summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* fully initialize the PKCS #11 subsystem only when it is needed to.Nikos Mavrogiannopoulos2013-12-093-62/+44
* FIPS140 mode is detected on run-time.Nikos Mavrogiannopoulos2013-12-098-44/+116
* Added check to verify that gnutls_global_init() is run on the library constru...Nikos Mavrogiannopoulos2013-12-083-1/+176
* converted to a simple check for gnutls_global_init() as gnutls_global_init2()...Nikos Mavrogiannopoulos2013-12-081-24/+1
* call p11_kit_modules_load() with null argument.Nikos Mavrogiannopoulos2013-12-081-1/+1
* only use LT_INITNikos Mavrogiannopoulos2013-12-061-3/+1
* doc updateNikos Mavrogiannopoulos2013-12-061-0/+2
* disable static library build by defaultNikos Mavrogiannopoulos2013-12-061-0/+1
* gnutls_global_init2() is no longer exported.Nikos Mavrogiannopoulos2013-12-055-18/+14
* doc updateNikos Mavrogiannopoulos2013-12-053-4/+13
* Added automatic reinitialization on fork() on the PKCS #11 subsystem.Nikos Mavrogiannopoulos2013-12-051-2/+22
* PKCS #11 initialization is delayed until first use.Nikos Mavrogiannopoulos2013-12-054-37/+108
* doc updateNikos Mavrogiannopoulos2013-12-041-0/+2
* Use a DRBG-AES to generate nonces rather than the yarrow RNG.Nikos Mavrogiannopoulos2013-12-045-97/+134
* getpid() is conditionally used.Nikos Mavrogiannopoulos2013-12-041-2/+9
* deleted auto-generated filesNikos Mavrogiannopoulos2013-12-0410-2683/+0
* removed zombie mode, and no longer use fips140.hNikos Mavrogiannopoulos2013-12-045-13/+14
* moved gnutls_fips140_mode_enabled to gnutls.hNikos Mavrogiannopoulos2013-12-043-59/+2
* simplified funcNikos Mavrogiannopoulos2013-12-041-3/+1
* corrected macrosNikos Mavrogiannopoulos2013-12-042-5/+5
* Check whether the RNG can perform many iterations without error.Nikos Mavrogiannopoulos2013-12-041-0/+8
* force reseed and rekey on fork and if we exceed a number of iterations.Nikos Mavrogiannopoulos2013-12-043-13/+26
* do not deinitialize a static mutex to avoid any side-effects.Nikos Mavrogiannopoulos2013-12-042-14/+1
* re-initialize a deleted staticly initialized mutexNikos Mavrogiannopoulos2013-11-301-2/+5
* doc updateNikos Mavrogiannopoulos2013-11-301-3/+5
* Added hack for nettle's checks.Nikos Mavrogiannopoulos2013-11-301-0/+8
* adjusted parameters in normal level for DSA to match nettle's abilities.Nikos Mavrogiannopoulos2013-11-301-2/+1
* added newlines in error reportingNikos Mavrogiannopoulos2013-11-301-2/+2
* fix self tests when used from slow/cipher-testNikos Mavrogiannopoulos2013-11-302-3/+11
* doc updateNikos Mavrogiannopoulos2013-11-301-3/+6
* updated test for the universal lib constructorNikos Mavrogiannopoulos2013-11-301-7/+0
* removed deadlock from gnutls_global.cNikos Mavrogiannopoulos2013-11-301-3/+6
* constructor and destructors were moved outside the FIPS140 mode.Nikos Mavrogiannopoulos2013-11-302-15/+19
* execute the FIPS-test even when not in FIPS140 mode.Nikos Mavrogiannopoulos2013-11-302-11/+3
* fips140_simulate_error -> lib_simulate_errorNikos Mavrogiannopoulos2013-11-304-5/+5
* adjusted subgroup bits to be compatible with DSA requirements.Nikos Mavrogiannopoulos2013-11-301-1/+1
* The library state is used even when not in FIPS mode.Nikos Mavrogiannopoulos2013-11-3016-70/+54
* Merged the FIPS140-2 support code.Nikos Mavrogiannopoulos2013-11-30129-8418/+13367
|\
| * Added 3.2 to reference APINikos Mavrogiannopoulos2013-11-281-0/+3
| * updated links in reference. Reported by Nico R.Nikos Mavrogiannopoulos2013-11-281-3/+3
| * updated addresses and URLs. Reported by Nico R.Nikos Mavrogiannopoulos2013-11-283-9/+7
| * Added destructor and moved both *structors to fips.cNikos Mavrogiannopoulos2013-11-282-12/+15
| * Eliminated memory leak in print_aia(). Reported by Ben de Graaff.Nikos Mavrogiannopoulos2013-11-281-4/+18
| * Added ECDH known answer test.Nikos Mavrogiannopoulos2013-11-281-0/+113
| * Added known answer test for Diffie-Hellman key exchange.Nikos Mavrogiannopoulos2013-11-282-0/+106
| * Added check to prevent generating a DH pubkey of 1.Nikos Mavrogiannopoulos2013-11-281-11/+26
| * compacted DH support files.Nikos Mavrogiannopoulos2013-11-283-537/+511
| * clear the generated ECDH parameters as soon as they are not needed.Nikos Mavrogiannopoulos2013-11-281-13/+28
| * When checking the generated DSA params make sure that the data to be signed h...Nikos Mavrogiannopoulos2013-11-281-5/+20
| * DH key exchange uses the _gnutls_pk_derive and _gnutls_pk_generate_key functi...Nikos Mavrogiannopoulos2013-11-2812-244/+218