summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
...
* | | privkey: Allow deinit after failed exportEric Blake2022-11-021-0/+2
* | | lib: Consistenly return sane results for all *_init()Eric Blake2022-11-0211-3/+15
* | | gnutls_init: Always initialize *sessionEric Blake2022-11-021-3/+13
* | | build: Silence cppcheck false positiveEric Blake2022-11-021-2/+2
* | | Handle private keys with lowercase hex digits in DEK-InfoTim Kosse2022-11-021-16/+11
* | | Merge branch 'zfridric_devel3' into 'master'Zoltán Fridrich2022-10-311-81/+20
|\ \ \ | |/ / |/| |
| * | Fix removal of duplicate certs during verificationZoltan Fridrich2022-10-311-81/+20
* | | Merge branch 'zfridric_devel' into 'master'Zoltán Fridrich2022-10-262-0/+6
|\ \ \ | |/ / |/| |
| * | Fix handshake segfault if no privkey is suppliedZoltan Fridrich2022-10-212-0/+6
* | | Merge branch 'zfridric_devel2' into 'master'Zoltán Fridrich2022-10-261-7/+8
|\ \ \
| * | | compress_certificate: fix err code on invalid lengthZoltan Fridrich2022-10-241-1/+1
| * | | Ignore unknown algorithms received in compress_certificate extensionZoltan Fridrich2022-10-241-6/+7
| |/ /
* | | Merge branch 'wip/dueno/ccm-tlen' into 'master'Daiki Ueno2022-10-253-0/+133
|\ \ \ | |/ / |/| |
| * | cipher: add restriction on CCM tag length under FIPS modeDaiki Ueno2022-10-253-0/+133
* | | gnutls_rnd manage memory per-threadZoltan Fridrich2022-10-191-73/+73
* | | Merge branch 'zfridric_devel' into 'master'Zoltán Fridrich2022-10-186-3/+22
|\ \ \ | |/ / |/| |
| * | Add GNUTLS_NO_STATUS_REQUEST flag and NO_STATUS_REQUEST priority string modifierZoltan Fridrich2022-10-186-3/+22
* | | fips: only mark HMAC as approved in PBKDF2Daiki Ueno2022-10-172-2/+19
* | | fips: mark gnutls_key_generate with short key sizes non-approvedDaiki Ueno2022-10-171-3/+18
* | | fips: mark PBKDF2 with short key and output sizes non-approvedDaiki Ueno2022-10-171-0/+5
* | | Merge branch 'wip/dueno/ecdsa-hash-check' into 'master'Daiki Ueno2022-10-054-34/+58
|\ \ \
| * | | fips: mark composite signature API not-approvedDaiki Ueno2022-09-291-12/+30
| * | | fips: fix checking on hash algorithm used in ECDSADaiki Ueno2022-09-293-22/+28
| | |/ | |/|
* | | KTLS: fallback to defaultFrantisek Krenzelok2022-10-052-5/+25
* | | KTLS: set write alert callbackFrantisek Krenzelok2022-10-053-9/+24
* | | KTLS: receive key updateFrantisek Krenzelok2022-10-051-1/+7
* | | KTLS: send update key requestFrantisek Krenzelok2022-10-053-7/+42
* | | KTLS: set new keys for keyupdateFrantisek Krenzelok2022-10-051-0/+9
* | | KTLS: set key on specific interfacesFrantisek Krenzelok2022-10-053-7/+14
| |/ |/|
* | Make XTS key check failure not fatalZoltan Fridrich2022-10-032-51/+23
* | Merge branch 'zfridric_devel' into 'master'Zoltán Fridrich2022-09-297-41/+41
|\ \
| * | Reduce sensitive languageZoltan Fridrich2022-09-207-41/+41
| |/
* | Merge branch 'wip/dueno/cpuid-symbol-rename' into 'master'Zoltán Fridrich2022-09-2719-59/+59
|\ \ | |/ |/|
| * accelerated: avoid symbol export mismatch with _gnutls_x86_cpuid_sDaiki Ueno2022-09-2019-59/+59
* | compress-cert: support compression of client certificatesDaiki Ueno2022-09-193-3/+26
|/
* Report system config file location via gnutls-cliZoltan Fridrich2022-09-121-0/+1
* Merge branch 'fix_nettle_alignment' into 'master'Daiki Ueno2022-08-301-2/+2
|\
| * cipher: Ensure correct alignmentDoug Nazar2022-08-281-2/+2
* | gnutls_session_channel_binding: perform check on "tls-exporter"Daiki Ueno2022-08-291-1/+16
|/
* Merge branch 'wip/dueno/cpuid-fixes' into 'master'Daiki Ueno2022-08-241-11/+38
|\
| * accelerated: clear AVX bits if it cannot be queried through XSAVEDaiki Ueno2022-08-231-11/+38
* | Unload custom allocators in gnutls_crypto_deinit()Tobias Heider2022-08-231-3/+5
* | Merge branch 'restrict-allowlisting-api' into 'master'Daiki Ueno2022-08-177-190/+641
|\ \
| * | update documentation on allowlisting APIAlexander Sosedkin2022-08-161-15/+54
| * | plumb allowlisting API through the config, restrict usage to early timesAlexander Sosedkin2022-08-167-148/+432
| * | lib/priority: extract parts of cfg_apply into cfg_*_set_array*Alexander Sosedkin2022-08-151-39/+178
| * | lib/priority: move sigalgs filtering to set_ciphersuite_listAlexander Sosedkin2022-08-151-18/+7
* | | Merge branch 'wip/dueno/fips-rsa-key-sizes' into 'master'Daiki Ueno2022-08-161-23/+31
|\ \ \
| * | | nettle: mark RSA SigVer operation approved for known modulus sizesDaiki Ueno2022-08-131-5/+13
| * | | nettle: check RSA modulus size in bits rather than bytesDaiki Ueno2022-08-121-20/+20
| | |/ | |/|