summaryrefslogtreecommitdiff
path: root/lib
Commit message (Collapse)AuthorAgeFilesLines
* Indent code.Simon Josefsson2010-04-1432-626/+736
|
* Export new ABIs. Doc fixes for new APIs.Simon Josefsson2010-04-146-59/+122
|
* Doc fixes.Simon Josefsson2010-04-133-66/+68
|
* Update gnulib files, fix syntax-check warnings.Simon Josefsson2010-04-1335-445/+749
|
* Add forgotten gnulib files, and fix .gitignore.Simon Josefsson2010-03-311-0/+152
|
* Sync with TP.Simon Josefsson2010-03-313-82/+1199
|
* Update gnulib files. Fix syntax-check warnings.Simon Josefsson2010-03-314-52/+54
|
* Update gnulib files.Simon Josefsson2010-03-3133-1242/+3187
|
* increased small value for certificates. Typical certificates are much longer ↵Nikos Mavrogiannopoulos2010-03-271-1/+1
| | | | than that.
* Display postalCode and Name X.509 DN attributes correctly.Nikos Mavrogiannopoulos2010-03-204-0/+11
| | | | Based on patch by Pavan Konjarla.
* Each ciphersuite is now tight with a minimum TLS version and a maximumNikos Mavrogiannopoulos2010-03-203-64/+67
| | | | | | one. It is valid if it is between (and including) those. This was added to deprecate TLS_RSA_EXPORT_WITH_RC4_40_MD5 which is not available with TLS 1.1. Reported by Adrian F. Dimcev.
* Added gnutls_certificate_set_verify_function() to allow checking (verifying)Nikos Mavrogiannopoulos2010-03-176-3/+59
| | | | certificate before the handshake is completed.
* INITIAL_SAFE_RENEGOTIATION implies SAFE_RENEGOTIATION.Nikos Mavrogiannopoulos2010-03-171-2/+6
|
* Added missing prototype.Nikos Mavrogiannopoulos2010-03-161-0/+2
|
* gnutls_x509_crt_verify() and gnutls_x509_crt_list_verify() behave identically.Nikos Mavrogiannopoulos2010-03-161-12/+5
| | | | | | | | | That means that gnutls_x509_crt_verify() will now check dates as well. Certool --verify-chain will use the GNUTLS_VERIFY_DO_NOT_ALLOW_SAME flag to gnutls_x509_crt_verify() to force verification even if certificates are the same. The only exception is at the final certificate (self-checking) where the extra flag GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT is specified to allow for v1 CA certificates.
* Handle dates before 1-1-1970 (handle as being equal to 1-1-1970).Nikos Mavrogiannopoulos2010-03-161-0/+3
|
* Safe renegotiation is not enabled by default in client side.Nikos Mavrogiannopoulos2010-03-153-1/+26
|
* better documentation for %INITIAL_SAFE_RENEGOTIATIONNikos Mavrogiannopoulos2010-03-151-1/+2
|
* Extended time verification to trusted certificate list as well. IntroducedNikos Mavrogiannopoulos2010-03-142-21/+67
| | | | | the flag GNUTLS_VERIFY_DISABLE_TRUSTED_TIME_CHECKS that will prevent the trusted certificate list verification.
* Extension generation in SSL 3.0 (as a reply to SCSV) is not usingNikos Mavrogiannopoulos2010-03-114-75/+39
| | | | | common code with normal extension generation. Solve issue reported by Tomas Mraz that caused SSL 3.0 renegotiation fail.
* Removed artificial constrained that prevented end-user certificates,Nikos Mavrogiannopoulos2010-03-071-3/+8
| | | | | being added to the trusted list, treated as trusted. Suggestion and patch by Tomas Mraz.
* Avoid sending alerts during handshake. Alerts might be interrupted and returnNikos Mavrogiannopoulos2010-03-034-21/+18
| | | | | | | a non-fatal error which will propagate and in many cases it shouldn't. Avoid sending no renegotiation alert when a client connects to an unsafe server. Thanks to Tomas Hoger for the report.
* Remove.Simon Josefsson2010-02-181-1098/+0
|
* Add.Simon Josefsson2010-02-181-0/+1098
|
* Update gnulib files.Simon Josefsson2010-02-181-1/+1
|
* Indent. Don't include fcntl.h and sys/ioctl.h on (for example) Windows.Simon Josefsson2010-02-171-163/+191
|
* More GTK-DOC fixes.Simon Josefsson2010-02-173-2/+12
|
* Doc fix.Simon Josefsson2010-02-171-2/+2
|
* Doc fix.Simon Josefsson2010-02-171-6/+2
|
* Doc fix.Simon Josefsson2010-02-171-2/+2
|
* Fix enum doc.Simon Josefsson2010-02-171-1/+2
|
* More enum docs.Simon Josefsson2010-02-171-159/+221
|
* More enum documentation.Simon Josefsson2010-02-171-17/+45
|
* More enum documentation.Simon Josefsson2010-02-171-63/+82
|
* Document more.Simon Josefsson2010-02-171-3/+11
|
* Document enum.Simon Josefsson2010-02-171-8/+21
|
* More enum.Simon Josefsson2010-02-171-8/+16
|
* Fix typo.Simon Josefsson2010-02-171-2/+2
|
* More GTK-DOC documentation.Simon Josefsson2010-02-171-106/+280
|
* Improve GTK-DOC coverage.Simon Josefsson2010-02-171-20/+70
|
* Fix comments, for GTK-DOC.Simon Josefsson2010-02-171-23/+23
|
* Doc fix.Simon Josefsson2010-02-171-1/+1
|
* Fix for GTK-DOC parse breakage.Simon Josefsson2010-02-171-2/+1
|
* Upgrade to libtasn1 2.5 snapshot, for GTK-DOC comments.Simon Josefsson2010-02-177-463/+453
|
* Another GTK-DOC fix.Simon Josefsson2010-02-171-1/+1
|
* Fix GTK-DOC syntax. Unfortunately this looses some information.Simon Josefsson2010-02-1756-572/+570
|
* Align indentation of GTK-DOC comments.Simon Josefsson2010-02-1728-2291/+2242
|
* Sync with TP.Simon Josefsson2010-02-171-83/+91
|
* Update gnulib files.Simon Josefsson2010-02-174-14/+26
|
* Corrected calculation of session data for PSK ciphersuites. Solves issue ↵Nikos Mavrogiannopoulos2010-02-051-4/+5
| | | | #107256 reported by Wolfgang Glas.