summaryrefslogtreecommitdiff
path: root/lib/x509
Commit message (Expand)AuthorAgeFilesLines
* gnutls_x509_crt_check_hostname2: no match dns fields against IPsNikos Mavrogiannopoulos2017-04-301-9/+11
* doc: fixed documentation for various function parameters [ci skip]Nikos Mavrogiannopoulos2017-04-072-6/+5
* x509/output: do not print usage entry when there is noneNikos Mavrogiannopoulos2017-04-071-2/+4
* is_level_acceptable: ensure issuer is not dereferenced when nullNikos Mavrogiannopoulos2017-04-051-4/+6
* Avoid using ASN1_MAX_NAME_SIZE directlyNikos Mavrogiannopoulos2017-04-0511-52/+53
* gnutls_x509_crq_set_challenge_password: don't accept null passwordNikos Mavrogiannopoulos2017-04-051-1/+1
* Mark with (void) the functions where the returned value is not checked intent...Nikos Mavrogiannopoulos2017-04-056-22/+32
* gnutls_pkcs8_info: do not free oid on GNUTLS_E_UNKNOWN_CIPHER_TYPENikos Mavrogiannopoulos2017-03-311-1/+5
* Use a common function to decide acceptable signaturesNikos Mavrogiannopoulos2017-03-222-3/+4
* x509/output: Cleanup in IDNA name printingNikos Mavrogiannopoulos2017-02-281-34/+34
* gnutls_ocsp_resp_verify_direct, gnutls_ocsp_resp_verify: defined flags argumentNikos Mavrogiannopoulos2017-02-241-5/+5
* is_level_acceptable: no longer checks for broken algorithmsNikos Mavrogiannopoulos2017-02-241-1/+1
* verify: is_broken_allowed: account for "new" flag GNUTLS_VERIFY_ALLOW_BROKENNikos Mavrogiannopoulos2017-02-241-0/+4
* x509/output: print key PIN on oneline outputNikos Mavrogiannopoulos2017-02-231-4/+4
* x509/output: print the public key PIN of a certificateNikos Mavrogiannopoulos2017-02-231-0/+4
* pkcs7: corrected error checking in write_signer_idNikos Mavrogiannopoulos2017-02-211-6/+3
* make_printable_string: allow operation with null inputNikos Mavrogiannopoulos2017-02-211-0/+11
* x509: optimize subject alternative name accessNikos Mavrogiannopoulos2017-02-152-47/+95
* Exported gnutls_idna_map() and gnutls_idna_reverse_map()Nikos Mavrogiannopoulos2017-01-261-1/+1
* pkcs7 decryption: addressed memory leak in PBES1-DES-CBC-MD5 handlingNikos Mavrogiannopoulos2017-01-251-0/+3
* _gnutls_pkcs12_string_to_key: avoid division by zero when salt_size = 0Nikos Mavrogiannopoulos2017-01-051-3/+9
* gnutls_x509_ext_import_policies: fixed memory leak on error pathNikos Mavrogiannopoulos2017-01-051-3/+4
* x509 output: fixed memory leak in AIA extension printingNikos Mavrogiannopoulos2017-01-051-2/+1
* _gnutls_x509_get_signature: fix memory leak on error pathNikos Mavrogiannopoulos2017-01-051-1/+2
* x509: address leak in print_altname - cert printingNikos Mavrogiannopoulos2017-01-051-1/+3
* gnutls_pkcs8_info: addressed memory leak on error pathNikos Mavrogiannopoulos2017-01-021-3/+5
* pkcs7 decrypt: require a valid IV size on all ciphersNikos Mavrogiannopoulos2017-01-021-4/+13
* pkcs8: pkcs8_key_info() will correctly detect non-encrypted filesNikos Mavrogiannopoulos2017-01-021-2/+32
* Merge branch 'tmp-priority-fix' into 'master' Nikos Mavrogiannopoulos2016-12-191-8/+11
* Merge branch 'tmp-x509-print-fix' into 'master' Nikos Mavrogiannopoulos2016-12-172-12/+13
* _gnutls_pkcs_raw_decrypt_data: merge all errors during decryption to GNUTLS_E...Nikos Mavrogiannopoulos2016-12-141-3/+4
* pkcs8: ensure that the correct error code is returned on decryption failureNikos Mavrogiannopoulos2016-12-131-0/+1
* x509: better documented gnutls_trust_list_flags_tNikos Mavrogiannopoulos2016-12-092-6/+8
* gnutls_x509_crt_check_email type changed to unsignedNikos Mavrogiannopoulos2016-12-081-1/+1
* x509: do not attempt to ACE encode values stored in certificatesNikos Mavrogiannopoulos2016-12-082-36/+12
* gnutls_x509_privkey_cpy: use _gnutls_pk_params_copyNikos Mavrogiannopoulos2016-12-071-11/+6
* x509 crl: document the nextUpdate field limitationNikos Mavrogiannopoulos2016-12-071-0/+5
* x509 crl: Allow generation of CRLs not to specify a nextUpdateNikos Mavrogiannopoulos2016-12-071-0/+6
* x509: fixed output of pubkeyNikos Mavrogiannopoulos2016-12-021-1/+1
* doc: document the fact that certificates and CRLs are unusable after generationNikos Mavrogiannopoulos2016-12-012-0/+18
* doc: no longer list SHA1 as a safe choice in X.509 signingNikos Mavrogiannopoulos2016-12-012-4/+4
* gnutls_x509_crl_verify: always return zero on successNikos Mavrogiannopoulos2016-12-011-1/+6
* privkey: set the key parameters algorithm prior to returning successNikos Mavrogiannopoulos2016-11-301-4/+3
* When decoding a public key ensure that algorithm is written in the params structNikos Mavrogiannopoulos2016-11-301-3/+9
* x509: when printing ACE DNSnames ensure the actual name is also printedNikos Mavrogiannopoulos2016-11-251-7/+17
* Combined checks for printable characterstmp-idna-writeNikos Mavrogiannopoulos2016-11-252-20/+6
* gnutls_x509_aia_set: IDNA encode when neededNikos Mavrogiannopoulos2016-11-253-31/+47
* When writing alternative names to certificates ensure we write in ACE formatNikos Mavrogiannopoulos2016-11-257-16/+71
* pkcs7: return GNUTLS_E_PK_SIG_VERIFY_FAILED on hash mismatchNikos Mavrogiannopoulos2016-11-251-1/+5
* pkcs7: only print signer's issuer DN when DN has contentsNikos Mavrogiannopoulos2016-11-251-1/+2