summaryrefslogtreecommitdiff
path: root/includes
Commit message (Collapse)AuthorAgeFilesLines
* Add for backwards compatibility.Simon Josefsson2007-10-271-0/+3
|
* Several changes to openpgp code:Nikos Mavrogiannopoulos2007-10-244-17/+12
| | | | | | * gnutls_certificate_set_openpgp_* functions were modified to include format * KEYRING_HACK is defined to overcome a bug in opencdk which makes keyrings reentrant. Once fixed, the KEYRING_HACK code should be removed.
* Introduced GNUTLS_PRIORITIES_SECURITY_NORMAL and GNUTLS_PRIORITIES_SECURITY_HIGHNikos Mavrogiannopoulos2007-10-241-3/+4
|
* further deprecated the set_default_priority() functions. now implementedNikos Mavrogiannopoulos2007-10-241-7/+7
| | | | as macros.
* Added gnutls_set_default_priority2() and deprecated ↵Nikos Mavrogiannopoulos2007-10-241-2/+25
| | | | gnutls_set_default_priority().
* Introduced gnutls_session_enable_compatibility_mode() to allow enablingNikos Mavrogiannopoulos2007-10-241-0/+2
| | | | | all supported compatibility options (like disabling padding). Some other bug fixes in tls-test.c.
* The text names used in the gnutls_*_convert_priority functions are the namesNikos Mavrogiannopoulos2007-10-231-0/+12
| | | | defined for the algorithms in gnutls_algorithms.c.
* corrected the prototypesNikos Mavrogiannopoulos2007-10-231-6/+6
|
* corrected typo.Nikos Mavrogiannopoulos2007-10-231-1/+1
|
* Updated the priority functions to be more compatible to our interface andNikos Mavrogiannopoulos2007-10-231-6/+6
| | | | | avoid parsing on every session generation. The current approach stores parsed data to our integer format.CG: -----------------------------------------------------------------------
* Added gnutls_record_disable_padding() to allow servers talk to buggy clients ↵Nikos Mavrogiannopoulos2007-10-221-0/+2
| | | | that complain if TLS 1.0 padding is used.
* Added new priority functions that accept text instead of integers.Nikos Mavrogiannopoulos2007-10-221-1/+8
|
* Renamed openpgp_cert to openpgp_crt to be consistent with x509.Nikos Mavrogiannopoulos2007-10-192-46/+46
|
* Occurences of gnutls_openpgp_key were renamed to gnutls_openpgp_cert,Nikos Mavrogiannopoulos2007-10-192-26/+45
| | | | leaving an API compatibility layer.
* Renamed gnutls_openpgp_key_t to gnutls_openpgp_cert_tNikos Mavrogiannopoulos2007-10-192-21/+22
|
* Remove TLS-authz.Simon Josefsson2007-10-171-44/+1
|
* Move deprecated SRP alerts to compat.h.Simon Josefsson2007-10-142-3/+5
|
* Add compatibility mapping for GNUTLS_E_OPENPGP_TRUSTDB_VERSION_UNSUPPORTED.Simon Josefsson2007-10-141-0/+4
|
* Removed all the trustdb related code. It wasn't used and trustdbs are notNikos Mavrogiannopoulos2007-10-134-23/+0
| | | | specified anywhere except pgp. Now we use the standard key rings.
* * Added section "Selecting cryptographic key sizes" in gnutls.texiNikos Mavrogiannopoulos2007-10-121-0/+1
| | | | | * Added function gnutls_mac_get_key_size() * Updated _gnutls_dh_generate_prime() to consider the size for "q" from "Selecting cryptographic key sizes"
* Added defines for the deprecated SRP alert numbers.Nikos Mavrogiannopoulos2007-10-091-0/+3
|
* ** Added capability to set a callback after the client hello is receivedNikos Mavrogiannopoulos2007-10-081-4/+6
| | | | | | | | | | | | by the server in order to adjust parameters before the handshake. ** SRP was corrected to adhere (more) to the latest draft (published soon as RFC) ** Corrected bug which did not allow a server to run without supporting certificates. ** Updated the DN parser which now prints wrongly decoded values as hex strings.
* Removed all the xml functions and stubs, as well as references in theNikos Mavrogiannopoulos2007-10-072-11/+0
| | | | documentation.
* Add patch to support Camellia, contributed by Yoshisato YANAGISAWA. Fixes #1.Simon Josefsson2007-09-241-0/+2
| | | | See http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/2331
* Support for Opaque PRF Input TLS extension.Simon Josefsson2007-09-201-0/+20
|
* Remove .cvsignore's.Simon Josefsson2007-09-102-5/+0
|
* Add gnutls_openpgp_privkey_sign_hash.Simon Josefsson2007-08-131-0/+3
|
* Use *_t types consistently.Simon Josefsson2007-08-134-22/+26
|
* Use const and pointers to gnutls_datum_t in sign callback.Simon Josefsson2007-08-122-4/+4
|
* New errors GNUTLS_E_APPLICATION_ERROR_MIN..GNUTLS_E_APPLICATION_ERROR_MAX.Simon Josefsson2007-08-111-0/+3
|
* Add gnutls_sign_callback_get.Simon Josefsson2007-08-111-0/+3
| | | | | | | | | | * includes/gnutls/gnutls.h.in (gnutls_sign_callback_get): Add. * lib/gnutls_cert.c (gnutls_sign_callback_set): Move here from gnutls_sig.c. Doc fix. (gnutls_sign_callback_get): New function. * lib/gnutls_sig.c (gnutls_sign_callback_set): Removed.
* External signing callback interface.Simon Josefsson2007-08-102-1/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * includes/gnutls/gnutls.h.in (gnutls_sign_func): New type. (gnutls_sign_callback_set): New function. * includes/gnutls/x509.h (gnutls_x509_privkey_sign_hash): New function. * lib/gnutls_x509.c (gnutls_certificate_set_x509_key_mem): Handle NULL key. Doc fix. * lib/gnutls_sig.c (_gnutls_tls_sign_hdata): Pass session to _gnutls_tls_sign. (_gnutls_tls_sign_params): Likewise. (_gnutls_tls_sign): Add new parameter 'session'. Call sign callback if appropriate. (gnutls_sign_callback_set): New function. * lib/gnutls_x509.c (read_key_mem): Support a NULL key. * lib/gnutls_int.h (internals_st): Add sign_func, sign_func_userdata. * lib/auth_dhe.c (gen_dhe_server_kx): Use length of certificate list to decide wheter to sign, not presence of private key. * lib/auth_cert.c (_gnutls_gen_cert_client_cert_vrfy): Likewise. * lib/auth_rsa_export.c (gen_rsa_export_server_kx): Likewise. * lib/auth_cert.c(_gnutls_get_selected_cert): Don't require that private key is present. * lib/auth_rsa_export.c (gen_rsa_export_server_kx): Don't check key size when key is not present, assume it is > 512 bits. * lib/x509/privkey.c (gnutls_x509_privkey_sign_hash): New function. * tests/Makefile.am: Add x509signself.
* Export gnutls_x509_crt_get_raw_dn, gnutls_x509_crt_get_raw_issuer_dn.Simon Josefsson2007-05-241-0/+7
|
* Reorder to make it compile.Simon Josefsson2007-04-161-5/+6
|
* (gnutls_psk_set_client_credentials): Fix prototype.Simon Josefsson2007-04-111-1/+1
|
* Add gnutls_cipher_suite_info API, suggested by Howard Chu <hyc@symas.com>.Simon Josefsson2007-04-041-0/+6
|
* Add new APIs to list supported algorithms: gnutls_cipher_list,Simon Josefsson2007-04-041-1/+9
| | | | | | gnutls_mac_list, gnutls_compression_list, gnutls_protocol_list, gnutls_certificate_type_list, and gnutls_kx_list. Suggested by Howard Chu <hyc@symas.com>.
* Rename non-released functions.Simon Josefsson2007-02-221-4/+4
|
* Fix.Simon Josefsson2007-02-221-8/+7
|
* New APIs to deal with DN's. Patch from Howard Chu <hyc@symas.com>.Simon Josefsson2007-02-221-0/+16
|
* Fix type (in never released prototypes).Simon Josefsson2007-02-211-1/+3
|
* Add gnutls_authz_recv_callback_func and gnutls_authz_send_callback_func.Simon Josefsson2007-02-211-12/+40
| | | | | | | | | Add gnutls_authz_enable, gnutls_authz_send_x509_attr_cert, gnutls_authz_send_saml_assertion, gnutls_authz_send_x509_attr_cert_url, and gnutls_authz_send_saml_assertion_url. Remove GNUTLS_AUTHZ_LAST from gnutls_authz_data_format_type_t (never part of any release).
* Add gnutls_supplemental_get_name.Simon Josefsson2007-02-191-1/+8
| | | | Fix gnutls_authz_data_format_type_t.
* Fix gnutls_authz_data_format_type_t.Simon Josefsson2007-02-141-4/+6
|
* Add gnutls_supplemental_data_format_type_t with memberSimon Josefsson2007-02-141-0/+5
| | | | GNUTLS_SUPPLEMENTAL_AUTHZ_DATA.
* Add gnutls_authz_data_format_type_t, with membersSimon Josefsson2007-02-141-0/+8
| | | | | GNUTLS_AUTHZ_X509_ATTR_CERT, GNUTLS_AUTHZ_SAML_ASSERTION, GNUTLS_AUTHZ_X509_ATTR_CERT_URL, GNUTLS_AUTHZ_SAML_ASSERTION_URL.
* Add GNUTLS_HANDSHAKE_SUPPLEMENTAL.Simon Josefsson2007-02-141-1/+2
|
* Spell out handshake types.Simon Josefsson2007-02-141-8/+8
|
* Add gnutls_x509_crl_get_signature and gnutls_x509_crl_print.Simon Josefsson2007-02-131-0/+5
|
* Add.Simon Josefsson2007-02-121-0/+1
|