summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* gnutls_x509_crt_list_import: fixed leak on import failuretmp-cert-v1-rejectNikos Mavrogiannopoulos2017-02-171-0/+1
|
* tests: enhanced test suite to include creation of invalid certificatesNikos Mavrogiannopoulos2017-02-172-1/+227
| | | | | | | That is, check whether the creation of invalid V2 or V1 certificates will be detected, and that the correct error codes are returned. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* gnutls_x509_crt_sign2: refuse to sign invalid X.509 certificatesNikos Mavrogiannopoulos2017-02-173-16/+37
| | | | | | | That is, do not sign X.509 certificates which have fields that shouldn't be present on their corresponding version. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* gnutls_x509_crt_import: reject X.509v1 certificates with invalid fieldsNikos Mavrogiannopoulos2017-02-171-17/+53
| | | | | | | | | | | Refuse to import X.509v1 certificates which have fields that didn't exist in X.509v1 specification. That is the issuerUniqueID and subjectUniqueID fields. Resolves: #168 Resolves: #167 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: enhanced test suite to include invalid V1 certsNikos Mavrogiannopoulos2017-02-174-2/+96
| | | | | | | That is, added X.509v1 certificates with attributes that shouldn't have been presented (valid for X.509v2 only). Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* gnutls.pc: do not include libidn2 in Requires.privatetmp-stages-updatesNikos Mavrogiannopoulos2017-02-152-6/+8
| | | | | | | | The libidn2 versions available do not include libidn2.pc, thus the inclusion was causing problems when using pkg-config. Instead we include -lidn2 in Libs.private. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* .gitlab-ci.yml: Re-organized stagesNikos Mavrogiannopoulos2017-02-151-116/+161
| | | | | | | | The less CPU intensive tasks were moved to earlier stage, and the CPU intensive tasks are only spawned only after basic syntax and ABI checks have succeeded. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* gnutls.h: corrected typo [ci skip]Nikos Mavrogiannopoulos2017-02-121-1/+1
|
* <alloca.h> only if HAVE_ALLOCA_HMarcin Cieślak2017-02-092-0/+4
| | | | | | FreeBSD does know alloca() but has no such header Signed-off-by: Marcin Cieślak <saper@SAPER.INFO>
* doc: document the intention of the priority string usage [ci skip]Nikos Mavrogiannopoulos2017-02-051-2/+17
| | | | | | | | This documents the gnutls_set_default_priority() function, and how it is intended to be combined with an application that utilizes priority strings. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc updateNikos Mavrogiannopoulos2017-02-051-0/+4
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: modified tests for the disablement of 3DESNikos Mavrogiannopoulos2017-02-052-10/+10
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* Removed support for the 3DES cipher by defaultNikos Mavrogiannopoulos2017-02-051-6/+0
| | | | | | | | | That is a legacy cipher that is no longer needed to be included as backup cipher. Resolves #120 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* x509: optimize subject alternative name accesstmp-san-parsing-optimizationNikos Mavrogiannopoulos2017-02-053-47/+96
| | | | | | | | | | That reads SAN and IAN early on import, significantly reducing the running time of functions which iterate over the alternative names of a certificate, e.g., gnutls_x509_crt_check_hostname(). Relates #165 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* .travis.yml: list all logs on failuretmp-travis7-fixNikos Mavrogiannopoulos2017-02-041-0/+4
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: enable all IDNA tests when compiled with libidn2Nikos Mavrogiannopoulos2017-02-047-11/+26
| | | | | | Keep IDNA2003-only tests on the ifdef HAVE_LIBIDN. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* .travis.yml: updated instructions for travis buildstmp-travis5-fixNikos Mavrogiannopoulos2017-02-041-4/+4
| | | | | | Removed unbound and other minor fixes. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* extras/hex.h: do not use strlen as variable nametmp-fix-pkcs11-import-url4Nikos Mavrogiannopoulos2017-02-031-2/+2
| | | | | | That is, do not utilize a standard C function name as variable name. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* gnutls_pkcs11_obj_list_import_url4: always return an initialized pointerNikos Mavrogiannopoulos2017-02-031-0/+1
| | | | | | | | | When returning success, but no elements, gnutls_pkcs11_obj_list_import_url4, could have returned zero number of elements with a pointer that was uninitialized. Ensure that an initialized (i.e., null in that case), pointer is always returned. Reported by Jeremy Harris. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* .gitlab-ci.yml: use libidn2 on windows buildsNikos Mavrogiannopoulos2017-02-031-2/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* gnutls_heartbeat_allowed: corrected type on dummy wrappertmp-tz-fixNikos Mavrogiannopoulos2017-02-021-1/+1
| | | | | | | | That is, when compiling without heartbeat support, compilation could fail due to the dummy wrapper not returning the right type. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* Address test suite failure due to timezone differences.Nikos Mavrogiannopoulos2017-02-021-1/+1
| | | | | | Reported by Thorsten Glaser and Andreas Metzler. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc update [ci skip]Nikos Mavrogiannopoulos2017-01-311-1/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* gnutls_heartbeat_allowed: corrected return typeNikos Mavrogiannopoulos2017-01-312-2/+2
| | | | | | | This reflects better the fact that this function returns a boolean. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* _idn2_to_unicode_8z8z: do not err on mixed IDNA domainsNikos Mavrogiannopoulos2017-01-281-4/+1
| | | | | | | | That is allow domains of the form 'großes.xn--fa-hia.de'. The drawback is that we may not err early on invalid formatted names. We however delegate any such decisions to libidn2. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* README.md: added link to travis build for 3.5.x [ci skip]Nikos Mavrogiannopoulos2017-01-271-1/+1
| | | | | | | In addition to adding a link to travis build for 3.5.x branch removed link on 3.4.x branch. It is no longer active. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* heartbeat extension: doc updatetmp-libidn2Nikos Mavrogiannopoulos2017-01-261-2/+3
| | | | | | Document how to calculate the total TLS data transmitted. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* str-idna: improved error handlingNikos Mavrogiannopoulos2017-01-261-2/+5
| | | | | | | In addition to detecting input with invalid characters in _idn2_to_unicode_8z8z(), we also add support for case insensitive punycode header. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* Updated auto-generated filesNikos Mavrogiannopoulos2017-01-263-0/+8
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* str-idna: cleanups in IDNA handlingNikos Mavrogiannopoulos2017-01-261-9/+14
| | | | | | | | Ensure safe operation even with broken libidn2, and make sure that we properly allocate memory to caller, even on complex library configuration. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* fuzz: added run-afl helper scriptNikos Mavrogiannopoulos2017-01-262-2/+47
| | | | | | | This script which allows running the fuzzying tests locally using american fuzzy lop. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* fuzz: Added IDNA encoding/decoding fuzzying unitsNikos Mavrogiannopoulos2017-01-2612-1/+138
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* Move IDNA functionality to str-idna.c from str-unicode.cNikos Mavrogiannopoulos2017-01-263-312/+340
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* tests: use the exported API for IDNA testingNikos Mavrogiannopoulos2017-01-261-13/+28
| | | | | | | In addition group together the tests which require libidn2 >= 0.14. This allows the tests to succeed. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* tools: depend on gnutls_idna_map() instead of using directly libidn/libidn2Nikos Mavrogiannopoulos2017-01-261-30/+10
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* Exported gnutls_idna_map() and gnutls_idna_reverse_map()Nikos Mavrogiannopoulos2017-01-265-44/+47
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* .gitlab-ci.yml: added run with IDNA2003Nikos Mavrogiannopoulos2017-01-261-0/+18
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* tests: simplified str-idnaNikos Mavrogiannopoulos2017-01-261-39/+58
| | | | | | | This separates the directions that are tested (utf-8 -> punycode and vice versa). Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* configure: added flag to force IDNA2003Nikos Mavrogiannopoulos2017-01-261-7/+18
| | | | | | | That allows to compile with libidn even if libidn2 is present, and can be used to check IDNA2003 support. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* Add support for libidn2 (IDNA 2008 + TR46)Tim Rühsen2017-01-258-29/+195
| | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* pkcs7 decryption: addressed memory leak in PBES1-DES-CBC-MD5 handlingtmp-better-abi-checkNikos Mavrogiannopoulos2017-01-251-0/+3
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* minitasn1: updated to libtasn1 4.10Nikos Mavrogiannopoulos2017-01-252-4/+21
|
* configure: do not disable valgrind tests unless explicitly specifiedNikos Mavrogiannopoulos2017-01-251-4/+2
| | | | | | ... or unless we are in release build. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* Makefile.am: increased the number of releases to perform ABI checks withNikos Mavrogiannopoulos2017-01-254-3/+87239
| | | | | | That is added 3.4.0, 3.4.17 and 3.5.8. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* tests: verify that a written certificate will inherit its ID from privkeytmp-assign-same-pkcs11-idNikos Mavrogiannopoulos2017-01-242-0/+167
| | | | | | | That is, whether p11tool will do the right thing and figure the proper ID to use for a certificate object, if the public key is available. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* p11tool: re-use ID from corresponding objects when writing certificatesNikos Mavrogiannopoulos2017-01-241-3/+284
| | | | | | | | | | | That is when writing a certificate which has a corresponding public key, or private key in the token, ensure that we use the same ID for the objects. That eases the work of someone writing objects to certificates, and does not require him to manually detect the object IDs. Resolves #160 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* .gitlab-ci.yml: add Fedora/x86_64/no-toolsAlon Bar-Lev2017-01-231-0/+18
| | | | Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
* valgrind: support separate builddir for suppressions.valgrindAlon Bar-Lev2017-01-234-11/+9
| | | | Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
* configure: remove void statementAlon Bar-Lev2017-01-231-3/+0
| | | | Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
* tests: skip tests that requires tools if tools are disabledAlon Bar-Lev2017-01-231-1/+5
| | | | | | building with --disable-tools should not cause test failure. Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
View Lorry Controller Status