summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Generated.gnutls_2_6_4Simon Josefsson2009-02-061-0/+88
|
* Version 2.6.4.Simon Josefsson2009-02-061-1/+1
|
* Merge NEWS entries from 2.4.x branch.Simon Josefsson2009-02-061-0/+60
|
* Move down revocation check to revert code to how it looked before.Simon Josefsson2009-02-061-16/+16
| | | | | | The idea is that if you have marked a cert as trusted, you may want to trust it even though some authority has revoked it. This changes back how this code used to work.
* Make it possible to trust intermediary certificates.Simon Josefsson2009-02-022-33/+96
| | | | | Based on tiny patch from "Douglas E. Engert" <deengert@anl.gov> in <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3351/focus=3376>.
* gnutls_handshake when sending client hello during aNikos Mavrogiannopoulos2009-01-272-1/+17
| | | | | rehandshake, will not offer a version number larger than the current. Reported by Tristan Hill <stan@saticed.me.uk>.
* result_size in gnutls_hex_encode behaves as documented. It now holds the ↵Nikos Mavrogiannopoulos2009-01-271-2/+5
| | | | size of the result. Reported by John Brooks.
* Use -I's in libextra/gl for stdint.h.Simon Josefsson2009-01-213-58/+83
|
* Fix typos.Simon Josefsson2009-01-091-2/+2
|
* Permit V1 Certificate Authorities properly.Simon Josefsson2009-01-092-3/+22
| | | | | | | | Before they were mistakenly rejected even though GNUTLS_VERIFY_ALLOW_ANY_X509_V1_CA_CRT and/or GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT were supplied. Reported by "Douglas E. Engert" <deengert@anl.gov> in <http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3351>.
* Fix NEWS entry.Simon Josefsson2009-01-071-2/+6
|
* backport fix to deprecate MD5 hashes during X.509 certificate validationDaniel Kahn Gillmor2009-01-062-0/+7
|
* Add.Simon Josefsson2008-12-151-0/+4
|
* Don't return from void function.Simon Josefsson2008-12-151-1/+1
| | | | | Reported by Jeff Cai <jeff.cai@sun.com> in https://savannah.gnu.org/support/?106549
* Don't return from void function.Simon Josefsson2008-12-151-1/+1
| | | | | Reported by Jeff Cai <jeff.cai@sun.com> in https://savannah.gnu.org/support/?106549
* Bump versions.Simon Josefsson2008-12-122-2/+10
|
* Generated.gnutls_2_6_3Simon Josefsson2008-12-121-0/+53
|
* Version 2.6.3.Simon Josefsson2008-12-121-1/+1
|
* Fix whitespace.Simon Josefsson2008-12-121-5/+5
|
* Add.Simon Josefsson2008-12-101-0/+4
|
* Add.Simon Josefsson2008-12-101-0/+7
|
* Bump versions. Add NEWS item.Simon Josefsson2008-12-102-2/+10
|
* gcry_control (GCRYCTL_ENABLE_QUICK_RANDOM, 0) is being called afterNikos Mavrogiannopoulos2008-12-051-3/+3
| | | | libgcrypt initialization (gnutls_global_init).
* reintroduced the self signed certificate removal code. This time shouldn't ↵Nikos Mavrogiannopoulos2008-12-051-0/+18
| | | | have the drawbacks that used to.
* return non zero error code on error conditions.Nikos Mavrogiannopoulos2008-11-211-4/+5
|
* Corrected bug which caused a rehandshake request to be ignored by ↵Nikos Mavrogiannopoulos2008-11-211-1/+1
| | | | | | gnutls-cli. Now a rehandshake is being performed on request.
* Make it build.Simon Josefsson2008-11-181-0/+1
|
* Corrected memory leak in _gnutls_free_auth_info(). Trace and patch by ↵Nikos Mavrogiannopoulos2008-11-151-0/+11
| | | | Michael Weiser.
* Generated.gnutls_2_6_2Simon Josefsson2008-11-121-0/+21
|
* Version 2.6.2.Simon Josefsson2008-11-121-1/+1
|
* Bump version. Add NEWS item.Simon Josefsson2008-11-122-2/+13
|
* Remove check of last certificate in path is self signed.Simon Josefsson2008-11-121-11/+0
| | | | | | | | Causes crashes further down in the code for certificate chains that only contain one self-signed certificate. Still protects against the GNUTLS-SA-2008-3 vulnerabillity. Reported by Michael Meskes <meskes@debian.org> in <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505279>.
* Generated.gnutls_2_6_1Simon Josefsson2008-11-101-0/+101
|
* Version 2.6.1.Simon Josefsson2008-11-101-1/+1
|
* Fix, suggested by Martin.Simon Josefsson2008-11-071-3/+3
|
* Mention security link.Simon Josefsson2008-11-071-0/+3
|
* Cosmetic fixes.Simon Josefsson2008-11-062-6/+5
|
* Add.Simon Josefsson2008-11-061-0/+1
|
* Revert "* added BER octet string decoder from libtasn1."Simon Josefsson2008-11-065-233/+140
| | | | This reverts commit 47a0c91a38c458653be1645ff162c53253cbeadd.
* Add.Simon Josefsson2008-11-061-0/+6
|
* Drop self signed certificate from certificate chain before validating ↵Martin von Gagern2008-11-061-11/+11
| | | | | | certificates. This avoids the penultimate certificate to get incorrectly trusted. Signed-off-by: Simon Josefsson <simon@josefsson.org>
* Add missing prototype for gnutls_srp_set_prime_bits.Simon Josefsson2008-11-042-0/+7
|
* * added BER octet string decoder from libtasn1.Nikos Mavrogiannopoulos2008-11-035-140/+233
| | | | * added the tree generation optimizations.
* Revert broken commit.Simon Josefsson2008-10-231-18/+2
|
* certtool: print a PKCS #8 key even if it is not encrypted.Nikos Mavrogiannopoulos2008-10-222-4/+29
|
* Add.Simon Josefsson2008-10-111-0/+4
|
* Add static qualifiers on internal symbols.Simon Josefsson2008-10-112-2/+3
| | | | Tiny patch from Aaron Ucko <ucko@ncbi.nlm.nih.gov>.
* Fix.Simon Josefsson2008-10-071-1/+2
|
* More test compilation fixes with minitasn1.Ludovic Courtès2008-10-071-0/+6
| | | | | | | * tests/Makefile.am (AM_CPPFLAGS)[ENABLE_MINITASN1]: Add minitasn1 directory. Signed-off-by: Simon Josefsson <simon@josefsson.org>
* Add.Simon Josefsson2008-10-071-0/+2
|