summaryrefslogtreecommitdiff
path: root/lib/auth
Commit message (Expand)AuthorAgeFilesLines
* Constant time/cache PKCS#1 RSA decryptiontmp-fix-CVE-2018-16868Simo Sorce2018-11-301-55/+54
* Renamed _gnutls_server_select_cert() to _gnutls_select_server_cert() for cons...Tom Vrancken2018-10-182-3/+3
* Renamed _gnutls_auth_info_set() to _gnutls_auth_info_init().Tom Vrancken2018-10-189-18/+18
* Renamed _gnutls_proc_x509_server_crt to _gnutls_proc_x509_crt.Tom Vrancken2018-10-181-2/+2
* Small fixes for comments and log strings.Tom Vrancken2018-10-181-11/+11
* _gnutls_server_select_cert: return error when no server cert is selectedtmp-auto-reauthNikos Mavrogiannopoulos2018-10-161-3/+4
* Implemented RFC7250 certificate type negotiation extensions.Tom Vrancken2018-08-203-34/+85
* cert auth: simplify certificate selection codeDmitry Eremin-Solenikov2018-07-231-55/+25
* Renamed extension supported ECC to supported groups. Fixes #451.Tom Vrancken2018-05-292-2/+2
* gnutls_certificate_set_retrieve_function3: updated documentationtmp-pkcs11-pcertNikos Mavrogiannopoulos2018-05-121-1/+1
* psk: save the username on auth info struct under TLS1.3Nikos Mavrogiannopoulos2018-04-061-1/+0
* Simplified the _gnutls13_psk_ext_parser interface and added unit testsNikos Mavrogiannopoulos2018-04-061-2/+1
* Added support for out-of-band Pre-shared keys under TLS1.3Ander Juaristi2018-04-064-44/+40
* cert auth: use a single callback to call for OCSPNikos Mavrogiannopoulos2018-02-191-17/+23
* ocsp: enhanced the OCSP response loading APIsNikos Mavrogiannopoulos2018-02-192-10/+11
* gnutls_certificate_set_ocsp_status_request_file: match input response to cert...Nikos Mavrogiannopoulos2018-02-192-9/+23
* select_sign_algorithm: check KX type only on pre-TLS1.3Nikos Mavrogiannopoulos2018-02-191-1/+1
* rename _gnutls_selected_certs_set -> selected_certs_setNikos Mavrogiannopoulos2018-02-191-33/+33
* ocsp: send all the OCSP responses under TLS1.3Nikos Mavrogiannopoulos2018-02-191-1/+1
* introduced gnutls_certificate_retrieve_function3Nikos Mavrogiannopoulos2018-02-192-218/+41
* ext/status_request: allow more than a single OCSP response to be receivedNikos Mavrogiannopoulos2018-02-191-4/+9
* _gnutls_copy_certificate_auth_info: simplified and avoid multiple allocationsNikos Mavrogiannopoulos2018-02-192-31/+15
* session state: organized key exchange keys into structuresNikos Mavrogiannopoulos2018-02-193-87/+87
* handshake: ffdhe flags merged with handshake flagsNikos Mavrogiannopoulos2018-02-191-5/+3
* handshake: use hsk_flags in TLS1.2 and TLS1.3Nikos Mavrogiannopoulos2018-02-191-1/+1
* removed legacy/unused rsa-related structures/functionsNikos Mavrogiannopoulos2018-02-192-15/+0
* handshake: handle the certificate authorities extensionNikos Mavrogiannopoulos2018-02-192-9/+9
* handshake: added support for client certificatesNikos Mavrogiannopoulos2018-02-192-12/+12
* extensions: renamed _gnutls_hello_ext_*sdata to _gnutls_hello_ext_*privNikos Mavrogiannopoulos2018-02-191-3/+3
* kx: moved to new buffer APINikos Mavrogiannopoulos2018-02-199-20/+47
* cs: select certificate under TLS1.3Nikos Mavrogiannopoulos2018-02-191-1/+2
* handshake: added basic support for TLS 1.3 handshake in client sideNikos Mavrogiannopoulos2018-02-192-6/+7
* extensions: renamed hello extension handling functions appropriatelyNikos Mavrogiannopoulos2018-02-191-3/+3
* ext/signature: added TLS 1.3 signature algorithm negotiationNikos Mavrogiannopoulos2018-02-192-15/+13
* srp: added the 8192-bit primeNikos Mavrogiannopoulos2017-11-211-15/+168
* srp: reject any parameters not in the SRP draftNikos Mavrogiannopoulos2017-11-211-113/+2
* ecdh: return more appropriate error code on empty packetNikos Mavrogiannopoulos2017-09-191-0/+5
* gnutls_session_get_flags: introduced GNUTLS_SFLAGS_RFC7919Nikos Mavrogiannopoulos2017-08-181-5/+6
* _gnutls_proc_srp_client_kx: use same type in subtracted valuesNikos Mavrogiannopoulos2017-08-161-1/+1
* rsa-psk: corrected memory leak on invalid decryptNikos Mavrogiannopoulos2017-08-091-0/+4
* cert selection: prioritize RSA-PSS certs over RSANikos Mavrogiannopoulos2017-08-082-3/+14
* gnutls_certificate_credentials_t: combine privkey into cert_st structureNikos Mavrogiannopoulos2017-08-082-16/+8
* gnutls_pk_params_st: separate flags/qbits and curveNikos Mavrogiannopoulos2017-08-082-3/+3
* prior to negotiating a signature check compatibility with private keyNikos Mavrogiannopoulos2017-08-041-4/+14
* handshake: select a signature algorithm earlyNikos Mavrogiannopoulos2017-08-041-2/+54
* cleanup: removed duplicate parameter in gnutls_pubkey_stNikos Mavrogiannopoulos2017-08-031-5/+5
* security_parameters: ease access to group information by keeping pointer to itNikos Mavrogiannopoulos2017-08-024-25/+29
* security_parameters: simplified contents by keeping pointer to cipher_suite_e...Nikos Mavrogiannopoulos2017-08-022-5/+2
* TLS: introduced support for RFC7919 groupsNikos Mavrogiannopoulos2017-08-0111-218/+118
* Renamed GNUTLS_PK_ECDHX to GNUTLS_PK_ECDH_X25519Nikos Mavrogiannopoulos2017-07-171-4/+4