Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | tests: fail() function will also print function and line information | Nikos Mavrogiannopoulos | 2016-04-29 | 2 | -2/+5 | |
| | ||||||
* | _gnutls_hex2bin: refuse to decode odd-sized hex data | Nikos Mavrogiannopoulos | 2016-04-29 | 1 | -0/+3 | |
| | ||||||
* | tests: added unit tests on the HEX encoding/decoding functions | Nikos Mavrogiannopoulos | 2016-04-29 | 2 | -1/+226 | |
| | ||||||
* | certtool: eliminated memory leaks in DH parameter printing/generation. | Nikos Mavrogiannopoulos | 2016-04-28 | 3 | -1/+10 | |
| | ||||||
* | certtool: combined all the seed decoding methods to a single one | Nikos Mavrogiannopoulos | 2016-04-28 | 3 | -43/+44 | |
| | | | | | That not only simplifies the code, but also allows decoding hex strings which contain not hex chars (and that allows decoding hex of the form XX:XX:XX) | |||||
* | Revert "tests: ensure the seed is provided in plain hex" | Nikos Mavrogiannopoulos | 2016-04-28 | 1 | -5/+5 | |
| | | | | This reverts commit 0ea7206e12f52f6ed50c4a76ea0a23f5470115b2. | |||||
* | tests: check certtool dh-parameter generation with --provable option | Nikos Mavrogiannopoulos | 2016-04-28 | 2 | -1/+86 | |
| | ||||||
* | tests: ensure the seed is provided in plain hex | Nikos Mavrogiannopoulos | 2016-04-28 | 1 | -5/+5 | |
| | ||||||
* | certtool: allow specifying seed size when generating provable DH parameters | Nikos Mavrogiannopoulos | 2016-04-28 | 3 | -12/+49 | |
| | ||||||
* | doc update | Nikos Mavrogiannopoulos | 2016-04-28 | 1 | -0/+3 | |
| | ||||||
* | tests: simplified custom-urls check | Nikos Mavrogiannopoulos | 2016-04-28 | 1 | -56/+1 | |
| | ||||||
* | tests: added check on whether builtin URLs cannot be overriden | Nikos Mavrogiannopoulos | 2016-04-28 | 2 | -1/+289 | |
| | ||||||
* | keys: custom URLs take precedence over pre-defined URLs | Nikos Mavrogiannopoulos | 2016-04-28 | 4 | -32/+36 | |
| | | | | | | | This allows applications to define the own 'system:' or 'pkcs11:' URLs. Resolves #89 | |||||
* | x25519: ensure that a valid private key is present on key derivation | Nikos Mavrogiannopoulos | 2016-04-28 | 1 | -1/+1 | |
| | ||||||
* | doc update | Nikos Mavrogiannopoulos | 2016-04-28 | 1 | -0/+1 | |
| | ||||||
* | tests: added check for GNUTLS_FORCE_CLIENT_CERT init flag | Nikos Mavrogiannopoulos | 2016-04-28 | 1 | -12/+20 | |
| | ||||||
* | instead of assigning a variable per flag use the init flags directly | Nikos Mavrogiannopoulos | 2016-04-28 | 8 | -41/+17 | |
| | | | | | That is store the flags provided in gnutls_init() in the session structure and use these flags directly when required. | |||||
* | added flag in session to force sending a client certificate | Nikos Mavrogiannopoulos | 2016-04-28 | 4 | -8/+16 | |
| | | | | | | | | | This handles the use case of a client connecting to a server which incorrectly lists the CA certificates it supports. Without that change the only option was to avoid using the "automatic" client certificate functions, but rather utilize callbacks. With that approach this use case is handled by the "automatic" certificate selection functions. | |||||
* | .gitlab-ci.yml: do not load submodules on CI since they are not used | Nikos Mavrogiannopoulos | 2016-04-28 | 1 | -10/+10 | |
| | | | | This reduces the CI running time. | |||||
* | tests: check client behavior of sending CA certificates | Nikos Mavrogiannopoulos | 2016-04-28 | 3 | -1/+434 | |
| | ||||||
* | doc: removed news about feature already backported in 3.4.6 | Nikos Mavrogiannopoulos | 2016-04-27 | 1 | -4/+0 | |
| | ||||||
* | examples: introduced basic error checking in more examples | Nikos Mavrogiannopoulos | 2016-04-27 | 6 | -141/+103 | |
| | ||||||
* | examples: simplified the basic client example | Nikos Mavrogiannopoulos | 2016-04-27 | 1 | -11/+10 | |
| | ||||||
* | examples: introduced basic error checking in main client examples | Nikos Mavrogiannopoulos | 2016-04-27 | 2 | -47/+36 | |
| | ||||||
* | examples: corrected the required version of example | Nikos Mavrogiannopoulos | 2016-04-27 | 1 | -2/+2 | |
| | ||||||
* | tests: enhanced dane testing with offline verification checks | Nikos Mavrogiannopoulos | 2016-04-26 | 1 | -34/+573 | |
| | ||||||
* | dane: verification will not fail if a CA entry is encountered but cannot be ↵ | Nikos Mavrogiannopoulos | 2016-04-26 | 1 | -3/+5 | |
| | | | | | | | | | verified That addresses the issue of verifying a single certificate against a list of TLSA entries that contain an entry with CA usage (cert usage 0). With the previous behavior verification would have failed, while now this entry will be skipped. | |||||
* | doc: improved documentation on certificate and DANE verification functions | Nikos Mavrogiannopoulos | 2016-04-26 | 2 | -10/+17 | |
| | ||||||
* | dane: updated documentation of dane_verify_crt_raw | Nikos Mavrogiannopoulos | 2016-04-26 | 1 | -19/+4 | |
| | ||||||
* | doc: added clarifications on documentation for dane_state_t | Nikos Mavrogiannopoulos | 2016-04-26 | 2 | -3/+7 | |
| | ||||||
* | manpages: include the dane functions into the distributed pages | Nikos Mavrogiannopoulos | 2016-04-26 | 1 | -2/+20 | |
| | ||||||
* | ecdhe: eliminated unneeded checks for zero of public parameters | Nikos Mavrogiannopoulos | 2016-04-24 | 1 | -6/+0 | |
| | | | | | There were not required by either draft-ietf-tls-rfc4492bis-07 or rfc7748. | |||||
* | doc: added example client application utilizing the 3.1.x APIs | Nikos Mavrogiannopoulos | 2016-04-24 | 3 | -5/+214 | |
| | ||||||
* | examples: added explicit 3.5.0 dependency in ex-client-x509 | Nikos Mavrogiannopoulos | 2016-04-24 | 1 | -2/+2 | |
| | ||||||
* | examples: added error checks and updated verify_certificate_chain() | Nikos Mavrogiannopoulos | 2016-04-24 | 1 | -24/+26 | |
| | ||||||
* | .gitlab-ci.yml: made the linux tag explicit for our runners | Nikos Mavrogiannopoulos | 2016-04-24 | 1 | -0/+9 | |
| | ||||||
* | doc update | Nikos Mavrogiannopoulos | 2016-04-24 | 1 | -15/+19 | |
| | ||||||
* | doc: document curve X25519 | Nikos Mavrogiannopoulos | 2016-04-24 | 1 | -1/+2 | |
| | ||||||
* | doc: clarify what catch all means in all scenarios | Nikos Mavrogiannopoulos | 2016-04-24 | 1 | -3/+6 | |
| | ||||||
* | gnutls-cli-debug: added tests for supported curves | Nikos Mavrogiannopoulos | 2016-04-24 | 3 | -17/+56 | |
| | ||||||
* | tests: include self tests with CURVE-X25519 | Nikos Mavrogiannopoulos | 2016-04-24 | 3 | -64/+117 | |
| | ||||||
* | gnutls-cli: enhanced KX benchmark with X25519 | Nikos Mavrogiannopoulos | 2016-04-24 | 1 | -11/+12 | |
| | ||||||
* | handshake: added support for ECDH with curve X25519 | Nikos Mavrogiannopoulos | 2016-04-24 | 16 | -86/+333 | |
| | | | | This follows draft-ietf-tls-rfc4492bis-07 and rfc7748 | |||||
* | tests: updated the openssl compat check to make explicit the used curves | Nikos Mavrogiannopoulos | 2016-04-24 | 1 | -23/+32 | |
| | ||||||
* | ecdhe: print the received curve from the server on debug mode | Nikos Mavrogiannopoulos | 2016-04-24 | 1 | -0/+7 | |
| | ||||||
* | gnutls-cli-debug: added CHACHA20-POLY1305 detection | Nikos Mavrogiannopoulos | 2016-04-24 | 3 | -6/+23 | |
| | ||||||
* | tests: on out of memory conditions do not fail the hash-large test | Nikos Mavrogiannopoulos | 2016-04-23 | 1 | -0/+13 | |
| | | | | | | This test may require a large amount of memory which some CI systems cannot provide. When an out-of-memory-error is detected skip the test instead of failing. | |||||
* | session: removed unused parameters from RSA-EXPORT era | Nikos Mavrogiannopoulos | 2016-04-23 | 2 | -7/+0 | |
| | ||||||
* | README-alpha.md: updated badges with the new gitlab URLs | Nikos Mavrogiannopoulos | 2016-04-23 | 1 | -3/+3 | |
| | ||||||
* | doc: document the TPM 1.2 limitation | Nikos Mavrogiannopoulos | 2016-04-22 | 1 | -0/+1 | |
| |