summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* tlslite-ng: updated to latest versiontmp-tlsfuzzer-updateNikos Mavrogiannopoulos2017-09-061-0/+0
| | | | | | This addresses issues with RSA-PSS signing. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* latex: handle the deprecated function mark [ci skip]Nikos Mavrogiannopoulos2017-08-291-0/+4
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* .gitlab-ci.yml: give more specific name to windows job artifacts [ci skip]Nikos Mavrogiannopoulos2017-08-291-0/+2
| | | | | | This allows a more descriptive name to any downloaded artifacts. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* tools: removed re-using PIN message when in non-verbose modeNikos Mavrogiannopoulos2017-08-291-3/+5
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* p11tool: print public or private key algorithmNikos Mavrogiannopoulos2017-08-291-3/+111
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* gnutls_pkcs11_privkey_generate3: doc update [ci skip]Nikos Mavrogiannopoulos2017-08-281-0/+3
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: check whether generated private keys are marked privatetmp-p11tool-sign-with-rsa-pssNikos Mavrogiannopoulos2017-08-271-0/+8
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* tests: added unit test of p11tool with --set-pinNikos Mavrogiannopoulos2017-08-271-0/+20
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* tests: check whether generated or copied keys are marked as sensitiveNikos Mavrogiannopoulos2017-08-271-0/+15
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* updated auto-generated filesNikos Mavrogiannopoulos2017-08-272-137/+203
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* p11tool: allow obtaining PIN from command line on operationsNikos Mavrogiannopoulos2017-08-272-4/+10
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* certtool: eliminate global use of default_digNikos Mavrogiannopoulos2017-08-271-32/+32
| | | | | | | Use instead the cinfo->hash field which is already used by p11tool. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: krb5-test: disable valgrind mem leak checks for negative checksNikos Mavrogiannopoulos2017-08-271-0/+8
| | | | | | Resolves #192 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc updateNikos Mavrogiannopoulos2017-08-271-0/+9
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: check whether p11tool signing with RSA-PSS worksNikos Mavrogiannopoulos2017-08-271-0/+14
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* p11tool: allow signing with RSA-PSS and specifying an explicit hashNikos Mavrogiannopoulos2017-08-273-6/+59
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* sign_params_to_flags: moved to certtool-common.cNikos Mavrogiannopoulos2017-08-273-27/+29
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* certtool: hash_to_id moved to certtool-common.cNikos Mavrogiannopoulos2017-08-273-30/+37
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* Fix some typos [ci skip]Andreas Metzler2017-08-272-5/+5
| | | | | | | occurence -> occurrence sucessful -> successful Signed-off-by: Andreas Metzler <ametzler@bebt.de>
* Fixed segmentation faults caused by accessing NULL pointers during mutex ↵Tom Vrancken2017-08-261-6/+6
| | | | | | operations. This bug was triggered while setting priorities. Signed-off-by: Tom Vrancken <email@tomvrancken.nl>
* p11tool: explicitly mark generated keys as sensitiveNikos Mavrogiannopoulos2017-08-261-1/+3
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: windows: warning: function declaration isn't a prototypeAlon Bar-Lev2017-08-261-1/+1
| | | | Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
* tests: warning: implicit declaration of functionAlon Bar-Lev2017-08-262-0/+2
| | | | Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
* m4: updated ax_code_coverage.m4 [ci skip]Nikos Mavrogiannopoulos2017-08-241-6/+6
| | | | | | | This version fixes a bug which prevented including the branch coverage into output. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* fuzzer: Enhance code coverage of gnutls_base64_encoder_fuzzerTim Rühsen2017-08-241-1/+1
| | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* fuzzer: Add script 'view-coverage'Tim Rühsen2017-08-241-0/+28
| | | | | | | | | | This helper script is for viewing the code coverage of single (or combined) fuzzers running with all his corpora. It helps optimizing the code coverage by hand-crafting corpora and/or dictionaries. Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* fuzzer: Change CFLAGS -O0 to -O1 in fuzz/README.mdTim Rühsen2017-08-241-1/+1
| | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* fuzzer: Update corpora from oss-fuzzTim Rühsen2017-08-247071-826/+2787
| | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* tlslite: updated to latest versiontmp-update-tlsliteNikos Mavrogiannopoulos2017-08-241-0/+0
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* certtool: do not ask about RSA encryption in non-RSA keysNikos Mavrogiannopoulos2017-08-231-3/+0
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* fuzz: work-around libtool file nametmp-fuzz-updatesNikos Mavrogiannopoulos2017-08-221-0/+5
| | | | | | | | fuzzers utilize argv[0] to discover the name the reproducers are stored in. However libtool creates a script which later runs the executable. Try to detect that situation and use the right paths. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* dh params: document DH param setting functions as deprecatedNikos Mavrogiannopoulos2017-08-224-0/+50
| | | | | | They are no longer useful after the RFC7919 DH parameter negotiation. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: introduced unit test of gnutls_memset()Nikos Mavrogiannopoulos2017-08-222-1/+77
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* fuzz: removed -static ldflag completelyNikos Mavrogiannopoulos2017-08-221-5/+0
| | | | | | | It is not necessary for building the fuzzer, and was causing issues in MacOSX systems. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* .gitlab-ci.yml: use the same flags in the tags and non-tags windows buildsgnutls_3_6_0_1tmp-fix-tagged-windows-buildNikos Mavrogiannopoulos2017-08-211-2/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* tests: p11-kit-trust is not compiled in windowsNikos Mavrogiannopoulos2017-08-211-2/+6
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* fuzz: temporarily disable -static build of fuzz/ in MacOSXgnutls_3_6_0Nikos Mavrogiannopoulos2017-08-211-0/+5
| | | | | | This allows running the MacOSX CI tests on travis. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* doc updateNikos Mavrogiannopoulos2017-08-211-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* tests: verify the output size of gnutls_x509_privkey_exportNikos Mavrogiannopoulos2017-08-211-0/+25
| | | | | | | | That is, make sure that gnutls_x509_privkey_export() and gnutls_x509_privkey_export2() agrees with the strlen() value on the data. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* .travis.yml: print failed log files in fuzz after failureNikos Mavrogiannopoulos2017-08-201-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* hooks.m4: reduce the gap between minor soversion of 3.5.x and 3.6.0Nikos Mavrogiannopoulos2017-08-201-2/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* tests: make mini-record more friendly for OSes with limited bufferstmp-fix-sed-portabilityNikos Mavrogiannopoulos2017-08-201-1/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* pull/push backends: ECONNRESET is translated to GNUTLS_E_PREMATURE_TERMINATIONNikos Mavrogiannopoulos2017-08-201-0/+2
| | | | | | | This returns a more reasonable error code on platforms where this errno is set. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* tests: gnutls_x509_privkey_import: address issue on error pathNikos Mavrogiannopoulos2017-08-201-2/+3
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* sed: use it in a portable way in makefilesNikos Mavrogiannopoulos2017-08-202-4/+6
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* configure: disable hardware acceleration on aarch64/ilp32 modetmp-disable-aarch64-ilp32Nikos Mavrogiannopoulos2017-08-191-0/+6
| | | | | | | | | Our included assembly code for aarch64 is not suitable for that data mode. Resolves #252 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* create_tls_random: avoid warning in fuzzying modeNikos Mavrogiannopoulos2017-08-191-2/+3
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* configure.ac: removed conditional FUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTIONtmp-conditional-fuzzer-targetNikos Mavrogiannopoulos2017-08-191-1/+0
| | | | | | | | Instead rely only on the definition, to make fuzzying mode to be enabled even if --enable-fuzzer-target is not specified, but defined b the compiler. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* rnd-fuzzer: use ifdef instead of conditional compilationNikos Mavrogiannopoulos2017-08-192-5/+3
| | | | | | | This allows compiling in fuzzying mode even when --enable-fuzzer-target is not specified on configure, but the definition is present. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* fuzzer: Update base64 fuzzers + corporaTim Rühsen2017-08-1923-0/+27
| | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>