summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Sync with fuzzers from OSS-Fuzztmp-update-fuzzerTim Rühsen2019-12-17832-1500/+0
| | | | | | | Only lots of corpora removed (by merge step). Not sure why. But there are several new UBs detected. Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* Amend fuzz scripts and README for clang-8Tim Rühsen2019-12-172-6/+7
| | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* Add fuzz corpora for gnutls_ext_raw_parse_fuzzerTim Rühsen2019-12-174-0/+0
| | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* fuzzer: added fuzzer for gnutls_ext_raw_parse()Nikos Mavrogiannopoulos2019-12-1732-23/+78
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* README.md: updated CI build badge [ci skip]Nikos Mavrogiannopoulos2019-12-161-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* Merge branch 'tmp-more-const-1' into 'master'Tim Rühsen2019-12-1018-10098/+10795
|\ | | | | | | | | Add const to function arguments in lib/x509 See merge request gnutls/gnutls!1007
| * abi: updated to latest const changes and added NEWS entrytmp-more-const-1Nikos Mavrogiannopoulos2019-12-107-10002/+10692
| | | | | | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
| * Add const to function arguments in lib/x509Tim Rühsen2019-12-0712-101/+108
|/ | | | | | | This change does not introduce functionality changes. It just adds const promises to the caller. Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* Merge branch 'AVOID_INTERNALS' into 'master'Nikos Mavrogiannopoulos2019-12-051-8/+0
|\ | | | | | | | | lib: remove obsolete AVOID_INTERNALS See merge request gnutls/gnutls!1127
| * lib: remove obsolete AVOID_INTERNALSVitezslav Cizek2019-12-041-8/+0
| | | | | | | | | | | | | | | | Although commit 1f246c381e8a7449d84b143ffe50a0818622d2a3 enabled the self-check functions unconditionally, the #ifdefs AVOID_INTERNALS remained in lib/crypto-selftests-pk.c. Signed-off-by: Vitezslav Cizek <vcizek@suse.com>
* | .triage-policies.yml: updated to work with latest gitlab-triage [ci skip]Nikos Mavrogiannopoulos2019-12-041-4/+2
|/ | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* Revert "Released 3.6.11.1 including missing files"gnutls_3_6_11_1Nikos Mavrogiannopoulos2019-12-021-1/+1
| | | | | | This reverts commit 1e9c9ba0c0798b5566902e6c5ab83418826dd7f5. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* Released 3.6.11.1 including missing filesNikos Mavrogiannopoulos2019-12-021-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* Merge branch 'tmp-libopts-fix' into 'master'Nikos Mavrogiannopoulos2019-12-022-1/+3
|\ | | | | | | | | | | | | libopts: include new files into dist Closes #867 See merge request gnutls/gnutls!1126
| * libopts: include new files into disttmp-libopts-fixNikos Mavrogiannopoulos2019-12-022-1/+3
|/ | | | | | | | | This also includes --enable-local-libopts flag to make dist to catch future regressions. Resolves: #867 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* released 3.6.11gnutls_3_6_11Nikos Mavrogiannopoulos2019-12-011-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* Write OCSP status request debug information to logfile, if setFiona Klute2019-12-011-1/+1
| | | | | | | The status information not part of the payload data and should be separate when using --logfile. Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
* Send log messages about loading client credentials to logfile, if setFiona Klute2019-12-011-2/+2
| | | | Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
* .travis.yml: explicitly install openssl to address build issueNikos Mavrogiannopoulos2019-11-291-3/+3
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* NEWS: documented AES-CFB8 fix [ci skip]Nikos Mavrogiannopoulos2019-11-291-0/+3
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* bumped versionNikos Mavrogiannopoulos2019-11-293-3/+3
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* .travis.yml: update submodules [ci skip]Nikos Mavrogiannopoulos2019-11-291-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* base64: minor improvements in OOM handling and test suiteNikos Mavrogiannopoulos2019-11-292-0/+8
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* Merge branch 'tmp-fix-base64' into 'master'Nikos Mavrogiannopoulos2019-11-283-8/+15
|\ | | | | | | | | | | | | gnutls_base64_decode2() succeeds decoding the empty string Closes #834 See merge request gnutls/gnutls!1124
| * gnutls_base64_decode2() succeeds decoding the empty stringNikos Mavrogiannopoulos2019-11-283-8/+15
|/ | | | | | | | | This is a behavioral change of the API but it conforms to the RFC4648 expectations. Resolves: #834 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* Revert "tests: ignore datefudge-check check when running on command line"Nikos Mavrogiannopoulos2019-11-271-3/+3
| | | | | | | | This commit was breaking CI on FreeBSD systems. This reverts commit 1fe4f8e289d666979618fbb909983ac05aad11ac. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* Merge branch 'tmp-fix-crl-dist-points' into 'master'Nikos Mavrogiannopoulos2019-11-276-13/+60
|\ | | | | | | | | | | | | Add CRL distribution points to non-self-signed certificates Closes #765 See merge request gnutls/gnutls!1123
| * certtool: always include the CRL distribution points on CAsNikos Mavrogiannopoulos2019-11-255-10/+57
| | | | | | | | | | | | | | | | | | Previously we would omit the CRL distribution points from a non-self signed CA certificate, even if contained in the template. Resolves: #765 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
| * tests: ignore datefudge-check check when running on command lineNikos Mavrogiannopoulos2019-11-251-3/+3
|/ | | | | | | That allows running the tests individually without make or setting top_builddir variable. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* Merge branch 'minimal-check' into 'master'Dmitry Eremin-Solenikov2019-11-235-5/+23
|\ | | | | | | | | Run tests under minimal configuration See merge request gnutls/gnutls!1122
| * tests: make tests pass with disabled GOST algorithmsDmitry Eremin-Solenikov2019-11-224-5/+22
| | | | | | | | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
| * gitlab-ci: enable running make check on minimal buildDmitry Eremin-Solenikov2019-11-221-0/+1
|/ | | | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* Merge branch 'wip-cross-compilation' into 'master'Tim Rühsen2019-11-153-2/+11
|\ | | | | | | | | Fix cross-compilation of the Guile bindings See merge request gnutls/gnutls!1120
| * guile: Silence auto-compilation warning for 'guild'.Ludovic Courtès2019-11-111-1/+1
| | | | | | | | | | | | | | | | | | | | | | Reported by Helmut Grohne <helmut@subdivi.de> and Andreas Metzler <ametzler@bebt.de> at <https://bugs.debian.org/943905>. * guile/Makefile.am (%.go): Pass "GUILE_AUTO_COMPILE=0" to avoid warnings about 'guild' needing to be compiled. Signed-off-by: Ludovic Courtès <ludo@gnu.org>
| * guile: Do not attempt to load shared object when cross-compiling.Ludovic Courtès2019-11-113-2/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Reported by Helmut Grohne <helmut@subdivi.de> and Andreas Metzler <ametzler@bebt.de> at <https://bugs.debian.org/943905>. * configure.ac: Add 'CROSS_COMPILING' conditional. * guile/Makefile.am (CROSS_COMPILING_VARIABLE): New variable. (%.go): Use it. * guile/modules/gnutls.in <top level>: Do not call 'load-extension' when "GNUTLS_GUILE_CROSS_COMPILING" is defined. Signed-off-by: Ludovic Courtès <ludo@gnu.org>
* | Merge branch 'fix-coverity' into 'master'Nikos Mavrogiannopoulos2019-11-121-1/+3
|\ \ | |/ |/| | | | | vko: fix possible unitilized scalar access See merge request gnutls/gnutls!1118
| * vko: fix possible unitilized scalar accessDmitry Eremin-Solenikov2019-11-111-1/+3
|/ | | | | | | | | Fix error path in _gnutls_gost_keytrans_decrypt. If _asn1_strict_der_decode() fails, cleanup path will try to gnutls_pk_params_release(&pub), which will access unitialized pub variable. Fix by deleting asn1 sctructure directly. Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* Merge branch 'gost-split-2' into 'master'Dmitry Eremin-Solenikov2019-11-0823-7/+1282
|\ | | | | | | | | GOST key exchange support See merge request gnutls/gnutls!1097
| * Add support for VKO GOST key exchangeDmitry Eremin-Solenikov2019-11-086-2/+336
| | | | | | | | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
| * groups: add function to return group by curveDmitry Eremin-Solenikov2019-11-072-0/+22
| | | | | | | | | | | | | | Two GOST groups will have two curves attached. Add function to retrieve group by curve, rather than by group id. Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
| * ecc: define curve->group relationshipDmitry Eremin-Solenikov2019-11-072-0/+19
| | | | | | | | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
| * Declare groups corresponding to GOST curvesDmitry Eremin-Solenikov2019-11-073-0/+74
| | | | | | | | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
| * Add GOST key transport supportDmitry Eremin-Solenikov2019-11-078-1/+522
| | | | | | | | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
| * nettle: add support for GOST key derivationDmitry Eremin-Solenikov2019-11-071-0/+51
| | | | | | | | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
| * _gnutls_pk_derive: add argument for nonceDmitry Eremin-Solenikov2019-11-073-2/+14
| | | | | | | | | | | | | | GOST VKO key derivation needs another opaque argument (called UKM). Add an argument to _gnutls_pk_derive to accomodate that keying material. Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
| * nettle/gost: add support for GOST VKO algorithmDmitry Eremin-Solenikov2019-11-073-1/+86
| | | | | | | | | | | | GOST VKO is a variant of ECDHE algorithm. Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
| * nettle/gost: provide GOST keywrapping supportDmitry Eremin-Solenikov2019-11-073-1/+158
| | | | | | | | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* | Merge branch 'tmp-cfb8-fixes' into 'master'Daiki Ueno2019-11-085-11/+136
|\ \ | | | | | | | | | | | | nettle: backport fixes to cfb8_decrypt See merge request gnutls/gnutls!1117
| * | .gitlab-ci.yml: bump configure cache versiontmp-cfb8-fixesDaiki Ueno2019-11-081-1/+1
| | | | | | | | | | | | Signed-off-by: Daiki Ueno <dueno@redhat.com>
| * | crypto-selftests: test CFB8 ciphers with different chunksizesGünther Deschner2019-11-081-6/+118
| | | | | | | | | | | | | | | Signed-off-by: Guenther Deschner <gd@samba.org> Signed-off-by: Daiki Ueno <dueno@redhat.com>