summaryrefslogtreecommitdiff
path: root/lib/priority.c
Commit message (Expand)AuthorAgeFilesLines
* priority: support allowlisting in configuration fileDaiki Ueno2021-11-291-191/+581
* priority: refactor config file parsingDaiki Ueno2021-11-241-45/+240
* locks: rework rwlock primitivesDaiki Ueno2021-11-171-75/+105
* priority: rework config reloading logic and lockingDaiki Ueno2021-11-051-100/+134
* Revert "priority: fix potential race in reloading system-wide config"Daiki Ueno2021-11-031-15/+6
* priority: fix potential race in reloading system-wide configDaiki Ueno2021-10-301-6/+15
* priority: filter out ciphersuites with prf blocked by insecure-hashAlexander Sosedkin2021-10-211-0/+13
* priority: refactor ciphersuite filteringAlexander Sosedkin2021-10-211-13/+16
* priority: reflect system wide config when constructing sigalgsDaiki Ueno2021-06-111-3/+6
* priority: add option to disable TLS 1.3 middlebox compatibility modeDaiki Ueno2021-04-171-0/+9
* Fix a common typo of gnutls_priority_t.Sadie Powell2020-12-291-13/+13
* priority: add Ed448 to SECURE192 signing algorithmstmp-default-prioDaiki Ueno2020-09-201-0/+1
* lib: avoid file descriptor leak when application forksDaiki Ueno2020-05-301-1/+9
* algorithms: implement X448 key exchange and Ed448 signature schemeDaiki Ueno2020-01-231-3/+11
* Merge branch 'override-default-priority' into 'master'Nikos Mavrogiannopoulos2020-01-131-2/+31
|\
| * libgnutls: Add system-wide default-priority-string override.Dimitri John Ledkov2020-01-131-2/+31
* | lib: fix _kx_priority_gost termination itemDmitry Eremin-Solenikov2020-01-131-0/+1
* | priority: make priority matching less error-proneDmitry Eremin-Solenikov2020-01-101-67/+34
* | priority: add new GOST-ALL shortcutDmitry Eremin-Solenikov2020-01-101-0/+12
* | priority: add more GOST shortcutsDmitry Eremin-Solenikov2020-01-091-10/+47
* | lib/priority: add SIGN-GOST-ALL keywordDmitry Eremin-Solenikov2020-01-091-0/+14
* | lib/priority: use c_strncasecmp() for string comparisonDmitry Eremin-Solenikov2020-01-081-12/+12
* | priority: fix GROUP-GOST-ALL comparison lengthDmitry Eremin-Solenikov2020-01-081-1/+1
|/
* Merge branch 'tmp-check-same-certs' into 'master'Nikos Mavrogiannopoulos2019-12-201-1/+6
|\
| * Export profile ID/name handling functionsNikos Mavrogiannopoulos2019-12-191-1/+1
| * is_level_acceptable: apply the system-wide profile in all verificationsNikos Mavrogiannopoulos2019-12-191-0/+5
* | doc: update reference to the default configuration fileDimitri John Ledkov2019-12-191-1/+1
|/
* priority: add GROUP-GOST-ALL keywordDmitry Eremin-Solenikov2019-12-181-0/+19
* lib: fix group selection in case of GOST cipher suitesDmitry Eremin-Solenikov2019-12-181-1/+2
* priority: fix loop which removes systemwide disabled KX algosDmitry Eremin-Solenikov2019-09-051-1/+1
* config: added ability to override and mark algorithms as disabledNikos Mavrogiannopoulos2019-06-201-7/+347
* Use inih to parse configuration fileNikos Mavrogiannopoulos2019-06-201-88/+37
* priority: add new option to allow small records (>= 64)Daiki Ueno2019-05-221-0/+5
* Added profile to correspond to the future security parameterNikos Mavrogiannopoulos2019-05-201-26/+21
* Use https:// for www.gnu.org and www.example.comTim Rühsen2019-03-131-1/+1
* priorities: when %NO_EXTENSIONS is specified disable TLS1.3Nikos Mavrogiannopoulos2019-01-251-1/+1
* set_ciphersuite_list(): Use linear approach to cleanup prioritiestmp-priority-linearTim Rühsen2019-01-231-20/+15
* Prevent applications from combining legacy versions of TLS with TLS1.3tmp-tls10-tls13-fixNikos Mavrogiannopoulos2018-11-271-5/+16
* gnutls_priority_init: ignore CTYPE-OPENPGP optionstmp-ignore-ctypesNikos Mavrogiannopoulos2018-11-011-0/+3
* gnutls_priority_init: fixed indentation according to project rulesNikos Mavrogiannopoulos2018-11-011-22/+25
* gnutls_priority_set: re-organizedtmp-fix-priority-setNikos Mavrogiannopoulos2018-10-311-22/+22
* gnutls_priority_set: do not override the version after handshake is completeNikos Mavrogiannopoulos2018-10-301-4/+6
* Renamed fields in priority_st to improve code readability. Fixes #453.Tom Vrancken2018-10-181-94/+94
* pkcs11 uris: the URI scheme is case insensitivetmp-urisNikos Mavrogiannopoulos2018-10-121-12/+13
* gnutls_priority_set: do not override version on handshaketmp-fix-priority-set-callNikos Mavrogiannopoulos2018-10-031-1/+2
* Use ASCII version of strcasecmp() in library codetmp-lib-c-strcaseTim Rühsen2018-09-271-17/+18
* Enable the TLS1.3 protocol by defaultNikos Mavrogiannopoulos2018-09-241-2/+0
* Fix issue introduced in 20886264feTim Rühsen2018-09-201-3/+3
* priority: be backwards compatible with priority strings starting with NONENikos Mavrogiannopoulos2018-09-121-11/+21
* Use gnutls_strdup() instead of strdup() in library codetmp-strdupTim Rühsen2018-08-241-1/+1