summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* x509: better documented gnutls_trust_list_flags_tNikos Mavrogiannopoulos2016-12-093-7/+34
* handshake: return GNUTLS_E_ILLEGAL_PARAMETER on invalid ID sizeNikos Mavrogiannopoulos2016-12-091-1/+1
* str: do not call gnutls_assert in inline functionNikos Mavrogiannopoulos2016-12-081-1/+2
* gnutls_x509_crt_check_email type changed to unsignedNikos Mavrogiannopoulos2016-12-082-2/+2
* x509: do not attempt to ACE encode values stored in certificatesNikos Mavrogiannopoulos2016-12-082-36/+12
* gnutls_x509_privkey_cpy: use _gnutls_pk_params_copyNikos Mavrogiannopoulos2016-12-071-11/+6
* x509 crl: document the nextUpdate field limitationNikos Mavrogiannopoulos2016-12-071-0/+5
* x509 crl: Allow generation of CRLs not to specify a nextUpdateNikos Mavrogiannopoulos2016-12-071-0/+6
* DTLS: more precise overhead calculationNikos Mavrogiannopoulos2016-12-061-21/+52
* tpm: fix handling of keys requiring authorizationJames Bottomley2016-12-051-28/+44
* In import_tpm_key_cb() fix the wrong password loopNikos Mavrogiannopoulos2016-12-053-0/+12
* gl: removed iconv moduleNikos Mavrogiannopoulos2016-12-042-2/+2
* x509: fixed output of pubkeyNikos Mavrogiannopoulos2016-12-021-1/+1
* doc: document the fact that certificates and CRLs are unusable after generationNikos Mavrogiannopoulos2016-12-012-0/+18
* doc: no longer list SHA1 as a safe choice in X.509 signingNikos Mavrogiannopoulos2016-12-012-4/+4
* gnutls_x509_crl_verify: always return zero on successNikos Mavrogiannopoulos2016-12-011-1/+6
* Improved messages and violation handling in signature key usage checksNikos Mavrogiannopoulos2016-12-011-6/+17
* Removed redundant certificate key usage checks.Nikos Mavrogiannopoulos2016-12-014-74/+53
* _gnutls_map_pk_get_pk -> _gnutls_map_kx_get_pkNikos Mavrogiannopoulos2016-12-014-5/+5
* gnutls_kx_get: allow calling the function during handshakeNikos Mavrogiannopoulos2016-12-011-1/+6
* _gnutls_check_key_usage: check for invalid key exchange algorithmNikos Mavrogiannopoulos2016-12-011-1/+1
* privkey: set the key parameters algorithm prior to returning successNikos Mavrogiannopoulos2016-11-301-4/+3
* When decoding a public key ensure that algorithm is written in the params structNikos Mavrogiannopoulos2016-11-301-3/+9
* unistring: added property-join-controlNikos Mavrogiannopoulos2016-11-285-2/+231
* unistring: added default_ignorable_code_point and not_a_character testsNikos Mavrogiannopoulos2016-11-287-2/+902
* unistring: added NFKC normalizationNikos Mavrogiannopoulos2016-11-287-4/+911
* unistring: included all possible categories for simplicity and extensibilityNikos Mavrogiannopoulos2016-11-2885-0/+17371
* gnutls_utf8_password_normalize: perform more strict check on input charactersNikos Mavrogiannopoulos2016-11-283-13/+164
* gnutls_utf8_password_normalize: avoid use of strlen()Nikos Mavrogiannopoulos2016-11-281-7/+6
* renamed system/iconv.c -> str-iconv.ctmp-idna-printNikos Mavrogiannopoulos2016-11-252-1/+1
* x509: when printing ACE DNSnames ensure the actual name is also printedNikos Mavrogiannopoulos2016-11-251-7/+17
* introduced _gnutls_idna_reverse_map()Nikos Mavrogiannopoulos2016-11-253-0/+66
* Combined checks for printable characterstmp-idna-writeNikos Mavrogiannopoulos2016-11-252-20/+6
* gnutls_idna_map: check for printable data prior to mappingNikos Mavrogiannopoulos2016-11-251-0/+4
* gnutls_x509_aia_set: IDNA encode when neededNikos Mavrogiannopoulos2016-11-253-31/+47
* When writing alternative names to certificates ensure we write in ACE formatNikos Mavrogiannopoulos2016-11-2511-16/+129
* pkcs7: return GNUTLS_E_PK_SIG_VERIFY_FAILED on hash mismatchNikos Mavrogiannopoulos2016-11-253-1/+8
* pkcs7: only print signer's issuer DN when DN has contentsNikos Mavrogiannopoulos2016-11-251-1/+2
* pkcs7: added recursive discovery of structure's signerNikos Mavrogiannopoulos2016-11-251-94/+282
* pkcs7: on data verification failure log the signerNikos Mavrogiannopoulos2016-11-251-0/+1
* doc: updated gnutls_x509_trust_list_verify_crt2()Nikos Mavrogiannopoulos2016-11-251-10/+13
* pkcs7: pass the verification flags down to gnutls_x509_trust_list_verify_crt2...Nikos Mavrogiannopoulos2016-11-251-2/+3
* pkcs7: corrected iteration over stored certificatesNikos Mavrogiannopoulos2016-11-251-1/+1
* pkcs7: added debug logging on verification discoveryNikos Mavrogiannopoulos2016-11-251-0/+3
* errors.h: added _gnutls_reason_logNikos Mavrogiannopoulos2016-11-251-0/+12
* errors.h: added _gnutls_cert_logNikos Mavrogiannopoulos2016-11-251-0/+13
* corrected log message [ci skip]Nikos Mavrogiannopoulos2016-11-241-2/+2
* gnutls_idna_map was prefixed with underscore to avoid clashes with exported s...tmp-mini-idna2003-updateNikos Mavrogiannopoulos2016-11-233-7/+8
* avoid the use of c_isascii() and use c_isprint()Nikos Mavrogiannopoulos2016-11-233-3/+3
* IDNA code re-organizationNikos Mavrogiannopoulos2016-11-2311-159/+168