summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* tests: combined tables of sign-verify teststmp-rsa-pss-round-twoNikos Mavrogiannopoulos2017-05-317-175/+89
* Only accept known public key algorithms in the GNUTLS_PRIVKEY_EXT private keysNikos Mavrogiannopoulos2017-05-311-0/+8
* _gnutls_privkey_*_sign_params: added support for GNUTLS_PRIVKEY_EXT keysNikos Mavrogiannopoulos2017-05-311-0/+4
* tests: added basic test on "external" keys with gnutls_privkey_import_ext2()Nikos Mavrogiannopoulos2017-05-312-1/+289
* gnutls_x509_privkey_sign_data: wrap over gnutls_privkey_sign_data()Nikos Mavrogiannopoulos2017-05-311-86/+28
* tests: added unit tests for the gnutls_x509_* sign/verify APIsNikos Mavrogiannopoulos2017-05-314-154/+345
* tests: added tests signature validation using the sign/verify_data APIsNikos Mavrogiannopoulos2017-05-312-1/+201
* Separated use of GNUTLS_PRIVKEY_FLAG_PROVABLE and GNUTLS_PRIVKEY_SIGN_FLAG_RE...Nikos Mavrogiannopoulos2017-05-313-4/+4
* _gnutls_privkey_find_sign_params: renamed and simplifiedNikos Mavrogiannopoulos2017-05-317-72/+53
* gnutls_privkey_sign_hash: removed duplicate codeNikos Mavrogiannopoulos2017-05-311-15/+1
* GNUTLS_E_INSUFFICIENT_SECURITY: moved to fatal errorsNikos Mavrogiannopoulos2017-05-311-2/+3
* tls-sig: re-organize and simplify the TLS signature generation and verificationNikos Mavrogiannopoulos2017-05-315-237/+310
* tests: modify tests to allow signatures with SHA1Nikos Mavrogiannopoulos2017-05-317-22/+29
* gnutls_pubkey_verify_hash2: do not allow GNUTLS_VERIFY_USE_TLS1_RSA with non-...Nikos Mavrogiannopoulos2017-05-311-0/+2
* gnutls_pubkey_verify_hash2: check for broken signature algorithmsNikos Mavrogiannopoulos2017-05-311-2/+16
* gnutls_pubkey_verify_data2: do not utilize GNUTLS_VERIFY_USE_RSA_PSSNikos Mavrogiannopoulos2017-05-313-6/+12
* tests: do not utilize GNUTLS_VERIFY_USE_RSA_PSSNikos Mavrogiannopoulos2017-05-311-23/+21
* certtool: do not ask for password when exporting to PKCS#8 implicitlytmp-rsa-pss-additionNikos Mavrogiannopoulos2017-05-291-1/+6
* updated auto-generated filesNikos Mavrogiannopoulos2017-05-295-168/+289
* doc: mention RSA-PSS-SHA* signature algorithmsNikos Mavrogiannopoulos2017-05-291-1/+2
* certtool: replaced rsa-pss-sign with sign-params optionNikos Mavrogiannopoulos2017-05-293-9/+23
* certtool: better documentation on rsa-pss-signNikos Mavrogiannopoulos2017-05-291-1/+2
* replaced MAX_SIGNATURE_ALGORITHMS macro with MAX_ALGOSNikos Mavrogiannopoulos2017-05-292-4/+3
* tests: added unit test for gnutls_sign_supports_pk_algorithm()Nikos Mavrogiannopoulos2017-05-292-1/+69
* tls-fuzzer: ignore the incomplete RSA-PSS testsNikos Mavrogiannopoulos2017-05-291-1/+4
* tests: verify that generated RSA-PSS keys can be read with certtool -kNikos Mavrogiannopoulos2017-05-291-0/+7
* certtool: use PKCS#8 format for generated RSA-PSS keysNikos Mavrogiannopoulos2017-05-291-0/+5
* doc updateNikos Mavrogiannopoulos2017-05-291-1/+4
* tests: x509sign-verify: include ECDSA and RSA-PSS key testsNikos Mavrogiannopoulos2017-05-291-133/+119
* tlsfuzzer: the test-certificate-verify-malformed check now passesNikos Mavrogiannopoulos2017-05-291-3/+1
* alert: map GNUTLS_E_PK_SIG_VERIFY_FAILED to GNUTLS_A_DECRYPT_ERRORNikos Mavrogiannopoulos2017-05-291-1/+4
* Increased the maximum number of signature algorithmsNikos Mavrogiannopoulos2017-05-291-1/+1
* x509sign-verify: corrected test to perform RSA tests on RSA keysNikos Mavrogiannopoulos2017-05-291-17/+21
* tests: added tests for RSA-PSS key exchange under TLS 1.2Nikos Mavrogiannopoulos2017-05-299-132/+289
* publickey: map RSA ciphersuites to GNUTLS_PK_RSA_PSSNikos Mavrogiannopoulos2017-05-291-0/+2
* Rework KX -> PK mappingsDmitry Eremin-Solenikov2017-05-296-55/+35
* tests: added TLS 1.2 tests with RSA-PSS signatures on RSA certificatesNikos Mavrogiannopoulos2017-05-291-0/+2
* gnutls_privkey_sign_hash: use the GNUTLS_PRIVKEY_SIGN_FLAG_RSA_PSS flagNikos Mavrogiannopoulos2017-05-292-5/+21
* tls-sig: sign with RSA-PSS when requested by negotiated signature algorithmNikos Mavrogiannopoulos2017-05-291-7/+25
* priority: enabled RSA-PSS signatures by defaultNikos Mavrogiannopoulos2017-05-291-0/+14
* ext/signature: accept compatible algorithms with PKNikos Mavrogiannopoulos2017-05-291-2/+1
* gnutls_pubkey_verify_hash2: corrected operation with RSA-PSS keysNikos Mavrogiannopoulos2017-05-293-33/+42
* Introduced gnutls_sign_supports_pk_algorithm()Nikos Mavrogiannopoulos2017-05-293-10/+49
* x509: implement RSA-PSS signature schemeDaiki Ueno2017-05-2950-189/+2449
* fuzz: added RSA-PSS certificateNikos Mavrogiannopoulos2017-05-291-0/+0
* build: import files from Nettle for RSA-PSSDaiki Ueno2017-05-2912-0/+790
* libtasn1: updated to 4.11Nikos Mavrogiannopoulos2017-05-273-2/+10
* updated auto-generated filesNikos Mavrogiannopoulos2017-05-273-0/+8
* tests: added unit tests for gnutls_de/encode_rs_valueNikos Mavrogiannopoulos2017-05-272-1/+243
* pk: exported gnutls_decode_rs_value() and gnutls_encode_rs_value()Nikos Mavrogiannopoulos2017-05-273-1/+63