summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* x509/cert: reorganized and split credentials and session certificate functionstmp-draft-ietf-tls-tls13-21-nmav-backports6Nikos Mavrogiannopoulos2017-11-244-655/+657
* doc: updated text on OCSP stapled responsesNikos Mavrogiannopoulos2017-11-241-9/+18
* updated auto-generated filesNikos Mavrogiannopoulos2017-11-245-127/+143
* tests: added test to verify setting multiple OCSP responses by fileNikos Mavrogiannopoulos2017-11-244-3/+730
* tests: modified to account for checking in OCSP responsesNikos Mavrogiannopoulos2017-11-245-7/+16
* gnutls-serv: allow loading multiple OCSP responsesNikos Mavrogiannopoulos2017-11-242-10/+25
* doc: document the new behavior of gnutls_certificate_set_ocsp_status_request_...Nikos Mavrogiannopoulos2017-11-241-0/+5
* cert: introduced flag GNUTLS_CERTIFICATE_SKIP_OCSP_RESPONSE_CHECKNikos Mavrogiannopoulos2017-11-242-1/+20
* gnutls.h.in: corrected error code valueNikos Mavrogiannopoulos2017-11-241-2/+1
* gnutls_certificate_set_ocsp_status_request_file: match input response to cert...Nikos Mavrogiannopoulos2017-11-245-10/+107
* tests: check operation of gnutls_certificate_set_ocsp_status_request_function3Nikos Mavrogiannopoulos2017-11-242-1/+240
* ocsp: moved non-extension related functions to ocsp-api.cNikos Mavrogiannopoulos2017-11-243-351/+388
* doc updateNikos Mavrogiannopoulos2017-11-241-0/+4
* tests: verify that OCSP status responses can be sent by client under TLS1.3Nikos Mavrogiannopoulos2017-11-244-1/+259
* tests: enhanced OCSP extension tests to run under TLS1.2 and TLS1.3Nikos Mavrogiannopoulos2017-11-243-8/+17
* tests: verify whether multiple OCSP responses are received in client sideNikos Mavrogiannopoulos2017-11-242-0/+237
* gnutls_ocsp_status_request_get2: allow operation under TLS1.3 for server sideNikos Mavrogiannopoulos2017-11-241-2/+3
* certificate request: corrected parsing of signature algorithmsNikos Mavrogiannopoulos2017-11-241-0/+10
* select_sign_algorithm: check KX type only on pre-TLS1.3Nikos Mavrogiannopoulos2017-11-241-1/+1
* cert auth: use a single callback to call for OCSPNikos Mavrogiannopoulos2017-11-243-27/+39
* _gnutls_selected_certs_set -> selected_certs_setNikos Mavrogiannopoulos2017-11-241-30/+30
* ocsp: call the new response callback under TLS1.3Nikos Mavrogiannopoulos2017-11-243-13/+118
* ocsp: introduced a new OCSP response callbackNikos Mavrogiannopoulos2017-11-246-27/+155
* _gnutls_x509_cert_verify_peers: verify all received OCSP responsesNikos Mavrogiannopoulos2017-11-241-22/+29
* gnutls_ocsp_status_request_get2: added functionNikos Mavrogiannopoulos2017-11-243-3/+39
* tls13/certificate: parse OCSP status response and save responses in auth info...Nikos Mavrogiannopoulos2017-11-243-42/+81
* ext/status_response: store peer's OCSP list to auth structureNikos Mavrogiannopoulos2017-11-245-99/+136
* _gnutls_copy_certificate_auth_info: simplified and avoid multiple allocationsNikos Mavrogiannopoulos2017-11-243-33/+17
* tests: client-fastopen: introduce child signal handler and delay prior to sta...Nikos Mavrogiannopoulos2017-11-241-5/+8
* session state: use the right type for send_cert_req variabletmp-draft-ietf-tls-tls13-21-nmav-backports5Nikos Mavrogiannopoulos2017-11-191-1/+1
* session state: combined srp and dh prime bits variablesNikos Mavrogiannopoulos2017-11-193-9/+9
* session state: mark mod_auth_st_int as constantNikos Mavrogiannopoulos2017-11-191-1/+1
* dtls: cookie is stored dynamically when needed rather than in pre-allocated sizeNikos Mavrogiannopoulos2017-11-193-6/+11
* removed legacy/unused rsa-related structures/functionsNikos Mavrogiannopoulos2017-11-192-15/+0
* lib: simplify adding groups according to priorititesDmitry Eremin-Solenikov2017-11-191-21/+12
* tests: added unit test for RDNs in cert callbacktmp-draft-ietf-tls-tls13-21-nmav-backports2Nikos Mavrogiannopoulos2017-11-162-1/+196
* gnutls_auth*_get_type: use gnutls_kx_get to retrieve key exchangeNikos Mavrogiannopoulos2017-11-161-6/+14
* tests: check certificate callbacks under TLS 1.2 and 1.3Nikos Mavrogiannopoulos2017-11-161-15/+26
* tests: added unit tests for client certificate under TLS1.3Nikos Mavrogiannopoulos2017-11-161-0/+10
* handshake: handle the certificate authorities extensionNikos Mavrogiannopoulos2017-11-163-11/+61
* handshake: added support for client certificatesNikos Mavrogiannopoulos2017-11-167-26/+112
* handshake: return GNUTLS_E_NO_CERTIFICATE_FOUND when no certificate is found ...Nikos Mavrogiannopoulos2017-11-162-3/+7
* handshake: send certificate request when requestedNikos Mavrogiannopoulos2017-11-163-2/+64
* tests: added check for client hello random value after HRRtmp-draft-ietf-tls-tls13-21-nmav-backports3Nikos Mavrogiannopoulos2017-11-152-4/+267
* handshake: treat reply to HRR as a reply to hello verify requestNikos Mavrogiannopoulos2017-11-151-3/+2
* tests: added key share behavioral testtmp-draft-ietf-tls-tls13-21-nmav-backports4Nikos Mavrogiannopoulos2017-11-156-20/+351
* key share: added flags to gnutls_init() to modify its default behaviorNikos Mavrogiannopoulos2017-11-152-21/+46
* handshake: initialize buffer prior to usetmp-draft-ietf-tls-tls13-21-nmav-backportsNikos Mavrogiannopoulos2017-11-141-0/+2
* tests: delete temporary filesNikos Mavrogiannopoulos2017-11-141-0/+1
* tests: added tests for TLS1.2- rollback detectionNikos Mavrogiannopoulos2017-11-143-1/+506