summaryrefslogtreecommitdiff
path: root/lib/ext/signature.c
Commit message (Expand)AuthorAgeFilesLines
* lib/*: remove unnecessary cast to ssize_ttmp-decr-lenDaiki Ueno2019-09-121-2/+1
* Use https:// in lib/, src/, and m4/Tim Rühsen2019-03-131-1/+1
* Use https:// for www.gnu.org and www.example.comTim Rühsen2019-03-131-1/+1
* Small fixes for comments and log strings.Tom Vrancken2018-10-181-16/+11
* handshake: do not send TLS extensions under DTLS and vice versatmp-prohibit-tls-dtls-mixNikos Mavrogiannopoulos2018-05-171-2/+1
* signatures: distinguish RSA-PSS signatures with RSA PKCS#1 1.5 certificates f...Nikos Mavrogiannopoulos2018-03-091-8/+15
* handshake: added support for client certificatesNikos Mavrogiannopoulos2018-02-191-4/+4
* extensions: renamed _gnutls_hello_ext_*sdata to _gnutls_hello_ext_*privNikos Mavrogiannopoulos2018-02-191-3/+3
* ext/signature: explicitly prevent RSA/DSA and SHA1 signatures on TLS1.3Nikos Mavrogiannopoulos2018-02-191-0/+11
* extensions: separate the hello extensions from othersNikos Mavrogiannopoulos2018-02-191-1/+1
* extensions: renamed hello extension handling functions appropriatelyNikos Mavrogiannopoulos2018-02-191-3/+3
* extensions: use the low-level extension parsing code for hello parsingNikos Mavrogiannopoulos2018-02-191-1/+1
* extensions: use an internal extension ID independent of the TLS idNikos Mavrogiannopoulos2018-02-191-1/+2
* extensions: mark the message validity of each supported extensionNikos Mavrogiannopoulos2018-02-191-0/+1
* extensions: type renamed to id for clarityNikos Mavrogiannopoulos2018-02-191-1/+1
* ext/signature: added TLS 1.3 signature algorithm negotiationNikos Mavrogiannopoulos2018-02-191-6/+25
* signature: on client side, refuse to negotiate non-enabled signature schemesNikos Mavrogiannopoulos2017-09-251-1/+9
* prior to negotiating a signature check compatibility with private keyNikos Mavrogiannopoulos2017-08-041-1/+6
* priorities: share priority structures across sessionsNikos Mavrogiannopoulos2017-07-101-6/+6
* Renamed fields of sign_algorithm_stNikos Mavrogiannopoulos2017-07-101-6/+6
* handshake: simplified signature algorithm list generationNikos Mavrogiannopoulos2017-07-101-37/+22
* TLS extensions: mark each extension which cannot be overridenNikos Mavrogiannopoulos2017-06-141-0/+1
* removed type extension_priv_data_tNikos Mavrogiannopoulos2017-06-141-10/+10
* replaced MAX_SIGNATURE_ALGORITHMS macro with MAX_ALGOSNikos Mavrogiannopoulos2017-05-291-2/+2
* ext/signature: accept compatible algorithms with PKNikos Mavrogiannopoulos2017-05-291-2/+1
* ext/signature: error on invalid extension formatNikos Mavrogiannopoulos2017-03-071-0/+2
* ext/signature: reject an extension with padded dataNikos Mavrogiannopoulos2017-03-071-0/+3
* ext/signature: reject an extension size of zeroNikos Mavrogiannopoulos2017-03-071-1/+1
* Terminate handshake if only unknown or disabled signatures are advertized by ...Nikos Mavrogiannopoulos2016-10-261-8/+7
* On client side allow signing with the signature algorithm of our certNikos Mavrogiannopoulos2016-09-221-3/+9
* _gnutls_session_get_sign_algo: always return GNUTLS_SIGN_UNKNOWN on failureNikos Mavrogiannopoulos2016-09-221-1/+1
* TLS extensions: use more human-friendly namesNikos Mavrogiannopoulos2016-05-301-1/+1
* doc: mention the TLS 1.2 restriction of sign algo functionsNikos Mavrogiannopoulos2016-05-141-2/+4
* marked all extensions structures as constantNikos Mavrogiannopoulos2015-11-211-1/+1
* Removed the 'gnutls_' prefix from files to simplify file namingNikos Mavrogiannopoulos2015-08-231-4/+4
* before falling back to SHA1 as signature algorithm in TLS 1.2 check if it is ...Nikos Mavrogiannopoulos2015-04-251-1/+5
* _gnutls_session_sign_algo_enabled: do not consider any values from the extens...Nikos Mavrogiannopoulos2015-04-251-17/+1
* doc: avoid using structure for opaque typesNikos Mavrogiannopoulos2015-03-201-3/+3
* added gnutls_ext_set_data() and gnutls_ext_get_data()Nikos Mavrogiannopoulos2015-03-201-7/+7
* More precise packet length checking.Nikos Mavrogiannopoulos2014-05-041-0/+3
* reindented codeNikos Mavrogiannopoulos2013-11-081-329/+329
* explicit tests for non-null versionNikos Mavrogiannopoulos2013-06-101-1/+13
* optimized access to TLS protocol version properties.Nikos Mavrogiannopoulos2013-05-251-4/+4
* Added gnutls_sign_algorithm_get_client()Nikos Mavrogiannopoulos2013-04-041-2/+19
* Use LGPLv2.1 in the files their author's agreed to.Nikos Mavrogiannopoulos2013-02-011-1/+1
* Be tolerant is ECDSA-violating signatures.Nikos Mavrogiannopoulos2012-09-011-1/+1
* Added gnutls_sign_algorithm_get().Nikos Mavrogiannopoulos2012-08-171-0/+17
* gnutls_sign_get_pk_algorithm and gnutls_sign_get_hash_algorithm were exported.Nikos Mavrogiannopoulos2012-08-171-1/+1
* When selecting a session signature algorithm consider the enabled.Nikos Mavrogiannopoulos2012-08-171-0/+3
* Use the PKCS #1 1.5 encoding provided by nettle (2.5) for encryption and sign...Nikos Mavrogiannopoulos2012-05-221-1/+2