summaryrefslogtreecommitdiff
path: root/lib/tls-sig.c
Commit message (Expand)AuthorAgeFilesLines
* build: avoid -Wenum-conversion warnings with GCC 10Daiki Ueno2020-08-311-2/+2
* SignatureAlgorithms: force-enable GOST signatures for GOST KXDmitry Eremin-Solenikov2019-12-281-1/+1
* tls-sig: reverse bytes in TLS signatures for GOST signaturesDmitry Eremin-Solenikov2019-10-311-1/+46
* tls-sig: split TLS 1.0/1.1 CertificateVerify codeDmitry Eremin-Solenikov2019-10-211-74/+110
* Use https:// for www.gnu.org and www.example.comTim Rühsen2019-03-131-1/+1
* Enforce the certificate key usage restrictions on all casesNikos Mavrogiannopoulos2019-02-061-6/+5
* Avoid calling sign_algorithm_get_name() when we already have pointer to the a...tmp-rsa-pss-tls12Nikos Mavrogiannopoulos2019-01-091-1/+1
* tls-sig: check RSA-PSS signature key compatibility also in TLS 1.2Daiki Ueno2019-01-091-0/+17
* Fix typos in lib/tmp-fix-typos-in-libTim Rühsen2019-01-041-2/+2
* signatures: distinguish RSA-PSS signatures with RSA PKCS#1 1.5 certificates f...Nikos Mavrogiannopoulos2018-03-091-1/+8
* sign APIs: introduce RSA-RAW signing algorithmNikos Mavrogiannopoulos2017-08-171-9/+14
* gnutls_privkey_import_ext4: introduced to allow signing with RSA-PSS or Ed255...Nikos Mavrogiannopoulos2017-08-151-9/+4
* prior to negotiating a signature check compatibility with private keyNikos Mavrogiannopoulos2017-08-041-1/+1
* handshake: select a signature algorithm earlyNikos Mavrogiannopoulos2017-08-041-3/+1
* pubkey_verify_hashed_data: simplified and made staticNikos Mavrogiannopoulos2017-08-031-3/+10
* handshake: return better error code on unwanted algorithmNikos Mavrogiannopoulos2017-07-171-2/+2
* tls sessions will not fail of insecure algorithms which are explicitly enabledNikos Mavrogiannopoulos2017-07-131-2/+8
* priorities: share priority structures across sessionsNikos Mavrogiannopoulos2017-07-101-2/+2
* handshake: simplify handshake by using the new signing APINikos Mavrogiannopoulos2017-06-071-37/+8
* tls-sig: re-organize and simplify the TLS signature generation and verificationNikos Mavrogiannopoulos2017-05-311-233/+271
* tls-sig: sign with RSA-PSS when requested by negotiated signature algorithmNikos Mavrogiannopoulos2017-05-291-7/+25
* eliminated dead code as indicated by clang scan-buildNikos Mavrogiannopoulos2017-02-201-1/+0
* eliminated various clang warnings with non-null argumentsNikos Mavrogiannopoulos2017-02-201-2/+4
* Rewrite SSL/TLS signature verification to use combined MD5+SHA1 digestDmitry Eremin-Solenikov2016-12-141-122/+125
* Rewrite SSL/TLS signing code to use combined MD5+SHA1 digestDmitry Eremin-Solenikov2016-12-141-116/+111
* Improved messages and violation handling in signature key usage checksNikos Mavrogiannopoulos2016-12-011-6/+17
* On client side allow signing with the signature algorithm of our certNikos Mavrogiannopoulos2016-09-221-2/+2
* Allow for conditional compilation of SSL 3.0 protocolNikos Mavrogiannopoulos2016-05-141-0/+8
* handshake: do not overwrite the server's signature algorithmNikos Mavrogiannopoulos2016-04-131-1/+2
* Moved pk_* functions to pk.cNikos Mavrogiannopoulos2015-08-231-67/+0
* Removed the 'gnutls_' prefix from files to simplify file namingNikos Mavrogiannopoulos2015-08-231-0/+750