summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* gnutls_record_set_max_size: make it work on server sidetmp-fix-record-size-limit-resumptionDaiki Ueno2019-02-141-5/+4
* ext/record_size_limit: account for content type octet in TLS 1.3Daiki Ueno2019-02-141-3/+30
* decrypt_packet_tls13: add check for max plaintext sizeDaiki Ueno2019-02-141-0/+9
* record: reject too large plaintext after decryptionDaiki Ueno2019-02-141-0/+9
* constate: reset max_record_recv_size upon renegotiationDaiki Ueno2019-02-141-0/+9
* session_pack: reset max_record_recv_size when packingDaiki Ueno2019-02-141-3/+12
* ext/record_size_limit: don't confuse with negotiated/user-supplied maximumDaiki Ueno2019-02-142-14/+35
* ext/max_record: server shouldn't send it with record_size_limitDaiki Ueno2019-02-144-8/+11
* _gnutls_hello_ext_is_present: don't ignore max_fragment_lengthDaiki Ueno2019-02-141-1/+1
* Merge branch 'tmp-fix-cert-params-checks' into 'master'Nikos Mavrogiannopoulos2019-02-141-1/+1
|\
| * x509: corrected issue in the algorithm parameters comparisonNikos Mavrogiannopoulos2019-02-141-1/+1
* | Fix uninitialized warning in pkcs11.cTim Rühsen2019-02-141-26/+16
* | Remove typedef'ing ssize_t in gnutls.htmp-ssize-tTim Rühsen2019-02-121-7/+4
|/
* Merge branch 'tmp-gnulib-pton' into 'master'Tim Rühsen2019-02-106-286/+6
|\
| * Use inet_pton() from gnulibtmp-gnulib-ptonTim Rühsen2019-02-106-286/+6
* | Merge branch 'tmp-key-usage' into 'master'Nikos Mavrogiannopoulos2019-02-089-32/+109
|\ \ | |/ |/|
| * _gnutls_gen_rawpk_crt: corrected the use of asserttmp-key-usageNikos Mavrogiannopoulos2019-02-061-9/+10
| * raw public keys: apply the key usage bits the same way as X.509Nikos Mavrogiannopoulos2019-02-061-6/+14
| * Fallback to TLS 1.2 when incompatible with signature certs are providedNikos Mavrogiannopoulos2019-02-064-3/+33
| * Enforce the certificate key usage restrictions on all casesNikos Mavrogiannopoulos2019-02-066-15/+53
* | Use inet_ntop() from gnulibtmp-gnulib-ntopTim Rühsen2019-02-074-262/+2
|/
* Add GNUTLS_E_RECEIVED_DISALLOWED_NAME for illegal SNI namesTim Rühsen2019-01-314-4/+12
* lib/nettle: replace nettle-stdint.h with just stdint.hDmitry Eremin-Solenikov2019-01-301-1/+1
* priorities: when %NO_EXTENSIONS is specified disable TLS1.3Nikos Mavrogiannopoulos2019-01-251-1/+1
* Merge branch 'tmp-fix-no-extensions' into 'master'Nikos Mavrogiannopoulos2019-01-242-1/+4
|\
| * The flag %NO_EXTENSIONS is disabling extension support while being functionaltmp-fix-no-extensionsNikos Mavrogiannopoulos2019-01-102-1/+4
* | Merge branch 'tmp-record-size-limit-fixes' into 'master'Daiki Ueno2019-01-242-4/+11
|\ \
| * | constate: don't restore max_record_recv_size from resumed dataDaiki Ueno2019-01-231-3/+8
| * | ext/record_size_limit: mark it as mandatory extensionDaiki Ueno2019-01-231-1/+1
| * | ext/record_size_limit: reject too large extension payloadDaiki Ueno2019-01-231-0/+2
* | | Merge branch 'tmp-fix-macosx' into 'master'Nikos Mavrogiannopoulos2019-01-241-1/+1
|\ \ \
| * | | update on "Fix gnutls.pc for multiarch builds"Nikos Mavrogiannopoulos2019-01-231-1/+1
* | | | Merge branch 'tmp-priority-linear' into 'master'Tim Rühsen2019-01-231-20/+15
|\ \ \ \ | |/ / / |/| | |
| * | | set_ciphersuite_list(): Use linear approach to cleanup prioritiestmp-priority-linearTim Rühsen2019-01-231-20/+15
* | | | Merge branch 'master' into 'master'Nikos Mavrogiannopoulos2019-01-231-1/+1
|\ \ \ \ | |_|/ / |/| | |
| * | | configure.ac: check if libatomic is neededFabrice Fontaine2019-01-171-1/+1
| | |/ | |/|
* | | Merge branch 'tmp-key-rsa-pss' into 'master'Dmitry Eremin-Solenikov2019-01-231-2/+10
|\ \ \
| * | | gnutls_pkcs11_privkey_import_url: enable RSA-PSS only when an RSA key can signtmp-key-rsa-pssNikos Mavrogiannopoulos2019-01-221-2/+10
* | | | Merge branch 'tmp-alerts-fix' into 'master'Nikos Mavrogiannopoulos2019-01-231-7/+13
|\ \ \ \ | |_|_|/ |/| | |
| * | | gnutls_alert_send_appropriate: do not send alert to peer on all errorstmp-alerts-fixNikos Mavrogiannopoulos2019-01-231-7/+11
| * | | alert: associate unsupported curve alerts with handshake failureNikos Mavrogiannopoulos2019-01-221-0/+2
| |/ /
* | | Merge branch 'tmp-fix-fuzzer-timeout' into 'master'Tim Rühsen2019-01-221-0/+8
|\ \ \ | |/ / |/| |
| * | Avoid excessive CPU usage in gnutls_idna_map()tmp-fix-fuzzer-timeoutTim Rühsen2019-01-201-0/+8
| |/
* | crypto-selftests.c: Fix checking return valuetmp-fix-crypto-selftestsTim Rühsen2019-01-191-3/+3
|/
* When sending no extensions do not include a zero lengthNikos Mavrogiannopoulos2019-01-095-6/+13
* Avoid calling sign_algorithm_get_name() when we already have pointer to the a...tmp-rsa-pss-tls12Nikos Mavrogiannopoulos2019-01-091-1/+1
* tls-sig: check RSA-PSS signature key compatibility also in TLS 1.2Daiki Ueno2019-01-091-0/+17
* alert: map GNUTLS_E_UNKNOWN_COMPRESSION_ALGORITHM to illegal_parameterDaiki Ueno2019-01-091-1/+1
* Merge branch 'gnutls_write_new_general_fix' into 'master'Tim Rühsen2019-01-081-1/+1
|\
| * Fix _gnutls_write_new_general_name() result checkingMaks Naumov2019-01-081-1/+1
View Lorry Controller Status