summaryrefslogtreecommitdiff
path: root/lib/auth
Commit message (Expand)AuthorAgeFilesLines
* Add support for VKO GOST key exchangeDmitry Eremin-Solenikov2019-11-082-1/+324
* lib/auth/srp_passwd.c: Fix NULL dereference in _gnutls_srp_pwd_read_entry()Tim Rühsen2019-10-131-2/+4
* Remove malloc from gnutls_srp_set_server_fake_salt_seed()tmp-datum-cleanupNikos Mavrogiannopoulos2019-05-282-3/+7
* Pass down Q for FFDHE in al pre TLS1.3 as wellSimo Sorce2019-05-231-2/+16
* server auth: disable TLS 1.3 if no signature algorithm is usableDaiki Ueno2019-05-201-0/+4
* _gnutls_srp_entry_free: follow consistent behavior in freeing datatmp-fix-srpNikos Mavrogiannopoulos2019-05-101-4/+8
* Add or clean header guards in lib/auth/Tim Rühsen2019-05-079-18/+34
* Use https:// for www.gnu.org and www.example.comTim Rühsen2019-03-1324-24/+24
* Merge branch 'tmp-reset-after-free' into 'master'Tim Rühsen2019-02-233-6/+2
|\
| * Remove redundant resets of variables after free()Tim Rühsen2019-02-223-6/+2
* | Cleanup lib/auth/cert.c as suggested by cppchecktmp-cleanup-certTim Rühsen2019-02-131-26/+12
|/
* _gnutls_gen_rawpk_crt: corrected the use of asserttmp-key-usageNikos Mavrogiannopoulos2019-02-061-9/+10
* raw public keys: apply the key usage bits the same way as X.509Nikos Mavrogiannopoulos2019-02-061-6/+14
* Fallback to TLS 1.2 when incompatible with signature certs are providedNikos Mavrogiannopoulos2019-02-061-1/+2
* Enforce the certificate key usage restrictions on all casesNikos Mavrogiannopoulos2019-02-062-6/+33
* Fix typos in lib/tmp-fix-typos-in-libTim Rühsen2019-01-042-4/+4
* Implemented support for raw public-key functionality (RFC7250).Tom Vrancken2018-12-153-66/+261
* Constant time/cache PKCS#1 RSA decryptiontmp-fix-CVE-2018-16868Simo Sorce2018-11-301-55/+54
* Renamed _gnutls_server_select_cert() to _gnutls_select_server_cert() for cons...Tom Vrancken2018-10-182-3/+3
* Renamed _gnutls_auth_info_set() to _gnutls_auth_info_init().Tom Vrancken2018-10-189-18/+18
* Renamed _gnutls_proc_x509_server_crt to _gnutls_proc_x509_crt.Tom Vrancken2018-10-181-2/+2
* Small fixes for comments and log strings.Tom Vrancken2018-10-181-11/+11
* _gnutls_server_select_cert: return error when no server cert is selectedtmp-auto-reauthNikos Mavrogiannopoulos2018-10-161-3/+4
* Implemented RFC7250 certificate type negotiation extensions.Tom Vrancken2018-08-203-34/+85
* cert auth: simplify certificate selection codeDmitry Eremin-Solenikov2018-07-231-55/+25
* Renamed extension supported ECC to supported groups. Fixes #451.Tom Vrancken2018-05-292-2/+2
* gnutls_certificate_set_retrieve_function3: updated documentationtmp-pkcs11-pcertNikos Mavrogiannopoulos2018-05-121-1/+1
* psk: save the username on auth info struct under TLS1.3Nikos Mavrogiannopoulos2018-04-061-1/+0
* Simplified the _gnutls13_psk_ext_parser interface and added unit testsNikos Mavrogiannopoulos2018-04-061-2/+1
* Added support for out-of-band Pre-shared keys under TLS1.3Ander Juaristi2018-04-064-44/+40
* cert auth: use a single callback to call for OCSPNikos Mavrogiannopoulos2018-02-191-17/+23
* ocsp: enhanced the OCSP response loading APIsNikos Mavrogiannopoulos2018-02-192-10/+11
* gnutls_certificate_set_ocsp_status_request_file: match input response to cert...Nikos Mavrogiannopoulos2018-02-192-9/+23
* select_sign_algorithm: check KX type only on pre-TLS1.3Nikos Mavrogiannopoulos2018-02-191-1/+1
* rename _gnutls_selected_certs_set -> selected_certs_setNikos Mavrogiannopoulos2018-02-191-33/+33
* ocsp: send all the OCSP responses under TLS1.3Nikos Mavrogiannopoulos2018-02-191-1/+1
* introduced gnutls_certificate_retrieve_function3Nikos Mavrogiannopoulos2018-02-192-218/+41
* ext/status_request: allow more than a single OCSP response to be receivedNikos Mavrogiannopoulos2018-02-191-4/+9
* _gnutls_copy_certificate_auth_info: simplified and avoid multiple allocationsNikos Mavrogiannopoulos2018-02-192-31/+15
* session state: organized key exchange keys into structuresNikos Mavrogiannopoulos2018-02-193-87/+87
* handshake: ffdhe flags merged with handshake flagsNikos Mavrogiannopoulos2018-02-191-5/+3
* handshake: use hsk_flags in TLS1.2 and TLS1.3Nikos Mavrogiannopoulos2018-02-191-1/+1
* removed legacy/unused rsa-related structures/functionsNikos Mavrogiannopoulos2018-02-192-15/+0
* handshake: handle the certificate authorities extensionNikos Mavrogiannopoulos2018-02-192-9/+9
* handshake: added support for client certificatesNikos Mavrogiannopoulos2018-02-192-12/+12
* extensions: renamed _gnutls_hello_ext_*sdata to _gnutls_hello_ext_*privNikos Mavrogiannopoulos2018-02-191-3/+3
* kx: moved to new buffer APINikos Mavrogiannopoulos2018-02-199-20/+47
* cs: select certificate under TLS1.3Nikos Mavrogiannopoulos2018-02-191-1/+2
* handshake: added basic support for TLS 1.3 handshake in client sideNikos Mavrogiannopoulos2018-02-192-6/+7
* extensions: renamed hello extension handling functions appropriatelyNikos Mavrogiannopoulos2018-02-191-3/+3
View Lorry Controller Status