summaryrefslogtreecommitdiff
path: root/lib/x509/verify.c
Commit message (Expand)AuthorAgeFilesLines
* simplified access to cipher and mac properties to reduce wasted cycles.Nikos Mavrogiannopoulos2013-05-251-5/+5
* several updatesNikos Mavrogiannopoulos2013-05-161-3/+3
* Placed back _gnutls_x509_compare_raw_dn().Nikos Mavrogiannopoulos2013-03-061-6/+3
* Several optimizations on certificate comparisons including DN. This speeds up...Nikos Mavrogiannopoulos2013-03-051-196/+84
* doc updateNikos Mavrogiannopoulos2013-02-241-1/+2
* Use LGPLv2.1 in the files their author's agreed to.Nikos Mavrogiannopoulos2013-02-011-1/+1
* Allow easier marking of insecure algorithms.Nikos Mavrogiannopoulos2012-11-081-4/+11
* When verifying an OCSP response included in TLS don't fail if the response is...Nikos Mavrogiannopoulos2012-11-061-1/+1
* check pathlen constraints.Nikos Mavrogiannopoulos2012-11-021-13/+32
* small optimization in CRL checkNikos Mavrogiannopoulos2012-11-021-8/+1
* Check the key usage bits during certificate verification.Nikos Mavrogiannopoulos2012-11-021-1/+28
* CRL verification includes the time checks.Nikos Mavrogiannopoulos2012-11-021-3/+14
* gnutls_sign_get_pk_algorithm and gnutls_sign_get_hash_algorithm were exported.Nikos Mavrogiannopoulos2012-08-171-2/+2
* Differentiate between signature failure and generic errors, by introducing th...Nikos Mavrogiannopoulos2012-06-031-2/+2
* corrected typoNikos Mavrogiannopoulos2012-05-311-1/+1
* When checking for an issuer check for a match in the key identifiers.Nikos Mavrogiannopoulos2012-05-231-4/+36
* Use the PKCS #1 1.5 encoding provided by nettle (2.5) for encryption and sign...Nikos Mavrogiannopoulos2012-05-221-97/+1
* several type changes to please clangNikos Mavrogiannopoulos2012-04-021-1/+1
* ENABLE_PKI is no moreNikos Mavrogiannopoulos2012-02-101-7/+0
* Fixed signed/unsigned warnings.Nikos Mavrogiannopoulos2012-01-211-3/+3
* Add/fix copyright headers.Simon Josefsson2012-01-201-2/+1
* GNUTLS_PK_ECC -> GNUTLS_PK_ECNikos Mavrogiannopoulos2012-01-021-1/+1
* Clarify license and copyright.Simon Josefsson2011-08-031-1/+1
* documentation fixesNikos Mavrogiannopoulos2011-07-231-13/+9
* Upgraded to LGPLv3.Nikos Mavrogiannopoulos2011-06-231-5/+3
* Split pubkey_verify_sig() to pubkey_verify_hashed_data() and pubkey_verify_da...Nikos Mavrogiannopoulos2011-06-041-318/+50
* fixes for http://tools.ietf.org/html/draft-mavrogiannopoulos-tls-dss-00Nikos Mavrogiannopoulos2011-06-031-0/+5
* Truncation of ECDSA and DSA signatures moved to _wrap_nettle_pk_sign()Nikos Mavrogiannopoulos2011-06-031-3/+6
* Hash algorithms used for DSA and ECDSA correspond to draft-mavrogiannopoulos-...Nikos Mavrogiannopoulos2011-06-031-12/+24
* Laxed verification checks for DSA to allow SHA256 in place of SHA224.Nikos Mavrogiannopoulos2011-05-281-3/+2
* Added gnutls_global_set_time_function() to allow overridingNikos Mavrogiannopoulos2011-05-261-2/+2
* Several updates to allow generation and signing of an ECC certificate.Nikos Mavrogiannopoulos2011-05-231-1/+2
* Added support for verifying server certificates with ECDSA.Nikos Mavrogiannopoulos2011-05-221-14/+23
* gnutls_pk_params_st is used internally to transfer public key parameters. Thi...Nikos Mavrogiannopoulos2011-05-221-25/+20
* Combined external abstract API with internal usage of gnutls_cert.Nikos Mavrogiannopoulos2011-04-171-2/+2
* Corrected documentation of several API functions.Nikos Mavrogiannopoulos2011-04-101-2/+2
* Simplified signature algorithm selection.Nikos Mavrogiannopoulos2011-03-231-1/+1
* Corrected verification of DSA-2048 keys. Reported by teddy@fukt.bsnet.se.Nikos Mavrogiannopoulos2011-03-151-3/+8
* gnutls_x509_trust_list_verify_crt shortens the provided certificate list base...Nikos Mavrogiannopoulos2011-03-121-1/+1
* Corrected types.Nikos Mavrogiannopoulos2011-03-121-1/+1
* gnutls_x509_log replaced with gnutls_audit_log.Nikos Mavrogiannopoulos2011-02-201-1/+1
* Time checks were moved to _gnutls_verify_certificate2().Nikos Mavrogiannopoulos2011-02-021-60/+52
* Better output when removing certificates from list.Nikos Mavrogiannopoulos2011-01-311-7/+9
* Added a new API to verify certificates. It is more efficient andNikos Mavrogiannopoulos2011-01-311-44/+107
* exported gnutls_x509_crl_get_raw_issuer_dn()Nikos Mavrogiannopoulos2011-01-301-1/+1
* The verification functions now return a GNUTLS_E_PK_SIG_VERIFY_FAILED on sign...Nikos Mavrogiannopoulos2010-12-181-28/+26
* Added gnutls_pubkey_verify_data and test vectors.Nikos Mavrogiannopoulos2010-12-161-1/+6
* Indented code. Use same indentation but with -nut to avoid usage of tabs. In ...Nikos Mavrogiannopoulos2010-12-161-227/+227
* Indent code.Simon Josefsson2010-12-061-2/+3
* Use ASN1_NULL when writing parameters for RSA signatures. This makes us compl...Nikos Mavrogiannopoulos2010-12-051-2/+2