Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Add for backwards compatibility. | Simon Josefsson | 2007-10-27 | 1 | -0/+3 |
| | |||||
* | Several changes to openpgp code: | Nikos Mavrogiannopoulos | 2007-10-24 | 4 | -17/+12 |
| | | | | | | * gnutls_certificate_set_openpgp_* functions were modified to include format * KEYRING_HACK is defined to overcome a bug in opencdk which makes keyrings reentrant. Once fixed, the KEYRING_HACK code should be removed. | ||||
* | Introduced GNUTLS_PRIORITIES_SECURITY_NORMAL and GNUTLS_PRIORITIES_SECURITY_HIGH | Nikos Mavrogiannopoulos | 2007-10-24 | 1 | -3/+4 |
| | |||||
* | further deprecated the set_default_priority() functions. now implemented | Nikos Mavrogiannopoulos | 2007-10-24 | 1 | -7/+7 |
| | | | | as macros. | ||||
* | Added gnutls_set_default_priority2() and deprecated ↵ | Nikos Mavrogiannopoulos | 2007-10-24 | 1 | -2/+25 |
| | | | | gnutls_set_default_priority(). | ||||
* | Introduced gnutls_session_enable_compatibility_mode() to allow enabling | Nikos Mavrogiannopoulos | 2007-10-24 | 1 | -0/+2 |
| | | | | | all supported compatibility options (like disabling padding). Some other bug fixes in tls-test.c. | ||||
* | The text names used in the gnutls_*_convert_priority functions are the names | Nikos Mavrogiannopoulos | 2007-10-23 | 1 | -0/+12 |
| | | | | defined for the algorithms in gnutls_algorithms.c. | ||||
* | corrected the prototypes | Nikos Mavrogiannopoulos | 2007-10-23 | 1 | -6/+6 |
| | |||||
* | corrected typo. | Nikos Mavrogiannopoulos | 2007-10-23 | 1 | -1/+1 |
| | |||||
* | Updated the priority functions to be more compatible to our interface and | Nikos Mavrogiannopoulos | 2007-10-23 | 1 | -6/+6 |
| | | | | | avoid parsing on every session generation. The current approach stores parsed data to our integer format.CG: ----------------------------------------------------------------------- | ||||
* | Added gnutls_record_disable_padding() to allow servers talk to buggy clients ↵ | Nikos Mavrogiannopoulos | 2007-10-22 | 1 | -0/+2 |
| | | | | that complain if TLS 1.0 padding is used. | ||||
* | Added new priority functions that accept text instead of integers. | Nikos Mavrogiannopoulos | 2007-10-22 | 1 | -1/+8 |
| | |||||
* | Renamed openpgp_cert to openpgp_crt to be consistent with x509. | Nikos Mavrogiannopoulos | 2007-10-19 | 2 | -46/+46 |
| | |||||
* | Occurences of gnutls_openpgp_key were renamed to gnutls_openpgp_cert, | Nikos Mavrogiannopoulos | 2007-10-19 | 2 | -26/+45 |
| | | | | leaving an API compatibility layer. | ||||
* | Renamed gnutls_openpgp_key_t to gnutls_openpgp_cert_t | Nikos Mavrogiannopoulos | 2007-10-19 | 2 | -21/+22 |
| | |||||
* | Remove TLS-authz. | Simon Josefsson | 2007-10-17 | 1 | -44/+1 |
| | |||||
* | Move deprecated SRP alerts to compat.h. | Simon Josefsson | 2007-10-14 | 2 | -3/+5 |
| | |||||
* | Add compatibility mapping for GNUTLS_E_OPENPGP_TRUSTDB_VERSION_UNSUPPORTED. | Simon Josefsson | 2007-10-14 | 1 | -0/+4 |
| | |||||
* | Removed all the trustdb related code. It wasn't used and trustdbs are not | Nikos Mavrogiannopoulos | 2007-10-13 | 4 | -23/+0 |
| | | | | specified anywhere except pgp. Now we use the standard key rings. | ||||
* | * Added section "Selecting cryptographic key sizes" in gnutls.texi | Nikos Mavrogiannopoulos | 2007-10-12 | 1 | -0/+1 |
| | | | | | * Added function gnutls_mac_get_key_size() * Updated _gnutls_dh_generate_prime() to consider the size for "q" from "Selecting cryptographic key sizes" | ||||
* | Added defines for the deprecated SRP alert numbers. | Nikos Mavrogiannopoulos | 2007-10-09 | 1 | -0/+3 |
| | |||||
* | ** Added capability to set a callback after the client hello is received | Nikos Mavrogiannopoulos | 2007-10-08 | 1 | -4/+6 |
| | | | | | | | | | | | | by the server in order to adjust parameters before the handshake. ** SRP was corrected to adhere (more) to the latest draft (published soon as RFC) ** Corrected bug which did not allow a server to run without supporting certificates. ** Updated the DN parser which now prints wrongly decoded values as hex strings. | ||||
* | Removed all the xml functions and stubs, as well as references in the | Nikos Mavrogiannopoulos | 2007-10-07 | 2 | -11/+0 |
| | | | | documentation. | ||||
* | Add patch to support Camellia, contributed by Yoshisato YANAGISAWA. Fixes #1. | Simon Josefsson | 2007-09-24 | 1 | -0/+2 |
| | | | | See http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/2331 | ||||
* | Support for Opaque PRF Input TLS extension. | Simon Josefsson | 2007-09-20 | 1 | -0/+20 |
| | |||||
* | Remove .cvsignore's. | Simon Josefsson | 2007-09-10 | 2 | -5/+0 |
| | |||||
* | Add gnutls_openpgp_privkey_sign_hash. | Simon Josefsson | 2007-08-13 | 1 | -0/+3 |
| | |||||
* | Use *_t types consistently. | Simon Josefsson | 2007-08-13 | 4 | -22/+26 |
| | |||||
* | Use const and pointers to gnutls_datum_t in sign callback. | Simon Josefsson | 2007-08-12 | 2 | -4/+4 |
| | |||||
* | New errors GNUTLS_E_APPLICATION_ERROR_MIN..GNUTLS_E_APPLICATION_ERROR_MAX. | Simon Josefsson | 2007-08-11 | 1 | -0/+3 |
| | |||||
* | Add gnutls_sign_callback_get. | Simon Josefsson | 2007-08-11 | 1 | -0/+3 |
| | | | | | | | | | | * includes/gnutls/gnutls.h.in (gnutls_sign_callback_get): Add. * lib/gnutls_cert.c (gnutls_sign_callback_set): Move here from gnutls_sig.c. Doc fix. (gnutls_sign_callback_get): New function. * lib/gnutls_sig.c (gnutls_sign_callback_set): Removed. | ||||
* | External signing callback interface. | Simon Josefsson | 2007-08-10 | 2 | -1/+16 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * includes/gnutls/gnutls.h.in (gnutls_sign_func): New type. (gnutls_sign_callback_set): New function. * includes/gnutls/x509.h (gnutls_x509_privkey_sign_hash): New function. * lib/gnutls_x509.c (gnutls_certificate_set_x509_key_mem): Handle NULL key. Doc fix. * lib/gnutls_sig.c (_gnutls_tls_sign_hdata): Pass session to _gnutls_tls_sign. (_gnutls_tls_sign_params): Likewise. (_gnutls_tls_sign): Add new parameter 'session'. Call sign callback if appropriate. (gnutls_sign_callback_set): New function. * lib/gnutls_x509.c (read_key_mem): Support a NULL key. * lib/gnutls_int.h (internals_st): Add sign_func, sign_func_userdata. * lib/auth_dhe.c (gen_dhe_server_kx): Use length of certificate list to decide wheter to sign, not presence of private key. * lib/auth_cert.c (_gnutls_gen_cert_client_cert_vrfy): Likewise. * lib/auth_rsa_export.c (gen_rsa_export_server_kx): Likewise. * lib/auth_cert.c(_gnutls_get_selected_cert): Don't require that private key is present. * lib/auth_rsa_export.c (gen_rsa_export_server_kx): Don't check key size when key is not present, assume it is > 512 bits. * lib/x509/privkey.c (gnutls_x509_privkey_sign_hash): New function. * tests/Makefile.am: Add x509signself. | ||||
* | Export gnutls_x509_crt_get_raw_dn, gnutls_x509_crt_get_raw_issuer_dn. | Simon Josefsson | 2007-05-24 | 1 | -0/+7 |
| | |||||
* | Reorder to make it compile. | Simon Josefsson | 2007-04-16 | 1 | -5/+6 |
| | |||||
* | (gnutls_psk_set_client_credentials): Fix prototype. | Simon Josefsson | 2007-04-11 | 1 | -1/+1 |
| | |||||
* | Add gnutls_cipher_suite_info API, suggested by Howard Chu <hyc@symas.com>. | Simon Josefsson | 2007-04-04 | 1 | -0/+6 |
| | |||||
* | Add new APIs to list supported algorithms: gnutls_cipher_list, | Simon Josefsson | 2007-04-04 | 1 | -1/+9 |
| | | | | | | gnutls_mac_list, gnutls_compression_list, gnutls_protocol_list, gnutls_certificate_type_list, and gnutls_kx_list. Suggested by Howard Chu <hyc@symas.com>. | ||||
* | Rename non-released functions. | Simon Josefsson | 2007-02-22 | 1 | -4/+4 |
| | |||||
* | Fix. | Simon Josefsson | 2007-02-22 | 1 | -8/+7 |
| | |||||
* | New APIs to deal with DN's. Patch from Howard Chu <hyc@symas.com>. | Simon Josefsson | 2007-02-22 | 1 | -0/+16 |
| | |||||
* | Fix type (in never released prototypes). | Simon Josefsson | 2007-02-21 | 1 | -1/+3 |
| | |||||
* | Add gnutls_authz_recv_callback_func and gnutls_authz_send_callback_func. | Simon Josefsson | 2007-02-21 | 1 | -12/+40 |
| | | | | | | | | | Add gnutls_authz_enable, gnutls_authz_send_x509_attr_cert, gnutls_authz_send_saml_assertion, gnutls_authz_send_x509_attr_cert_url, and gnutls_authz_send_saml_assertion_url. Remove GNUTLS_AUTHZ_LAST from gnutls_authz_data_format_type_t (never part of any release). | ||||
* | Add gnutls_supplemental_get_name. | Simon Josefsson | 2007-02-19 | 1 | -1/+8 |
| | | | | Fix gnutls_authz_data_format_type_t. | ||||
* | Fix gnutls_authz_data_format_type_t. | Simon Josefsson | 2007-02-14 | 1 | -4/+6 |
| | |||||
* | Add gnutls_supplemental_data_format_type_t with member | Simon Josefsson | 2007-02-14 | 1 | -0/+5 |
| | | | | GNUTLS_SUPPLEMENTAL_AUTHZ_DATA. | ||||
* | Add gnutls_authz_data_format_type_t, with members | Simon Josefsson | 2007-02-14 | 1 | -0/+8 |
| | | | | | GNUTLS_AUTHZ_X509_ATTR_CERT, GNUTLS_AUTHZ_SAML_ASSERTION, GNUTLS_AUTHZ_X509_ATTR_CERT_URL, GNUTLS_AUTHZ_SAML_ASSERTION_URL. | ||||
* | Add GNUTLS_HANDSHAKE_SUPPLEMENTAL. | Simon Josefsson | 2007-02-14 | 1 | -1/+2 |
| | |||||
* | Spell out handshake types. | Simon Josefsson | 2007-02-14 | 1 | -8/+8 |
| | |||||
* | Add gnutls_x509_crl_get_signature and gnutls_x509_crl_print. | Simon Josefsson | 2007-02-13 | 1 | -0/+5 |
| | |||||
* | Add. | Simon Josefsson | 2007-02-12 | 1 | -0/+1 |
| |