summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* pkcs11.h: relocated gnutls_pkcs11_copy_pubkey to allow discovery by buggy doc...Nikos Mavrogiannopoulos2015-10-201-3/+3
* ext master secret: extension is marked as mandatoryNikos Mavrogiannopoulos2015-10-201-1/+1
* pkcs11: introduced gnutls_pkcs11_copy_pubkeyNikos Mavrogiannopoulos2015-10-176-3/+279
* Disable the NULL cipher on runtime when FIPS140 mode is enabled instead of st...Nikos Mavrogiannopoulos2015-10-153-7/+12
* backport: Tolerate priority strings with names of legacy ciphers and key exch...Nikos Mavrogiannopoulos2015-10-155-14/+43
* pkcs11: write CKA_ISSUER and CKA_SERIAL_NUMBER when writing on a certificateNikos Mavrogiannopoulos2015-10-151-2/+16
* Introduced the security parameter future (256) and switched ultra to 192 bitsNikos Mavrogiannopoulos2015-10-122-3/+5
* Backported new verification functions for clients from 3.5.x branchNikos Mavrogiannopoulos2015-10-0711-35/+208
* Added gnutls_session_set_verify_functionNikos Mavrogiannopoulos2015-10-075-5/+47
* gnutls_record_recv: simplified text on GNUTLS_E_REHANDSHAKENikos Mavrogiannopoulos2015-10-051-7/+6
* system.c: simplify gnutls_system_recv_timeoutNikos Mavrogiannopoulos2015-09-171-7/+2
* updated documentation on gnutls_vdata_types_t based on DKG's suggestionsNikos Mavrogiannopoulos2015-09-171-4/+11
* improve docs for gnutls_certificate_verify_peers*()Daniel Kahn Gillmor2015-09-171-3/+9
* _gnutls_hex2bin: avoid overrun in the provided bufferNikos Mavrogiannopoulos2015-09-141-2/+1
* Don't use formatted output for fixed stringsNikos Mavrogiannopoulos2015-09-111-3/+3
* pkcs11: when storing public keys, make sure they are marked as not privateNikos Mavrogiannopoulos2015-09-041-0/+5
* hex decoding: more reasonable error codesNikos Mavrogiannopoulos2015-08-231-7/+6
* Set the extended master secret status based on resumption data onlyNikos Mavrogiannopoulos2015-08-212-6/+4
* session packing: corrected issue in PSK session unpackNikos Mavrogiannopoulos2015-08-211-1/+5
* PSK: save the username in client side in the auth structureNikos Mavrogiannopoulos2015-08-211-1/+18
* _gnutls_hash() returns error code if any.Nikos Mavrogiannopoulos2015-08-211-1/+1
* x509: when appending CRLs to a trust list ensure that we don't have duplicatesNikos Mavrogiannopoulos2015-08-212-3/+32
* gnutls_x509_crl_set_authority_key_id, gnutls_x509_crl_set_number allow overwr...Nikos Mavrogiannopoulos2015-08-131-4/+4
* key decoding: set key to null for consistencyNikos Mavrogiannopoulos2015-08-041-1/+3
* key decoding: simplify decoding logic by removing the fallbackNikos Mavrogiannopoulos2015-08-041-25/+24
* key decoding: corrected regression with PKCS #8 key decodingNikos Mavrogiannopoulos2015-08-041-0/+14
* pkcs11: set the CKA_TOKEN attribute on generated public keysNikos Mavrogiannopoulos2015-08-032-2/+10
* handshake: check inappropriate fallback against the configured max versionNikos Mavrogiannopoulos2015-08-011-3/+3
* corrected GNUTLS_E_INAPPROPRIATE_FALLBACK error codeNikos Mavrogiannopoulos2015-08-011-1/+1
* copy_ciphersuites: use definition for reserved ciphersuitesNikos Mavrogiannopoulos2015-08-011-3/+3
* handshake: add FALLBACK_SCSV priority optionAlessandro Ghedini2015-08-014-1/+17
* handshake: check for TLS_FALLBACK_SCSVAlessandro Ghedini2015-08-015-20/+39
* safe renegotiation: simulate receiving the extension on receival of SCSVNikos Mavrogiannopoulos2015-07-311-0/+1
* made data2hex() safer, and eliminated mem leakNikos Mavrogiannopoulos2015-07-311-8/+12
* safe renegotiation: handle case where client didn't send any extensionNikos Mavrogiannopoulos2015-07-311-0/+4
* tpm: avoid warningNikos Mavrogiannopoulos2015-07-311-1/+1
* As server don't try to send extensions we didn't receive.Nikos Mavrogiannopoulos2015-07-313-29/+36
* tpm: use gnutls_hex_decode for uuid decodingNikos Mavrogiannopoulos2015-07-211-2/+5
* psk: use gnutls_hex_decode2 for key decodingNikos Mavrogiannopoulos2015-07-211-11/+4
* system-keys-win: use gnutls_hex_decode for ID decodingNikos Mavrogiannopoulos2015-07-211-1/+4
* openpgp: use gnutls_hex_decode for keyid decodingNikos Mavrogiannopoulos2015-07-211-2/+8
* DN decoding: use gnutls_hex_encodeNikos Mavrogiannopoulos2015-07-211-8/+14
* Introduced gnutls_hex_encode2() and gnutls_hex_decode2()Nikos Mavrogiannopoulos2015-07-217-13/+277
* x509: simplified data to hex conversion in unknown DN namesNikos Mavrogiannopoulos2015-07-201-47/+13
* gnutls_prf_rfc5705: Allow for non-null context and zero context lengthNikos Mavrogiannopoulos2015-07-201-1/+4
* gnutls_prf_rfc5705: optimize in the common use case, by avoiding mallocNikos Mavrogiannopoulos2015-07-201-10/+13
* gnutls_prf_rfc5705: mention the version it was introduced atNikos Mavrogiannopoulos2015-07-201-0/+2
* gnutls_prf_rfc5705: addedNikos Mavrogiannopoulos2015-07-203-4/+71
* Deinitialize the TPM subsystem only when trousers support is enabledNikos Mavrogiannopoulos2015-07-132-0/+3
* TPM: don't link to trousers, use dlopen()Nikos Mavrogiannopoulos2015-07-136-54/+202
View Lorry Controller Status