summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
...
* nettle/pk: use nonce level for RSA paddingNikos Mavrogiannopoulos2017-03-201-2/+3
* Avoid deprecation warnings when including gnutls/abstract.hMartin Storsjo2017-03-181-1/+1
* gnutls.h: added definitions to obtain the maximum element in several enumerat...Nikos Mavrogiannopoulos2017-03-171-5/+10
* Introduced flag GNUTLS_VERIFY_ALLOW_SIGN_WITH_SHA1Nikos Mavrogiannopoulos2017-03-164-3/+20
* Introduced the %VERIFY_ALLOW_BROKEN priority string optionNikos Mavrogiannopoulos2017-03-162-0/+6
* Allow reverting the SHA1 ban as a signature algorithmNikos Mavrogiannopoulos2017-03-161-1/+7
* algorithms: tag SHA1 as insecure algorithmNikos Mavrogiannopoulos2017-03-161-1/+1
* nettle/rnd: introduced time limit for key generatorNikos Mavrogiannopoulos2017-03-161-9/+34
* _gnutls_pk_generate_keys: separate between ephemeral and long-term keysNikos Mavrogiannopoulos2017-03-166-17/+28
* nettle/pk: use the nonce level for digital signaturesNikos Mavrogiannopoulos2017-03-161-3/+3
* gnutls_pkcs11_privkey_init: document limitation on created object [ci skip]Nikos Mavrogiannopoulos2017-03-132-3/+18
* pkcs11: re-open privkey session handle on CKR_SESSION_HANDLE_INVALIDtmp-pkcs11-more-unit-testsNikos Mavrogiannopoulos2017-03-131-3/+11
* doc updateNikos Mavrogiannopoulos2017-03-131-12/+12
* gnutls_pkcs11_obj_get_info: don't include the terminator into output sizeNikos Mavrogiannopoulos2017-03-131-1/+4
* lib: unconditionally enable the self-check functionstmp-pkcs11-avoid-locksNikos Mavrogiannopoulos2017-03-132-7/+2
* pkcs11: re-open private key session inside a locked sectionNikos Mavrogiannopoulos2017-03-133-34/+67
* pkcs11: introduced locks to PKCS#11 private key structureNikos Mavrogiannopoulos2017-03-131-0/+24
* pkcs11: during scan, leave the provider loop asapNikos Mavrogiannopoulos2017-03-121-15/+15
* Do not attempt to parse a 32-bit integer if a packet is not 4 bytes.Alex Gaynor2017-03-111-1/+1
* PKCS8/PKCS12: enforce a maximum number of iterationsNikos Mavrogiannopoulos2017-03-093-3/+7
* Do not attempt to parse a 32-bit integer if a packet is not 4 bytes.Alex Gaynor2017-03-091-1/+1
* sysrng-linux: define _rnd_get_system_entropy unconditionallyNikos Mavrogiannopoulos2017-03-091-1/+2
* Added openpgp stub fileNikos Mavrogiannopoulos2017-03-082-1/+703
* Rewritten gnutls_x509_rdn_get() and gnutls_x509_rdn_get2()Nikos Mavrogiannopoulos2017-03-081-43/+25
* gnutls_privkey_export_x509: doc updateNikos Mavrogiannopoulos2017-03-081-2/+3
* priority: do not enable HMAC-MD5 by defaultNikos Mavrogiannopoulos2017-03-081-1/+0
* gnutls.h: introduced GNUTLS_E_TLS_PACKET_DECODING_ERROR [ci skip]Nikos Mavrogiannopoulos2017-03-082-2/+3
* ext/signature: error on invalid extension formatNikos Mavrogiannopoulos2017-03-071-0/+2
* _gnutls_proc_x509_server_crt: return GNUTLS_E_CERTIFICATE_ERROR on parsing errorNikos Mavrogiannopoulos2017-03-071-0/+1
* alert: GNUTLS_E_NO_CERTIFICATE_FOUND maps to GNUTLS_A_DECODE_ERRORNikos Mavrogiannopoulos2017-03-071-1/+1
* read_client_hello: use integer for extensions sizeNikos Mavrogiannopoulos2017-03-071-1/+2
* ext/signature: reject an extension with padded dataNikos Mavrogiannopoulos2017-03-071-0/+3
* ext/signature: reject an extension size of zeroNikos Mavrogiannopoulos2017-03-071-1/+1
* gnutls_record_recv: do not accept a client hello while handshake is in progressNikos Mavrogiannopoulos2017-03-071-0/+1
* read_client_hello: fail early on illegally formatted messageNikos Mavrogiannopoulos2017-03-072-1/+9
* _gnutls_parse_extensions: do not fail on empty extensions fieldNikos Mavrogiannopoulos2017-03-071-1/+9
* alert: GNUTLS_E_PK_INVALID_PUBKEY maps to GNUTLS_A_ILLEGAL_PARAMETERNikos Mavrogiannopoulos2017-03-071-0/+1
* alerts: separated record overflow from decode error alertsNikos Mavrogiannopoulos2017-03-074-3/+9
* auth: failures of _gnutls_mpi_init_scan_nz map to GNUTLS_E_RECEIVED_ILLEGAL_P...Nikos Mavrogiannopoulos2017-03-072-12/+12
* nettle/rnd-fips: combined the FIPS-compliant generators to twoNikos Mavrogiannopoulos2017-03-061-15/+5
* nettle/rnd: use two random generators instead of 3Nikos Mavrogiannopoulos2017-03-061-19/+26
* nettle/pk: corrected call to gnutls_rnd() for rnd_nonce_funcNikos Mavrogiannopoulos2017-03-061-1/+1
* nettle/rnd: specify different limits for rekey in PRNGsNikos Mavrogiannopoulos2017-03-061-6/+14
* nettle/pk: use the GNUTLS_RND_RANDOM level for DH/DSA paramsNikos Mavrogiannopoulos2017-03-061-2/+2
* crypto.h: include gnutls.h to obtain required typesNikos Mavrogiannopoulos2017-03-061-0/+2
* rnd: reduce calls to _rnd_get_system_entropyNikos Mavrogiannopoulos2017-03-061-7/+7
* rnd: when reseeding the generators use the next best generatorNikos Mavrogiannopoulos2017-03-061-23/+24
* Added _gnutls_lib_force_operationalNikos Mavrogiannopoulos2017-03-063-0/+7
* pk: always use _gnutls_switch_lib_stateNikos Mavrogiannopoulos2017-03-062-24/+34
* rnd: switched to 3 chacha-based PRNGs for all security levelsNikos Mavrogiannopoulos2017-03-067-282/+67
View Lorry Controller Status