diff options
| author | Daiki Ueno <ueno@gnu.org> | 2021-05-06 12:41:40 +0200 |
|---|---|---|
| committer | Daiki Ueno <ueno@gnu.org> | 2021-11-29 13:21:53 +0100 |
| commit | 0ecce7191dfd78387f2994253d37ed1df50d563d (patch) | |
| tree | fb1d66e9329cdad3ef617c02b96c77aca1c8dd3e /doc/Makefile.am | |
| parent | ee3af8d6e863bd958cbe7468f9cbe09d803f4e92 (diff) | |
| download | gnutls-0ecce7191dfd78387f2994253d37ed1df50d563d.tar.gz | |
priority: support allowlisting in configuration file
This adds a new mode of interpreting the [overrides] section. If
"override-mode" is set to "allowlisting" in the [global] section, all
the algorithms (hashes, signature algorithms, curves, and versions)
are initially marked as insecure/disabled. Then the user can enable
them by specifying allowlisting keywords such as "secure-hash" in the
[overrides] section.
Signed-off-by: Daiki Ueno <ueno@gnu.org>
Co-authored-by: Alexander Sosedkin <asosedkin@redhat.com>
Diffstat (limited to 'doc/Makefile.am')
| -rw-r--r-- | doc/Makefile.am | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/doc/Makefile.am b/doc/Makefile.am index 562a85fa87..4f25bf0d5e 100644 --- a/doc/Makefile.am +++ b/doc/Makefile.am @@ -974,6 +974,8 @@ FUNCS += functions/gnutls_digest_get_oid FUNCS += functions/gnutls_digest_get_oid.short FUNCS += functions/gnutls_digest_list FUNCS += functions/gnutls_digest_list.short +FUNCS += functions/gnutls_digest_set_secure +FUNCS += functions/gnutls_digest_set_secure.short FUNCS += functions/gnutls_dtls_cookie_send FUNCS += functions/gnutls_dtls_cookie_send.short FUNCS += functions/gnutls_dtls_cookie_verify @@ -1010,6 +1012,8 @@ FUNCS += functions/gnutls_ecc_curve_get_size FUNCS += functions/gnutls_ecc_curve_get_size.short FUNCS += functions/gnutls_ecc_curve_list FUNCS += functions/gnutls_ecc_curve_list.short +FUNCS += functions/gnutls_ecc_curve_set_enabled +FUNCS += functions/gnutls_ecc_curve_set_enabled.short FUNCS += functions/gnutls_encode_ber_digest_info FUNCS += functions/gnutls_encode_ber_digest_info.short FUNCS += functions/gnutls_encode_gost_rs_value @@ -1730,6 +1734,8 @@ FUNCS += functions/gnutls_protocol_get_version FUNCS += functions/gnutls_protocol_get_version.short FUNCS += functions/gnutls_protocol_list FUNCS += functions/gnutls_protocol_list.short +FUNCS += functions/gnutls_protocol_set_enabled +FUNCS += functions/gnutls_protocol_set_enabled.short FUNCS += functions/gnutls_psk_allocate_client_credentials FUNCS += functions/gnutls_psk_allocate_client_credentials.short FUNCS += functions/gnutls_psk_allocate_server_credentials @@ -2024,6 +2030,10 @@ FUNCS += functions/gnutls_sign_is_secure2 FUNCS += functions/gnutls_sign_is_secure2.short FUNCS += functions/gnutls_sign_list FUNCS += functions/gnutls_sign_list.short +FUNCS += functions/gnutls_sign_set_secure +FUNCS += functions/gnutls_sign_set_secure.short +FUNCS += functions/gnutls_sign_set_secure_for_certs +FUNCS += functions/gnutls_sign_set_secure_for_certs.short FUNCS += functions/gnutls_sign_supports_pk_algorithm FUNCS += functions/gnutls_sign_supports_pk_algorithm.short FUNCS += functions/gnutls_srp_allocate_client_credentials |