summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* Merge branch 'wip/dueno/config-allowlisting' into 'master'Daiki Ueno2021-11-2910-146/+1076
|\
| * priority: support allowlisting in configuration fileDaiki Ueno2021-11-2910-199/+934
| * priority: refactor config file parsingDaiki Ueno2021-11-246-57/+252
* | sockets: fixed compiler warning on Windows x32Evgeny Grin2021-11-261-0/+2
* | sockets: fixed building for Windows with compilers without VLA supportEvgeny Grin2021-11-261-3/+6
|/
* locks: deprecate gnutls_global_set_mutexDaiki Ueno2021-11-171-15/+6
* locks: use once execution for on-demand initialization of globalsDaiki Ueno2021-11-177-31/+87
* locks: rework rwlock primitivesDaiki Ueno2021-11-173-79/+142
* pkcs11: switch to using static mutexDaiki Ueno2021-11-172-12/+3
* verify-tofu: switch to using static mutex for lockingDaiki Ueno2021-11-172-12/+4
* locks: replace custom mutex wrappers with "glthread/lock.h"Daiki Ueno2021-11-176-144/+58
* Port openconnect TPM2 codeNikos Mavrogiannopoulos2021-11-1311-6/+1435
* priority: rework config reloading logic and lockingDaiki Ueno2021-11-053-105/+140
* Revert "priority: fix potential race in reloading system-wide config"Daiki Ueno2021-11-031-15/+6
* priority: fix potential race in reloading system-wide configDaiki Ueno2021-10-301-6/+15
* priority: filter out ciphersuites with prf blocked by insecure-hashAlexander Sosedkin2021-10-211-0/+13
* priority: refactor ciphersuite filteringAlexander Sosedkin2021-10-211-13/+16
* ktls: basic implementation of SW modeHedgehog50402021-10-197-25/+506
* fix mingw64 detectionSteve Lhomme2021-09-231-1/+1
* Merge branch 'x25519-and-x448' into 'master'Daiki Ueno2021-09-2313-6/+357
|\
| * lib/x509: Avoid memcpy when string is emptyDaniel Kahn Gillmor2021-09-171-1/+2
| * x509: handle X25519 and X448 in read_pubkeyDaniel Kahn Gillmor2021-09-171-0/+20
| * nettle: handle X25519 and X448 in pk_fixupDaniel Kahn Gillmor2021-09-171-0/+24
| * x509: enable importing secret keys for X448 and X25519.Daniel Kahn Gillmor2021-09-171-0/+54
| * Enable X25519 and X448 everywhere that EdDSA is supported.Daniel Kahn Gillmor2021-09-178-2/+23
| * x509: handle X448 and X25519 in write_pubkeyDaniel Kahn Gillmor2021-09-171-0/+32
| * pubkey: handle X25519 and X448 in gnutls_pubkey_import_pkcs11Daniel Kahn Gillmor2021-09-171-0/+137
| * nettle: extend pk_verify_priv_params to handle X25519 and X448Daniel Kahn Gillmor2021-09-171-0/+41
| * lib/pk: treat modern ECDH octet streams the same way as eddsa streams.Daniel Kahn Gillmor2021-09-171-1/+1
| * lib/algorithms: add modern ecdh functions comparable to curve_is_eddsaDaniel Kahn Gillmor2021-09-171-0/+16
| * algorithms: Explicitly name ECDH_X448_OID and ECDH_X25519_OIDDaniel Kahn Gillmor2021-09-173-2/+7
* | wrap_nettle_hash_exists: add missing hash algorithmsDaiki Ueno2021-09-201-5/+8
|/
* build: remove tautological if conditionsDaiki Ueno2021-09-095-11/+13
* ext/{client,server}_cert_type: use proper types for integersDaiki Ueno2021-09-092-8/+10
* fix SSSE3 SHA384 to work more than onceMiroslav Lichvar2021-09-071-1/+1
* x509: pin/password callback support for openssl encrypted private keysCraig Gallek2021-08-151-0/+10
* Merge branch 'wip/dueno/asan-poisoning' into 'master'Daiki Ueno2021-08-106-85/+149
|\
| * mem: instrument with ASan memory poisoning as well as valgrindDaiki Ueno2021-08-096-85/+149
* | Merge branch 'wip/dueno/tls13-rsa-pss-salt' into 'master'Daiki Ueno2021-08-077-4/+30
|\ \
| * | pk: add flags to force RSA-PSS salt length to match digest lengthDaiki Ueno2021-08-077-4/+30
| |/
* | fips: allow more RSA modulus sizesDaiki Ueno2021-08-051-3/+25
|/
* devel: suppress cppcheck 2.5 false-positivesDaiki Ueno2021-08-0411-46/+40
* gnutls_ocsp_resp_verify: Check key purpose if signer not on trust listFiona Klute2021-07-141-8/+8
* key_share: treat X25519 and X448 as same PK type when advertisingDaiki Ueno2021-06-251-3/+21
* Fix gnutls_certificate_set_trust_list() return value documentationMichael Catanzaro2021-06-221-2/+0
* priority: reflect system wide config when constructing sigalgsDaiki Ueno2021-06-111-3/+6
* build: fix interface version dependencies in libgnutls.mapDaiki Ueno2021-05-281-2/+2
* Merge branch 'wip/dueno/earlydata-server' into 'master'Daiki Ueno2021-05-262-10/+22
|\
| * pre_shared_key: limit 0-RTT to resumption connectionsDaiki Ueno2021-05-172-10/+22
* | ASN1 : Remove warnings related to old libtasn1 namingsLeonardo Bras2021-05-2139-338/+338