summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Backported new verification functions for clients from 3.5.x branchbackport-new-verification-functionsNikos Mavrogiannopoulos2016-05-1917-126/+833
* tests: added test for gnutls_session_set_verify_functionNikos Mavrogiannopoulos2016-05-193-4/+317
* Added gnutls_session_set_verify_functionNikos Mavrogiannopoulos2016-05-195-5/+46
* gnutls-cli: allow operation with stdin inputNikos Mavrogiannopoulos2016-05-193-3/+50
* doc update [ci skip]Nikos Mavrogiannopoulos2016-05-171-1/+1
* doc updateNikos Mavrogiannopoulos2016-05-171-0/+3
* gnutls-cli: corrected check for OCSP verification successNikos Mavrogiannopoulos2016-05-171-1/+1
* gnutls_global_init: log gnutls' version on initializationNikos Mavrogiannopoulos2016-05-151-1/+1
* doc update [ci skip]Nikos Mavrogiannopoulos2016-05-121-0/+3
* tests: backported server name checksNikos Mavrogiannopoulos2016-05-122-1/+341
* server_name: only save the supported server names in the sessionNikos Mavrogiannopoulos2016-05-121-10/+14
* doc updateNikos Mavrogiannopoulos2016-05-101-0/+7
* cert cred: add the CN to the list of known hostnames only if no dns_namesNikos Mavrogiannopoulos2016-05-101-9/+14
* gnutls_certificate_set_key: import the DNS names of the certificatesNikos Mavrogiannopoulos2016-05-101-1/+25
* Revert "tests: ignore failure to load pkcs11 mock provider"Nikos Mavrogiannopoulos2016-05-033-3/+6
* tests: don't run pkcs11 mock module tests under buggy p11-kitNikos Mavrogiannopoulos2016-05-032-0/+6
* tests: ignore failure to load pkcs11 mock providerNikos Mavrogiannopoulos2016-05-033-6/+3
* Fixed _NETTLE_UPDATE macroNikos Mavrogiannopoulos2016-05-031-1/+1
* gnutls_certificate_set_key: duplicate the provided memoryNikos Mavrogiannopoulos2016-05-031-2/+11
* doc update [ci skip]Nikos Mavrogiannopoulos2016-05-031-1/+1
* doc updateNikos Mavrogiannopoulos2016-05-031-0/+9
* tests: added a basic PKCS#11 mock moduleNikos Mavrogiannopoulos2016-05-036-1/+3186
* pkcs11: find_cert_cb: do not use C_FindObjectsInit() when another is already ...Nikos Mavrogiannopoulos2016-05-031-35/+37
* pkcs11: the flag GNUTLS_PKCS11_OBJ_FLAG_OVERWRITE_TRUSTMOD_EXT will be respec...Nikos Mavrogiannopoulos2016-05-031-0/+18
* pkcs11: find_ext_cb: eliminated memory leakNikos Mavrogiannopoulos2016-05-031-0/+1
* gnutls_pkcs11_obj_get_exts: updated documentation [ci skip]Nikos Mavrogiannopoulos2016-05-021-4/+7
* corrected import issue in gnutls_privkey_import_ecc_rawNikos Mavrogiannopoulos2016-04-291-1/+1
* x509/privkey: in raw import functions set the parameter's algorithm typeNikos Mavrogiannopoulos2016-04-291-0/+3
* tests: enhanced dane testing with offline verification checksNikos Mavrogiannopoulos2016-04-261-34/+573
* dane: verification will not fail if a CA entry is encountered but cannot be v...Nikos Mavrogiannopoulos2016-04-261-3/+5
* doc: improved documentation on certificate and DANE verification functionsNikos Mavrogiannopoulos2016-04-262-11/+22
* _wrap_nettle_pk_derive: reject values of public key that are over the primeNikos Mavrogiannopoulos2016-04-181-10/+4
* handshake: do not overwrite the server's signature algorithmNikos Mavrogiannopoulos2016-04-131-1/+2
* gnutls_ocsp_resp_get_single: fail if thisUpdate is not available or unparsableNikos Mavrogiannopoulos2016-04-121-2/+3
* x509 output: don't warn about insecure algorithm when unknownNikos Mavrogiannopoulos2016-04-092-3/+3
* pkix.asn: corrected byKey definitionNikos Mavrogiannopoulos2016-04-082-2/+2
* name constraints: enforce the rules for IP constraints when addingNikos Mavrogiannopoulos2016-04-051-2/+13
* doc updateNikos Mavrogiannopoulos2016-04-021-0/+4
* ocsptool: use HTTP/1.0 for requestsNikos Mavrogiannopoulos2016-04-021-1/+1
* doc updateNikos Mavrogiannopoulos2016-03-301-0/+2
* x509/output: simplified cidr_to_string()Nikos Mavrogiannopoulos2016-03-301-33/+4
* x509/output: print RFC5280 CIDRs in name constraintsNikos Mavrogiannopoulos2016-03-301-9/+98
* system_recv_timeout(): verify that the file descriptor is acceptable for sele...Nikos Mavrogiannopoulos2016-03-301-0/+5
* doc updateNikos Mavrogiannopoulos2016-03-211-0/+5
* tests: template-test was updated for OCSP key purpose reorderingNikos Mavrogiannopoulos2016-03-211-6/+6
* certtool: do not require a CA for OCSP signingNikos Mavrogiannopoulos2016-03-211-12/+14
* x86-common: CPUID override will only work if CPU has already the capability p...Nikos Mavrogiannopoulos2016-03-181-10/+56
* doc updateNikos Mavrogiannopoulos2016-03-181-0/+9
* handshake: parse the mandatory to parse extension prior to any callback callNikos Mavrogiannopoulos2016-03-181-7/+7
* tests: verify that the post-client-hello callback has access to ALPN dataNikos Mavrogiannopoulos2016-03-181-0/+45