summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* Revert "ARCFOUR is disabled from the default priority strings"Nikos Mavrogiannopoulos2016-01-081-0/+2
* Fix out-of-bounds read in gnutls_x509_ext_export_key_usageTim Kosse2016-01-041-1/+1
* pkcs11: fixes to store the imported URLNikos Mavrogiannopoulos2015-12-311-1/+12
* pkcs11: import public keys from any available objectNikos Mavrogiannopoulos2015-12-311-15/+56
* gnutls_pkcs11_copy_x509_privkey2: corrected the writing of ECC private keyNikos Mavrogiannopoulos2015-12-311-1/+1
* gnutls_pkcs11_copy_x509_privkey2: corrected the type of the written objectNikos Mavrogiannopoulos2015-12-311-5/+5
* max_record: don't consider this extension on DTLSNikos Mavrogiannopoulos2015-12-231-0/+6
* Handle DNS name constraints with leading dotNikos Mavrogiannopoulos2015-12-201-7/+12
* ARCFOUR is disabled from the default priority stringsNikos Mavrogiannopoulos2015-12-151-2/+0
* Do not allow importing public keys from PKCS #11 private keys for DSA and ECDSANikos Mavrogiannopoulos2015-12-081-0/+8
* Revert "Do not allow importing public keys from PKCS #11 private keys for DSA...Nikos Mavrogiannopoulos2015-12-084-45/+13
* Do not allow importing public keys from PKCS #11 private keys for DSA and ECDSANikos Mavrogiannopoulos2015-12-064-13/+45
* pkcs11: avoid setting a variable which isn't usedNikos Mavrogiannopoulos2015-12-061-2/+1
* pkcs11: deinitialize gnutls_pkcs11_obj_t's pubkey on deinitNikos Mavrogiannopoulos2015-12-063-21/+32
* pkcs11: fix passing of incorrect variable in privkey_get_pubkeyJan Vcelak2015-12-061-1/+1
* allow specifying NULL buffer in gnutls_x509_crt_get_*_unique_id()Nikos Mavrogiannopoulos2015-11-301-2/+0
* gnutls_global_init_skip: prefixed with an underscoreNikos Mavrogiannopoulos2015-11-213-7/+7
* Added GNUTLS_SKIP_GLOBAL_INIT macro to allow programs skip implicit global in...Nikos Mavrogiannopoulos2015-11-193-0/+35
* disable_optional_stuff: don't disable unique IDs if setNikos Mavrogiannopoulos2015-11-151-4/+18
* Require TLS 1.2 for all the ciphersuites which are defined for it onlyNikos Mavrogiannopoulos2015-11-151-97/+97
* Allow switching a ciphersuite to DHE and ECDHE on a rehandshakeNikos Mavrogiannopoulos2015-11-112-2/+2
* gnutls.pc: don't use the libtool version of the link optionsNikos Mavrogiannopoulos2015-11-031-1/+1
* Disable the NULL cipher on runtime when FIPS140 mode is enabled instead of st...Nikos Mavrogiannopoulos2015-10-233-5/+12
* backport: Tolerate priority strings with names of legacy ciphers and key exch...Nikos Mavrogiannopoulos2015-10-235-11/+53
* pkcs11: write CKA_ISSUER and CKA_SERIAL_NUMBER when writing on a certificateNikos Mavrogiannopoulos2015-10-151-2/+16
* Fix memory leak in wrap_nettle_hash_algorithm().Lennert Buytenhek2015-10-121-1/+2
* _gnutls_hex2bin: avoid overrun in the provided bufferNikos Mavrogiannopoulos2015-09-141-2/+1
* Don't use formatted output for fixed stringsNikos Mavrogiannopoulos2015-09-111-3/+3
* session packing: corrected issue in PSK session unpackNikos Mavrogiannopoulos2015-08-211-1/+5
* x509: when appending CRLs to a trust list ensure that we don't have duplicatesNikos Mavrogiannopoulos2015-08-212-3/+32
* pkcs11: increase attributes size in gnutls_pkcs11_copy_x509_privkeyNikos Mavrogiannopoulos2015-08-091-1/+1
* pkcs11: set the CKA_TOKEN attribute on generated public keysNikos Mavrogiannopoulos2015-08-032-2/+11
* safe renegotiation: simulate receiving the extension on receival of SCSVNikos Mavrogiannopoulos2015-07-311-0/+1
* safe renegotiation: handle case where client didn't send any extensionNikos Mavrogiannopoulos2015-07-311-0/+4
* As server don't try to send extensions we didn't receive.Nikos Mavrogiannopoulos2015-07-313-29/+36
* Reset the output value on error in _gnutls_x509_dn_to_string()Nikos Mavrogiannopoulos2015-07-311-0/+1
* gnutls_prf: document that this is not identical to RFC5705Nikos Mavrogiannopoulos2015-07-201-2/+5
* corrected function nameNikos Mavrogiannopoulos2015-07-101-1/+1
* PSK: set the hint in DHE-PSK and ECDHE-PSK ciphersuitesNikos Mavrogiannopoulos2015-07-101-10/+74
* dumbfw: don't append a size prefix in the padNikos Mavrogiannopoulos2015-07-091-4/+3
* DSA: the numeric number of bits returned from public key should depend on P n...Nikos Mavrogiannopoulos2015-07-011-2/+2
* name constraints: don't reject certificates if a CA has the URI or IPADDRESS ...Nikos Mavrogiannopoulos2015-07-011-0/+48
* enhanced header matching code for private keys to skip unrelated dataNikos Mavrogiannopoulos2015-06-261-5/+21
* gnutls_x509_privkey_import2: better behavior when provided with an unencrypte...Nikos Mavrogiannopoulos2015-06-251-1/+22
* _gnutls_get_asn_mpis() will release any data on failureNikos Mavrogiannopoulos2015-06-252-4/+5
* Corrected camellia256 set key in nettle3 compat modeNikos Mavrogiannopoulos2015-06-101-2/+2
* drbg-aes: include gnutls_errors.hNikos Mavrogiannopoulos2015-06-041-0/+1
* fips140: added check for reseed detectionNikos Mavrogiannopoulos2015-06-041-9/+35
* fips140: reset the reseed counter only on reseedNikos Mavrogiannopoulos2015-06-041-1/+1
* fips140: added more checks on the reseed and generate functionNikos Mavrogiannopoulos2015-06-041-10/+49