summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* ocsp: added sanity check in returned lengthNikos Mavrogiannopoulos2017-06-151-1/+4
* TLS extensions: added duplicate extension check on server sideNikos Mavrogiannopoulos2017-06-141-5/+18
* gnutls_init: better naming for internal functionNikos Mavrogiannopoulos2017-06-141-7/+9
* TLS extensions: mark each extension which cannot be overridenNikos Mavrogiannopoulos2017-06-1417-29/+37
* TLS extensions: combined the extension data and resumed data structuresNikos Mavrogiannopoulos2017-06-142-112/+80
* removed type extension_priv_data_tNikos Mavrogiannopoulos2017-06-1413-103/+101
* gnutls_int.h: groupped extension structures togetherNikos Mavrogiannopoulos2017-06-141-11/+13
* TLS extensions: several simplificationsNikos Mavrogiannopoulos2017-06-146-144/+133
* corrected typo in x962 functionsNikos Mavrogiannopoulos2017-06-127-13/+13
* pkcs11: do not set leading zeros on integersNikos Mavrogiannopoulos2017-06-121-13/+14
* Introduced functions to export integers with no leading zeroNikos Mavrogiannopoulos2017-06-128-41/+291
* nettle: use older GMP macros for mpz_mod_2exp and mpz_div_2expNikos Mavrogiannopoulos2017-06-082-3/+3
* _gnutls_ucs2_to_utf8: use void* as pointer type to avoid compiler assumptions...Nikos Mavrogiannopoulos2017-06-081-1/+1
* ciphersuites: removed unused functionNikos Mavrogiannopoulos2017-06-081-15/+0
* nettle/cipher: document that ctx_ptr is 16-byte aligned, and use void* to avo...Nikos Mavrogiannopoulos2017-06-081-4/+6
* _gnutls_x509_privkey_reinit: ensure fields will not be re-usedNikos Mavrogiannopoulos2017-06-081-0/+2
* updated auto-generated files for new signing APItmp-enhance-signing-apisNikos Mavrogiannopoulos2017-06-071-2/+0
* handshake: simplify handshake by using the new signing APINikos Mavrogiannopoulos2017-06-071-37/+8
* abstract API: introduced new signing functionsNikos Mavrogiannopoulos2017-06-075-24/+166
* pkix: removed unused definitionNikos Mavrogiannopoulos2017-06-071-2/+0
* gnutls_privkey_st: removed unused elementtmp-multi-updatesNikos Mavrogiannopoulos2017-06-072-2/+1
* gnutls_session_get_desc: improved ciphersuite descriptionNikos Mavrogiannopoulos2017-06-071-13/+34
* _gnutls_check_key_cert_match: account for RSA and RSA-PSS mismatchesNikos Mavrogiannopoulos2017-06-061-2/+13
* Tolerate DER time encoding errorsNikos Mavrogiannopoulos2017-06-051-1/+6
* _gnutls_PRF: was made inline functionNikos Mavrogiannopoulos2017-06-012-32/+22
* prf: implement the TLS 1.0 and 1.2 PRFs using nettleNikos Mavrogiannopoulos2017-06-016-216/+336
* tests: eliminated build warningsNikos Mavrogiannopoulos2017-05-311-5/+5
* Only accept known public key algorithms in the GNUTLS_PRIVKEY_EXT private keysNikos Mavrogiannopoulos2017-05-311-0/+8
* _gnutls_privkey_*_sign_params: added support for GNUTLS_PRIVKEY_EXT keysNikos Mavrogiannopoulos2017-05-311-0/+4
* gnutls_x509_privkey_sign_data: wrap over gnutls_privkey_sign_data()Nikos Mavrogiannopoulos2017-05-311-86/+28
* Separated use of GNUTLS_PRIVKEY_FLAG_PROVABLE and GNUTLS_PRIVKEY_SIGN_FLAG_RE...Nikos Mavrogiannopoulos2017-05-313-4/+4
* _gnutls_privkey_find_sign_params: renamed and simplifiedNikos Mavrogiannopoulos2017-05-317-72/+53
* gnutls_privkey_sign_hash: removed duplicate codeNikos Mavrogiannopoulos2017-05-311-15/+1
* GNUTLS_E_INSUFFICIENT_SECURITY: moved to fatal errorsNikos Mavrogiannopoulos2017-05-311-2/+3
* tls-sig: re-organize and simplify the TLS signature generation and verificationNikos Mavrogiannopoulos2017-05-315-237/+310
* gnutls_pubkey_verify_hash2: do not allow GNUTLS_VERIFY_USE_TLS1_RSA with non-...Nikos Mavrogiannopoulos2017-05-311-0/+2
* gnutls_pubkey_verify_hash2: check for broken signature algorithmsNikos Mavrogiannopoulos2017-05-311-2/+16
* gnutls_pubkey_verify_data2: do not utilize GNUTLS_VERIFY_USE_RSA_PSSNikos Mavrogiannopoulos2017-05-313-6/+12
* replaced MAX_SIGNATURE_ALGORITHMS macro with MAX_ALGOSNikos Mavrogiannopoulos2017-05-292-4/+3
* alert: map GNUTLS_E_PK_SIG_VERIFY_FAILED to GNUTLS_A_DECRYPT_ERRORNikos Mavrogiannopoulos2017-05-291-1/+4
* Increased the maximum number of signature algorithmsNikos Mavrogiannopoulos2017-05-291-1/+1
* publickey: map RSA ciphersuites to GNUTLS_PK_RSA_PSSNikos Mavrogiannopoulos2017-05-291-0/+2
* Rework KX -> PK mappingsDmitry Eremin-Solenikov2017-05-296-55/+35
* gnutls_privkey_sign_hash: use the GNUTLS_PRIVKEY_SIGN_FLAG_RSA_PSS flagNikos Mavrogiannopoulos2017-05-292-5/+21
* tls-sig: sign with RSA-PSS when requested by negotiated signature algorithmNikos Mavrogiannopoulos2017-05-291-7/+25
* priority: enabled RSA-PSS signatures by defaultNikos Mavrogiannopoulos2017-05-291-0/+14
* ext/signature: accept compatible algorithms with PKNikos Mavrogiannopoulos2017-05-291-2/+1
* gnutls_pubkey_verify_hash2: corrected operation with RSA-PSS keysNikos Mavrogiannopoulos2017-05-293-33/+42
* Introduced gnutls_sign_supports_pk_algorithm()Nikos Mavrogiannopoulos2017-05-293-10/+49
* x509: implement RSA-PSS signature schemeDaiki Ueno2017-05-2937-171/+2052