summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* when exporting curve coordinates to X9.63 format, perform additional sanity c...Nikos Mavrogiannopoulos2014-11-101-2/+23
* Fix double-free in gnutls_pkcs12_simple_parse()Nikos Mavrogiannopoulos2014-11-051-2/+0
* protect DTLS clients that don't handle GNUTLS_E_LARGE_PACKET from an infinite...Nikos Mavrogiannopoulos2014-09-253-2/+11
* restrict the number of non-fatal errors gnutls_handshake() can returnNikos Mavrogiannopoulos2014-09-253-8/+8
* gnutls_x509_crl_verify: do not always set the invalid statusNikos Mavrogiannopoulos2014-09-131-1/+9
* Revert "gnutls_x509_crl_verify: do not always set the invalid status"Nikos Mavrogiannopoulos2014-09-131-1/+1
* gnutls_x509_crl_verify: do not always set the invalid statusNikos Mavrogiannopoulos2014-09-131-1/+1
* record: tolerate a finished packet with errors in DTLSNikos Mavrogiannopoulos2014-08-231-0/+1
* record: in DTLS discard only messages that cause unexpected packet errorsNikos Mavrogiannopoulos2014-08-231-1/+5
* when checking the hostname of a certificate with multiple CNs use the "most s...Nikos Mavrogiannopoulos2014-08-171-7/+13
* pkcs11: Allow verification with structures that support other than HMAC-SHA1 ...Nikos Mavrogiannopoulos2014-08-115-24/+51
* pkcs8: initialize parameters on decryptionNikos Mavrogiannopoulos2014-08-041-0/+1
* gnutls_pkcs11_privkey_generate2(): corrected public key extraction (for ECDSA...Nikos Mavrogiannopoulos2014-07-012-7/+12
* pkcs11: avoid callig _gnutls_bin2hex() when length is zero.Nikos Mavrogiannopoulos2014-06-251-1/+1
* When decoding of a DN string fails, treat it as unknown string and print its ...Nikos Mavrogiannopoulos2014-06-101-2/+3
* Do not call the user_hello_func multiple times when performing ticket resumpt...Nikos Mavrogiannopoulos2014-06-091-1/+1
* updated libtasn1Nikos Mavrogiannopoulos2014-05-2914-1333/+953
* Prevent memory corruption due to server hello parsing.Nikos Mavrogiannopoulos2014-05-291-1/+1
* increased the maximum certificate size buffer in the PKCS #11 subsystem.Nikos Mavrogiannopoulos2014-05-291-1/+1
* Fix capitalisation of ia5StringNikos Mavrogiannopoulos2014-05-291-1/+1
* check the return code of getpwuid_r()Nikos Mavrogiannopoulos2014-05-291-2/+3
* gnutls_x509_crt_get_signature: corrected return sizeNikos Mavrogiannopoulos2014-05-171-1/+1
* backported signature checks.Nikos Mavrogiannopoulos2014-05-172-4/+5
* small fixes identified by coverity.Nikos Mavrogiannopoulos2014-05-054-4/+9
* initialize to null the SRP extension data on allocation.Nikos Mavrogiannopoulos2014-05-041-1/+1
* Better check for null signature method.Nikos Mavrogiannopoulos2014-05-041-1/+2
* More precise packet length checking.Nikos Mavrogiannopoulos2014-05-043-6/+11
* When checking for data to be received use the 'transport_recv_ptr'Nikos Mavrogiannopoulos2014-04-181-1/+1
* correctly check for message upper limit.Nikos Mavrogiannopoulos2014-04-151-1/+1
* When verifying check for the same certificate in the trusted list, not only t...Nikos Mavrogiannopoulos2014-04-031-0/+15
* backported fixes for gnutls_record_cork() and DTLS.Nikos Mavrogiannopoulos2014-04-021-0/+15
* Check explicitly for the errors gnutls_record_uncork() should recover from.Nikos Mavrogiannopoulos2014-03-281-1/+1
* do not consider wildcards in non-ascii names.Nikos Mavrogiannopoulos2014-03-271-1/+20
* clang warning fixesNikos Mavrogiannopoulos2014-03-271-4/+4
* Changed the behaviour in wildcard acceptance in certificates.Nikos Mavrogiannopoulos2014-03-201-0/+9
* Revert "Allow all ciphersuites in SSL3.0 when they are available in TLS1.0"Nikos Mavrogiannopoulos2014-03-081-42/+42
* check the blacklist for certificates provided in gnutls_x509_trust_list_verif...Nikos Mavrogiannopoulos2014-03-031-0/+8
* Allow all ciphersuites in SSL3.0 when they are available in TLS1.0Nikos Mavrogiannopoulos2014-03-031-42/+42
* corrected return codes.Nikos Mavrogiannopoulos2014-03-031-8/+14
* Corrected error checking in _gnutls_x509_ext_gen_proxyCertInfoNikos Mavrogiannopoulos2014-02-281-3/+3
* removed not trusted message; reported by Michel Briand.Nikos Mavrogiannopoulos2014-02-261-2/+0
* combine initializationsNikos Mavrogiannopoulos2014-02-221-4/+4
* reinitialize the handshake timers when gnutls_handshake() is called.Nikos Mavrogiannopoulos2014-02-182-1/+6
* Corrected bug in gnutls_pcert_list_import_x509_raw().Nikos Mavrogiannopoulos2014-02-151-2/+2
* Fixed bug that prevented the rejection of v1 intermediate CA certificates.Nikos Mavrogiannopoulos2014-02-121-1/+4
* When setting multiple initial keywords in a priority string, the security lev...Nikos Mavrogiannopoulos2014-02-031-16/+12
* When two initial keywords are specified then treat the second as having the '...Nikos Mavrogiannopoulos2014-02-021-1/+4
* tolerate servers that included the SUPPORTED ECC extension.Nikos Mavrogiannopoulos2014-02-011-1/+2
* reduced the TLS version requirements for all ciphersuites that are not GCM.Nikos Mavrogiannopoulos2014-01-311-12/+12
* use RUSAGE_THREAD when availablegnutls_3_1_20Nikos Mavrogiannopoulos2014-01-311-0/+4