summaryrefslogtreecommitdiff
path: root/.gitignore
Commit message (Collapse)AuthorAgeFilesLines
* nettle: vendor in Curve448 and Ed448 implementationDaiki Ueno2020-01-231-0/+1
| | | | Signed-off-by: Daiki Ueno <dueno@redhat.com>
* tests: add test for revoked OCSP responsetmp-ocsp-revocationDaiki Ueno2020-01-101-0/+1
| | | | | | | This adds a test that exercises a failed handshake upon receipt of an OCSP response with the "revoked" status. Signed-off-by: Daiki Ueno <dueno@redhat.com>
* crypto-api: add gnutls_aead_cipher_{en,de}cryptv2tmp-encryptv2Daiki Ueno2019-08-091-0/+1
| | | | | | | This adds an in-place equivalent of gnutls_aead_cipher_encrypt() and gnutls_aead_cipher_decrypt(), that works on data buffers. Signed-off-by: Daiki Ueno <dueno@redhat.com>
* iov: add iterator interface for giovec_tDaiki Ueno2019-08-091-0/+1
| | | | | | | This adds an iterator interface over giovec_t array, extracting a fixed sized block. Signed-off-by: Daiki Ueno <dueno@redhat.com>
* pk: implement deterministic ECDSA/DSADaiki Ueno2019-08-081-0/+1
| | | | | | | This exposes the deterministic ECDSA/DSA functionality through the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag. Signed-off-by: Daiki Ueno <dueno@redhat.com>
* pkcs11: ignore login error when traversing tokensDaiki Ueno2019-07-111-0/+1
| | | | | | | | | | | | | | | If a token is a general access device, it is expected that login attempt to that token returns error: https://github.com/p11-glue/p11-kit/blob/master/trust/module.c#L852 On the other hand, _pkcs11_traverse_tokens treats the error as fatal and stops iteration. This behavior prevents object search without token specifier if such tokens are registered in the system. Reported by Stanislav Zidek in https://bugzilla.redhat.com/show_bug.cgi?id=1705478 Signed-off-by: Daiki Ueno <dueno@redhat.com>
* tls13/key_update: ignore multiple key updates instead of errortmp-keyupdate-fixesDaiki Ueno2019-06-051-0/+1
| | | | | | | | This fixes the multiple KeyUpdate messages handling in commit 65e2aa80d114d4bef095d129c2eda475e473244a, where illegal_parameter is sent even if the limit doesn't exceed. Signed-off-by: Daiki Ueno <dueno@redhat.com>
* server auth: disable TLS 1.3 if no signature algorithm is usableDaiki Ueno2019-05-201-0/+1
| | | | | | | | | | This is a server side counterpart of 005a4d04145707daad9588acedfdb5f6cd97c80c. Instead of signalling an error when no algorithm is usable in TLS 1.3, it downgrades the session to TLS 1.2 with a warning. Signed-off-by: Daiki Ueno <dueno@redhat.com>
* ext/record_size_limit: distinguish sending and receiving limitstmp-record-sizesDaiki Ueno2019-05-141-0/+1
| | | | | | | | | | | | | | | | The previous behavior was that both sending and receiving limits are negotiated to be the same value. It was problematic when: - client sends a record_size_limit with a large value in CH - server sends a record_size_limit with a smaller value in EE - client updates the limit for both sending and receiving, upon receiving EE - server sends a Certificate message larger than the limit With this patch, each peer maintains the sending / receiving limits separately so not to confuse with the contradicting settings. Signed-off-by: Daiki Ueno <dueno@redhat.com>
* tests: make datefudge check robusterDaiki Ueno2019-04-191-0/+1
| | | | | | | | | When checking datefudge availability under cross-compiling environment with a binfmt wrapper, it is not sufficient to check against the host executable. This instead uses a test executable compiled for the target architecture. Signed-off-by: Daiki Ueno <dueno@redhat.com>
* prf: add function to retrieve early keying materialDaiki Ueno2019-04-191-0/+1
| | | | | | | | | This adds a new function gnutls_prf_early, which shall be called in a handshake hook waiting for GNUTLS_HANDSHAKE_CLIENT_HELLO. The test needs to be run in a datefudge wrapper as the early secrets depend on the current time (through PSK). Signed-off-by: Daiki Ueno <dueno@redhat.com>
* .gitignore: ignore tests/libpkcs11mock2.laNikos Mavrogiannopoulos2019-04-161-0/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* tests: add post-handshake auth test using PKCS#11 tokenDaiki Ueno2019-04-071-0/+1
| | | | | | | This adds a test that exercise the client's auth rejection logic, using the RSA-PSS disabled PKCS #11 token. Signed-off-by: Daiki Ueno <dueno@redhat.com>
* Update ax_code_coverage.m4 to latest release of autoconf-archivetmp-update-ax-code-coverageTim Rühsen2019-02-221-0/+2
| | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* .gitignore: add test filesAlon Bar-Lev2019-01-271-2/+5
| | | | Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
* tests: check record_size_limit is reset after resumptionDaiki Ueno2019-01-231-0/+1
| | | | Signed-off-by: Daiki Ueno <dueno@redhat.com>
* auto-generate the AUTHORS filetmp-authorsNikos Mavrogiannopoulos2019-01-191-0/+1
| | | | | | | | | The original file was unmaintained since long time. This is now auto-generated from the git shortlog, at release time. Relates: #606 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* Remove auto-generated gnulib files from repoTim Rühsen2019-01-021-0/+2
| | | | | | | | Bootstrapping with latest gnulib updated both files, so they are obviously auto-generated files which do not belong into the repository. Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* Implemented support for raw public-key functionality (RFC7250).Tom Vrancken2018-12-151-0/+2
| | | | Signed-off-by: Tom Vrancken <dev@tomvrancken.nl>
* .gitignore: ignore more files and sort them alphabeticallyDaiki Ueno2018-11-241-77/+90
| | | | Signed-off-by: Daiki Ueno <dueno@redhat.com>
* build: minor cleanup of mech-list.h generationtmp-autogen-bakDaiki Ueno2018-11-131-0/+1
| | | | Signed-off-by: Daiki Ueno <dueno@redhat.com>
* TLS 1.3: implement anti-replay measure using ClientHello recordingDaiki Ueno2018-11-121-0/+1
| | | | | | | This implements ClientHello recording outlined in section 8.2 of RFC 8446. Signed-off-by: Daiki Ueno <dueno@redhat.com>
* tests: add tests for early dataDaiki Ueno2018-11-121-0/+1
| | | | Signed-off-by: Daiki Ueno <dueno@redhat.com>
* .gitignore: updatedNikos Mavrogiannopoulos2018-09-141-1/+16
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: introduced test for post-handshake auth + PSKNikos Mavrogiannopoulos2018-07-021-0/+1
| | | | | | Relates #489 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* .gitignore: added new test executablesNikos Mavrogiannopoulos2018-06-271-119/+212
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* Update .gitignore files according to bootstrapDmitry Eremin-Solenikov2018-06-271-0/+1
| | | | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* Add bootstrap + bootstrap.confTim Rühsen2018-06-141-290/+9
| | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* fuzzer: Initial check in for improved fuzzingTim Rühsen2017-08-161-0/+1
| | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* .gitignore: ignore new testsNikos Mavrogiannopoulos2017-07-101-0/+30
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* .gitignore: more files to ignoreNikos Mavrogiannopoulos2017-03-211-0/+5
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* .gitignore: more files to ignoreNikos Mavrogiannopoulos2017-03-131-58/+74
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* fuzz: Added IDNA encoding/decoding fuzzying unitsNikos Mavrogiannopoulos2017-01-261-0/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* valgrind: support separate builddir for suppressions.valgrindAlon Bar-Lev2017-01-231-1/+0
| | | | Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
* gitignore: update [ci skip]Alon Bar-Lev2017-01-051-1/+15
| | | | Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
* gitignore: sort()Alon Bar-Lev2017-01-051-354/+354
| | | | Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
* tools: use stamp files to allow parallel build of autogen filesNikos Mavrogiannopoulos2016-11-291-0/+1
| | | | | | | Autogen seems to output on the creates files gradually, something that makes 'make' believe that the command is complete prior to the output file being fully populated. The current approach uses stamp files to ensure that no incomplete files are used for compilation.
* more files to ignoreNikos Mavrogiannopoulos2016-11-231-0/+16
|
* more files to ignoreNikos Mavrogiannopoulos2016-11-211-0/+9
|
* more files to ignoreNikos Mavrogiannopoulos2016-10-141-0/+12
|
* more files to ignoreNikos Mavrogiannopoulos2016-10-031-0/+14
|
* tests: added test for CKA_ALWAYS_AUTHENTICATE handling in PKCS#11Nikos Mavrogiannopoulos2016-10-031-0/+1
| | | | | This checks whether GnuTLS properly calls login prior to any sign operations when the object is marked as CKA_ALWAYS_AUTHENTICATE.
* tests: Add tests for X509 IP constraintsMartin Ukrop2016-08-091-0/+1
| | | | | | | | | | | | | | | | - Add dedicated test file name-constraints-ip for IP tests. - Test the following: * Generation and saving of valid name constraints. * Trying to save invalid IP constraints. * Reading the saved constraints. * constraints_check() calls for both IPv4 and IPv6. * IP constraints intersection (simple, empty, mediocre, complicated). * IPv4/IPv6 constraints interaction and various corner cases. - IPs/CIDRs are printed in logs in case of failure. - Add 2 new chain tests (positive, negative). - Add generated test executable to ignored files. Signed-off-by: Martin Ukrop <mukrop@redhat.com>
* tests: Add more IP conversion unit testsMartin Ukrop2016-08-091-0/+1
| | | | | | | | - Renamed ip-in-cidr test to ip-utils. - Added built binary to .gitignore. - Added new tests for gnutls_x509_cidr_to_rfc5280. Signed-off-by: Martin Ukrop <mukrop@redhat.com>
* Add more ignored filesMartin Ukrop2016-08-091-0/+4
| | | | | | | | * .tmp and .swp for text editor files * Makefile.user created by Qt Creator * gl/tests/ctype.h as it is generated from ctype.h.in Signed-off-by: Martin Ukrop <mukrop@redhat.com>
* more files to ignoreNikos Mavrogiannopoulos2016-07-281-0/+3
|
* .gitignore: more tests files to ignoreNikos Mavrogiannopoulos2016-07-261-0/+9
|
* removed auto-generated files from the repositoryNikos Mavrogiannopoulos2016-07-181-0/+4
|
* tests: added openssl compatibility tests for AES-GCM cipherNikos Mavrogiannopoulos2016-07-051-0/+1
|
* more files to ignoreNikos Mavrogiannopoulos2016-06-301-0/+12
|
View Lorry Controller Status