summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* tls-fuzzer: enabled the large hello checkstmp-tlsfuzzerNikos Mavrogiannopoulos2017-11-273-3/+1
* gnutls_prf_rfc5705: apply the context limits only under TLS1.2 or earlierNikos Mavrogiannopoulos2017-11-271-5/+5
* gnutls_prf_raw: fail under TLS1.3Nikos Mavrogiannopoulos2017-11-271-4/+9
* tests: included behavioral test of gnutls_prf under TLS1.3tmp-draft-ietf-tls-tls13-21-prf-backwards-compatNikos Mavrogiannopoulos2017-11-271-0/+30
* gnutls_prf: prevent usage under TLS1.3Nikos Mavrogiannopoulos2017-11-271-5/+12
* gnutls_prf_rfc5705: calculate exporter using HKDF if TLS 1.3Daiki Ueno2017-11-273-19/+387
* handshake-tls13: derive and store exporter_master_secretDaiki Ueno2017-11-273-2/+11
* _tls13_derive_secret: define secret argumentDaiki Ueno2017-11-275-25/+18
* tests: client-fastopen: introduce child signal handler and delay prior to sta...Nikos Mavrogiannopoulos2017-11-241-5/+8
* session state: use the right type for send_cert_req variabletmp-draft-ietf-tls-tls13-21-nmav-backports5Nikos Mavrogiannopoulos2017-11-191-1/+1
* session state: combined srp and dh prime bits variablesNikos Mavrogiannopoulos2017-11-193-9/+9
* session state: mark mod_auth_st_int as constantNikos Mavrogiannopoulos2017-11-191-1/+1
* dtls: cookie is stored dynamically when needed rather than in pre-allocated sizeNikos Mavrogiannopoulos2017-11-193-6/+11
* removed legacy/unused rsa-related structures/functionsNikos Mavrogiannopoulos2017-11-192-15/+0
* lib: simplify adding groups according to priorititesDmitry Eremin-Solenikov2017-11-191-21/+12
* tests: added unit test for RDNs in cert callbacktmp-draft-ietf-tls-tls13-21-nmav-backports2Nikos Mavrogiannopoulos2017-11-162-1/+196
* gnutls_auth*_get_type: use gnutls_kx_get to retrieve key exchangeNikos Mavrogiannopoulos2017-11-161-6/+14
* tests: check certificate callbacks under TLS 1.2 and 1.3Nikos Mavrogiannopoulos2017-11-161-15/+26
* tests: added unit tests for client certificate under TLS1.3Nikos Mavrogiannopoulos2017-11-161-0/+10
* handshake: handle the certificate authorities extensionNikos Mavrogiannopoulos2017-11-163-11/+61
* handshake: added support for client certificatesNikos Mavrogiannopoulos2017-11-167-26/+112
* handshake: return GNUTLS_E_NO_CERTIFICATE_FOUND when no certificate is found ...Nikos Mavrogiannopoulos2017-11-162-3/+7
* handshake: send certificate request when requestedNikos Mavrogiannopoulos2017-11-163-2/+64
* tests: added check for client hello random value after HRRtmp-draft-ietf-tls-tls13-21-nmav-backports3Nikos Mavrogiannopoulos2017-11-152-4/+267
* handshake: treat reply to HRR as a reply to hello verify requestNikos Mavrogiannopoulos2017-11-151-3/+2
* tests: added key share behavioral testtmp-draft-ietf-tls-tls13-21-nmav-backports4Nikos Mavrogiannopoulos2017-11-156-20/+351
* key share: added flags to gnutls_init() to modify its default behaviorNikos Mavrogiannopoulos2017-11-152-21/+46
* handshake: initialize buffer prior to usetmp-draft-ietf-tls-tls13-21-nmav-backportsNikos Mavrogiannopoulos2017-11-141-0/+2
* tests: delete temporary filesNikos Mavrogiannopoulos2017-11-141-0/+1
* tests: added tests for TLS1.2- rollback detectionNikos Mavrogiannopoulos2017-11-143-1/+506
* _gnutls_set_server_random: corrected TLS1.2 and TLS1.1 rollback detectionNikos Mavrogiannopoulos2017-11-141-15/+25
* extensions: renamed _gnutls_hello_ext_*sdata to _gnutls_hello_ext_*privNikos Mavrogiannopoulos2017-11-1418-82/+82
* server_name: use the new API for ext data settingNikos Mavrogiannopoulos2017-11-142-172/+59
* extensions: enhanced extension lib with pack and unpack functionsNikos Mavrogiannopoulos2017-11-142-2/+79
* tests: check the correct handling of cookie extension in client sideNikos Mavrogiannopoulos2017-11-142-1/+266
* extensions: allow receiving and sending extensions which were not advertised ...Nikos Mavrogiannopoulos2017-11-143-4/+8
* extensions: optimized gid_to_ext_entry() map on known extensionsNikos Mavrogiannopoulos2017-11-142-64/+60
* extensions: avoid double loop when parsing received extensionsNikos Mavrogiannopoulos2017-11-141-24/+40
* extensions: avoid looping to discover location of saved dataNikos Mavrogiannopoulos2017-11-142-66/+46
* handshake: added support for reading and sending cookie extensionNikos Mavrogiannopoulos2017-11-148-6/+276
* doc: document the GNUTLS_E_NO_COMMON_KEY_SHARE usageNikos Mavrogiannopoulos2017-11-141-1/+14
* tests: added unit test for hello retry request supportNikos Mavrogiannopoulos2017-11-143-19/+66
* tests: rehandshake tests were restricted to TLS1.2Nikos Mavrogiannopoulos2017-11-144-9/+9
* handshake: reduce assert printouts in common casesNikos Mavrogiannopoulos2017-11-142-4/+4
* handshake: accept hello retry request in client sideNikos Mavrogiannopoulos2017-11-149-17/+192
* buf: _gnutls_buffer_pop_data made easier to useNikos Mavrogiannopoulos2017-11-143-14/+16
* handshake: simplified version parsingNikos Mavrogiannopoulos2017-11-143-7/+17
* handshake: send hello retry request when no key share matchesNikos Mavrogiannopoulos2017-11-1412-22/+243
* ext: do not advertize post handshake authenticationNikos Mavrogiannopoulos2017-11-142-0/+8
* tests: check TLS1.3 record layer packet modificationNikos Mavrogiannopoulos2017-11-141-65/+32