summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* released 3.5.5gnutls_3_5_5Nikos Mavrogiannopoulos2016-10-091-1/+1
|
* doc updateNikos Mavrogiannopoulos2016-10-091-9/+9
|
* doc: mention gnutls_session_ext_register and its supplemental data equivalentNikos Mavrogiannopoulos2016-10-091-4/+4
|
* bumped versionNikos Mavrogiannopoulos2016-10-092-3/+3
|
* TLS extensions: only cache the extension IDs from exts that the server supportsNikos Mavrogiannopoulos2016-10-091-3/+9
| | | | | | | That avoids imposing any artificial limits on the number of extensions that a server can handle. Resolves #136
* tests: check the registration of multiple extensionsNikos Mavrogiannopoulos2016-10-091-2/+25
|
* doc: added gnutls_datum_t and giovec_t to indexesNikos Mavrogiannopoulos2016-10-081-0/+2
| | | | Resolves #137
* pkcs7: removed any limits in hex encoding of attributesNikos Mavrogiannopoulos2016-10-071-5/+4
|
* certtool: lift any limits in print_raw()Nikos Mavrogiannopoulos2016-10-071-6/+5
|
* certtool: added safety net when generating a certificate requestNikos Mavrogiannopoulos2016-10-071-1/+5
| | | | | | That is, do not allow specifying --generate-request --load-pubkey without specifying --load-privkey. Previously if --load-pubkey would have been used, it would have been ignored, causing confusion to the users.
* doc update [ci skip]Nikos Mavrogiannopoulos2016-10-061-0/+4
|
* Makefile.am: improved the files-update outputNikos Mavrogiannopoulos2016-10-061-3/+3
|
* updated auto-generated filesNikos Mavrogiannopoulos2016-10-063-0/+8
|
* _gnutls_utf8_to_ucs2: force NFC normalization form in windowsNikos Mavrogiannopoulos2016-10-061-2/+2
|
* doc updateNikos Mavrogiannopoulos2016-10-061-0/+2
|
* tests: added checks for gnutls_session_supplemental_registerNikos Mavrogiannopoulos2016-10-063-2/+326
|
* Added session-specific supplemental data handlingNikos Mavrogiannopoulos2016-10-065-36/+123
| | | | | This allows a caller to add supplemental data handling which will only be made available for a specific session.
* tests: added checks for gnutls_session_ext_registerNikos Mavrogiannopoulos2016-10-063-2/+300
|
* Added session-specific TLS extensionsNikos Mavrogiannopoulos2016-10-066-85/+230
| | | | | This allows a caller to add extensions which will be made available for a specific session.
* guile: Implement session record ports using the Guile 2.2 API.tmp-guile2.2Ludovic Courtès2016-10-051-5/+82
| | | | | | | | | | | | | | This allows the Guile bindings to be built and used with Guile >= 2.1.4, which introduced a new port API. * guile/src/core.c (USING_GUILE_BEFORE_2_2): New macro. (session_record_port_type) [!USING_GUILE_BEFORE_2_2]: New definition. (read_from_session_record_port, write_to_session_record_port) (make_session_record_port) [!USING_GUILE_BEFORE_2_2]: New functions. Conditionalize the other same-named functions on USING_GUILE_BEFORE_2_2. (scm_init_gnutls_session_record_port_type): Use 'read_from_session_record_port' when !USING_GUILE_BEFORE_2_2.
* guile: Test 'set-session-transport-fd!'.Ludovic Courtès2016-10-051-1/+1
| | | | | * guile/tests/session-record-port.scm: Use 'set-session-transport-fd!' on the server side.
* guile: Guile 2.x 'uniform-vector-read!' replacement returns 0 upon EOF.Ludovic Courtès2016-10-051-3/+6
| | | | | | | | This problem was never hit in practice because our tests always got the non-EOF case. * guile/modules/gnutls/build/tests.scm (uniform-vector-read!) [guile-2]: Return 0 upon EOF.
* win32: install the .def files in libdir instead of bindirNikos Mavrogiannopoulos2016-10-052-2/+2
| | | | Suggested by Eli Zaretskii.
* certtool: include arpa/inet.h unconditionallyNikos Mavrogiannopoulos2016-10-051-1/+3
| | | | | That is because we use inet_pton() which is either provided by the OS, or by gnulib.
* gnutls-cli: fix compilation warning in win32Nikos Mavrogiannopoulos2016-10-051-1/+1
|
* Fixed the version in libgnutls-openssl.def fileNikos Mavrogiannopoulos2016-10-052-3/+5
| | | | | Previously the version set in that file would have been (incorrectly) equal to the version of the main library.
* tests: avoid using %zd for formatted outputNikos Mavrogiannopoulos2016-10-052-3/+3
| | | | It is not supported by windows.
* tests: skip tests which depend on libidn functionality if build without libidnNikos Mavrogiannopoulos2016-10-052-0/+7
|
* tests: fixed compilation of pkcs11-privkey-always-authtmp-win32Nikos Mavrogiannopoulos2016-10-041-1/+1
|
* Fix build of system/keys-win.c with older mingwNikos Mavrogiannopoulos2016-10-041-1/+28
| | | | Patch by Eli Zaretskii <eliz@gnu>
* tests: introduced further parallelization in provable* teststmp-armv8Nikos Mavrogiannopoulos2016-10-034-44/+58
| | | | This runs independent verification steps in parallel, improving running time significantly.
* tests: provable-dh-default check is too slow and is only run when the ↵Nikos Mavrogiannopoulos2016-10-031-1/+5
| | | | complete suite is requested
* tests: split provable-privkey into multiple checksNikos Mavrogiannopoulos2016-10-035-58/+161
| | | | This allows the tests to be run in parallel.
* tests: provable-dh was split into two programsNikos Mavrogiannopoulos2016-10-033-19/+53
| | | | | This allows the test to be run more efficiently when run in parallel.
* .gitlab-ci.yml: do not run the full test suite on valgrind testNikos Mavrogiannopoulos2016-10-032-10/+14
| | | | This allows the CI test to run on reasonable time.
* doc updateNikos Mavrogiannopoulos2016-10-031-0/+3
|
* more files to ignoreNikos Mavrogiannopoulos2016-10-031-0/+14
|
* devel/openssl: updated to 1.1.0 releaseNikos Mavrogiannopoulos2016-10-031-0/+0
|
* aarch64: added optimized AES-CCM modeNikos Mavrogiannopoulos2016-10-034-2/+171
|
* Imported Andy Polyakov's implementation of AES-GCM in aarch64Nikos Mavrogiannopoulos2016-10-037-67/+462
|
* Imported Andy Polyakov's implementation of AES in aarch64Nikos Mavrogiannopoulos2016-10-039-9/+1176
|
* Added HMAC-SHA* optimizations for aarch64Nikos Mavrogiannopoulos2016-10-034-1/+332
|
* Imported Andy Polyakov's implementations for SHA* in aarch64Nikos Mavrogiannopoulos2016-10-0320-2/+4216
|
* fix zero-termination in _gnutls_server_name_set_raw() for large server namesNikos Mavrogiannopoulos2016-10-032-4/+7
|
* _gnutls_check_id_for_change: added check for NULL usernameNikos Mavrogiannopoulos2016-10-031-1/+4
| | | | | This is not required, but may prevent from issues if code-reorganizations which may set a NULL username, occur.
* gnutls_*_crt_print: better error checkingNikos Mavrogiannopoulos2016-10-032-2/+10
|
* tests: added test for CKA_ALWAYS_AUTHENTICATE handling in PKCS#11Nikos Mavrogiannopoulos2016-10-035-2/+248
| | | | | This checks whether GnuTLS properly calls login prior to any sign operations when the object is marked as CKA_ALWAYS_AUTHENTICATE.
* pkcs11: improved debugging output in pkcs11_loginNikos Mavrogiannopoulos2016-10-031-1/+1
|
* name constraints: removed unused variableNikos Mavrogiannopoulos2016-10-031-2/+0
|
* tools: clarify errors when reading filesNikos Mavrogiannopoulos2016-09-302-8/+8
| | | | | | | | | | | | | | | | | | | Previously certtool and ocsptool would report: ``` $ certtool --generate-request --load-privkey=foo --outfile=bar Generating a PKCS #10 certificate request... reading --load-privkey: foo ``` And that doesn't make apparent what the issue was. Modified to print: ``` error reading --load-privkey: foo ``` Report and initial patch by Thibault Nélis. Resolves !97