summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* _gnutls_privkey_find_sign_params: renamed and simplifiedNikos Mavrogiannopoulos2017-05-317-72/+53
* gnutls_privkey_sign_hash: removed duplicate codeNikos Mavrogiannopoulos2017-05-311-15/+1
* GNUTLS_E_INSUFFICIENT_SECURITY: moved to fatal errorsNikos Mavrogiannopoulos2017-05-311-2/+3
* tls-sig: re-organize and simplify the TLS signature generation and verificationNikos Mavrogiannopoulos2017-05-315-237/+310
* gnutls_pubkey_verify_hash2: do not allow GNUTLS_VERIFY_USE_TLS1_RSA with non-...Nikos Mavrogiannopoulos2017-05-311-0/+2
* gnutls_pubkey_verify_hash2: check for broken signature algorithmsNikos Mavrogiannopoulos2017-05-311-2/+16
* gnutls_pubkey_verify_data2: do not utilize GNUTLS_VERIFY_USE_RSA_PSSNikos Mavrogiannopoulos2017-05-313-6/+12
* replaced MAX_SIGNATURE_ALGORITHMS macro with MAX_ALGOSNikos Mavrogiannopoulos2017-05-292-4/+3
* alert: map GNUTLS_E_PK_SIG_VERIFY_FAILED to GNUTLS_A_DECRYPT_ERRORNikos Mavrogiannopoulos2017-05-291-1/+4
* Increased the maximum number of signature algorithmsNikos Mavrogiannopoulos2017-05-291-1/+1
* publickey: map RSA ciphersuites to GNUTLS_PK_RSA_PSSNikos Mavrogiannopoulos2017-05-291-0/+2
* Rework KX -> PK mappingsDmitry Eremin-Solenikov2017-05-296-55/+35
* gnutls_privkey_sign_hash: use the GNUTLS_PRIVKEY_SIGN_FLAG_RSA_PSS flagNikos Mavrogiannopoulos2017-05-292-5/+21
* tls-sig: sign with RSA-PSS when requested by negotiated signature algorithmNikos Mavrogiannopoulos2017-05-291-7/+25
* priority: enabled RSA-PSS signatures by defaultNikos Mavrogiannopoulos2017-05-291-0/+14
* ext/signature: accept compatible algorithms with PKNikos Mavrogiannopoulos2017-05-291-2/+1
* gnutls_pubkey_verify_hash2: corrected operation with RSA-PSS keysNikos Mavrogiannopoulos2017-05-293-33/+42
* Introduced gnutls_sign_supports_pk_algorithm()Nikos Mavrogiannopoulos2017-05-293-10/+49
* x509: implement RSA-PSS signature schemeDaiki Ueno2017-05-2937-171/+2052
* build: import files from Nettle for RSA-PSSDaiki Ueno2017-05-2911-0/+782
* libtasn1: updated to 4.11Nikos Mavrogiannopoulos2017-05-273-2/+10
* pk: exported gnutls_decode_rs_value() and gnutls_encode_rs_value()Nikos Mavrogiannopoulos2017-05-273-1/+63
* gnutls_ocsp_status_request_enable_client: removed support for problematic par...Nikos Mavrogiannopoulos2017-05-241-65/+12
* gnutls_ocsp_status_request_enable_client: documented requirements for parametersNikos Mavrogiannopoulos2017-05-241-3/+9
* ext/status_request: Removed the parsing of responder IDs from client extensionNikos Mavrogiannopoulos2017-05-241-52/+16
* ext/status_request: ensure response IDs are properly deinitializedNikos Mavrogiannopoulos2017-05-241-6/+11
* self-tests: limit compatibility API checks to vectors with plaintextNikos Mavrogiannopoulos2017-05-231-3/+1
* self-tests: introduced flag GNUTLS_SELF_TEST_FLAG_NO_COMPATNikos Mavrogiannopoulos2017-05-222-8/+12
* self-tests: all parameter was replaced by flagsNikos Mavrogiannopoulos2017-05-223-24/+26
* aarch64: fix AES-GCM in-place encryption and decryptionNikos Mavrogiannopoulos2017-05-221-0/+24
* crypto: self-tests: enhance to include compatibility APIsNikos Mavrogiannopoulos2017-05-221-11/+221
* crypto-api: refuse to run gnutls_cipher_init() in full AEAD modesNikos Mavrogiannopoulos2017-05-223-2/+7
* doc: corrected error in gnutls_x509_privkey_sign_data parameters [ci skip]Nikos Mavrogiannopoulos2017-05-221-1/+1
* sysrng-linux: improved detection of getrandom()tmp-remove-arcfour-from-benchmarksNikos Mavrogiannopoulos2017-05-201-2/+2
* find_signer: eliminate memory leakNikos Mavrogiannopoulos2017-05-151-1/+4
* doc: corrected typo [ci skip]Nikos Mavrogiannopoulos2017-05-111-1/+1
* pkcs11_override_cert_exts: do not use CKA_X_DISTRUSTED flag when retrievingNikos Mavrogiannopoulos2017-05-101-7/+2
* pkcs11_add_provider: allow passing parameters to p11-kit trust moduleNikos Mavrogiannopoulos2017-05-101-8/+36
* gnutls_x509_trust_list_verify_crt2: treat signers with insecure algorithms as...Nikos Mavrogiannopoulos2017-05-101-6/+24
* errors.h: _gnutls_cert_log will only print on non-null certificatesNikos Mavrogiannopoulos2017-05-081-1/+1
* rsa-psk: Use the correct username datumtmp-fix-rsa-psk-cbNicolas Dufresne2017-05-061-2/+2
* added newline in debug messages [ci skip]Nikos Mavrogiannopoulos2017-05-012-4/+4
* Removed support for libidn1Nikos Mavrogiannopoulos2017-05-013-68/+31
* updated minitasn1Nikos Mavrogiannopoulos2017-05-013-3/+5
* gnutls.h: introduced GNUTLS_E_ASN1_TIME_ERRORNikos Mavrogiannopoulos2017-05-012-0/+7
* gnutls_pkcs12_simple_parse: set to null vars after deinitializationtmp-fix-pkcs12-crash2Nikos Mavrogiannopoulos2017-04-301-0/+4
* gnutls_x509_crt_check_hostname2: no match dns fields against IPsNikos Mavrogiannopoulos2017-04-301-9/+11
* gnutls_idna_map: fallback to IDNA2008 transitional encoding on failureNikos Mavrogiannopoulos2017-04-301-1/+7
* pkcs12: release CRL data on error pathNikos Mavrogiannopoulos2017-04-281-0/+4
* _gnutls_base64_decode: corrected leak on decoding errorNikos Mavrogiannopoulos2017-04-251-5/+8
View Lorry Controller Status