summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* fips: use larger prime for DH self-teststmp-dh-2048Daiki Ueno2020-10-072-16/+130
| | | | | | | | According to FIPS140-2 IG 7.5, the minimum key size of FFC through 2030 is defined as 2048 bits. This updates the relevant self-test using ffdhe3072 defined in RFC 7919. Signed-off-by: Daiki Ueno <ueno@gnu.org>
* Merge branch 'tmp-sh-tests' into 'master'Daiki Ueno2020-10-03159-815/+801
|\ | | | | | | | | tests: simplify shell-script usage See merge request gnutls/gnutls!1337
| * tests: add missing ${EXEEXT}Daiki Ueno2020-10-035-6/+6
| | | | | | | | | | | | Pointed by Andreas Metzler. Signed-off-by: Daiki Ueno <ueno@gnu.org>
| * tests: prolong timeout in wait_for_portDaiki Ueno2020-10-031-6/+7
| | | | | | | | | | | | | | gnutls-serv invocations in cert-tests/dsa can take long time to launch if valgrind tests are enabled. Signed-off-by: Daiki Ueno <ueno@gnu.org>
| * tests: remove unused lock facility using lockfile-createDaiki Ueno2020-10-031-8/+0
| | | | | | | | Signed-off-by: Daiki Ueno <ueno@gnu.org>
| * tests: create lock for tests using GETPORTDaiki Ueno2020-10-032-3/+23
| | | | | | | | | | | | | | This fixes a race condition in the timings between when a free port is detected and when the port is actually used. Signed-off-by: Daiki Ueno <ueno@gnu.org>
| * tests: simplify program detectionDaiki Ueno2020-10-037-56/+54
| | | | | | | | Signed-off-by: Daiki Ueno <ueno@gnu.org>
| * tests: rewrite launch_server using launch_bare_serverDaiki Ueno2020-10-036-158/+150
| | | | | | | | Signed-off-by: Daiki Ueno <ueno@gnu.org>
| * tests: remove launch_pkcs11_serverDaiki Ueno2020-09-252-10/+1
| | | | | | | | | | | | This function is only used by testpkcs11.sh. Signed-off-by: Daiki Ueno <ueno@gnu.org>
| * tests: remove unused first argument from launch_serverDaiki Ueno2020-09-2533-176/+168
| | | | | | | | Signed-off-by: Daiki Ueno <ueno@gnu.org>
| * tests: use ": ${FOO=BAR}" syntax for default handling in shell scriptsDaiki Ueno2020-09-25157-438/+438
| | | | | | | | Signed-off-by: Daiki Ueno <ueno@gnu.org>
* | Merge branch 'tmp-verify-output' into 'master'Daiki Ueno2020-09-281-2/+3
|\ \ | | | | | | | | | | | | x509: correct argument of gnutls_verify_output_function See merge request gnutls/gnutls!1338
| * | x509: correct argument of gnutls_verify_output_functiontmp-verify-outputDaiki Ueno2020-09-271-2/+3
|/ / | | | | | | | | | | | | | | This is a leftover of 52e78f1e. We need to call gnutls_verify_output_function with the replaced CA cert instead of the original cert. Signed-off-by: Daiki Ueno <ueno@gnu.org>
* | Merge branch 'fix-x86-padlock' into 'master'Daiki Ueno2020-09-231-1/+0
|\ \ | |/ |/| | | | | padlock:fix exception in wrap_padlock_hmac_fast See merge request gnutls/gnutls!1336
| * padlock:fix exception in wrap_padlock_hmac_fastJonasZhou2020-09-231-1/+0
| | | | | | | | | | | | | | In function wrap_padlock_hmac_fast, use free to release local variables ctx. Remove a call to wrap_padlock_hmac_deinit() to fix a crash. Signed-off-by: JonasZhou <JonasZhou@zhaoxin.com>
* | Merge branch 'tmp-default-prio' into 'master'Daiki Ueno2020-09-231-0/+1
|\ \ | | | | | | | | | | | | priority: add Ed448 to SECURE192 signing algorithms See merge request gnutls/gnutls!1332
| * | priority: add Ed448 to SECURE192 signing algorithmstmp-default-prioDaiki Ueno2020-09-201-0/+1
| | | | | | | | | | | | | | | | | | | | | Reported Vladimír Čunát in: https://gitlab.com/gnutls/gnutls/-/merge_requests/984#note_349374656 Signed-off-by: Daiki Ueno <ueno@gnu.org>
* | | Merge branch 'tmp-clock_nanosleep' into 'master'Daiki Ueno2020-09-2120-215/+100
|\ \ \ | |_|/ |/| | | | | | | | | | | | | | tests: allow clock_nanosleep in seccomp tests Closes #1086 See merge request gnutls/gnutls!1325
| * | testcompat-openssl: specify -sigalgsDaiki Ueno2020-09-211-5/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | The default selection of signature schemes is also affected by the crypto-policies, and needs to be explicitly enabled with -sigalgs. Suggested by Tomas Mraz. Signed-off-by: Daiki Ueno <ueno@gnu.org>
| * | inih: remove unused codeDaiki Ueno2020-09-212-94/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | This avoids -fanalyzer false-positive in GCC 10: https://bugzilla.redhat.com/show_bug.cgi?id=1878600 as well as the cppcheck warning: "variableScope:lib/inih/ini.c:99,style,The scope of the variable 'start' can be reduced." Signed-off-by: Daiki Ueno <ueno@gnu.org>
| * | build: remove dead assignmentsDaiki Ueno2020-09-1811-78/+57
| | | | | | | | | | | | Signed-off-by: Daiki Ueno <ueno@gnu.org>
| * | spki: work around GCC 10 -Warray-bounds false-positiveDaiki Ueno2020-09-182-4/+8
| | | | | | | | | | | | | | | | | | | | | Suggested by Martin Sebor in: https://bugzilla.redhat.com/show_bug.cgi?id=1876801#c1 Signed-off-by: Daiki Ueno <ueno@gnu.org>
| * | tls13/session_ticket: remove _gnutls13_session_ticket_unsetDaiki Ueno2020-09-183-33/+22
| | | | | | | | | | | | | | | | | | | | | | | | | | | The function was not really useful because _gnutls_free_datum() has a NULL check as in free(). This also makes GCC 10 happy if -Warray-bounds=2 is specified: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=96984 Signed-off-by: Daiki Ueno <ueno@gnu.org>
| * | tests: allow clock_nanosleep in seccomp testsDaiki Ueno2020-09-181-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | The nanosleep wrapper in glibc has changed the implementation using the clock_nanosleep syscall: https://sourceware.org/git/?p=glibc.git;a=commit;h=3537ecb49cf7177274607004c562d6f9ecc99474 Signed-off-by: Daiki Ueno <ueno@gnu.org>
| * | .gitlab-ci.yml: bump build environment to Fedora 32Daiki Ueno2020-09-181-1/+1
| | | | | | | | | | | | Signed-off-by: Daiki Ueno <ueno@gnu.org>
* | | Merge branch 'tmp-ametzler-1090-testsuite' into 'master'Daiki Ueno2020-09-215-7/+11
|\ \ \ | |_|/ |/| | | | | | | | | | | | | | Fix inconsistent handling of $SERV environment variable in testsuite Closes #1090 See merge request gnutls/gnutls!1331
| * | testsuite: Fix $SERV / $GNUTLS_SERV inconsistencyAndreas Metzler2020-09-194-4/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | Some tests did not support overriding the PATH to gnutls-serv by setting the environment variable SERV but used GNUTLS_SERV instead. Closes #1090 Signed-off-by: Andreas Metzler <ametzler@bebt.de>
| * | In testsuite scripts use "$@" instead of $*.Andreas Metzler2020-09-181-3/+3
| |/ | | | | | | Signed-off-by: Andreas Metzler <ametzler@bebt.de>
* | Merge branch 'rsa_privkey_prive' into 'master'Daiki Ueno2020-09-204-21/+93
|\ \ | |/ |/| | | | | Make private exponent optional in gnutls_privkey_import_rsa_raw() See merge request gnutls/gnutls!1323
| * Make private exponent optional in gnutls_privkey_import_rsa_raw().Nikolay Sivov2020-09-064-7/+79
| | | | | | | | Signed-off-by: Nikolay Sivov <nsivov@codeweavers.com>
| * Use symbols defined for RSA key parameter indices in some more places.Nikolay Sivov2020-09-061-14/+14
| | | | | | | | Signed-off-by: Nikolay Sivov <nsivov@codeweavers.com>
* | Merge branch 'max_seed' into 'master'Daiki Ueno2020-09-172-19/+8
|\ \ | | | | | | | | | | | | | | | | | | Modifies P_hash() to hash the seed and label separately. Closes #1013 See merge request gnutls/gnutls!1329
| * | Modifies P_hash() to hash the seed and label separatelySahana Prasad2020-09-172-19/+8
| | | | | | | | | | | | | | | | | | | | | Thereby not restricting the implementation of prf to MAX_SEED_SIZE MAX_SEED_SIZE is not used anymore Signed-off-by: Sahana Prasad <sahana@redhat.com>
* | | Merge branch 'tmp-ametzler-1091-gost' into 'master'Daiki Ueno2020-09-172-1/+8
|\ \ \ | |/ / |/| | | | | | | | Fix and enable GOST test in tests/gnutls-cli-debug.sh See merge request gnutls/gnutls!1328
| * | testsuite: Run GOST part of tests/gnutls-cli-debug.shAndreas Metzler2020-09-171-0/+7
| | | | | | | | | | | | | | | | | | Closes #1097 Signed-off-by: Andreas Metzler <ametzler@bebt.de>
| * | testsuite: Fix GOST gnutls-cli-debug testAndreas Metzler2020-09-171-1/+1
|/ / | | | | | | | | | | | | GOST algorithms are not enabled by default, explicitely request them in priority string. Signed-off-by: Andreas Metzler <ametzler@bebt.de>
* | Merge branch 'tmp-gnulib' into 'master'Daiki Ueno2020-09-177-3/+14
|\ \ | |/ |/| | | | | gnulib: update git submodule See merge request gnutls/gnutls!1330
| * build: ignore pointless -Wformat-nonliteral warningtmp-gnulibDaiki Ueno2020-09-171-0/+3
| | | | | | | | Signed-off-by: Daiki Ueno <ueno@gnu.org>
| * configure.ac: don't enable warning only available in decent gccDaiki Ueno2020-09-171-0/+1
| | | | | | | | | | | | -Warith-conversion is new in GCC 10. Signed-off-by: Daiki Ueno <ueno@gnu.org>
| * .gitlab-ci.yml: bump cache versionDaiki Ueno2020-09-171-1/+1
| | | | | | | | Signed-off-by: Daiki Ueno <ueno@gnu.org>
| * build: ignore pointless -Wformat-y2k warningDaiki Ueno2020-09-172-0/+6
| | | | | | | | | | | | Printing UTCTime really needs last 2 digits of the year. Signed-off-by: Daiki Ueno <ueno@gnu.org>
| * gnulib: update git submoduleDaiki Ueno2020-09-173-2/+3
|/ | | | | | | | | This brings in the build fixes of parse-datetime module: https://lists.gnu.org/archive/html/bug-gnulib/2020-07/msg00178.html https://lists.gnu.org/archive/html/bug-gnulib/2020-08/msg00001.html https://lists.gnu.org/archive/html/bug-gnulib/2020-09/msg00046.html Signed-off-by: Daiki Ueno <ueno@gnu.org>
* Merge branch 'gnutls-cli-aia' into 'master'Daiki Ueno2020-09-0411-4/+255
|\ | | | | | | | | | | | | Dynamic downloading of missing intermediate CAs via gnutls-cli using the option 'ca-auto-retrieve' Closes #968 See merge request gnutls/gnutls!1319
| * src/cli: adds new option '--ca-auto-retrieve' that can be used with ↵Sahana Prasad2020-09-0211-4/+255
| | | | | | | | | | | | | | | | | | | | gnutls-cli to automatically download missing intermediate CAs in a certificate chain lib/cred-cert.c : adds set and get APIs to get user data in the gnutls_x509_trust_list_set_getissuer_function() callback. Signed-off-by: Sahana Prasad <sahana@redhat.com>
* | Merge branch 'tmp-renegotiation' into 'master'Daiki Ueno2020-09-034-13/+36
|\ \ | | | | | | | | | | | | | | | | | | handshake: reject no_renegotiation alert if handshake is incomplete Closes #1071 See merge request gnutls/gnutls!1320
| * | handshake: reject no_renegotiation alert if handshake is incompletetmp-renegotiationDaiki Ueno2020-09-034-13/+36
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If the initial handshake is incomplete and the server sends a no_renegotiation alert, the client should treat it as a fatal error even if its level is warning. Otherwise the same handshake state (e.g., DHE parameters) are reused in the next gnutls_handshake call, if it is called in the loop idiom: do { ret = gnutls_handshake(session); } while (ret < 0 && gnutls_error_is_fatal(ret) == 0); Signed-off-by: Daiki Ueno <ueno@gnu.org>
* | | Merge branch 'tmp-sizeof' into 'master'Daiki Ueno2020-09-032-7/+11
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | Fix padlock partial PHE detection and sizeof usage Closes #1076 See merge request gnutls/gnutls!1316
| * | | tests: fix sizeof usage in mini-record-timingtmp-sizeofDaiki Ueno2020-08-301-1/+1
| | | | | | | | | | | | | | | | Signed-off-by: Daiki Ueno <ueno@gnu.org>
| * | | padlock: fix partial PHE detectionDaiki Ueno2020-08-301-6/+10
| | |/ | |/| | | | | | | | | | | | | | | | The xsha1 instruction takes complete SHA-1 blocks (64 bytes) instead of arbitrary length data when EAX is set to -1. Signed-off-by: Daiki Ueno <ueno@gnu.org>
* | | Merge branch 'rsa_privkey_import' into 'master'Daiki Ueno2020-09-033-13/+46
|\ \ \ | |/ / |/| | | | | | | | Fix optional arguments handling in gnutls_privkey_import_rsa_raw() See merge request gnutls/gnutls!1318
View Lorry Controller Status