summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* released 3.3.0pre0gnutls_3_3_0pre0Nikos Mavrogiannopoulos2014-03-272-2/+2
|
* using the SYSTEM priority string will fail if there is no system fileNikos Mavrogiannopoulos2014-03-271-15/+16
|
* doc updateNikos Mavrogiannopoulos2014-03-271-2/+4
|
* reformatted NEWS entriesNikos Mavrogiannopoulos2014-03-271-25/+25
|
* The %COMPAT keyword no longer reduces security.Nikos Mavrogiannopoulos2014-03-274-17/+35
| | | | | | | Introduced the LEGACY keyword which will enable the settings used in GnuTLS 3.2.x for NORMAL keyword. That is to be used in cases where compatibility with weak or misconfigured servers is required.
* replaced wrong manpage generation parameterNikos Mavrogiannopoulos2014-03-271-13/+13
|
* fixed gdoc documentationNikos Mavrogiannopoulos2014-03-275-6/+6
|
* update README to reflect gmplib licensing changeDaniel Kahn Gillmor2014-03-271-5/+7
| | | | | | | | | | As of version 6.0.0, gmplib moved its licensing from LGPLv3+ to a dual-license LGPLv3+/GPLv2+ license. This licensing change affects the licenses under which versions of GnuTLS can be redistributed. Update the README to reflect this change.
* Fix patch version calculation when it contains non-numeric charsNikos Mavrogiannopoulos2014-03-271-1/+1
|
* print RSA-EXPORT statusNikos Mavrogiannopoulos2014-03-271-0/+1
|
* use isascii instead of isprint for internationalized name detectionNikos Mavrogiannopoulos2014-03-271-1/+1
|
* bump so versionNikos Mavrogiannopoulos2014-03-261-2/+2
|
* fixes for 'medium' levelNikos Mavrogiannopoulos2014-03-262-2/+2
|
* add a check for invalid DH parameters.Nikos Mavrogiannopoulos2014-03-261-0/+6
|
* Add checks in tests for the DHE prime and exponent size.Nikos Mavrogiannopoulos2014-03-262-0/+40
|
* doc updateNikos Mavrogiannopoulos2014-03-261-1/+2
|
* fixed test to use the correct function names.Nikos Mavrogiannopoulos2014-03-211-9/+9
|
* Severely simplified hostname matching.Nikos Mavrogiannopoulos2014-03-216-26/+51
| | | | | | | | Now only wildcards only the leftmost position of the string are allowed (followed by at least two components), and are only taken into account into ascii strings. Non-ascii strings are compared byte-by-byte. That means that wildcards in the form bar*foo.example.com are no longer accepted, as well as wildcards of the form *.*.*.example.com.
* use commit suffix for functions that return a status code.Nikos Mavrogiannopoulos2014-03-213-15/+13
|
* Simplifications in the RNG code.Nikos Mavrogiannopoulos2014-03-202-19/+32
|
* doc updateNikos Mavrogiannopoulos2014-03-201-0/+2
|
* the longer e-mail caused crash in autogen's manpage generationNikos Mavrogiannopoulos2014-03-201-1/+1
|
* renamed some of the newly introduced functionsNikos Mavrogiannopoulos2014-03-2014-257/+257
|
* set the invalid flag when the owner is unexpected.Nikos Mavrogiannopoulos2014-03-201-1/+1
|
* Changed the behaviour in wildcard acceptance in certificates.Nikos Mavrogiannopoulos2014-03-193-6/+66
| | | | | | Wildcards are only accepted when there are more than two domain components after the wildcard. This will prevent accepting certificates from CAs that issued '*.com', or 'www.*'.
* doc updateNikos Mavrogiannopoulos2014-03-191-0/+4
|
* Added more key usage flags in the test for x509-extensions.Nikos Mavrogiannopoulos2014-03-191-91/+111
|
* x509-extensions test will fail if an unhandled extension is found.Nikos Mavrogiannopoulos2014-03-191-1/+1
|
* ship the gperf file and the generated one.Nikos Mavrogiannopoulos2014-03-191-2/+4
|
* doc updateNikos Mavrogiannopoulos2014-03-198-29/+323
|
* documented the new X.509 extension APINikos Mavrogiannopoulos2014-03-191-47/+102
|
* Certtool can now write more than a single crl_dist_point.Nikos Mavrogiannopoulos2014-03-193-23/+39
|
* Added unit tests for new APINikos Mavrogiannopoulos2014-03-197-59/+918
|
* Added new API to handle X.509 extensions.Nikos Mavrogiannopoulos2014-03-1915-1800/+4177
| | | | | | | | | | | | This API handles the X.509 extensions in separate, allowing to parse similarly formatted extensions stored in other structures. In addition functions that simplify the extraction of extensions from known structures were added: - gnutls_x509_crq_get_extension_data2() - gnutls_x509_crl_get_extension_data2() - gnutls_x509_crt_get_extension_data2() The old functions were rewritten to use the new API.
* doc updateNikos Mavrogiannopoulos2014-03-141-0/+2
|
* Corrected error checking in _gnutls_x509_ext_gen_proxyCertInfoNikos Mavrogiannopoulos2014-03-141-3/+3
|
* doc updateNikos Mavrogiannopoulos2014-03-131-1/+1
|
* initialize pointerNikos Mavrogiannopoulos2014-03-121-1/+1
|
* serv.c Fix memory leak for *crtinfo pointer. The reference is lost if an ↵Luis G.F2014-03-121-3/+6
| | | | | | allocation error occured. Signed-off-by: Luis G.F <luisgf@luisgf.es>
* use the number of seconds as serial in 32-bit systemsNikos Mavrogiannopoulos2014-03-111-2/+6
|
* Only check PK compatibility in client side but also when using openpgp certs.Nikos Mavrogiannopoulos2014-03-111-0/+9
|
* corrected initializerNikos Mavrogiannopoulos2014-03-111-2/+2
|
* shortend static function names.Nikos Mavrogiannopoulos2014-03-111-190/+121
|
* verify that the algorithm of the received certificate matches the expected.Nikos Mavrogiannopoulos2014-03-113-15/+56
|
* doc updateNikos Mavrogiannopoulos2014-03-101-0/+6
|
* The xssl experimental library was removed.Nikos Mavrogiannopoulos2014-03-1016-1704/+7
| | | | | While the idea of a high level library is nice, there are no resources to maintain an additional library.
* Added option to enable linking with nettle-miniNikos Mavrogiannopoulos2014-03-093-6/+16
|
* re-enabled certificate verificationNikos Mavrogiannopoulos2014-03-081-1/+5
|
* ciphersuites that utilize SHA256 or SHA384 are only available in TLS 1.0Nikos Mavrogiannopoulos2014-03-081-39/+39
| | | | | | The SSL 3.0 protocol (rfc6101) uses a variant of HMAC that is only defined for MD5 and SHA1. Thus if such a ciphersuite is negotiated under SSL 3.0, it will during MAC initialization.
* stricter type usageNikos Mavrogiannopoulos2014-03-0822-55/+63
|
View Lorry Controller Status