summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* signature security level check were moved to lower level functionsNikos Mavrogiannopoulos2017-08-044-25/+31
* _wrap_nettle_pk_encrypt: return GNUTLS_E_INVALID_REQUEST on unsupported algor...Nikos Mavrogiannopoulos2017-08-041-2/+2
* verify_crt: translate GNUTLS_E_CONSTRAINT_ERROR to verification status flagNikos Mavrogiannopoulos2017-08-041-0/+6
* x509/sign: in debugging mode print the signature algorithmNikos Mavrogiannopoulos2017-08-041-0/+2
* _gnutls_x509_validate_sign_params: use GNUTLS_E_CONSTRAINT_ERROR for mismatch...Nikos Mavrogiannopoulos2017-08-041-2/+2
* _gnutls_x509_read_rsa_pss_params: fail early on unknown hash algorithmsNikos Mavrogiannopoulos2017-08-041-4/+12
* gnutls_pubkey_get_preferred_hash_algorithm: will take into account the RSA-PS...Nikos Mavrogiannopoulos2017-08-041-2/+14
* x509/output: Subject Public Key parameters are printed just before actual keyNikos Mavrogiannopoulos2017-08-041-65/+28
* gnutls_x509_crt_set_spki: be more verbose in parameter restrictionsNikos Mavrogiannopoulos2017-08-041-4/+14
* _gnutls_privkey_update_spki_params: use GNUTLS_E_CONSTRAINT_ERROR on mismatch...Nikos Mavrogiannopoulos2017-08-041-3/+2
* _gnutls_x509_write_rsa_pss_params: refuse to write RSA-PSS parameters we cann...Nikos Mavrogiannopoulos2017-08-041-0/+4
* gnutls_x509_*_get_signature_algorithm: simplified error handlingNikos Mavrogiannopoulos2017-08-034-18/+22
* _gnutls_x509_get_signature_algorithm: return negative error code on unknown a...Nikos Mavrogiannopoulos2017-08-031-3/+6
* compare_sig_algorithm: modify to work even for certs with unsupported signatu...Nikos Mavrogiannopoulos2017-08-031-9/+16
* pubkey_verify_hashed_data: simplified and made staticNikos Mavrogiannopoulos2017-08-033-29/+38
* pubkey_verify_data: accept signature entry instead of PK and hashNikos Mavrogiannopoulos2017-08-034-22/+26
* Added convention for missing SubjectPublicKeyInfo params fieldNikos Mavrogiannopoulos2017-08-0313-44/+83
* *set_spki(): return error on incompatible algorithmsNikos Mavrogiannopoulos2017-08-036-0/+29
* gnutls_x509_privkey_generate2: do not hardcode the RSA-PSS hash to SHA256Nikos Mavrogiannopoulos2017-08-033-3/+22
* _decode_pkcs8_rsa_pss_key: ensure we set the PSS PK identifierNikos Mavrogiannopoulos2017-08-031-1/+1
* cleanup: removed duplicate parameter in gnutls_pubkey_stNikos Mavrogiannopoulos2017-08-033-39/+33
* gnutls_x509_privkey_int: eliminated duplicate pk_algorithm fieldNikos Mavrogiannopoulos2017-08-038-60/+54
* cleanup: removed unnecessary/duplicate parameters in _dsa_q_to_hashNikos Mavrogiannopoulos2017-08-033-18/+14
* cleanup: removed unnecessary/duplicate parameters in functionsNikos Mavrogiannopoulos2017-08-034-15/+17
* cleanup: removed unnecessary/duplicate parameters in functionsNikos Mavrogiannopoulos2017-08-0311-51/+25
* abstract.h: added functions to read and write SPKI informationNikos Mavrogiannopoulos2017-08-034-0/+130
* gnutls_x509_privkey_set_spki: introduced function to update SPKI on a keyNikos Mavrogiannopoulos2017-08-033-0/+29
* x509.h: Renamed SPKI related functionsNikos Mavrogiannopoulos2017-08-036-130/+115
* _gnutls_pubkey_compatible_with_sig: enforce RSA-PSS requirementsNikos Mavrogiannopoulos2017-08-031-6/+20
* gnutls_pubkey_verify*: use common function to set RSA-PSS parametersNikos Mavrogiannopoulos2017-08-031-45/+43
* pkcs11: added support for signatures with RSA-PSSNikos Mavrogiannopoulos2017-08-034-64/+139
* gnutls_pk_params_st: renamed sign field to spkiNikos Mavrogiannopoulos2017-08-0310-23/+24
* Clarified the purpose of the spki params related functionsNikos Mavrogiannopoulos2017-08-0321-172/+251
* Pass the signature algorithm lower in the verification stackNikos Mavrogiannopoulos2017-08-037-50/+76
* gnutls_system_recv_timeout: doc updateNikos Mavrogiannopoulos2017-08-031-1/+1
* Set a default supported curveNikos Mavrogiannopoulos2017-08-022-4/+16
* _gnutls_figure_dh_params: do not use have_ffdhe flagNikos Mavrogiannopoulos2017-08-022-3/+8
* gnutls_priority_ecc_curve_list: avoid including groups into elliptic curves listNikos Mavrogiannopoulos2017-08-021-0/+13
* handshake: moved group negotiation after ciphersuite selectionNikos Mavrogiannopoulos2017-08-024-33/+48
* security_parameters: ease access to group information by keeping pointer to itNikos Mavrogiannopoulos2017-08-0213-51/+54
* security_parameters: simplified contents by keeping pointer to cipher_suite_e...Nikos Mavrogiannopoulos2017-08-0213-114/+54
* TLS: introduced support for RFC7919 groupsNikos Mavrogiannopoulos2017-08-0135-590/+943
* gnutls_priority_set: use reference countingNikos Mavrogiannopoulos2017-07-255-55/+29
* Introduced atomic.h to simplify handling of atomic integersNikos Mavrogiannopoulos2017-07-252-1/+82
* Revert "Documented use gnutls_priority_set2()."Nikos Mavrogiannopoulos2017-07-251-2/+0
* algorithms/mac: marked RIPEMD160 as insecure for certificatesNikos Mavrogiannopoulos2017-07-211-0/+1
* x509/verify: reject SHA1 in signature algorithms for certificate verificationNikos Mavrogiannopoulos2017-07-212-4/+4
* gnutls_sign_is_secure2: introducedNikos Mavrogiannopoulos2017-07-213-4/+28
* _gnutls_digest_is_secure_for_certs: introducedNikos Mavrogiannopoulos2017-07-213-26/+35
* mac: re-organized the hash algorithms tableNikos Mavrogiannopoulos2017-07-211-28/+109