summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* added gnutls_x509_crq_set_extension_by_oid()Nikos Mavrogiannopoulos2016-07-134-1/+51
* dtls: imported Fridolin's DTLS sliding window implementationNikos Mavrogiannopoulos2016-07-138-176/+122
* dtls: moved DTLS window handling to separate fileNikos Mavrogiannopoulos2016-07-123-124/+160
* libtasn1: updated to allow large OIDs to be used even on 32-bit systemsNikos Mavrogiannopoulos2016-07-125-7/+14
* write_nss_key_log: write the premaster secret while it is still validNikos Mavrogiannopoulos2016-07-071-2/+2
* updated libtasn1Nikos Mavrogiannopoulos2016-07-071-1/+1
* asm: updated openssl and the asm sources for AES-GCM from openssl 1.0.2hNikos Mavrogiannopoulos2016-07-0522-3646/+11056
* pkcs11: on object import always check for a support public key algorithmNikos Mavrogiannopoulos2016-07-041-6/+8
* gnutls_aead_cipher_decrypt: corrected the return value of ptext_lenNikos Mavrogiannopoulos2016-07-012-2/+2
* pkcs11_get_attribute_avalue: correctly handle a -1 value length from C_GetAtt...Nikos Mavrogiannopoulos2016-06-301-0/+6
* pkcs11_get_attribute_avalue: do not assign values on failureNikos Mavrogiannopoulos2016-06-291-0/+1
* gnutls_pkcs11_crt_is_known: changed to unsigned typeNikos Mavrogiannopoulos2016-06-242-2/+2
* gnutls_pkcs11_crt_is_known: always assume GNUTLS_PKCS11_OBJ_FLAG_COMPARE unle...Nikos Mavrogiannopoulos2016-06-231-3/+3
* find_cert_cb: minor cleanups in find_cert_cbNikos Mavrogiannopoulos2016-06-231-29/+29
* enhanced debugging messages for cert verificationNikos Mavrogiannopoulos2016-06-222-0/+4
* x509: print serial number in compact outputNikos Mavrogiannopoulos2016-06-221-0/+13
* pkcs11: correctly encode the serial number when searching for certificateNikos Mavrogiannopoulos2016-06-221-16/+9
* pkcs11: correctly account check_found_cert()Nikos Mavrogiannopoulos2016-06-221-0/+1
* doc: corrected typoNikos Mavrogiannopoulos2016-06-191-1/+1
* Typo fixes (found by lintian): extention, reencodeAndreas Metzler2016-06-194-8/+8
* dtls: corrected reconstruction of handshake packets received out of orderNikos Mavrogiannopoulos2016-06-161-4/+4
* Corrected the writing of serial number in PKCS#11 modulesNikos Mavrogiannopoulos2016-06-161-4/+9
* ext: ecc: replaced SUPPORTED ECC POINT FORMATS with better formatted nameNikos Mavrogiannopoulos2016-06-151-1/+1
* tlsfeature: impose a maximum number of supported TLS featuresNikos Mavrogiannopoulos2016-06-143-29/+18
* During PKIX chain verification check the TLSFeatures complianceNikos Mavrogiannopoulos2016-06-1411-206/+374
* verify_crt: moved all verification state into a common structureNikos Mavrogiannopoulos2016-06-141-33/+37
* Added gnutls_x509_crt_set_crq_extension_by_oid()Nikos Mavrogiannopoulos2016-06-143-7/+39
* doc: mention the usage of the _gnutls_resolve_priorities function in testsuiteNikos Mavrogiannopoulos2016-06-091-0/+2
* gnutls_priority_init: multiple @KEYWORD lookups with fallbackDaniel P. Berrange2016-06-091-32/+66
* doc updateNikos Mavrogiannopoulos2016-06-091-3/+3
* _gnutls_resolve_priorities: always try to re-read sys priority fileDaniel P. Berrange2016-06-091-10/+45
* keylogfile: only consider the SSLKEYLOGFILE variableNikos Mavrogiannopoulos2016-06-063-9/+9
* lib: eliminated the use of deprecated variablesNikos Mavrogiannopoulos2016-06-068-12/+12
* pkcs12: corrected return type of gnutls_pkcs12_bag_get_type()Nikos Mavrogiannopoulos2016-06-042-4/+3
* doc clarify the version since when GNUTLS_PKCS11_OBJ_FLAG_OVERWRITE_TRUSTMOD_...Nikos Mavrogiannopoulos2016-06-031-2/+2
* gnutls_pkcs11_obj_list_import_url4: accepts the GNUTLS_PKCS11_OBJ_FLAG_OVERWR...Nikos Mavrogiannopoulos2016-06-031-3/+30
* gnutls_pkcs11_obj_list_import_url3: rewritten to use gnutls_pkcs11_obj_list_i...Nikos Mavrogiannopoulos2016-06-031-40/+13
* pkcs11: use ctx as variable name for ck_object_handle_t for clarityNikos Mavrogiannopoulos2016-06-035-75/+75
* pkcs11: doc updateNikos Mavrogiannopoulos2016-06-031-1/+5
* _gnutls_check_key_purpose: in CA certificates treat the SGC key purpose as GN...Nikos Mavrogiannopoulos2016-06-021-0/+28
* ocsp: attempt harder to figure an OCSP staple issuerNikos Mavrogiannopoulos2016-06-021-18/+30
* ext: status_request: added more descriptive nameNikos Mavrogiannopoulos2016-06-011-1/+1
* ocsp: fail certificate verification on expired or too old revocation data infoNikos Mavrogiannopoulos2016-06-011-2/+4
* ocsp: Introduced GNUTLS_CERT_INVALID_OCSP_STATUSNikos Mavrogiannopoulos2016-06-013-1/+13
* gnutls_url_is_supported: type changed to unsignedNikos Mavrogiannopoulos2016-05-312-5/+5
* doc updateNikos Mavrogiannopoulos2016-05-312-6/+5
* pubkey_to_bits: return type was changed to unsignedNikos Mavrogiannopoulos2016-05-312-2/+2
* crypto-selftests: removed unneeded castNikos Mavrogiannopoulos2016-05-311-1/+1
* several sign-related API changesNikos Mavrogiannopoulos2016-05-3116-119/+121
* x509: simplified _gnutls_x509_get_tbs()Nikos Mavrogiannopoulos2016-05-311-29/+1