summaryrefslogtreecommitdiff
path: root/lib/x509
Commit message (Expand)AuthorAgeFilesLines
* gnutls_x509_crl_sign: undeprecateNikos Mavrogiannopoulos2017-09-081-2/+0
* gnutls_x509_crq_sign: no longer sign with SHA1Nikos Mavrogiannopoulos2017-09-081-1/+28
* gnutls_x509_*_sign: no longer sign with SHA1Nikos Mavrogiannopoulos2017-09-083-7/+35
* sed: use it in a portable way in makefilesNikos Mavrogiannopoulos2017-08-201-1/+3
* gnutls_x509_privkey_export: use _gnutls_copy_string on PEM datatmp-check-for-rfc7919Nikos Mavrogiannopoulos2017-08-181-1/+4
* gnutls_x509_crl_get_issuer_dn: removed unnecessary constNikos Mavrogiannopoulos2017-08-181-1/+1
* fuzzer: added a fuzzer targetNikos Mavrogiannopoulos2017-08-161-1/+6
* gnutls_x509_privkey_export: made a wrapper over gnutls_x509_privkey_export2()Nikos Mavrogiannopoulos2017-08-151-30/+18
* reduce common asserts to assist in debugging the libraryNikos Mavrogiannopoulos2017-08-154-4/+0
* gnutls_x509_privkey_import_pkcs8: fixed memory leak on incorrect key importNikos Mavrogiannopoulos2017-08-091-2/+2
* Fix memleaks in gnutls_x509_trust_list_add_crls()Tim Rühsen2017-08-081-5/+14
* Fix memleak in gnutls_x509_crl_list_import()Tim Rühsen2017-08-081-0/+1
* gnutls_pk_params_st: separate flags/qbits and curveNikos Mavrogiannopoulos2017-08-087-18/+18
* gnutls_x509_privkey_verify_seed: improved error on missing validation parametersNikos Mavrogiannopoulos2017-08-071-2/+2
* x509: no longer emit the previous custom format for provable parametersNikos Mavrogiannopoulos2017-08-074-96/+19
* x509: store and read provable seed in PKCS#8 form of keyNikos Mavrogiannopoulos2017-08-076-10/+201
* x509: separated PKIX1 attributes parsing code for cert request handlingNikos Mavrogiannopoulos2017-08-074-266/+335
* _gnutls_fbase64_decode will always return non-zerotmp-base64-reject-zero-lengthNikos Mavrogiannopoulos2017-08-072-2/+2
* _decode_pkcs8_rsa_key: signal error in RSA privkey decodingNikos Mavrogiannopoulos2017-08-061-0/+1
* gnutls_x509_privkey_import: allow importing ed25519 PKCS#8 keys in DER formNikos Mavrogiannopoulos2017-08-041-6/+10
* sign/digest: separate "brokenness" of signatures and hash algorithmsNikos Mavrogiannopoulos2017-08-042-8/+11
* x509_privkey: handle keys which can only have PKCS#8 form transparentlyNikos Mavrogiannopoulos2017-08-041-9/+26
* x509/output: print error on invalid public key parameters on certificateNikos Mavrogiannopoulos2017-08-042-18/+36
* spki: combined all exported functions to a single set and getNikos Mavrogiannopoulos2017-08-041-91/+29
* introduced error code GNUTLS_E_PK_INVALID_PUBKEY_PARAMSNikos Mavrogiannopoulos2017-08-041-2/+2
* gnutls_x509_privkey_generate*: allow specifying the SPKI parameters for key g...Nikos Mavrogiannopoulos2017-08-041-12/+20
* gnutls_x509_privkey_set_spki: check validity of parameters setNikos Mavrogiannopoulos2017-08-041-0/+9
* gnutls_x509_cr*_set_spki: check for validity of parameters setNikos Mavrogiannopoulos2017-08-042-54/+90
* _gnutls_x509_check_pubkey_params: removed unnecessary parameterNikos Mavrogiannopoulos2017-08-043-6/+4
* gnutls_x509_privkey_import: immediately exit on GNUTLS_E_PK_INVALID_PRIVKEYNikos Mavrogiannopoulos2017-08-041-0/+3
* gnutls_x509_*_set_spki: removed arbitrary restrictions to setting parametersNikos Mavrogiannopoulos2017-08-042-21/+1
* _gnutls_x509_read_pkalgo_params: initialize params structureNikos Mavrogiannopoulos2017-08-041-2/+4
* RSA-PSS parameter checking was moved to lower level functionsNikos Mavrogiannopoulos2017-08-042-2/+2
* signature security level check were moved to lower level functionsNikos Mavrogiannopoulos2017-08-042-7/+9
* verify_crt: translate GNUTLS_E_CONSTRAINT_ERROR to verification status flagNikos Mavrogiannopoulos2017-08-041-0/+6
* x509/sign: in debugging mode print the signature algorithmNikos Mavrogiannopoulos2017-08-041-0/+2
* _gnutls_x509_validate_sign_params: use GNUTLS_E_CONSTRAINT_ERROR for mismatch...Nikos Mavrogiannopoulos2017-08-041-2/+2
* _gnutls_x509_read_rsa_pss_params: fail early on unknown hash algorithmsNikos Mavrogiannopoulos2017-08-041-4/+12
* x509/output: Subject Public Key parameters are printed just before actual keyNikos Mavrogiannopoulos2017-08-041-65/+28
* gnutls_x509_crt_set_spki: be more verbose in parameter restrictionsNikos Mavrogiannopoulos2017-08-041-4/+14
* _gnutls_x509_write_rsa_pss_params: refuse to write RSA-PSS parameters we cann...Nikos Mavrogiannopoulos2017-08-041-0/+4
* gnutls_x509_*_get_signature_algorithm: simplified error handlingNikos Mavrogiannopoulos2017-08-034-18/+22
* _gnutls_x509_get_signature_algorithm: return negative error code on unknown a...Nikos Mavrogiannopoulos2017-08-031-3/+6
* compare_sig_algorithm: modify to work even for certs with unsupported signatu...Nikos Mavrogiannopoulos2017-08-031-9/+16
* pubkey_verify_data: accept signature entry instead of PK and hashNikos Mavrogiannopoulos2017-08-032-13/+9
* Added convention for missing SubjectPublicKeyInfo params fieldNikos Mavrogiannopoulos2017-08-039-34/+60
* *set_spki(): return error on incompatible algorithmsNikos Mavrogiannopoulos2017-08-033-0/+11
* gnutls_x509_privkey_generate2: do not hardcode the RSA-PSS hash to SHA256Nikos Mavrogiannopoulos2017-08-031-1/+1
* _decode_pkcs8_rsa_pss_key: ensure we set the PSS PK identifierNikos Mavrogiannopoulos2017-08-031-1/+1
* gnutls_x509_privkey_int: eliminated duplicate pk_algorithm fieldNikos Mavrogiannopoulos2017-08-035-51/+44