summaryrefslogtreecommitdiff
path: root/src/cli-debug.c
Commit message (Collapse)AuthorAgeFilesLines
* gnutls-cli-debug: terminate sessions which cannot be re-usedNikos Mavrogiannopoulos2016-11-131-2/+2
|
* gnutls-cli-debug: corrected TLS1.2 detectionNikos Mavrogiannopoulos2016-10-251-1/+1
|
* tools: allow socket_bye() to be used for non-polite terminationsNikos Mavrogiannopoulos2016-08-261-1/+1
|
* tools: TLS handling has been incorporated into socket_open()Nikos Mavrogiannopoulos2016-07-261-15/+20
| | | | | | This is of particular usage to the server IP address loop, since we can detect fast open errors and retry handshake to the next IP address.
* gnutls-cli-debug: replaced draft-ietf-tls-chacha20-poly1305-04 with RFC7905Nikos Mavrogiannopoulos2016-06-221-1/+1
|
* tools: allow specifying a hostname with a port attachedNikos Mavrogiannopoulos2016-05-301-5/+7
| | | | | That is: gnutls-cli www.example.com:443 is equivalent to gnutls-cli www.example.com -p 443
* gnutls-cli-debug: added tests for supported curvesNikos Mavrogiannopoulos2016-04-241-3/+4
|
* gnutls-cli-debug: added CHACHA20-POLY1305 detectionNikos Mavrogiannopoulos2016-04-241-0/+2
|
* gnutls-cli-debug: enable socket verbosity when --verbose is givenNikos Mavrogiannopoulos2016-04-191-0/+2
|
* tools: avoid extracting the value of the app-proto aliasNikos Mavrogiannopoulos2016-04-191-4/+4
| | | | | | Instead always extract the starttls-proto value, as it seems that libopts doesn't report any value for the former. This corrects the starttls capability of danetool and gnutls-cli-debug.
* tools: avoid relying on static buffers for service nameNikos Mavrogiannopoulos2016-04-181-3/+3
|
* gnutls-cli-debug: rephrased inappropriate fallback test description to match ↵Nikos Mavrogiannopoulos2015-12-101-1/+1
| | | | the rest
* tools: when the starttls-proto is specified automatically detect the port if ↵Nikos Mavrogiannopoulos2015-10-161-2/+6
| | | | not given
* gnutls-cli-debug: use RFC7627 instead of draft-ietf-tls-session-hashNikos Mavrogiannopoulos2015-09-171-1/+1
|
* gnutls-cli-debug: added check for inappropriate fallback supportNikos Mavrogiannopoulos2015-08-281-0/+1
|
* gnutls-cli-debug: test for AES-CCMNikos Mavrogiannopoulos2015-04-071-0/+4
|
* gnutls-cli-debug: disable unsupported TLS protocols as soonNikos Mavrogiannopoulos2015-03-061-8/+8
|
* gnutls-cli-debug: corrected the skip of ignored checksNikos Mavrogiannopoulos2015-01-021-1/+4
|
* tools: use OCSP functions only when OCSP is enabledNikos Mavrogiannopoulos2014-12-251-0/+2
|
* gnutls-cli-debug: Added check for whether %NO_EXTENSIONS is requiredNikos Mavrogiannopoulos2014-11-281-2/+2
|
* gnutls-cli-debug: Added check for sorted certificate chainNikos Mavrogiannopoulos2014-11-241-2/+3
|
* gnutls-cli-debug: check for OCSP status responseNikos Mavrogiannopoulos2014-11-141-0/+2
|
* added check for servers that disallow the SSL 3.0 record versionNikos Mavrogiannopoulos2014-11-131-0/+1
|
* gnutls-cli-debug: clarified textNikos Mavrogiannopoulos2014-11-061-1/+1
|
* gnutls-cli-debug: reorganized outputNikos Mavrogiannopoulos2014-11-041-19/+11
|
* moved the HTTPS server name outside of verbose tests; only run when the ↵Nikos Mavrogiannopoulos2014-11-041-1/+6
| | | | HTTPS protocol is used
* enhanced gnutls-cli-debug verbose output (uses files for mass text)Nikos Mavrogiannopoulos2014-11-041-8/+8
|
* gnutls-cli-debug: Added tests for EtM and extended master secret supportNikos Mavrogiannopoulos2014-11-041-25/+30
| | | | In addition reworked the output for existing tests.
* gnutls-cli-debug: added test that checks the fallback from TLS 1.6Nikos Mavrogiannopoulos2014-10-171-3/+9
|
* gnutls-cli/danetool: added a common check for hostname being an IPNikos Mavrogiannopoulos2014-08-131-2/+1
|
* gnutls-cli-debug: supports SMTP starttlsNikos Mavrogiannopoulos2014-08-091-47/+18
|
* gnutls-cli-debug: added AES and CAMELLIA to the list of default ciphersNikos Mavrogiannopoulos2014-08-061-4/+4
|
* gnutls-cli-debug should accept TLS 1.2-only serversDaniel Kahn Gillmor2014-01-091-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Without this patch, a TLS 1.2-only server will not be properly investigated by gnutls-cli-debug. e.g. a server like: gnutls-serv --x509keyfile=server/secret.key --x509certfile=server/x509.pem --priority 'NORMAL:-VERS-TLS-ALL:+VERS-TLS1.2' gets this failed analysis: 0 dkg@alice:~$ gnutls-cli-debug --port 5556 localhostrt 5556 localhost Resolving 'localhost'... Connecting to '::1:5556'... Checking for SSL 3.0 support... no Checking whether %COMPAT is required... yes Checking for TLS 1.0 support... no Checking for TLS 1.1 support... no Checking fallback from TLS 1.1 to... failed Checking for TLS 1.2 support... yes Checking whether we need to disable TLS 1.2... N/A Checking whether we need to disable TLS 1.1... no Server does not support any of SSL 3.0, TLS 1.0 and TLS 1.1 0 dkg@alice:~$ Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* explicitly set the gnulib functions for recv and send.Nikos Mavrogiannopoulos2013-12-211-0/+1
|
* gnutls-cli-debug tests for camellia-gcm.Nikos Mavrogiannopoulos2013-11-301-1/+3
|
* reindented codeNikos Mavrogiannopoulos2013-11-081-254/+257
|
* included programs no longer depend on GPL/LGPLv3 elements of gnulib to ↵Nikos Mavrogiannopoulos2013-08-051-1/+0
| | | | prevent their accidental inclusion in the library.
* gnulib only contains lgplv2 modulesNikos Mavrogiannopoulos2013-08-051-2/+0
|
* removed the RSA-EXPORT checksNikos Mavrogiannopoulos2013-04-091-8/+5
|
* Added several ifdefs to avoid using disabled code.Nikos Mavrogiannopoulos2013-03-131-0/+2
|
* Corrected issue in gnutls-cli-debug which tried connections to multiple hosts.Nikos Mavrogiannopoulos2013-01-291-2/+3
| | | | | | gnutls-cli-debug was trying to connect to all possible IP addresses of the host and failed if any was unavailable. Now it tries sequentially and accepts the first that is working. Reported by Daniel Kahn Gillmor.
* gnutls-cli-debug uses server name indication.Nikos Mavrogiannopoulos2012-11-071-0/+360