summaryrefslogtreecommitdiff
path: root/lib/x509
Commit message (Expand)AuthorAgeFilesLines
* Exported gnutls_idna_map() and gnutls_idna_reverse_map()Nikos Mavrogiannopoulos2017-01-261-1/+1
* pkcs7 decryption: addressed memory leak in PBES1-DES-CBC-MD5 handlingtmp-better-abi-checkNikos Mavrogiannopoulos2017-01-251-0/+3
* _decode_pkcs8_dsa_key: ensure that the P value is non-zeroNikos Mavrogiannopoulos2017-01-191-0/+6
* _gnutls_decrypt_pbes1_des_md5_data: ensure that encrypted data size is a mult...Nikos Mavrogiannopoulos2017-01-191-0/+4
* x509: eliminated memory leak on gnutls_x509_ext_import_aiaNikos Mavrogiannopoulos2017-01-191-4/+10
* _decode_pkcs8_dsa_key: fixed memory leak on error pathNikos Mavrogiannopoulos2017-01-041-5/+7
* decode_private_key_info: eliminate memory leaks on error pathNikos Mavrogiannopoulos2017-01-041-3/+5
* _gnutls_x509_read_dsa_params: update params structure parameters size on succ...Nikos Mavrogiannopoulos2017-01-042-22/+29
* _gnutls_pkcs12_string_to_key: avoid division by zero when salt_size = 0Nikos Mavrogiannopoulos2017-01-041-3/+9
* gnutls_x509_ext_import_policies: fixed memory leak on error pathtmp-client-test-suiteNikos Mavrogiannopoulos2017-01-031-3/+4
* x509 output: fixed memory leak in AIA extension printingNikos Mavrogiannopoulos2017-01-031-2/+1
* _gnutls_x509_get_signature: fix memory leak on error pathNikos Mavrogiannopoulos2017-01-021-1/+2
* gnutls_pkcs8_info: addressed memory leak on error pathNikos Mavrogiannopoulos2017-01-021-3/+5
* x509: address leak in print_altname - cert printingNikos Mavrogiannopoulos2017-01-021-1/+3
* pkcs7 decrypt: require a valid IV size on all ciphersNikos Mavrogiannopoulos2017-01-021-4/+13
* pkcs8: pkcs8_key_info() will correctly detect non-encrypted filesNikos Mavrogiannopoulos2017-01-021-2/+32
* pkcs11 verification: ensure that an issuer we retrieve is not blacklisttmp-fix-pkcs11-verificationNikos Mavrogiannopoulos2016-12-311-0/+11
* verify: print certificate on sec param failureNikos Mavrogiannopoulos2016-12-191-8/+11
* x509: corrected leak in certificate printingNikos Mavrogiannopoulos2016-12-161-0/+1
* gnutls_x509_ext_import_proxy: fix issue reading the policy languageNikos Mavrogiannopoulos2016-12-161-11/+11
* doc updateNikos Mavrogiannopoulos2016-12-161-1/+1
* _gnutls_pkcs_raw_decrypt_data: merge all errors during decryption to GNUTLS_E...Nikos Mavrogiannopoulos2016-12-141-3/+4
* pkcs8: ensure that the correct error code is returned on decryption failureNikos Mavrogiannopoulos2016-12-131-0/+1
* x509: better documented gnutls_trust_list_flags_tNikos Mavrogiannopoulos2016-12-092-6/+8
* gnutls_x509_crt_check_email type changed to unsignedNikos Mavrogiannopoulos2016-12-081-1/+1
* x509: do not attempt to ACE encode values stored in certificatesNikos Mavrogiannopoulos2016-12-082-36/+12
* gnutls_x509_privkey_cpy: use _gnutls_pk_params_copyNikos Mavrogiannopoulos2016-12-071-11/+6
* x509 crl: document the nextUpdate field limitationNikos Mavrogiannopoulos2016-12-071-0/+5
* x509 crl: Allow generation of CRLs not to specify a nextUpdateNikos Mavrogiannopoulos2016-12-071-0/+6
* x509: fixed output of pubkeyNikos Mavrogiannopoulos2016-12-021-1/+1
* doc: document the fact that certificates and CRLs are unusable after generationNikos Mavrogiannopoulos2016-12-012-0/+18
* doc: no longer list SHA1 as a safe choice in X.509 signingNikos Mavrogiannopoulos2016-12-012-4/+4
* gnutls_x509_crl_verify: always return zero on successNikos Mavrogiannopoulos2016-12-011-1/+6
* privkey: set the key parameters algorithm prior to returning successNikos Mavrogiannopoulos2016-11-301-4/+3
* When decoding a public key ensure that algorithm is written in the params structNikos Mavrogiannopoulos2016-11-301-3/+9
* x509: when printing ACE DNSnames ensure the actual name is also printedNikos Mavrogiannopoulos2016-11-251-7/+17
* Combined checks for printable characterstmp-idna-writeNikos Mavrogiannopoulos2016-11-252-20/+6
* gnutls_x509_aia_set: IDNA encode when neededNikos Mavrogiannopoulos2016-11-253-31/+47
* When writing alternative names to certificates ensure we write in ACE formatNikos Mavrogiannopoulos2016-11-257-16/+71
* pkcs7: return GNUTLS_E_PK_SIG_VERIFY_FAILED on hash mismatchNikos Mavrogiannopoulos2016-11-251-1/+5
* pkcs7: only print signer's issuer DN when DN has contentsNikos Mavrogiannopoulos2016-11-251-1/+2
* pkcs7: added recursive discovery of structure's signerNikos Mavrogiannopoulos2016-11-251-94/+282
* pkcs7: on data verification failure log the signerNikos Mavrogiannopoulos2016-11-251-0/+1
* doc: updated gnutls_x509_trust_list_verify_crt2()Nikos Mavrogiannopoulos2016-11-251-10/+13
* pkcs7: pass the verification flags down to gnutls_x509_trust_list_verify_crt2...Nikos Mavrogiannopoulos2016-11-251-2/+3
* pkcs7: corrected iteration over stored certificatesNikos Mavrogiannopoulos2016-11-251-1/+1
* pkcs7: added debug logging on verification discoveryNikos Mavrogiannopoulos2016-11-251-0/+3
* avoid the use of c_isascii() and use c_isprint()Nikos Mavrogiannopoulos2016-11-232-2/+2
* IDNA code re-organizationNikos Mavrogiannopoulos2016-11-236-91/+49
* Align the printing of a certificate's fingerprint with the key ID printingNikos Mavrogiannopoulos2016-11-221-12/+21