summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* PSK: set and read the hint in DHE-PSK ciphersuitesNikos Mavrogiannopoulos2016-08-246-26/+68
* introduced priority strings from later gnutls versions to enhance compatibilityNikos Mavrogiannopoulos2016-08-241-2/+11
* gcrypt: corrected sign issueNikos Mavrogiannopoulos2016-08-231-1/+1
* Enhanced error checking in _gnutls_buffer_append_data_prefixNikos Mavrogiannopoulos2016-08-231-1/+5
* configure: do not link with pthread unless necessaryNikos Mavrogiannopoulos2016-08-231-1/+19
* Remove random padding; always use minimal paddingNikos Mavrogiannopoulos2016-08-233-7/+2
* Give priority to RSA ciphersuites to improve compatibilityNikos Mavrogiannopoulos2016-08-231-1/+6
* gnutls_calc_dh_key: reject values of public key that are over the primeNikos Mavrogiannopoulos2016-08-231-5/+7
* client key exchange: fail if the client KX message is padded with additional ...Nikos Mavrogiannopoulos2016-08-231-0/+3
* Disable SSL 3.0 by defaultNikos Mavrogiannopoulos2016-08-231-1/+0
* ARCFOUR-128 is prioritized lower than any other cipherNikos Mavrogiannopoulos2016-08-101-8/+8
* Removed support for EXPORT ciphersuitesNikos Mavrogiannopoulos2016-08-1021-921/+21
* The minimum Diffie-Hellman bits size was raised to 1023Nikos Mavrogiannopoulos2016-08-101-1/+1
* Prohibit DSA-224 and DSA-256 from being used as signature algorithms with gcryptNikos Mavrogiannopoulos2016-08-102-0/+10
* Backported from gnutls3.x the removal of the strict check on signature algori...Nikos Mavrogiannopoulos2016-08-096-77/+2
* gcrypt: backported PKCS#1 size check on verificationNikos Mavrogiannopoulos2016-08-091-0/+6
* No longer set SSL 3.0 as the record layer version by defaultNikos Mavrogiannopoulos2016-08-091-1/+1
* removed dead codeNikos Mavrogiannopoulos2016-08-091-5/+0
* Fix initialization error in mpi-print of libgcryptNikos Mavrogiannopoulos2016-08-091-0/+2
* simplify casting to mpz_t using __mpz_struct and cleaned up mpz_t access.Nikos Mavrogiannopoulos2016-08-094-23/+25
* When resuming a session send only the mandatory extensions.Nikos Mavrogiannopoulos2016-08-091-1/+2
* Account the length byte in SRP extension.Nikos Mavrogiannopoulos2016-08-091-0/+2
* when freeing priority_cache make sure it is set to NULLNikos Mavrogiannopoulos2016-08-091-0/+1
* More precise packet length checking.Nikos Mavrogiannopoulos2016-08-092-6/+8
* small fixes identified by coverity.Nikos Mavrogiannopoulos2016-08-091-3/+5
* Better check for null signature method.Nikos Mavrogiannopoulos2016-08-091-2/+4
* initialize to null the SRP extension data on allocation.Nikos Mavrogiannopoulos2016-08-091-1/+1
* backported signature checks.Nikos Mavrogiannopoulos2016-08-092-2/+3
* Do not call the user_hello_func multiple times when performing ticket resumpt...Nikos Mavrogiannopoulos2016-08-091-1/+1
* pkcs8: initialize parameters on decryptionNikos Mavrogiannopoulos2016-08-091-0/+1
* restrict the number of non-fatal errors gnutls_handshake() can returnNikos Mavrogiannopoulos2016-08-091-1/+2
* Improvements to timing protection in TLS CBC record parsingNikos Mavrogiannopoulos2016-08-091-8/+10
* _gnutls_session_sign_algo_enabled: do not consider any values from the extens...Nikos Mavrogiannopoulos2015-04-251-16/+1
* Added fix for GNUTLS-SA-2015-1Nikos Mavrogiannopoulos2015-02-2610-42/+127
* added fix for certificate algorithm consistency checkNikos Mavrogiannopoulos2015-02-261-1/+33
* updated autotools generated filesNikos Mavrogiannopoulos2015-02-232-86/+67
* added AM_PROG_AR in configureNikos Mavrogiannopoulos2015-02-231-0/+1
* Prevent memory corruption due to server hello parsing.Nikos Mavrogiannopoulos2014-05-301-1/+1
* remove -WerrorNikos Mavrogiannopoulos2014-02-271-1/+1
* corrected return codesNikos Mavrogiannopoulos2014-02-271-6/+10
* Fixed bug that prevented the rejection of v1 intermediate CA certificates.Nikos Mavrogiannopoulos2014-02-161-1/+4
* re-applied sanity check patchNikos Mavrogiannopoulos2013-05-231-0/+2
* Revert "Added sanity check in pad size."Nikos Mavrogiannopoulos2013-05-231-2/+0
* Added sanity check in pad size.Nikos Mavrogiannopoulos2013-05-231-0/+2
* DN variable 'T' was expanded to 'title'Nikos Mavrogiannopoulos2013-02-041-1/+1
* corrected fixNikos Mavrogiannopoulos2013-02-041-9/+20
* doc update + bumped versionNikos Mavrogiannopoulos2013-02-042-2/+2
* Fixes to avoid a timing attack in TLS CBC record parsing.Nikos Mavrogiannopoulos2013-02-042-29/+68
* free allocated module name. Reported by Sam Varshavchik.Daniel Kahn Gillmor2013-02-031-1/+2
* libgcrypt code updated with similar checks to nettle codegnutls_2_12_22Nikos Mavrogiannopoulos2013-01-061-2/+14