summaryrefslogtreecommitdiff
path: root/lib/x509/verify.c
Commit message (Expand)AuthorAgeFilesLines
* x509: rework issuer callbackDaiki Ueno2020-11-191-19/+0
* x509: correct argument of gnutls_verify_output_functiontmp-verify-outputDaiki Ueno2020-09-271-2/+3
* build: remove dead assignmentsDaiki Ueno2020-09-181-4/+3
* Implements a callback function gnutls_x509_trust_list_set_getissuer_function()Sahana Prasad2020-06-031-48/+81
* _gnutls_pkcs11_verify_crt_status: check validity against system certDaiki Ueno2020-05-311-2/+5
* algorithms: properly calculate hash strength for Ed448Daiki Ueno2020-03-161-2/+2
* _gnutls_verify_crt_status: apply algorithm checks to trusted CAsNikos Mavrogiannopoulos2019-12-191-25/+43
* is_level_acceptable: apply the system-wide profile in all verificationsNikos Mavrogiannopoulos2019-12-191-1/+13
* config: added ability to override and mark algorithms as disabledNikos Mavrogiannopoulos2019-06-201-1/+0
* Added profile to correspond to the future security parameterNikos Mavrogiannopoulos2019-05-201-1/+5
* Use https:// for www.gnu.org and www.example.comTim Rühsen2019-03-131-1/+1
* Fix typos in lib/tmp-fix-typos-in-libTim Rühsen2019-01-041-1/+1
* _gnutls_check_key_purpose: eliminated dead codetmp-eliminate-dead-codeNikos Mavrogiannopoulos2018-09-261-2/+0
* x509/verify: when verifying against a self signed certificate ignore issuerNikos Mavrogiannopoulos2017-12-301-5/+7
* gnutls_x509_crl_verify: check next update field for presenceNikos Mavrogiannopoulos2017-09-081-1/+3
* gnutls_pk_params_st: separate flags/qbits and curveNikos Mavrogiannopoulos2017-08-081-2/+2
* sign/digest: separate "brokenness" of signatures and hash algorithmsNikos Mavrogiannopoulos2017-08-041-7/+10
* RSA-PSS parameter checking was moved to lower level functionsNikos Mavrogiannopoulos2017-08-041-1/+1
* signature security level check were moved to lower level functionsNikos Mavrogiannopoulos2017-08-041-6/+8
* verify_crt: translate GNUTLS_E_CONSTRAINT_ERROR to verification status flagNikos Mavrogiannopoulos2017-08-041-0/+6
* _gnutls_x509_validate_sign_params: use GNUTLS_E_CONSTRAINT_ERROR for mismatch...Nikos Mavrogiannopoulos2017-08-041-2/+2
* pubkey_verify_data: accept signature entry instead of PK and hashNikos Mavrogiannopoulos2017-08-031-9/+1
* gnutls_pk_params_st: renamed sign field to spkiNikos Mavrogiannopoulos2017-08-031-1/+1
* Clarified the purpose of the spki params related functionsNikos Mavrogiannopoulos2017-08-031-5/+12
* x509/verify: reject SHA1 in signature algorithms for certificate verificationNikos Mavrogiannopoulos2017-07-211-1/+1
* x509: implement RSA-PSS signature schemeDaiki Ueno2017-05-291-30/+104
* is_level_acceptable: ensure issuer is not dereferenced when nullNikos Mavrogiannopoulos2017-04-061-4/+6
* Use a common function to decide acceptable signaturesNikos Mavrogiannopoulos2017-03-211-3/+2
* Introduced flag GNUTLS_VERIFY_ALLOW_SIGN_WITH_SHA1Nikos Mavrogiannopoulos2017-03-161-2/+10
* x509.h: introduced flag GNUTLS_VERIFY_IGNORE_UNKNOWN_CRIT_EXTENSIONSNikos Mavrogiannopoulos2017-03-021-4/+8
* x509/verify: refuse to verify certificates with unknown critical extensionsNikos Mavrogiannopoulos2017-03-021-0/+53
* is_level_acceptable: no longer checks for broken algorithmsNikos Mavrogiannopoulos2017-02-241-1/+1
* verify: is_broken_allowed: account for "new" flag GNUTLS_VERIFY_ALLOW_BROKENNikos Mavrogiannopoulos2017-02-241-0/+4
* pkcs11 verification: ensure that an issuer we retrieve is not blacklisttmp-fix-pkcs11-verificationNikos Mavrogiannopoulos2016-12-311-0/+11
* verify: print certificate on sec param failureNikos Mavrogiannopoulos2016-12-191-8/+11
* gnutls_x509_crl_verify: always return zero on successNikos Mavrogiannopoulos2016-12-011-1/+6
* several spacing fixes to keep syntax-check happyNikos Mavrogiannopoulos2016-09-111-7/+7
* verify_crt: simplified error settingNikos Mavrogiannopoulos2016-07-281-74/+35
* verify_crt: removed text on parameter no longer being presentNikos Mavrogiannopoulos2016-07-281-1/+1
* enhanced debugging messages for cert verificationNikos Mavrogiannopoulos2016-06-221-0/+1
* During PKIX chain verification check the TLSFeatures complianceNikos Mavrogiannopoulos2016-06-141-0/+29
* verify_crt: moved all verification state into a common structureNikos Mavrogiannopoulos2016-06-141-33/+37
* _gnutls_check_key_purpose: in CA certificates treat the SGC key purpose as GN...Nikos Mavrogiannopoulos2016-06-021-0/+28
* several sign-related API changesNikos Mavrogiannopoulos2016-05-311-8/+9
* x509: replace the bool type with the unsigned typeNikos Mavrogiannopoulos2016-05-311-15/+14
* exported gnutls_x509_crt_equals() and gnutls_x509_crt_equals2()Nikos Mavrogiannopoulos2016-05-021-36/+2
* gnutls_x509_crt_get_key_usage: ensure that its returned value is properly han...Nikos Mavrogiannopoulos2016-04-111-4/+11
* Removed the 'gnutls_' prefix from files to simplify file namingNikos Mavrogiannopoulos2015-08-231-8/+8
* removed gnutls_pubkey_get_verify_algorithm() and unnecessary internal APIsNikos Mavrogiannopoulos2015-02-211-14/+0
* doc updateNikos Mavrogiannopoulos2015-01-121-0/+3
View Lorry Controller Status