summaryrefslogtreecommitdiff
path: root/doc
Commit message (Collapse)AuthorAgeFilesLines
* ANON,SRP,NULL ciphersuites: when set do not negotiate TLS1.3 or laterNikos Mavrogiannopoulos2018-04-132-2/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | The reason is that these ciphersuites cannot be negotiated using TLS1.3. There is a different strategy followed for these. * NULL ciphersuites: they are not something normally enabled and used for debugging purposes mostly. When set both in client and server side only TLS1.2 can be used. * SRP ciphersuites: they are used on client side when the client is actually performing a username-password authentication with SRP. On server side we can have indeed a server support SRP and non-SRP. In that case we limit both on TLS1.2. That an unfortunate restriction, but is not a regression and IMHO these servers would most likely be phased out as very few would want to stick to TLS1.2 connections for SRP; or we may have an SRP update for TLS1.3 which could lift that limitation in the future. * ANON ciphersuites: they are used in certain client/server setups where very basic level of security is required, and in opportunistic encryption scenarios. There is a difference in the handling of these cases. In the case of Anon-only server/clients they provide the session with anonymous credentials structure; in the case of opportunistic encryption they provide both certificate and anonymous credentials. Thus we allow the protocol (TLS1.3) be in the priorities, but if we see no certificate or PSK credentials we disable TLS1.3 negotiation. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc: corrected space-tab issues in examplesNikos Mavrogiannopoulos2018-04-071-4/+4
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* doc: re-organized and modernized examplesNikos Mavrogiannopoulos2018-04-064-194/+190
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc: updated for TLS1.3Nikos Mavrogiannopoulos2018-04-064-160/+139
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* fuzz: added PSK traces with TLS1.3Nikos Mavrogiannopoulos2018-04-061-0/+1
| | | | | | Relates: #359 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* priority: added GROUP-DH-ALL and GROUP-EC-ALLNikos Mavrogiannopoulos2018-04-061-1/+3
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc update [ci skip]Nikos Mavrogiannopoulos2018-03-231-0/+4
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* doc: mention gnutls_privkey_import_ext4 in upgrade from 3.5.xNikos Mavrogiannopoulos2018-03-232-2/+5
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* updated auto-generated filesNikos Mavrogiannopoulos2018-02-262-0/+3
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* gnutls_ext_raw_parse: introduced functionNikos Mavrogiannopoulos2018-02-261-0/+18
| | | | | | | | | | That function can be combined with callbacks like gnutls_handshake_set_hook_function() for applications to be able to process messages when necessary. Resolves #382 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* updated auto-generated filestmp-draft-ietf-tls-tls13-21Nikos Mavrogiannopoulos2018-02-192-0/+27
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* record: new gnutls_record_send2 functionDaiki Ueno2018-02-192-0/+3
| | | | | | | This adds a new function gnutls_record_send2() which takes an extra argument to specify the padding size of the record. Signed-off-by: Daiki Ueno <dueno@redhat.com>
* doc: use 3.6.xx to be consistent with other version referencesNikos Mavrogiannopoulos2018-02-191-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc: getfuncs.pl: distinguish between different typedef typesNikos Mavrogiannopoulos2018-02-191-3/+12
| | | | | | | That allows to properly distinguish a struct from a one liner typedef. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc: updatedNikos Mavrogiannopoulos2018-02-192-12/+43
| | | | | | | * document the new behavior of gnutls_certificate_set_ocsp_status_request_file * updated text on OCSP stapled responses Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc: added text on TLS1.3 rekey and reauthenticationNikos Mavrogiannopoulos2018-02-191-6/+33
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* updated auto-generated filesNikos Mavrogiannopoulos2018-02-192-0/+3
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* updated auto-generated filesNikos Mavrogiannopoulos2018-02-192-0/+3
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* updated auto-generated filestmp-fips140-allow-hashNikos Mavrogiannopoulos2018-02-192-0/+4
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* doc: documented gnutls_fips140_set_mode and gnutls_fips_mode_tNikos Mavrogiannopoulos2018-02-191-10/+52
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* latex: introduced functionWarning macroNikos Mavrogiannopoulos2018-02-161-0/+4
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* doc: documented how to set the credentials late in certain vhost scenariosNikos Mavrogiannopoulos2018-02-141-0/+38
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* examples: use gnutls_certificate_set_x509_system_trustNikos Mavrogiannopoulos2018-01-172-11/+5
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* doc: updated copyright year for manualtmp-fix-verification-issuesNikos Mavrogiannopoulos2018-01-061-2/+2
| | | | | | That eliminates the 'make syntax-check' error. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc: reference gnutls_prf_rfc5705 instead of gnutls_prf303-provide-a-consistent-set-of-default-ciphers-across-supported-protocolsNikos Mavrogiannopoulos2017-12-081-9/+12
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc: provided basic documentation of the FIPS140-2 mode [ci skip]Nikos Mavrogiannopoulos2017-11-283-4/+41
| | | | | | Resolves #332 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* getfuncs-map.pl: added gnutls_srp_8192_group* symbols to ignore listtmp-srp-updatesNikos Mavrogiannopoulos2017-11-221-0/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* doc updateNikos Mavrogiannopoulos2017-11-211-0/+4
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc: corrected typoNikos Mavrogiannopoulos2017-11-191-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* doc: better detect acronym keyword on latex outputtmp-doc-fixNikos Mavrogiannopoulos2017-11-161-0/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc: latex: resolve all citation issuesNikos Mavrogiannopoulos2017-11-161-9/+70
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc: citations translate into references in texinfoNikos Mavrogiannopoulos2017-11-164-5/+14
| | | | | | | | That makes the citations to be links in the generated html manual. Resolves: #321 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc: corrected typo [ci skip]Nikos Mavrogiannopoulos2017-11-041-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* doc: mention SHA224 removal in upgrade guideNikos Mavrogiannopoulos2017-10-181-0/+4
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc: improve documentation on provable private keysNikos Mavrogiannopoulos2017-10-091-0/+9
| | | | | | Resolves #301 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* doc: enhanced text on PKCS#7 and public keysNikos Mavrogiannopoulos2017-10-091-9/+37
| | | | | | Resolves #302 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* Modernize gtk-doc supporttmp-modernize-gtk-docAndreas Metzler2017-09-281-27/+10
| | | | | | | | | Update gtk-doc.make, m4/gtk-doc.m4 and doc/reference/Makefile.am from gtk-doc git head (that is 1.26 + c08cc78562c59082fc83b55b58747177510b7a70). Disable gtkdoc-check. Signed-off-by: Andreas Metzler <ametzler@bebt.de>
* doc: document the change of gnutls_x509_crt_signNikos Mavrogiannopoulos2017-09-081-3/+6
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* latex: handle the deprecated function mark [ci skip]Nikos Mavrogiannopoulos2017-08-291-0/+4
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* tests: added missing files in dist [ci skip]Nikos Mavrogiannopoulos2017-08-181-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* gnutls-http-serv: use RSA-PSS keyNikos Mavrogiannopoulos2017-08-151-2/+3
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* updated auto-generated filesNikos Mavrogiannopoulos2017-08-152-0/+3
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc: algorithms.texi: include list of groups but skip compression methodsNikos Mavrogiannopoulos2017-08-151-16/+3
| | | | | | | Compression methods are no longer relevant or supported, and groups replace the elliptic curves. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc: improved elliptic curve and group documentationNikos Mavrogiannopoulos2017-08-151-3/+6
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc: mention the AES-DRBG random generator [ci skip]Nikos Mavrogiannopoulos2017-08-141-1/+18
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* extensions: simplified requirements from send callbackNikos Mavrogiannopoulos2017-08-111-1/+7
| | | | | | | The callback no longer needs to return the number of sent data; they are now calculated by the caller. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: verify whether the RSA-PSS key is preferred on RSA-PSS sigsNikos Mavrogiannopoulos2017-08-083-25/+158
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* Added information on OID registryNikos Mavrogiannopoulos2017-08-071-0/+22
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* updated auto-generated filestmp-various-cleanupsNikos Mavrogiannopoulos2017-08-042-0/+6
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* updated auto-generated filestmp-rsa-pss-detectionNikos Mavrogiannopoulos2017-08-042-0/+3
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
View Lorry Controller Status