summaryrefslogtreecommitdiff
path: root/lib/auth
Commit message (Expand)AuthorAgeFilesLines
* cert-auth: suppress false-positive warnings with GCC analyzerDaiki Ueno2022-01-121-1/+9
* ASN1 : Remove warnings related to old libtasn1 namingsLeonardo Bras2021-05-211-1/+1
* cert auth: filter out unsupported cert types from TLS 1.2 CRDaiki Ueno2021-05-171-6/+70
* spelling: The possessive pronoun "its" has no apostrophe.Daniel Kahn Gillmor2021-05-051-1/+1
* build: remove dead assignmentsDaiki Ueno2020-09-182-4/+2
* doc: assorted typo fixestmp-typo-fixesDaiki Ueno2020-08-121-1/+1
* dh-primes: make the FIPS approved check return Q valueDaiki Ueno2020-07-181-1/+1
* dhe: check if DH params in SKE match the FIPS approved algorithmstmp-sp800-56ar3Daiki Ueno2020-06-271-0/+8
* build: write "FILE *fp" instead of "FILE *fd"tmp-fileioDaiki Ueno2020-05-302-17/+17
* lib: avoid file descriptor leak when application forksDaiki Ueno2020-05-302-3/+3
* Ensure that an incorrectly formatted password file doesn't cause invalid memo...Nikos Mavrogiannopoulos2020-03-231-1/+2
* psk: Allow non-NULL PSK usernamesAnder Juaristi2020-03-236-35/+79
* algorithms: implement X448 key exchange and Ed448 signature schemeDaiki Ueno2020-01-231-6/+11
* SignatureAlgorithms: force-enable GOST signatures for GOST KXDmitry Eremin-Solenikov2019-12-281-1/+1
* Support GOST certificate request valuesDmitry Eremin-Solenikov2019-12-181-8/+27
* Add support for VKO GOST key exchangeDmitry Eremin-Solenikov2019-11-082-1/+324
* lib/auth/srp_passwd.c: Fix NULL dereference in _gnutls_srp_pwd_read_entry()Tim Rühsen2019-10-131-2/+4
* Remove malloc from gnutls_srp_set_server_fake_salt_seed()tmp-datum-cleanupNikos Mavrogiannopoulos2019-05-282-3/+7
* Pass down Q for FFDHE in al pre TLS1.3 as wellSimo Sorce2019-05-231-2/+16
* server auth: disable TLS 1.3 if no signature algorithm is usableDaiki Ueno2019-05-201-0/+4
* _gnutls_srp_entry_free: follow consistent behavior in freeing datatmp-fix-srpNikos Mavrogiannopoulos2019-05-101-4/+8
* Add or clean header guards in lib/auth/Tim Rühsen2019-05-079-18/+34
* Use https:// for www.gnu.org and www.example.comTim Rühsen2019-03-1324-24/+24
* Merge branch 'tmp-reset-after-free' into 'master'Tim Rühsen2019-02-233-6/+2
|\
| * Remove redundant resets of variables after free()Tim Rühsen2019-02-223-6/+2
* | Cleanup lib/auth/cert.c as suggested by cppchecktmp-cleanup-certTim Rühsen2019-02-131-26/+12
|/
* _gnutls_gen_rawpk_crt: corrected the use of asserttmp-key-usageNikos Mavrogiannopoulos2019-02-061-9/+10
* raw public keys: apply the key usage bits the same way as X.509Nikos Mavrogiannopoulos2019-02-061-6/+14
* Fallback to TLS 1.2 when incompatible with signature certs are providedNikos Mavrogiannopoulos2019-02-061-1/+2
* Enforce the certificate key usage restrictions on all casesNikos Mavrogiannopoulos2019-02-062-6/+33
* Fix typos in lib/tmp-fix-typos-in-libTim Rühsen2019-01-042-4/+4
* Implemented support for raw public-key functionality (RFC7250).Tom Vrancken2018-12-153-66/+261
* Constant time/cache PKCS#1 RSA decryptiontmp-fix-CVE-2018-16868Simo Sorce2018-11-301-55/+54
* Renamed _gnutls_server_select_cert() to _gnutls_select_server_cert() for cons...Tom Vrancken2018-10-182-3/+3
* Renamed _gnutls_auth_info_set() to _gnutls_auth_info_init().Tom Vrancken2018-10-189-18/+18
* Renamed _gnutls_proc_x509_server_crt to _gnutls_proc_x509_crt.Tom Vrancken2018-10-181-2/+2
* Small fixes for comments and log strings.Tom Vrancken2018-10-181-11/+11
* _gnutls_server_select_cert: return error when no server cert is selectedtmp-auto-reauthNikos Mavrogiannopoulos2018-10-161-3/+4
* Implemented RFC7250 certificate type negotiation extensions.Tom Vrancken2018-08-203-34/+85
* cert auth: simplify certificate selection codeDmitry Eremin-Solenikov2018-07-231-55/+25
* Renamed extension supported ECC to supported groups. Fixes #451.Tom Vrancken2018-05-292-2/+2
* gnutls_certificate_set_retrieve_function3: updated documentationtmp-pkcs11-pcertNikos Mavrogiannopoulos2018-05-121-1/+1
* psk: save the username on auth info struct under TLS1.3Nikos Mavrogiannopoulos2018-04-061-1/+0
* Simplified the _gnutls13_psk_ext_parser interface and added unit testsNikos Mavrogiannopoulos2018-04-061-2/+1
* Added support for out-of-band Pre-shared keys under TLS1.3Ander Juaristi2018-04-064-44/+40
* cert auth: use a single callback to call for OCSPNikos Mavrogiannopoulos2018-02-191-17/+23
* ocsp: enhanced the OCSP response loading APIsNikos Mavrogiannopoulos2018-02-192-10/+11
* gnutls_certificate_set_ocsp_status_request_file: match input response to cert...Nikos Mavrogiannopoulos2018-02-192-9/+23
* select_sign_algorithm: check KX type only on pre-TLS1.3Nikos Mavrogiannopoulos2018-02-191-1/+1
* rename _gnutls_selected_certs_set -> selected_certs_setNikos Mavrogiannopoulos2018-02-191-33/+33
View Lorry Controller Status