Mavrogiannopoulos2019-10-111-24/+0
|\ \ | | | | | | | | | | | | .gitlab-ci.yml: removed coverity build [ci skip] See merge request gnutls/gnutls!1095
| * | .gitlab-ci.yml: removed coverity build [ci skip]Nikos Mavrogiannopoulos2019-10-101-24/+0
|/ / | | | | | | | | | | | | | | | | | | | | | | The coverity run is subject to several restrictions by the service, and thus it is not really useful in the main CI runs as it cannot reasonably be run on MRs or master. As such we simplify the main CI file by moving the coverity to the coverage sub-project and running it weekly. The new location is at: https://gitlab.com/gnutls/coverage Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* | Merge branch 'tmp-ext-mandatory' into 'master'Nikos Mavrogiannopoulos2019-10-1030-44/+98
|\ \ | | | | | | | | | | | | | | | | | | session tickets: parse extension during session resumption Closes #841 See merge request gnutls/gnutls!1087
| * | session tickets: parse extension during session resumption on client sideNikos Mavrogiannopoulos2019-10-0830-44/+98
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It is possible for a server to send a new session ticket during TLS1.2 resumption. To be able to parse it as client we need to check the extension during resumption as well. Resolves: #841 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* | | Merge branch 'doc-lscpu' into 'master'Nikos Mavrogiannopoulos2019-10-101-2/+3
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | README.md: document lscpu/util-linux dependency for make check Closes #764 See merge request gnutls/gnutls!1093
| * | | README.md: document lscpu/util-linux dependency for make checkRicardo M. Correia2019-10-091-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | Closes #764 Signed-off-by: Ricardo M. Correia <rcorreia@wizy.org>
* | | | Merge branch 'gost-pkcs11' into 'master'Dmitry Eremin-Solenikov2019-10-103-1/+89
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | P11tool improvements See merge request gnutls/gnutls!1071
| * | | | testpkcs11.sh: test that we output mechanism flags correctlyDmitry Eremin-Solenikov2019-10-091-0/+28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Verify some of PKCS#11 mechanism flags. Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
| * | | | p11tool: print mechanism info in list-mechanismsDmitry Eremin-Solenikov2019-10-092-1/+61
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Print key size range and flags in mechanisms list. Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
View Lorry Controller Status