summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* doc: updated copyright year for manualtmp-draft-ietf-tls-tls13-21-nmav-updated-ocsp2Nikos Mavrogiannopoulos2018-01-031-2/+2
* doc updateNikos Mavrogiannopoulos2018-01-033-5/+3
* updated auto-generated filesNikos Mavrogiannopoulos2018-01-038-199/+308
* doc: getfuncs.pl: distinguish between different typedef typesNikos Mavrogiannopoulos2018-01-031-3/+12
* check_ocsp_response: print OCSP response actual error on debug logNikos Mavrogiannopoulos2018-01-034-0/+68
* x509/cert: reorganizedNikos Mavrogiannopoulos2018-01-034-635/+631
* tests: added unit test for gnutls_ocsp_resp_list_import2Nikos Mavrogiannopoulos2018-01-032-1/+262
* doc: updatedNikos Mavrogiannopoulos2018-01-032-12/+43
* tests: added ocsptool sanity check programNikos Mavrogiannopoulos2018-01-034-1/+183
* tests: enhanced OCSP testsNikos Mavrogiannopoulos2018-01-0314-37/+1990
* cert auth: use a single callback to call for OCSPNikos Mavrogiannopoulos2018-01-033-30/+25
* ocsp: introduced gnutls_certificate_get_ocsp_expiration()Nikos Mavrogiannopoulos2018-01-034-6/+92
* ocsp: enhanced the OCSP response loading APIsNikos Mavrogiannopoulos2018-01-0314-77/+405
* gnutls-serv: allow loading multiple OCSP responsesNikos Mavrogiannopoulos2018-01-032-10/+25
* cert: introduced flag GNUTLS_CERTIFICATE_SKIP_OCSP_RESPONSE_CHECKNikos Mavrogiannopoulos2018-01-032-1/+18
* gnutls_certificate_set_ocsp_status_request_file: match input response to cert...Nikos Mavrogiannopoulos2018-01-036-22/+112
* ocsp: moved non-extension related functions to ocsp-api.cNikos Mavrogiannopoulos2018-01-033-250/+287
* gnutls_ocsp_status_request_get2: allow operation under TLS1.3 for server sideNikos Mavrogiannopoulos2018-01-031-2/+3
* select_sign_algorithm: check KX type only on pre-TLS1.3Nikos Mavrogiannopoulos2018-01-031-1/+1
* rename _gnutls_selected_certs_set -> selected_certs_setNikos Mavrogiannopoulos2018-01-031-33/+33
* ocsp: send all the OCSP responses under TLS1.3Nikos Mavrogiannopoulos2018-01-034-11/+117
* introduced gnutls_certificate_retrieve_function3Nikos Mavrogiannopoulos2018-01-037-223/+366
* nettle base64_encode_raw: use cast to avoid warningsNikos Mavrogiannopoulos2018-01-033-4/+4
* gnutls_ocsp_resp_list_import2: introducedNikos Mavrogiannopoulos2018-01-034-2/+145
* ocsptool: import and export OCSP responses in PEM formatNikos Mavrogiannopoulos2018-01-032-33/+114
* ocsp: introduced gnutls_ocsp_resp_import2 and gnutls_ocsp_resp_export2Nikos Mavrogiannopoulos2018-01-033-11/+99
* _gnutls_x509_cert_verify_peers: verify all received OCSP responsesNikos Mavrogiannopoulos2018-01-031-22/+29
* gnutls_ocsp_status_request_get2: added functionNikos Mavrogiannopoulos2018-01-033-3/+39
* tls13/certificate: parse OCSP status response and save responses in auth info...Nikos Mavrogiannopoulos2018-01-033-45/+90
* ext/status_request: allow more than a single OCSP response to be receivedNikos Mavrogiannopoulos2018-01-035-99/+136
* _gnutls_copy_certificate_auth_info: simplified and avoid multiple allocationsNikos Mavrogiannopoulos2018-01-033-33/+17
* tests: updated to account for HMAC-SHA384 and CAMELLIA removaltmp-nmav-draft-ietf-tls-tls13-21-consistent-ciphersNikos Mavrogiannopoulos2017-12-196-34/+14
* priorities: provide a more consistent "story" for default cipher settingsNikos Mavrogiannopoulos2017-12-191-37/+13
* certificate request: corrected parsing of signature algorithmsNikos Mavrogiannopoulos2017-12-131-0/+10
* tlsfuzzer: updated to latest masterNikos Mavrogiannopoulos2017-12-133-1/+1
* doc: documented hsk_flags "lifetime" and its resettmp-nmav-draft-ietf-tls-tls13-21-compact-stateNikos Mavrogiannopoulos2017-12-091-0/+2
* session state: TLS1.2 and TLS1.3 state is stored as unionNikos Mavrogiannopoulos2017-12-0910-119/+136
* session state: organized key exchange keys into structuresNikos Mavrogiannopoulos2017-12-0914-244/+257
* record state: avoid memory allocations for stored keysNikos Mavrogiannopoulos2017-12-094-123/+128
* handshake: ffdhe flags merged with handshake flagsNikos Mavrogiannopoulos2017-12-096-16/+12
* handshake: false start flag merged with hsk_flagsNikos Mavrogiannopoulos2017-12-093-6/+3
* handshake: use hsk_flags in TLS1.2 and TLS1.3Nikos Mavrogiannopoulos2017-12-098-19/+13
* doc: added text on TLS1.3 rekey and reauthenticationNikos Mavrogiannopoulos2017-12-051-6/+33
* updated auto-generated filesNikos Mavrogiannopoulos2017-12-043-0/+4
* tests: re-enabled post-handshake auth testsNikos Mavrogiannopoulos2017-12-042-14/+56
* handshake: added support for post-handshake authenticationNikos Mavrogiannopoulos2017-12-0414-51/+448
* gnutls_record_set_state: use const for seq_numbertmp-nmav-draft-ietf-tls-tls13-21-key-limitsNikos Mavrogiannopoulos2017-12-042-2/+2
* tests: added test suite on key limitsNikos Mavrogiannopoulos2017-12-042-0/+342
* gnutls_record_get_state: doc updateNikos Mavrogiannopoulos2017-12-041-2/+3
* Introduce key usage limits under TLS1.3Nikos Mavrogiannopoulos2017-12-044-1/+18