summaryrefslogtreecommitdiff
path: root/src/cli.c
Commit message (Collapse)AuthorAgeFilesLines
* gnutls-cli: allow operation with stdin inputNikos Mavrogiannopoulos2016-05-191-3/+33
| | | | | | | That is once commands from stdin are given, they are not only sent to server, but we also wait for a response prior to exiting. Resolves #96
* gnutls-cli: corrected check for OCSP verification successNikos Mavrogiannopoulos2016-05-171-1/+1
|
* gnutls-cli: fix invalid initialization in cert_verify_ocsp()Nikos Mavrogiannopoulos2016-03-111-1/+1
|
* tools: when the starttls-proto is specified automatically detect the port if ↵Nikos Mavrogiannopoulos2015-10-161-1/+4
| | | | not given
* gnutls-cli: Fixed Possible Memory LeakSaurav Babu2015-06-181-0/+1
| | | | | | | | This patch fixes possible memory leak in psk_callback() function, rawkey is allocated memory by gnutls_malloc() and is not freed when gnutls_hex_decode() returns with error Signed-off-by: Saurav Babu <saurav.babu@samsung.com>
* gnutls-cli: when no certificate is sent, notify the userNikos Mavrogiannopoulos2015-04-201-1/+1
|
* gnutls-cli: added --save-cert optionNikos Mavrogiannopoulos2015-02-061-0/+41
|
* handle differently OCSP responses that are revoked and of unknown statusNikos Mavrogiannopoulos2015-02-041-1/+6
|
* don't be so verbose about the OCSP nonce; it is universally unsupportedNikos Mavrogiannopoulos2015-01-191-1/+1
|
* OCSP check the whole cert chainTim Ruehsen2015-01-191-55/+65
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* gnutls-cli: added --starttls-proto optionNikos Mavrogiannopoulos2015-01-121-0/+6
|
* gnutls_priority_string_list: allow printing the special keywords as well.Nikos Mavrogiannopoulos2014-11-211-2/+25
|
* Fixed SRTP profile configuration in cli.c and serv.c.David Weber2014-11-141-12/+16
| | | | | | | I have tested the fix in 3.3.10. This commit is UNTESTED as i am unable to compile gnutls (./configure complains about gl_INIT and ggl_INIT). Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* gnutls-cli: allow printing the certificates in OCSP responses when ↵Nikos Mavrogiannopoulos2014-11-141-2/+6
| | | | --print-cert is specified
* gnutls-cli: print the OCSP response in verbose modeNikos Mavrogiannopoulos2014-11-131-5/+34
|
* gnutls-cli: added option to save the OCSP responseNikos Mavrogiannopoulos2014-11-131-0/+20
|
* gnutls-cli: added option --priority-listNikos Mavrogiannopoulos2014-10-161-0/+23
|
* fixed compilation warningsNikos Mavrogiannopoulos2014-09-251-12/+12
|
* gnutls-cli: added --fips140-mode command line optionNikos Mavrogiannopoulos2014-08-141-0/+10
| | | | That option will report the status of the FIPS140-2 mode in the library.
* gnutls-cli/danetool: added a common check for hostname being an IPNikos Mavrogiannopoulos2014-08-131-1/+1
|
* danetool: if the certificate to verify against is not provide it try to ↵Nikos Mavrogiannopoulos2014-08-081-47/+5
| | | | obtain it
* gnutls-cli: Do not try to load the system CA trust if --insecure is specified.Nikos Mavrogiannopoulos2014-06-171-1/+5
|
* gnutls-cli's benchmark-soft-ciphers is no more.Nikos Mavrogiannopoulos2014-05-271-6/+1
| | | | It could not be emulated with the new library.
* gnutls-cli: if dane verification is used but not PKIX only check the end ↵Nikos Mavrogiannopoulos2014-05-131-1/+7
| | | | certificate.
* Do not set "NORMAL" as default priority string.Nikos Mavrogiannopoulos2014-05-051-3/+0
| | | | That is, allow the library to select the appropriate default.
* only fail DANE verification if status is non-zeroNikos Mavrogiannopoulos2014-04-281-1/+1
|
* gnutls-cli will no longer allow the session to proceed if DANE verification ↵Nikos Mavrogiannopoulos2014-04-191-4/+5
| | | | fails.
* Both DANE and PKI verification are advisory when --tofu is being used.Nikos Mavrogiannopoulos2014-04-181-40/+44
|
* documentation update.Nikos Mavrogiannopoulos2014-04-171-2/+2
|
* Do not print certificates twice.Nikos Mavrogiannopoulos2014-04-171-2/+0
| | | | That will improve the visibility of messages of the various verification methods.
* Replaced gnutls_certificate_verify_peers3() with the extendable ↵Nikos Mavrogiannopoulos2014-04-091-1/+1
| | | | | | | gnutls_certificate_verify_peers(). That will allow adding new functionality to verification without the need to add new functions.
* Allow using the --provider parameter in gnutls-cli and certtool to specify a ↵Nikos Mavrogiannopoulos2014-04-051-1/+21
| | | | PKCS #11 module.
* New option --stricttofu for gnutls-cliJens Lechtenboerger2014-02-231-4/+12
| | | | | | | | | | | | | | With option --tofu, gnutls-cli waits with a yes-no-question upon certificate changes. I added the option --stricttofu that omits the question and fails instead. The contribution is in accordance to the "Developer's Certificate of Origin" as found in the file doc/DCO.txt. Best wishes Jens Signed-off-by: Jens Lechtenbörger <jens.lechtenboerger@fsfe.org>
* When sending a nonce in OCSP check if it is available on the reply.Nikos Mavrogiannopoulos2014-02-181-2/+14
|
* corrected key ID size checkNikos Mavrogiannopoulos2013-12-231-1/+1
|
* explicitly set the gnulib functions for recv and send.Nikos Mavrogiannopoulos2013-12-211-0/+2
|
* reindented codeNikos Mavrogiannopoulos2013-11-081-1516/+1456
|
* removed warningsNikos Mavrogiannopoulos2013-10-261-7/+9
|
* cli: add missing stdbool.hAlon Bar-Lev2013-10-251-0/+1
| | | | | Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com> Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* support inline command infrastructure in gnutls-cliRaj Raman2013-10-041-76/+306
| | | | Signed-off-by: Raj Raman <rajramanca@gmail.com>
* included programs no longer depend on GPL/LGPLv3 elements of gnulib to ↵Nikos Mavrogiannopoulos2013-08-051-1/+0
| | | | prevent their accidental inclusion in the library.
* gnulib only contains lgplv2 modulesNikos Mavrogiannopoulos2013-08-051-2/+0
|
* removed unused varNikos Mavrogiannopoulos2013-06-101-1/+1
|
* avoid struct sigaction in win32Nikos Mavrogiannopoulos2013-06-021-0/+2
|
* use sigaction instead of signal in gnutls-cliNikos Mavrogiannopoulos2013-05-211-1/+6
|
* Revert "break the loop when a SIGALRM has been received"Nikos Mavrogiannopoulos2013-05-211-3/+2
| | | | This reverts commit c3b3a0c6bd14a542e11873ebe0975a5ddd0ab46b.
* break the loop when a SIGALRM has been receivedNikos Mavrogiannopoulos2013-05-181-2/+3
|
* corrected API usage.Nikos Mavrogiannopoulos2013-05-051-1/+1
|
* Improved ALPN support in gnutls-cliNikos Mavrogiannopoulos2013-05-051-2/+11
|
* Added --alpn option to cliNikos Mavrogiannopoulos2013-05-051-0/+6
|