summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* lib: removed legacy debugging codetmp-remove-debugging-codeNikos Mavrogiannopoulos2017-08-182-41/+0
| | | | | | | | | That code was code from the initial versions of gnutls. It was neither used nor updated for long time. Relates #248 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* fuzz: added missing files into dist [ci skip]Nikos Mavrogiannopoulos2017-08-181-6/+6
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: added missing files in dist [ci skip]Nikos Mavrogiannopoulos2017-08-182-2/+3
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: do not suppress stderr errors on servers startupNikos Mavrogiannopoulos2017-08-181-2/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc updateNikos Mavrogiannopoulos2017-08-181-1/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* abi-check: added check for 3.6.0 ABI compatibilityNikos Mavrogiannopoulos2017-08-182-1/+39892
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* gnutls_x509_crl_get_issuer_dn: removed unnecessary constNikos Mavrogiannopoulos2017-08-181-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* certtool: fixed documentation of sign-paramsNikos Mavrogiannopoulos2017-08-171-2/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* README.md: mention lockfile-progs dependencytmp-sign-rsa-rawNikos Mavrogiannopoulos2017-08-171-2/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: tls-neg-ext4-key: explicitly restrict to TLS 1.2, 1.1 and 1.0Nikos Mavrogiannopoulos2017-08-172-11/+40
| | | | | | This allows testing all signature types used in the protocol. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* sign APIs: introduce RSA-RAW signing algorithmNikos Mavrogiannopoulos2017-08-1710-41/+97
| | | | | | | | | This ensures that there is a signing algorithm for all the operations we support. Previously, we required GNUTLS_SIGN_UNKNOWN to be acceptable by signing functions to accomodate for raw RSA operations. Now we make that explicit and in the process clean-up the API. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* removed devel/fuzz; functionality moved to fuzz/ [ci skip]Nikos Mavrogiannopoulos2017-08-179920-2081/+0
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* fuzzer: Add 'make -C fuzz coverage' [ci skip]Tim Rühsen2017-08-161-0/+16
| | | | | | This reports how much code is covered by fuzzing. Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* _gnutls_recv_server_certificate_status: use the same type in subtracted valuesNikos Mavrogiannopoulos2017-08-161-2/+2
| | | | | | | | | | This ensures that there are no issues with subtracting those values. Note that the second is read from an uint24_t and thus it is always positive regardless its type. Resolves #245 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* _gnutls_proc_srp_client_kx: use same type in subtracted valuesNikos Mavrogiannopoulos2017-08-161-1/+1
| | | | | | | | | | This ensures that there are no issues with subtracting those values. Note that the second is read from an uint16_t and thus it is always positive regardless its type. Resolves #244 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* fuzzer: Move regression corpora from tests/ to fuzz/Tim Rühsen2017-08-1621-800/+5
| | | | | | See fuzz/README.md for the corresponding paths. Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* fuzzer: Suppress leak in libgmp <= 6.1.2Tim Rühsen2017-08-162-1/+2
| | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* fuzzer: Suppress unsigned integer overflow in rnd-fuzzer.cTim Rühsen2017-08-161-0/+6
| | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* fuzzer: Initial check in for improved fuzzingTim Rühsen2017-08-168444-3/+3506
| | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* fuzzer: added a fuzzer targetNikos Mavrogiannopoulos2017-08-167-3/+189
| | | | | | | | This allows to compile the library with flags which will add predictable random generation and eliminate some crypto checks, in order for the library to be used for testing (fuzzying). Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* updated auto-generated filestmp-to-rsaNikos Mavrogiannopoulos2017-08-152-636/+668
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* gnutls_x509_privkey_export: made a wrapper over gnutls_x509_privkey_export2()Nikos Mavrogiannopoulos2017-08-151-30/+18
| | | | | | In addition, improved function description. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* gnutls-http-serv: use RSA-PSS keyNikos Mavrogiannopoulos2017-08-151-2/+3
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc updateNikos Mavrogiannopoulos2017-08-151-4/+17
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: use certtool to check RSA-PSS to RSA conversionNikos Mavrogiannopoulos2017-08-154-0/+78
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* certtool: introduced --to-rsa optionNikos Mavrogiannopoulos2017-08-152-1/+76
| | | | | | This allows converting an RSA-PSS key to raw RSA. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc updateNikos Mavrogiannopoulos2017-08-151-0/+6
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* updated auto-generated filesNikos Mavrogiannopoulos2017-08-154-0/+4
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: added unit tests for gnutls_privkey_import_ext4Nikos Mavrogiannopoulos2017-08-154-1/+709
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* gnutls_privkey_import_ext4: introduced to allow signing with RSA-PSS or ↵Nikos Mavrogiannopoulos2017-08-155-56/+201
| | | | | | | | | | | | Ed25519 keys That function allows a signing callback which passes the signature algorithm, providing all the information to callback for signing. It also introduces GNUTLS_PRIVKEY_INFO_HAVE_SIGN_ALGO flag which allows the library to query the private key of the supported signature algorithms. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* reduce common asserts to assist in debugging the libraryNikos Mavrogiannopoulos2017-08-154-4/+0
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc: algorithms.texi: include list of groups but skip compression methodsNikos Mavrogiannopoulos2017-08-151-16/+3
| | | | | | | Compression methods are no longer relevant or supported, and groups replace the elliptic curves. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc: improved elliptic curve and group documentationNikos Mavrogiannopoulos2017-08-151-3/+6
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc: mention the AES-DRBG random generator [ci skip]Nikos Mavrogiannopoulos2017-08-142-1/+23
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* tests: improved detection of 64-bit systemstmp-added-x86-buildNikos Mavrogiannopoulos2017-08-113-2/+7
| | | | | | | We now use the ${ac_cv_sizeof_unsigned_long_int} variable which gives the numbers used in the host system, not the build one. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: updated for new x86 hostNikos Mavrogiannopoulos2017-08-113-1/+9
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* .gitlab-ci.yml: replaced the f23 x86 build with a f26 x86 buildNikos Mavrogiannopoulos2017-08-111-3/+4
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* fuzz: explicitly initialize and deinitialize the library [ci skip]Nikos Mavrogiannopoulos2017-08-1114-0/+44
| | | | | | This enables the fuzzers to run even when statically linked. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* handshake: eliminated unnecessary function wrappersNikos Mavrogiannopoulos2017-08-111-48/+17
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* gnutls_int.h: reduce memory occupied by ext_dataNikos Mavrogiannopoulos2017-08-111-2/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* gnutls_int.h: reduced the maximum number of epoch states we keepNikos Mavrogiannopoulos2017-08-111-1/+1
| | | | | | | There was no need to keep 16 epochs, as we typically we have only one or two active. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* gnutls_int.h: removed unused variable from stateNikos Mavrogiannopoulos2017-08-112-6/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* extensions: simplified requirements from send callbackNikos Mavrogiannopoulos2017-08-114-16/+27
| | | | | | | The callback no longer needs to return the number of sent data; they are now calculated by the caller. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* ext/ecc: renamed Supported curves extensionNikos Mavrogiannopoulos2017-08-101-3/+4
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* gnutls-serv: --require-client-cert no longer implies --verify-client-certNikos Mavrogiannopoulos2017-08-103-3/+4
| | | | | | | That is, it is now possible to require a client certificate without verifying it. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* CONTRIBUTING.md: corrected typo [ci skip]Nikos Mavrogiannopoulos2017-08-101-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc updateNikos Mavrogiannopoulos2017-08-101-38/+75
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* updated auto-generated filestmp-fix-versioningNikos Mavrogiannopoulos2017-08-091-40/+41
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* CONTRIBUTING.md: added section on symbol versioningNikos Mavrogiannopoulos2017-08-092-0/+48
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* libgnutls.map: separated symbols introduced in 3.6.0Nikos Mavrogiannopoulos2017-08-091-4/+16
| | | | | | | | This separation assists tools like rpm which can detect the right version of the library to use, by using the symbol version. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
View Lorry Controller Status