summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* record: disallow parsing of alert messages prior to session startNikos Mavrogiannopoulos2016-11-021-1/+6
* gnutls_pkcs7_get_embedded_data: added GNUTLS_PKCS7_EDATA_GET_RAW flagNikos Mavrogiannopoulos2016-10-262-6/+18
* pkcs7: removed any limits in hex encoding of attributesNikos Mavrogiannopoulos2016-10-261-5/+4
* pkcs7: allow unknown and legacy signature data OIDs to be importedNikos Mavrogiannopoulos2016-10-266-90/+114
* doc updateNikos Mavrogiannopoulos2016-10-182-0/+6
* gnutls_x509_crt_verify_data2: introduce constraints checks on the provided ce...Nikos Mavrogiannopoulos2016-10-185-12/+96
* TLS extensions: only cache the extension IDs from exts that the server supportsNikos Mavrogiannopoulos2016-10-091-3/+9
* On client side allow signing with the signature algorithm of our certNikos Mavrogiannopoulos2016-09-223-6/+12
* Increased the maximum size allowed for handshake messages to 128kbNikos Mavrogiannopoulos2016-09-192-2/+5
* gnutls_certificate_set_*key: ensure proper cleanup on key mismatch failuresNikos Mavrogiannopoulos2016-09-121-2/+11
* _gnutls_ucs2_to_utf8: fixed use of WideCharToMultiByte in windowsNikos Mavrogiannopoulos2016-09-071-2/+2
* _gnutls_encode_ber_rs_raw: zero-pad values when necessaryNikos Mavrogiannopoulos2016-09-051-13/+46
* gnutls_pkcs12_simple_parse: set the key value to null on failureDavid Woodhouse2016-08-291-1/+3
* ocsp: corrected the comparison of the serial size in OCSP responseNikos Mavrogiannopoulos2016-08-271-0/+1
* Added support for decrypting PKCS#8 files which use HMAC-SHA256 as PRFNikos Mavrogiannopoulos2016-08-246-27/+87
* Fix gnutls_pkcs12_simple_parse to always extract the complete chainStefan Sørensen2016-08-081-20/+15
* Fix invalid pointer operation in gnutls_certificate_get_x509_crtStefan Sørensen2016-08-081-2/+2
* nettle: use rsa_*_key_prepare on key importNikos Mavrogiannopoulos2016-08-081-10/+52
* Revert "nettle: use rsa_*_key_prepare"Nikos Mavrogiannopoulos2016-08-081-32/+12
* nettle: use rsa_*_key_prepareNikos Mavrogiannopoulos2016-08-011-12/+32
* gnutls_x509_crl_list_import2 was ignoring the passed flags if all CTLs in the...Tim Kosse2016-07-281-1/+1
* gnutls_x509_crt_list_import2 was ignoring the passed flags if all certificate...Tim Kosse2016-07-281-1/+1
* minitasn1: updated to libtasn1 4.9Nikos Mavrogiannopoulos2016-07-257-14/+27
* write_nss_key_log: write the premaster secret while it is still validNikos Mavrogiannopoulos2016-07-071-2/+2
* updated libtasn1Nikos Mavrogiannopoulos2016-07-071-1/+1
* pkcs11_get_attribute_avalue: correctly handle a -1 value length from C_GetAtt...Nikos Mavrogiannopoulos2016-06-301-0/+6
* pkcs11_get_attribute_avalue: do not assign values on failureNikos Mavrogiannopoulos2016-06-291-0/+1
* gnutls_pkcs11_crt_is_known: always assume GNUTLS_PKCS11_OBJ_FLAG_COMPARE unle...Nikos Mavrogiannopoulos2016-06-281-3/+3
* find_cert_cb: minor cleanups in find_cert_cbNikos Mavrogiannopoulos2016-06-281-28/+28
* pkcs11: correctly encode the serial number when searching for certificateNikos Mavrogiannopoulos2016-06-221-16/+9
* pkcs11: correctly account check_found_cert()Nikos Mavrogiannopoulos2016-06-221-0/+1
* dtls: corrected reconstruction of handshake packets received out of orderNikos Mavrogiannopoulos2016-06-161-4/+4
* Corrected the writing of serial number in PKCS#11 modulesNikos Mavrogiannopoulos2016-06-161-4/+9
* keylogfile: only consider the SSLKEYLOGFILE variableNikos Mavrogiannopoulos2016-06-063-9/+9
* doc update [ci skip]Nikos Mavrogiannopoulos2016-05-312-6/+5
* Rely on gnulib's secure_getenv()Nikos Mavrogiannopoulos2016-05-281-4/+0
* x86-common: use secure_getenv()Nikos Mavrogiannopoulos2016-05-281-1/+1
* env: use secure_getenv when reading environment variablesNikos Mavrogiannopoulos2016-05-274-8/+14
* Append keys on keylogfileNikos Mavrogiannopoulos2016-05-273-24/+13
* pkcs11: added sanity check to find_obj_url_cb() for object validityNikos Mavrogiannopoulos2016-05-231-6/+6
* CHACHA20_POLY1305 was added to the default priority stringsNikos Mavrogiannopoulos2016-05-191-5/+10
* Write session keys into a file when GNUTLS_KEYLOGFILE is exportedNikos Mavrogiannopoulos2016-05-181-0/+43
* errors: include GNUTLS_E_IDNA_ERROR to the listNikos Mavrogiannopoulos2016-05-121-0/+2
* server_name: only save the supported server names in the sessionNikos Mavrogiannopoulos2016-05-121-11/+14
* gnutls_pubkey_verify_data2: simplified return logicNikos Mavrogiannopoulos2016-05-101-3/+1
* gnutls_pkcs7_print: corrected type of unsigned count variableNikos Mavrogiannopoulos2016-05-101-2/+2
* cert cred: add the CN to the list of known hostnames only if no dns_namesNikos Mavrogiannopoulos2016-05-101-9/+14
* gnutls_certificate_set_key: import the DNS names of the certificatesNikos Mavrogiannopoulos2016-05-101-1/+25
* reset the global time func on init/deinitNikos Mavrogiannopoulos2016-05-101-1/+3
* gnutls_certificate_set_key: duplicate the provided memoryNikos Mavrogiannopoulos2016-05-031-2/+11