summaryrefslogtreecommitdiff
path: root/lib/ext
Commit message (Expand)AuthorAgeFilesLines
* handshake: do not negotiate TLS1.3 using the legacy version fieldtmp-update-version-numbersNikos Mavrogiannopoulos2018-08-201-1/+1
* handshake: simplified protocol version checking functionsNikos Mavrogiannopoulos2018-08-201-9/+3
* Implemented RFC7250 certificate type negotiation extensions.Tom Vrancken2018-08-206-1/+845
* ext/record_size_limit: new extensionDaiki Ueno2018-08-204-25/+169
* ext/max_record: remove use of extension private dataDaiki Ueno2018-08-201-67/+11
* gnutls_session_resumption_requested: fixed behavior under TLS1.3Nikos Mavrogiannopoulos2018-08-201-0/+2
* Fix two typos (overriden/guarranteed)Andreas Metzler2018-08-161-1/+1
* use a consistent method to mark fall-through in switch casesNikos Mavrogiannopoulos2018-08-081-2/+2
* ext/pre_shared_key: prevent crash if no server credentials are setDaiki Ueno2018-08-081-1/+2
* resume: keep persistent session identifiersNikos Mavrogiannopoulos2018-08-071-0/+14
* TLS 1.3: ignore "early_data" extensionDaiki Ueno2018-08-063-1/+134
* ext/key_share: check the validity of server key sharesNikos Mavrogiannopoulos2018-07-271-0/+10
* doc: minor text updatesNikos Mavrogiannopoulos2018-07-131-1/+2
* pre_shared_key: do not send extension when no identities are presentNikos Mavrogiannopoulos2018-07-111-0/+7
* pre_shared_key: use time_t type for ticket_age variableNikos Mavrogiannopoulos2018-07-111-3/+2
* supported_versions: do not parse in server side when TLS1.3 is disabledNikos Mavrogiannopoulos2018-07-071-1/+9
* _gnutls_parse_hello_extensions: enforce that pre-shared-key extension is lastNikos Mavrogiannopoulos2018-06-222-1/+3
* tls13/session_ticket: don't send ticket when no common KE modesDaiki Ueno2018-06-051-1/+1
* ext/psk_ke_modes: always send extension unless disabled in configDaiki Ueno2018-06-051-21/+4
* ext/pre_shared_key: make PSK identity parsing robustertmp-session-ticket-key-nameDaiki Ueno2018-06-011-36/+21
* _gnutls_decrypt_session_ticket: fail early on key name mismatchDaiki Ueno2018-06-011-9/+7
* Renamed extension supported ECC to supported groups. Fixes #451.Tom Vrancken2018-05-296-126/+182
* session_ticket: use random noncesNikos Mavrogiannopoulos2018-05-261-4/+1
* handshake: store session parameters in TLS1.3 ticketNikos Mavrogiannopoulos2018-05-261-3/+7
* TLS 1.3: Introduced TLS 1.3 session resumptionAnder Juaristi2018-05-264-134/+391
* psk_ke_modes: introduce psk_ke_modes_is_required() and update docNikos Mavrogiannopoulos2018-05-261-6/+22
* session tickets: expose {encrypt,decrypt}_ticket as internal APIAnder Juaristi2018-05-262-246/+260
* ext/pre_shared_key: fix binder calculation when HRR is sentDaiki Ueno2018-05-261-13/+41
* handshake: do not send TLS extensions under DTLS and vice versatmp-prohibit-tls-dtls-mixNikos Mavrogiannopoulos2018-05-1720-40/+37
* post_handshake_auth: send extension irrespective of certificates being presentNikos Mavrogiannopoulos2018-05-041-1/+1
* psk: compute binder which is compatible with draft-ietf-tls-tls13Nikos Mavrogiannopoulos2018-05-042-15/+21
* psk: mark psk_ke_modes as invalid when ignoredNikos Mavrogiannopoulos2018-04-301-4/+11
* ANON,SRP,NULL ciphersuites: when set do not negotiate TLS1.3 or laterNikos Mavrogiannopoulos2018-04-133-5/+26
* ext/pre_shared_key: cleanups in error handlingNikos Mavrogiannopoulos2018-04-071-16/+38
* ext/psk_ke_modes: corrected data accessNikos Mavrogiannopoulos2018-04-071-1/+2
* psk: save the username on auth info struct under TLS1.3Nikos Mavrogiannopoulos2018-04-061-0/+18
* dumbfw: account for extension data paddingNikos Mavrogiannopoulos2018-04-061-3/+5
* Simplified the _gnutls13_psk_ext_parser interface and added unit testsNikos Mavrogiannopoulos2018-04-061-19/+9
* Added support for out-of-band Pre-shared keys under TLS1.3Ander Juaristi2018-04-066-3/+695
* _gnutls_supported_ecc_recv_params: take into account precedenceNikos Mavrogiannopoulos2018-03-232-55/+90
* supported_versions: cannot be used to negotiate pre-TLS1.3Nikos Mavrogiannopoulos2018-03-231-0/+3
* Hello retry request matches server helloNikos Mavrogiannopoulos2018-03-092-2/+3
* signatures: distinguish RSA-PSS signatures with RSA PKCS#1 1.5 certificates f...Nikos Mavrogiannopoulos2018-03-091-8/+15
* Server hello format follows TLS1.2 formatNikos Mavrogiannopoulos2018-03-081-6/+57
* Renumbered the key share extension to 51Nikos Mavrogiannopoulos2018-03-081-1/+1
* cert auth: use a single callback to call for OCSPNikos Mavrogiannopoulos2018-02-191-3/+0
* ocsp: enhanced the OCSP response loading APIsNikos Mavrogiannopoulos2018-02-191-1/+18
* ocsp: moved non-extension related functions to ocsp-api.cNikos Mavrogiannopoulos2018-02-191-249/+0
* gnutls_ocsp_status_request_get2: allow operation under TLS1.3 for server sideNikos Mavrogiannopoulos2018-02-191-2/+3
* introduced gnutls_certificate_retrieve_function3Nikos Mavrogiannopoulos2018-02-191-1/+1