summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* fips140: added function for applications to switch the FIPS140-2 modeNikos Mavrogiannopoulos2018-02-1910-71/+225
* fips140: enforcement of allowed ciphers moved to crypto-api.c and cipher_int.cNikos Mavrogiannopoulos2018-02-194-29/+45
* fips140: enforcement of hash and MACs use moved to crypto-api.c and hash_int.cNikos Mavrogiannopoulos2018-02-194-37/+53
* doc: updated text on gnutls_handshake_set_hook_functionNikos Mavrogiannopoulos2018-02-132-9/+9
* priority: disable the enabled by default RSA-PSS signature algorithmstmp-tests-include-ccmNikos Mavrogiannopoulos2018-02-121-7/+7
* Improve documentation of gnutls_x509_trust_list_iter_get_ca [ci skip]Michael Catanzaro2018-02-101-2/+5
* accelerated: make explicit key size check to all accelerated ciphersNikos Mavrogiannopoulos2018-02-0816-6/+37
* accelerated: check keysize in SSSE3 cipher setkeyVitezslav Cizek2018-02-081-0/+3
* nettle: use the nettle_get_secp API when availabletmp-new-nettle-abiNikos Mavrogiannopoulos2018-02-071-5/+15
* nettle base64_encode_raw: use cast to avoid warningsNikos Mavrogiannopoulos2018-02-063-4/+4
* accelerated: x86-common: do not use _xgetbv() with clangNikos Mavrogiannopoulos2018-02-061-1/+1
* accelerated: aarch64: fix GCM counter incrementNikos Mavrogiannopoulos2018-02-061-2/+3
* accelerated: fix use of SSSE3 vpaes_encryptNikos Mavrogiannopoulos2018-02-061-1/+7
* accelerated: fix use of aesni_ecb_encrypt()tmp-aesni-gcm-fixNikos Mavrogiannopoulos2018-02-051-1/+1
* Inline version macros into its users.Jay Foad2018-01-271-20/+22
* dh: document why BER decoding rules are allowsNikos Mavrogiannopoulos2018-01-231-0/+2
* pubkey: use the strict DER decoder for SubjectPublicKeyInfoNikos Mavrogiannopoulos2018-01-231-1/+1
* pk: document need for the generic BER decoderNikos Mavrogiannopoulos2018-01-231-0/+6
* tests: added unit test for _gnutls_record_overhead()Nikos Mavrogiannopoulos2018-01-163-2/+6
* DTLS: improved data MTU calculation under CBC ciphersuitesNikos Mavrogiannopoulos2018-01-163-46/+69
* gnutls_x509_crt_list_import: eliminated memory leakNikos Mavrogiannopoulos2018-01-101-3/+5
* libtasn1: updated to latest libtasn1 master branchtmp-update-libtasn1Nikos Mavrogiannopoulos2018-01-093-8/+32
* x509/verify: when verifying against a self signed certificate ignore issuerNikos Mavrogiannopoulos2017-12-301-5/+7
* gnutls_pk_self_test: include ECDSA tests on GNUTLS_PK_ECtmp-update-fips-self-testsNikos Mavrogiannopoulos2017-12-211-24/+25
* pkcs11 verification: always use the GNUTLS_PKCS11_OBJ_FLAG_PRESENT_IN_TRUSTED...Nikos Mavrogiannopoulos2017-12-032-6/+10
* pkcs11: simplify trusted module loading stateNikos Mavrogiannopoulos2017-12-032-13/+15
* _gnutls_pkcs11_check_init: improved transition between statesNikos Mavrogiannopoulos2017-12-033-20/+59
* gnutls_aead_cipher_init: corrected potential memory leakNikos Mavrogiannopoulos2017-11-291-4/+10
* _gnutls_set_resumed_parameters: restore the group from resumed parametersNikos Mavrogiannopoulos2017-11-271-0/+1
* session state: use the right type for send_cert_req variableNikos Mavrogiannopoulos2017-11-241-1/+1
* srp: added the 8192-bit primeNikos Mavrogiannopoulos2017-11-213-15/+180
* srp: reject any parameters not in the SRP draftNikos Mavrogiannopoulos2017-11-211-113/+2
* gnutls_x509_ext_import_proxy: corrected memory leakNikos Mavrogiannopoulos2017-11-151-8/+8
* pkcs11: refuse to load modules with duplicate informationNikos Mavrogiannopoulos2017-11-031-1/+2
* tests: added PKCS#11 module loading testNikos Mavrogiannopoulos2017-11-032-5/+37
* pkcs11: allow loading trusted modules when pkcs11 was initialized in manual modeNikos Mavrogiannopoulos2017-11-033-28/+26
* pkcs11: introduce multiple levels of loadingNikos Mavrogiannopoulos2017-11-034-15/+50
* pkcs11: forward token flags to applicationsNikos Mavrogiannopoulos2017-10-212-1/+58
* gnutls_server_name_set: Clarify meaning of the name_length parameter [ci skip]Thomas Klute2017-10-191-1/+1
* doc update [ci skip]Nikos Mavrogiannopoulos2017-10-162-8/+16
* cmp_hsk_types: fixed check for SSLv2 helloNikos Mavrogiannopoulos2017-10-151-4/+4
* doc: improve documentation on provable private keysNikos Mavrogiannopoulos2017-10-093-17/+55
* _gnutls_get_key_id: introduce flag GNUTLS_KEYID_USE_SHA512Nikos Mavrogiannopoulos2017-10-012-1/+5
* signature: on client side, refuse to negotiate non-enabled signature schemesNikos Mavrogiannopoulos2017-09-251-1/+9
* _gnutls_epoch_gc: ensure there are no stray epochs after gcNikos Mavrogiannopoulos2017-09-251-3/+7
* constate: simplified allocation of epochsNikos Mavrogiannopoulos2017-09-254-53/+30
* _gnutls_epoch_get(): simplified useNikos Mavrogiannopoulos2017-09-253-5/+4
* gnutls_x509_crt/q_set_spki: always initialize the spki structureNikos Mavrogiannopoulos2017-09-242-2/+4
* server name: refuse to resume a session which server name doesn't matchNikos Mavrogiannopoulos2017-09-233-0/+46
* Ensure the SNI extension is parsed during cache-based resumptionThomas Klute2017-09-231-1/+1
View Lorry Controller Status