summaryrefslogtreecommitdiff
path: root/lib/auth/cert.c
Commit message (Expand)AuthorAgeFilesLines
* select_sign_algorithm: check KX type only on pre-TLS1.3Nikos Mavrogiannopoulos2017-11-201-1/+1
* cert auth: use a single callback to call for OCSPNikos Mavrogiannopoulos2017-11-201-8/+30
* _gnutls_selected_certs_set -> selected_certs_setNikos Mavrogiannopoulos2017-11-201-30/+30
* ocsp: call the new response callback under TLS1.3Nikos Mavrogiannopoulos2017-11-201-1/+2
* ocsp: introduced a new OCSP response callbackNikos Mavrogiannopoulos2017-11-201-2/+2
* _gnutls_copy_certificate_auth_info: simplified and avoid multiple allocationsNikos Mavrogiannopoulos2017-11-201-30/+14
* removed legacy/unused rsa-related structures/functionsNikos Mavrogiannopoulos2017-11-191-8/+0
* handshake: handle the certificate authorities extensionNikos Mavrogiannopoulos2017-11-161-8/+8
* handshake: added support for client certificatesNikos Mavrogiannopoulos2017-11-161-12/+7
* kx: moved to new buffer APINikos Mavrogiannopoulos2017-11-141-3/+6
* cs: select certificate under TLS1.3Nikos Mavrogiannopoulos2017-11-141-1/+2
* handshake: added basic support for TLS 1.3 handshake in client sideNikos Mavrogiannopoulos2017-11-141-6/+5
* ext/signature: added TLS 1.3 signature algorithm negotiationNikos Mavrogiannopoulos2017-11-141-10/+7
* cert selection: prioritize RSA-PSS certs over RSANikos Mavrogiannopoulos2017-08-081-3/+7
* gnutls_certificate_credentials_t: combine privkey into cert_st structureNikos Mavrogiannopoulos2017-08-081-4/+4
* prior to negotiating a signature check compatibility with private keyNikos Mavrogiannopoulos2017-08-041-4/+14
* handshake: select a signature algorithm earlyNikos Mavrogiannopoulos2017-08-041-2/+54
* cleanup: removed duplicate parameter in gnutls_pubkey_stNikos Mavrogiannopoulos2017-08-031-5/+5
* security_parameters: simplified contents by keeping pointer to cipher_suite_e...Nikos Mavrogiannopoulos2017-08-021-2/+1
* Print the requested CA names when in debug modeNikos Mavrogiannopoulos2017-07-111-3/+9
* priorities: share priority structures across sessionsNikos Mavrogiannopoulos2017-07-101-1/+1
* Renamed fields of sign_algorithm_stNikos Mavrogiannopoulos2017-07-101-10/+9
* handshake: simplified signature algorithm list generationNikos Mavrogiannopoulos2017-07-101-8/+1
* handshake: simplified the server-side ciphersuite negotiationNikos Mavrogiannopoulos2017-07-101-64/+88
* Removed support for openpgp certificates and keysNikos Mavrogiannopoulos2017-06-161-534/+7
* tls-sig: re-organize and simplify the TLS signature generation and verificationNikos Mavrogiannopoulos2017-05-311-2/+24
* Rework KX -> PK mappingsDmitry Eremin-Solenikov2017-05-291-7/+2
* cert: ensure that there are no leftovers in certificate msgNikos Mavrogiannopoulos2017-03-281-1/+6
* handshake: reset cert request state on handshake initNikos Mavrogiannopoulos2017-03-211-1/+1
* _gnutls_proc_x509_server_crt: return GNUTLS_E_CERTIFICATE_ERROR on parsing errorNikos Mavrogiannopoulos2017-03-071-0/+1
* Removed redundant certificate key usage checks.Nikos Mavrogiannopoulos2016-12-011-14/+0
* Added gnutls_certificate_set_ocsp_status_request_function2Nikos Mavrogiannopoulos2016-09-121-10/+30
* several spacing fixes to keep syntax-check happyNikos Mavrogiannopoulos2016-09-111-1/+1
* lib: eliminated the use of deprecated variablesNikos Mavrogiannopoulos2016-06-061-2/+2
* doc updateNikos Mavrogiannopoulos2016-05-171-1/+1
* call_get_cert_callback: removed dead codeNikos Mavrogiannopoulos2016-05-101-5/+0
* auth/cert: log the server name requested by clientNikos Mavrogiannopoulos2016-05-101-1/+3
* instead of assigning a variable per flag use the init flags directlyNikos Mavrogiannopoulos2016-04-281-1/+1
* added flag in session to force sending a client certificateNikos Mavrogiannopoulos2016-04-281-5/+7
* Removed the 'gnutls_' prefix from files to simplify file namingNikos Mavrogiannopoulos2015-08-231-14/+14
* set the value used by gnutls_certificate_client_get_request_status prior to s...Nikos Mavrogiannopoulos2015-04-251-5/+5
* removed the old gnutls_retr_st compatibility functionsNikos Mavrogiannopoulos2014-12-031-54/+4
* removed legacy code.Nikos Mavrogiannopoulos2014-05-101-9/+8
* Ensure that there is no remainders in the TLS handshake packets.Nikos Mavrogiannopoulos2014-05-051-7/+11
* Made _gnutls_get_auth_info() safer to use.Nikos Mavrogiannopoulos2014-04-181-4/+4
* several bug fixes due to coverity.Nikos Mavrogiannopoulos2014-04-151-4/+5
* Only check PK compatibility in client side but also when using openpgp certs.Nikos Mavrogiannopoulos2014-03-111-0/+9
* shortend static function names.Nikos Mavrogiannopoulos2014-03-111-190/+121
* verify that the algorithm of the received certificate matches the expected.Nikos Mavrogiannopoulos2014-03-111-1/+33
* clang warning fixesNikos Mavrogiannopoulos2014-03-081-1/+1