summaryrefslogtreecommitdiff
path: root/lib/auth/dhe_psk.c
Commit message (Collapse)AuthorAgeFilesLines
* build: re-indent codeDaiki Ueno2023-04-241-128/+105
| | | | Signed-off-by: Daiki Ueno <ueno@gnu.org>
* Indent codeZoltan Fridrich2023-01-271-40/+36
| | | | | Co-authored-by: Simon Josefsson <simon@josefsson.org> Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
* Increase the limit of TLS PSK usernames from 128 to 65535 charactersZoltan Fridrich2022-07-081-27/+24
| | | | | Co-authored-by: Hannes Reinecke <hare@suse.de> Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>
* psk: Allow non-NULL PSK usernamesAnder Juaristi2020-03-231-6/+4
| | | | | | | | | | | | | | | | | | | | | | | This commit closes #586. Two new functions are introduced: gnutls_psk_server_get_username2() and gnutls_psk_set_client_username2(), which are identical in behavior to those named similarly (without the final '2'), but allow arbitrary gnutls datums (not strings) to be used as usernames. Two new callback functions are also introduced, with their respective setters: gnutls_psk_set_server_credentials_function2() and gnutls_psk_set_client_credentials_function2(). In addition, the password file format is extended so that non-string usernames can be specified. A leading '#' character tells GnuTLS that the username should be interpreted as a raw byte string (encoded in HEX). Example: #deadbeef:9e32cf7786321a828ef7668f09fb35db Signed-off-by: Ander Juaristi's avatarAnder Juaristi <a@juaristi.eus>
* Use https:// for www.gnu.org and www.example.comTim Rühsen2019-03-131-1/+1
| | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* Renamed _gnutls_auth_info_set() to _gnutls_auth_info_init().Tom Vrancken2018-10-181-6/+6
| | | | Signed-off-by: Tom Vrancken <dev@tomvrancken.nl>
* kx: moved to new buffer APINikos Mavrogiannopoulos2018-02-191-2/+4
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* security_parameters: ease access to group information by keeping pointer to itNikos Mavrogiannopoulos2017-08-021-2/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* TLS: introduced support for RFC7919 groupsNikos Mavrogiannopoulos2017-08-011-38/+10
| | | | | | | | | | | That replaces the EC curve extension negotiation with the negotiated groups extensions, introduces handling for groups as priority strings, as well as using and checking of RFC7919 DH parameters once negotiated. Resolves: #37 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* Removed the 'gnutls_' prefix from files to simplify file namingNikos Mavrogiannopoulos2015-08-231-8/+8
|
* PSK: set the hint in DHE-PSK and ECDHE-PSK ciphersuitesNikos Mavrogiannopoulos2015-07-101-10/+74
|
* removed legacy code.Nikos Mavrogiannopoulos2014-05-101-5/+5
|
* Made _gnutls_get_auth_info() safer to use.Nikos Mavrogiannopoulos2014-04-181-2/+11
|
* DH key exchange uses the _gnutls_pk_derive and _gnutls_pk_generate_key ↵Nikos Mavrogiannopoulos2013-11-281-2/+5
| | | | | | functions. This allows handling DH key generation in the crypto backend files.
* long term keys are always overwrittenNikos Mavrogiannopoulos2013-11-271-2/+2
|
* better naming for free_datum functions.Nikos Mavrogiannopoulos2013-11-271-4/+4
|
* Added zeroization of keys in several parts within gnutls.Nikos Mavrogiannopoulos2013-11-271-4/+4
|
* reindented codeNikos Mavrogiannopoulos2013-11-081-375/+369
|
* Added options to disable more key exchange mechanisms.Nikos Mavrogiannopoulos2013-03-121-27/+102
| | | | In that DHE was separated from ECDHE.
* Use LGPLv2.1 in the files their author's agreed to.Nikos Mavrogiannopoulos2013-02-011-1/+1
|
* session->key no longer needs to be an allocated structure.Nikos Mavrogiannopoulos2012-10-101-4/+4
|
* Fixed signed/unsigned warnings.Nikos Mavrogiannopoulos2012-01-211-6/+6
| | | | Dropped opaque type (replaced with uint8_t)
* Collapse and cleanup copyright information.Simon Josefsson2012-01-161-1/+1
|
* Run 'make update-copyright'.Simon Josefsson2012-01-161-1/+1
|
* Diffie Hellman PKCS #3 parameters now contain the recommended private key size.Nikos Mavrogiannopoulos2011-12-121-1/+1
| | | | | By using the recommended key size the calculations for the server side are reduced, giving a 50% increase in DH calculations.
* Clarify license and copyright.Simon Josefsson2011-08-031-1/+1
|
* Upgraded to LGPLv3.Nikos Mavrogiannopoulos2011-06-231-5/+3
|
* deinitialize PSK key memory.Nikos Mavrogiannopoulos2011-05-281-2/+9
|
* Added ECDHE-PSK ciphersuites for TLS (RFC 5489).Nikos Mavrogiannopoulos2011-05-271-7/+138
|
* The auth_ and ext_ files were moved to respective directories.Nikos Mavrogiannopoulos2011-04-161-0/+256