summaryrefslogtreecommitdiff
path: root/lib/ext
Commit message (Expand)AuthorAgeFilesLines
* ext/{client,server}_cert_type: use proper types for integersDaiki Ueno2021-09-092-8/+10
* devel: suppress cppcheck 2.5 false-positivesDaiki Ueno2021-08-041-2/+1
* key_share: treat X25519 and X448 as same PK type when advertisingDaiki Ueno2021-06-251-3/+21
* pre_shared_key: limit 0-RTT to resumption connectionsDaiki Ueno2021-05-172-10/+22
* gnutls_init: redefine GNUTLS_ENABLE_EARLY_DATA flag for clientDaiki Ueno2021-05-131-1/+6
* pre_shared_key: avoid use-after-free around reallocDaiki Ueno2021-03-101-3/+12
* key_share: avoid use-after-free around reallocDaiki Ueno2021-03-101-7/+5
* Changed _gnutls_session_cert_type_supported prototype and name to follow guid...Tom Vrancken2021-02-282-6/+4
* Added extra logging and done some variable refactoring for server cert type e...Tom Vrancken2021-02-281-23/+35
* Added extra logging and done some variable refactoring for client cert type e...Tom Vrancken2021-02-281-21/+33
* handshake: replace RESUME_TRUE and RESUME_FALSE with <stdbool.h>Daiki Ueno2021-02-042-4/+4
* Fix memory leak with client certificate authRemi Olivier2020-11-051-0/+4
* build: remove dead assignmentsDaiki Ueno2020-09-181-1/+1
* tls13/session_ticket: remove _gnutls13_session_ticket_unsetDaiki Ueno2020-09-181-19/+17
* doc: assorted typo fixestmp-typo-fixesDaiki Ueno2020-08-122-3/+3
* safe_memcmp: remove in favor of gnutls_memcmptmp-safe-memcmpDaiki Ueno2020-06-291-1/+1
* Update session_ticket.c to add support for zero length session tickets return...rrivers22020-05-241-8/+10
* psk: Allow non-NULL PSK usernamesAnder Juaristi2020-03-231-11/+3
* keylogfile: simplify the callback mechanismtmp-keylog-funcDaiki Ueno2020-02-221-2/+2
* keylogfile: generalize with a callbacktmp-keylog-hookDaiki Ueno2020-02-071-6/+10
* key shares: avoid using internal errorsNikos Mavrogiannopoulos2020-01-251-10/+10
* algorithms: implement X448 key exchange and Ed448 signature schemeDaiki Ueno2020-01-231-4/+10
* Merge branch 'tmp-ocsp-check' into 'master'903-add-crl-and-crq-fuzzersNikos Mavrogiannopoulos2020-01-091-29/+43
|\
| * Provide flag to identify sessions that an OCSP response was requestedNikos Mavrogiannopoulos2019-12-151-29/+43
* | status_request.c: Silence -Wsign-compareTim Rühsen2020-01-031-1/+1
* | SignatureAlgorithms: force-enable GOST signatures for GOST KXDmitry Eremin-Solenikov2019-12-282-4/+67
* | ext/signature: use GOST signatures for GOST ciphersiuitesDmitry Eremin-Solenikov2019-12-181-0/+6
|/
* sign: convert tls13_ok to flags fieldDmitry Eremin-Solenikov2019-10-211-1/+1
* Merge branch 'tmp-ext-mandatory' into 'master'Nikos Mavrogiannopoulos2019-10-1025-25/+54
|\
| * session tickets: parse extension during session resumption on client sideNikos Mavrogiannopoulos2019-10-0825-25/+54
* | ext/supported_groups: don't consider non-EC groups for ECDmitry Eremin-Solenikov2019-10-081-2/+2
|/
* ext/supported_versions: reorder client precedence if necessaryDaiki Ueno2019-09-271-21/+34
* lib/*: remove unnecessary cast to ssize_ttmp-decr-lenDaiki Ueno2019-09-1218-49/+31
* ext/session_ticket: avoid calling memcpy on overlapping memory areastmp-session-ticket-valgrindDaiki Ueno2019-07-101-1/+5
* Always pass in and check Q in TLS 1.3Simo Sorce2019-05-231-2/+12
* priority: add new option to allow small records (>= 64)Daiki Ueno2019-05-222-2/+7
* ext/record_size_limit: distinguish sending and receiving limitstmp-record-sizesDaiki Ueno2019-05-142-23/+75
* Add or clean header guards in lib/ext/Tim Rühsen2019-05-0726-72/+90
* handshake: generate early exporter secretDaiki Ueno2019-04-191-0/+12
* handshake: move early secrets calculation to pre_shared_keyDaiki Ueno2019-04-192-2/+70
* Use https:// in lib/, src/, and m4/Tim Rühsen2019-03-132-2/+2
* Use https:// for www.gnu.org and www.example.comTim Rühsen2019-03-1350-50/+50
* ext/supported_versions: regenerate server randomDaiki Ueno2019-02-221-0/+15
* gnutls_record_set_max_size: make it work on server sidetmp-fix-record-size-limit-resumptionDaiki Ueno2019-02-141-5/+4
* ext/record_size_limit: account for content type octet in TLS 1.3Daiki Ueno2019-02-141-3/+30
* ext/record_size_limit: don't confuse with negotiated/user-supplied maximumDaiki Ueno2019-02-141-9/+26
* ext/max_record: server shouldn't send it with record_size_limitDaiki Ueno2019-02-142-4/+6
* Add GNUTLS_E_RECEIVED_DISALLOWED_NAME for illegal SNI namesTim Rühsen2019-01-311-2/+6
* Merge branch 'tmp-fix-no-extensions' into 'master'Nikos Mavrogiannopoulos2019-01-242-1/+4
|\
| * The flag %NO_EXTENSIONS is disabling extension support while being functionaltmp-fix-no-extensionsNikos Mavrogiannopoulos2019-01-102-1/+4