delta/gnutls.git - gitlab.com: gnutls/gnutls.git

	Commit message (Collapse)	Author	Age	Files	Lines
*	Clarifications on AEAD cipherstmp-doc-update-iv	Nikos Mavrogiannopoulos	2019-03-01	1	-10/+12
\| \| \| \| \| \|	Relates: #716 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
*	Improve documentation for gnutls_cipher_get_iv_size	Nikos Mavrogiannopoulos	2019-03-01	1	-2/+4
\| \| \| \| \| \| \| \| \|	This clarifies what is returned and what is to be expected on algorithms with variable IV sizes. Resolves: #717 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
*	Merge branch 'tmp-token-modname-clarifications' into 'master'	Nikos Mavrogiannopoulos	2019-02-28	1	-1/+2
\|\ \| \| \| \| \| \| \| \| \| \| \| \|	pkcs11: clarify GNUTLS_PKCS11_TOKEN_MODNAME presence [ci skip] Closes #633 See merge request gnutls/gnutls!938
\| *	pkcs11: clarify GNUTLS_PKCS11_TOKEN_MODNAME presence [ci skip]tmp-token-modname-clarifications	Nikos Mavrogiannopoulos	2019-02-26	1	-1/+2
\|/ \| \| \| \| \|	Resolves: #633 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
*	cppcheck: suppress warning on nettle code [ci skip]	Nikos Mavrogiannopoulos	2019-02-26	1	-0/+1
\| \| \| \|	Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
*	Merge branch 'tmp-ametzler-gnutls-cli-benchmark-overflow' into 'master'	Tim Rühsen	2019-02-24	2	-2/+5
\|\ \| \| \| \| \| \| \| \|	gnutls-cli: fix --benchmark-ciphers type overflow See merge request gnutls/gnutls!934
\| *	gnutls-cli: fix --benchmark-ciphers type overflow	Andreas Metzler	2019-02-24	2	-2/+5
\|/ \| \| \|	Signed-off-by: Andreas Metzler <ametzler@bebt.de>
*	Merge branch 'tmp-fetch-fuzz-corpora-faster' into 'master'	Tim Rühsen	2019-02-23	3	-9/+35
\|\ \| \| \| \| \| \| \| \|	Fetch OSS-Fuzz corpora much faster [skip ci] See merge request gnutls/gnutls!883
\| *	Fetch OSS-Fuzz corpora much faster [skip ci]tmp-fetch-fuzz-corpora-faster	Tim Rühsen	2019-02-05	3	-9/+35
\| \| \| \| \| \| \| \|	Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* \|	Merge branch 'tmp-update-ax-code-coverage' into 'master'	Tim Rühsen	2019-02-23	10	-152/+420
\|\ \ \| \| \| \| \| \| \| \| \| \| \| \|	Update m4/ax_code_coverage.m4 See merge request gnutls/gnutls!905
\| * \|	Update ax_code_coverage.m4 to latest release of autoconf-archivetmp-update-ax-code-coverage	Tim Rühsen	2019-02-22	10	-152/+420
\| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* \| \|	Merge branch 'tmp-reset-after-free' into 'master'	Tim Rühsen	2019-02-23	49	-97/+28
\|\ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Automatically NULLify after gnutls_free() See merge request gnutls/gnutls!923
\| * \| \|	gnutls_x509_crt_init: Fix dereference of NULL pointertmp-reset-after-free	Tim Rühsen	2019-02-22	1	-1/+1
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
\| * \| \|	Remove redundant resets of variables after free()	Tim Rühsen	2019-02-22	47	-96/+10
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
\| * \| \|	Automatically NULLify after gnutls_free()	Tim Rühsen	2019-02-22	2	-0/+17
\| \|/ / \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This method prevents direct use-after-free and double-free issues. Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* \| \|	Merge branch 'tmp-cleanup-cert' into 'master'	Tim Rühsen	2019-02-23	1	-26/+12
\|\ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Cleanup lib/auth/cert.c as suggested by cppcheck See merge request gnutls/gnutls!924
\| * \| \|	Cleanup lib/auth/cert.c as suggested by cppchecktmp-cleanup-cert	Tim Rühsen	2019-02-13	1	-26/+12
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* \| \| \|	Merge branch 'tmp-downgrade-sentinel' into 'master'	Daiki Ueno	2019-02-22	7	-6/+91
\|\ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	handshake: defer setting downgrade sentinel until version is selected Closes #689 See merge request gnutls/gnutls!918
\| * \| \| \|	tlsfuzzer: update to the latest upstream for downgrade protection teststmp-downgrade-sentinel	Daiki Ueno	2019-02-22	4	-4/+17
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: Daiki Ueno <dueno@redhat.com>
\| * \| \| \|	ext/supported_versions: regenerate server random	Daiki Ueno	2019-02-22	3	-2/+74
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This adds a call to _gnutls_gen_server_random() in handling the "supported_versions" extension, so that the TLS 1.3 downgrade sentinel is set only when the earlier versions are selected. Signed-off-by: Daiki Ueno <dueno@redhat.com>
* \| \| \| \|	Merge branch 'use_topendir_fixed' into 'master'	Tim Rühsen	2019-02-22	5	-16/+59
\|\ \ \ \ \ \| \|_\|_\|/ / \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \|	Re-introduce topendir on Windows with Unicode support See merge request gnutls/gnutls!932
\| * \| \| \|	lib: x509: Minor directory browsing simplification	Hugo Beauzée-Luyssen	2019-02-21	1	-6/+3
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: Hugo Beauzée-Luyssen <hugo@beauzee.fr>
\| * \| \| \|	Revert "Revert "verify-high2: Fix cert dir iteration on Win32""	Hugo Beauzée-Luyssen	2019-02-21	1	-2/+49
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This reverts commit 681330882da19099eea360fab141cab937c45677. Signed-off-by: Hugo Beauzée-Luyssen <hugo@beauzee.fr> This revert also contains the fix to the original commit (invalid utf8->utf16 conversion) and a minor simplification of the _treaddir loop.
\| * \| \| \|	iconv: Allow _gnutls_utf8_to_ucs2 to output little endian	Hugo Beauzée-Luyssen	2019-02-21	4	-8/+7
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: Hugo Beauzée-Luyssen <hugo@beauzee.fr>
* \| \| \| \|	Merge branch 'thread_local_msvc_fixed' into 'master'	Nikos Mavrogiannopoulos	2019-02-21	1	-0/+2
\|\ \ \ \ \ \| \|/ / / / \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \|	lib: Provide _Thread_local on MSVC See merge request gnutls/gnutls!933
\| * \| \| \|	lib: Provide _Thread_local on MSVC	Hugo Beauzée-Luyssen	2019-02-20	1	-0/+2
\|/ / / / \| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: Hugo Beauzée-Luyssen <hugo@beauzee.fr>
* \| \| \|	Merge branch 'tmp-get-source-branch' into 'master'	Nikos Mavrogiannopoulos	2019-02-19	1	-0/+5
\|\ \ \ \ \| \|/ / / \|/\| \| \| \| \| \| \| \| \| \| \|	check_if_signed: Get source branch if not set See merge request gnutls/gnutls!930
\| * \| \|	check_if_signed: Get source branch if not set	Tim Rühsen	2019-02-18	1	-0/+5
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* \| \| \|	Merge branch 'tmp-fix-record-size-limit-resumption' into 'master'	Daiki Ueno	2019-02-18	15	-124/+320
\|\ \ \ \ \| \|/ / / \|/\| \| \| \| \| \| \| \| \| \| \|	Fix issues in record_size_limit extension handling See merge request gnutls/gnutls!879
\| * \| \|	gnutls_record_set_max_size: make it work on server sidetmp-fix-record-size-limit-resumption	Daiki Ueno	2019-02-14	2	-79/+153
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	The record_size_limit extension can also be specified by the server to indicate the maximum plaintext. Also add test cases for asymmetric settings between server and client. Signed-off-by: Daiki Ueno <dueno@redhat.com>
\| * \| \|	tlsfuzzer: update to the latest upstream for record_size_limit test	Daiki Ueno	2019-02-14	3	-12/+46
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: Daiki Ueno <dueno@redhat.com>
\| * \| \|	ext/record_size_limit: account for content type octet in TLS 1.3	Daiki Ueno	2019-02-14	2	-7/+34
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	In TLS 1.3, the protocol maximum of plaintext size is 2^14+1, while it is 2^14 in TLS 1.2. To accommodate that, this introduces the following invariant: - when the maximum is set by the user with gnutls_record_set_max_size(), store it as is. The value range is [511, 16834]. - when the maximum is negotiated through record_size_limit extension, it can be [512, 16385]. In TLS 1.3, subtract by 1 to fit in [511, 16384]. Signed-off-by: Daiki Ueno <dueno@redhat.com>
\| * \| \|	decrypt_packet_tls13: add check for max plaintext size	Daiki Ueno	2019-02-14	1	-0/+9
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	There is check in _gnutls_recv_in_buffers already, but for TLS 1.3 we need to take account of the padding. Signed-off-by: Daiki Ueno <dueno@redhat.com>
\| * \| \|	record: reject too large plaintext after decryption	Daiki Ueno	2019-02-14	1	-0/+9
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: Daiki Ueno <dueno@redhat.com>
\| * \| \|	constate: reset max_record_recv_size upon renegotiation	Daiki Ueno	2019-02-14	1	-0/+9
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: Daiki Ueno <dueno@redhat.com>
\| * \| \|	session_pack: reset max_record_recv_size when packing	Daiki Ueno	2019-02-14	1	-3/+12
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: Daiki Ueno <dueno@redhat.com>
\| * \| \|	ext/record_size_limit: don't confuse with negotiated/user-supplied maximum	Daiki Ueno	2019-02-14	2	-14/+35
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	As documented in gnutls_int.h, max_record_send_size is for tracking the user-supplied maximum, while max_record_recv_size for the protocol negotiated maximum. Signed-off-by: Daiki Ueno <dueno@redhat.com>
\| * \| \|	ext/max_record: server shouldn't send it with record_size_limit	Daiki Ueno	2019-02-14	4	-8/+11
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Otherwise, the connection will be disconnected by the client, as suggested in RFC: A client MUST treat receipt of both "max_fragment_length" and "record_size_limit" as a fatal error, and it SHOULD generate an "illegal_parameter" alert. Signed-off-by: Daiki Ueno <dueno@redhat.com>
\| * \| \|	_gnutls_hello_ext_is_present: don't ignore max_fragment_length	Daiki Ueno	2019-02-14	1	-1/+1
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	The extension is assigned the internal ID 0. Signed-off-by: Daiki Ueno <dueno@redhat.com>
\| * \| \|	.dir-locals.el: disable indent-tabs-mode in js-mode	Daiki Ueno	2019-02-14	1	-1/+2
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: Daiki Ueno <dueno@redhat.com>
* \| \| \|	Merge branch 'gnutls-703' into 'master'	Tim Rühsen	2019-02-14	1	-0/+5
\|\ \ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	tests: wrap ADD_SYSCALL for getrandom in test for SYS_getrandom Closes #703 See merge request gnutls/gnutls!926
\| * \| \| \|	tests: wrap ADD_SYSCALL for getrandom in test for SYS_getrandom	R. Andrew Bailey	2019-02-14	1	-0/+5
\| \|/ / / \| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: R. Andrew Bailey <bailey@akamai.com>
* \| \| \|	Merge branch 'tmp-macosx-fix' into 'master'	Tim Rühsen	2019-02-14	1	-10/+12
\|\ \ \ \ \| \|/ / / \|/\| \| \| \| \| \| \| \| \| \| \|	bootstrap.conf: do not override GNULIB_SRCDIR See merge request gnutls/gnutls!925
\| * \| \|	bootstrap.conf: do not override GNULIB_SRCDIRtmp-macosx-fix	Nikos Mavrogiannopoulos	2019-02-14	1	-10/+12
\|/ / / \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This was not set in all of our CI platforms, and was causing issues in MacOSX. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* \| \|	Merge branch 'tmp-fix-cert-params-checks' into 'master'	Nikos Mavrogiannopoulos	2019-02-14	7	-62/+136
\|\ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	x509: corrected issue in the algorithm parameters comparison Closes #698 See merge request gnutls/gnutls!921
\| * \| \|	x509: corrected issue in the algorithm parameters comparison	Nikos Mavrogiannopoulos	2019-02-14	7	-62/+136
\| \|/ / \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Each certificate has two fields to set the signature algorithm and parameters used for the digital signature. One of the fields is authenticated and the other is not. It is required from RFC5280 to enforce the equality of these fields, but currently due to an issue we wouldn't enforce the equality of the parameters fields. This fix corrects the issue. We also move an RSA-PSS certificate in chainverify that was relying on invalid parameters, to this set of invalid certificates. Resolves: #698 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* \| \|	Merge branch 'tmp-fix-uninitialized2' into 'master'	Tim Rühsen	2019-02-14	2	-26/+53
\|\ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Fix uninitialized warning in pkcs11.c See merge request gnutls/gnutls!906
\| * \| \|	tests: added further checks for gnutls_pkcs11_token_get_infotmp-fix-uninitialized2	Nikos Mavrogiannopoulos	2019-02-14	1	-2/+9
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
\| * \| \|	Fix uninitialized warning in pkcs11.c	Tim Rühsen	2019-02-14	2	-26/+46
\|/ / / \| \| \| \| \| \| \| \| \|	Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* \| \|	Merge branch 'tmp-serv-args' into 'master'	Tim Rühsen	2019-02-12	1	-1/+1
\|\ \ \ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Fix 32bit overflow issue in src/serv-args.def Closes #700 See merge request gnutls/gnutls!922