summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* tests: added key share behavioral testtmp-draft-ietf-tls-tls13-21-nmav-backports4Nikos Mavrogiannopoulos2017-11-156-20/+351
* key share: added flags to gnutls_init() to modify its default behaviorNikos Mavrogiannopoulos2017-11-152-21/+46
* handshake: initialize buffer prior to usetmp-draft-ietf-tls-tls13-21-nmav-backportsNikos Mavrogiannopoulos2017-11-141-0/+2
* tests: delete temporary filesNikos Mavrogiannopoulos2017-11-141-0/+1
* tests: added tests for TLS1.2- rollback detectionNikos Mavrogiannopoulos2017-11-143-1/+506
* _gnutls_set_server_random: corrected TLS1.2 and TLS1.1 rollback detectionNikos Mavrogiannopoulos2017-11-141-15/+25
* extensions: renamed _gnutls_hello_ext_*sdata to _gnutls_hello_ext_*privNikos Mavrogiannopoulos2017-11-1418-82/+82
* server_name: use the new API for ext data settingNikos Mavrogiannopoulos2017-11-142-172/+59
* extensions: enhanced extension lib with pack and unpack functionsNikos Mavrogiannopoulos2017-11-142-2/+79
* tests: check the correct handling of cookie extension in client sideNikos Mavrogiannopoulos2017-11-142-1/+266
* extensions: allow receiving and sending extensions which were not advertised ...Nikos Mavrogiannopoulos2017-11-143-4/+8
* extensions: optimized gid_to_ext_entry() map on known extensionsNikos Mavrogiannopoulos2017-11-142-64/+60
* extensions: avoid double loop when parsing received extensionsNikos Mavrogiannopoulos2017-11-141-24/+40
* extensions: avoid looping to discover location of saved dataNikos Mavrogiannopoulos2017-11-142-66/+46
* handshake: added support for reading and sending cookie extensionNikos Mavrogiannopoulos2017-11-148-6/+276
* doc: document the GNUTLS_E_NO_COMMON_KEY_SHARE usageNikos Mavrogiannopoulos2017-11-141-1/+14
* tests: added unit test for hello retry request supportNikos Mavrogiannopoulos2017-11-143-19/+66
* tests: rehandshake tests were restricted to TLS1.2Nikos Mavrogiannopoulos2017-11-144-9/+9
* handshake: reduce assert printouts in common casesNikos Mavrogiannopoulos2017-11-142-4/+4
* handshake: accept hello retry request in client sideNikos Mavrogiannopoulos2017-11-149-17/+192
* buf: _gnutls_buffer_pop_data made easier to useNikos Mavrogiannopoulos2017-11-143-14/+16
* handshake: simplified version parsingNikos Mavrogiannopoulos2017-11-143-7/+17
* handshake: send hello retry request when no key share matchesNikos Mavrogiannopoulos2017-11-1412-22/+243
* ext: do not advertize post handshake authenticationNikos Mavrogiannopoulos2017-11-142-0/+8
* tests: check TLS1.3 record layer packet modificationNikos Mavrogiannopoulos2017-11-141-65/+32
* updated auto-generated filesNikos Mavrogiannopoulos2017-11-145-396/+401
* handshake: split set_client_random to gen and setNikos Mavrogiannopoulos2017-11-143-25/+24
* handshake: only attempt to detect downgrade attacks if TLS1.3 is supportedNikos Mavrogiannopoulos2017-11-143-48/+57
* nettle/pk: explicitly mark intentional fallthrough in switch casesNikos Mavrogiannopoulos2017-11-141-3/+2
* key share: removed duplicate messageNikos Mavrogiannopoulos2017-11-141-1/+0
* tests: fix warning in rng-sigint.cNikos Mavrogiannopoulos2017-11-141-1/+2
* tests: removed unnecessary assertNikos Mavrogiannopoulos2017-11-141-1/+0
* tests: improved tls-session-supplementalNikos Mavrogiannopoulos2017-11-141-0/+2
* kx: moved to new buffer APINikos Mavrogiannopoulos2017-11-1412-125/+123
* handshake: moved to the new mbuffer APINikos Mavrogiannopoulos2017-11-142-101/+74
* handshake: use the new buffer type in TLS 1.3Nikos Mavrogiannopoulos2017-11-143-45/+16
* handshake: new helper functions to use gnutls_buffer_st to generate mbuffersNikos Mavrogiannopoulos2017-11-141-0/+56
* tlsfuzzer: disable non TLS1.3-ready testsNikos Mavrogiannopoulos2017-11-141-3/+7
* tests: added tests for TLS1.3 record generation / parsingNikos Mavrogiannopoulos2017-11-141-14/+19
* tests: introduced basic TLS1.3 key exchange test suiteNikos Mavrogiannopoulos2017-11-144-3/+89
* record: adjusted overhead calculation for TLS1.3Nikos Mavrogiannopoulos2017-11-143-14/+26
* priority: include groups into priority when having a TLS1.3-only sessionNikos Mavrogiannopoulos2017-11-141-2/+27
* priority: do include all the version's signature semanticsNikos Mavrogiannopoulos2017-11-141-4/+0
* ext/key_share: corrected release of MPI parametersNikos Mavrogiannopoulos2017-11-141-2/+2
* ext/signature: explicitly prevent RSA/DSA and SHA1 signatures on TLS1.3Nikos Mavrogiannopoulos2017-11-141-0/+11
* hello ext: reduce verbosityNikos Mavrogiannopoulos2017-11-141-2/+2
* constate.h: removed non-existing functionNikos Mavrogiannopoulos2017-11-141-2/+1
* record: any alert is fatal under TLS1.3Nikos Mavrogiannopoulos2017-11-141-1/+1
* extensions: introduced functions to obtain currently parsed messageNikos Mavrogiannopoulos2017-11-145-0/+44
* supported_versions: print the received versionsNikos Mavrogiannopoulos2017-11-141-0/+3