summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* DTLS1_3: resolve epoch & decrypt record numberFrantisek Krenzelok2023-02-208-22/+262
* DTLS1_3: Hello Retry RequestFrantisek Krenzelok2023-01-274-8/+7
* DTLS1_3: Disable TLS1_3 compatibility modeFrantisek Krenzelok2023-01-272-2/+3
* DTLS1_3: Add ciphersuitesFrantisek Krenzelok2023-01-271-2/+7
* DTLS1_3: set default versionFrantisek Krenzelok2023-01-273-6/+21
* DTLS1_3: Enable extentions for DTLSFrantisek Krenzelok2023-01-278-9/+13
* DTLS1_3: add ciphersuitesFrantisek Krenzelok2023-01-273-2/+29
* trust: make filesystem path construction flexibleDaiki Ueno2023-01-117-63/+314
* Merge branch 'zfridric_devel2' into 'master'Zoltán Fridrich2023-01-104-8/+53
|\
| * Fix error codes for unsolicited compressed certificateZoltan Fridrich2023-01-101-1/+5
| * Forbid unsolicited CompressedCertificate messageZoltan Fridrich2023-01-033-1/+4
| * Fail when received cert is compressed with disabled methodZoltan Fridrich2023-01-033-3/+34
| * Slight reformating of compress_certificate codeZoltan Fridrich2023-01-032-5/+12
* | Merge branch 'wip/dueno/srtp' into 'master'Daiki Ueno2023-01-062-13/+31
|\ \
| * | srtp: support AES-GCM profilesDaiki Ueno2022-12-242-13/+31
* | | Merge branch 'wip/dueno/max-record-send-size' into 'master'Daiki Ueno2023-01-064-12/+9
|\ \ \ | |_|/ |/| |
| * | build: remove MAX_RECORD_SEND_SIZE in favor of max_record_send_sizeDaiki Ueno2022-12-244-12/+9
| |/
* | Merge branch 'https' into 'master'Daiki Ueno2022-12-2734-52/+34
|\ \
| * | Replace FSF snail mail addresses with URLStefan Kangas2022-12-2712-30/+12
| * | Prefer HTTPS to HTTP in URLsStefan Kangas2022-12-2722-22/+22
| |/
* | Fix typosStefan Kangas2022-12-272-3/+3
|/
* record: enable check on CCS content also in TLS 1.2Daiki Ueno2022-12-211-8/+25
* Merge branch 'master' into 'master'Daiki Ueno2022-12-203-9/+13
|\
| * fix memory leak when process client ecdh key exchagexuraoqing2022-12-191-3/+7
| * fix log print server write mac key size errorxuraoqing2022-12-121-1/+1
| * fix log print client write mac key size errorxuraoqing2022-12-121-1/+1
| * fix get credential type with key exchange algorithm failxuraoqing2022-12-121-4/+4
* | cert-auth: alloc_and_load_x509_certs: check requested cert countDaiki Ueno2022-12-181-1/+7
* | build: avoid using implicit int to adhere to C99Daiki Ueno2022-12-181-1/+1
* | Merge branch 'wip/dueno/stubs' into 'master'Daiki Ueno2022-12-166-108/+122
|\ \
| * | build: remove code guarded with no longer defined ENABLE_RSA_EXPORTDaiki Ueno2022-12-161-96/+0
| * | build: remove checks on no longer defined ENABLE_OPENPGPDaiki Ueno2022-12-161-2/+0
| * | srp: provide stubs of public functions even if SRP is disabledDaiki Ueno2022-12-166-10/+122
* | | Merge branch 'zfridric_devel' into 'master'Zoltán Fridrich2022-12-142-155/+174
|\ \ \ | |/ / |/| |
| * | Use soname instead of file name in fipshmac sectionsZoltan Fridrich2022-12-072-155/+174
* | | KTLS: Invalidate session on ktls errorFrantisek Krenzelok2022-12-042-4/+11
* | | KTLS: add ciphersuitesFrantisek Krenzelok2022-12-021-6/+153
|/ /
* | Merge branch 'wip/dueno/fipshmac-followup2' into 'master'Daiki Ueno2022-11-302-15/+18
|\ \
| * | fips: rename .gnutls.hmac back to .libgnutls.so.*.hmacDaiki Ueno2022-11-302-15/+18
* | | Merge branch 'wip/dueno/ktls-fixes2' into 'master'Daiki Ueno2022-11-303-21/+23
|\ \ \ | |/ / |/| |
| * | priority: accept "ktls = false" in configuration fileDaiki Ueno2022-11-281-0/+2
| * | includes: move KTLS function definition out of <gnutls/socket.h>Daiki Ueno2022-11-282-21/+21
* | | build: suppress GCC analyzer warningsDaiki Ueno2022-11-224-3/+17
|/ /
* | nettle: mark non-compliant RSA-PSS salt length to be not-approvedDaiki Ueno2022-11-201-0/+9
* | Remove library path checking from FIPS integrity checkZoltan Fridrich2022-11-151-5/+0
* | Fipshmac: always use realpathsZoltan Fridrich2022-11-151-5/+15
* | Merge branch 'wip/dueno/rehandshake-tickets' into 'master'Zoltán Fridrich2022-11-154-0/+10
|\ \
| * | handshake: clear server's session ticket indication at rehandshakeDaiki Ueno2022-11-054-0/+10
* | | priority: fix typos in documentationEric Blake2022-11-021-3/+3
* | | priority: Use gnutls_free consistentlyEric Blake2022-11-021-1/+1