summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* Merge branch 'client-hello-version' into 'master'cherry-pick-c93fab21Daiki Ueno2022-01-121-0/+1
* Merge branch 'wip/dueno/ecdsa-verify-3.6.x' into 'gnutls_3_6_x'Daiki Ueno2021-05-115-0/+110
|\
| * nettle: port upstream hardening of EC point multiplicationDaiki Ueno2021-05-115-0/+110
* | str: suppress -Wunused-function if AGGRESSIVE_REALLOC is definedDaiki Ueno2021-04-041-9/+9
* | _gnutls_buffer_resize: account for unused area if AGGRESSIVE_REALLOCDaiki Ueno2021-04-041-2/+2
* | pre_shared_key: avoid use-after-free around reallocDaiki Ueno2021-04-041-3/+12
* | key_share: avoid use-after-free around reallocDaiki Ueno2021-04-041-7/+5
* | _gnutls_buffer_resize: add option to use allocation simpler logicDaiki Ueno2021-04-041-0/+32
* | gnutls_buffer_append_data: remove duplicated codeDaiki Ueno2021-04-041-20/+4
|/
* handshake: reject no_renegotiation alert if handshake is incompletetmp-renegotiation-3_6_xDaiki Ueno2020-09-032-13/+36
* handshake: check TLS version against modified server prioritiesDaiki Ueno2020-09-031-1/+11
* gnutls_aead_cipher_decrypt: check output buffer size before writingDaiki Ueno2020-09-031-0/+8
* gnutls_x509_crt_export2: return 0 instead of the lengthDaiki Ueno2020-09-031-4/+9
* minitasn1: move WARN_CFLAGS setting to configure.acDaiki Ueno2020-09-031-4/+0
* _gnutls_fips_mode_enabled: treat selftest failure as FIPS disabledDaiki Ueno2020-09-031-1/+10
* doc: assorted typo fixesDaiki Ueno2020-09-0311-13/+13
* cert-session: fail hard if mandatory stapling is not honoredDaiki Ueno2020-09-031-0/+1
* pubkey: avoid spurious audit messages from _gnutls_pubkey_compatible_with_sig()Petr Pavlu2020-08-311-4/+7
* ecdh: perform SP800-56A rev3 full pubkey validation on keygenDaiki Ueno2020-08-311-2/+180
* dh: perform SP800-56A rev3 full pubkey validation on keygenDaiki Ueno2020-08-311-0/+90
* dh-primes: make the FIPS approved check return Q valueDaiki Ueno2020-08-313-20/+30
* ecdh: check validity of P before exportDaiki Ueno2020-08-311-6/+21
* dh: check validity of Z before exportDaiki Ueno2020-08-311-9/+17
* build: use $(LIBPTHREAD) rather than non-existent $(LTLIBPTHREAD)James Bottomley2020-08-311-1/+7
* fix connectx not available on older macOS SDKSteve Lhomme2020-08-311-3/+11
* safe_memcmp: remove in favor of gnutls_memcmpDaiki Ueno2020-08-316-17/+9
* dhe: check if DH params in SKE match the FIPS approved algorithmsDaiki Ueno2020-08-313-0/+48
* dh-primes: add MODP primes from RFC 3526Daiki Ueno2020-08-312-0/+962
* Wipe session ticket keys before releasing the session structureFiona Klute2020-08-311-0/+8
* Modied the license to GPLv2.1+ to keep with LICENSE file.Lei Maohui2020-08-312-18/+22
* build: avoid -Wenum-conversion warnings with GCC 10Daiki Ueno2020-08-3110-16/+29
* gnutls_cipher_init: fix potential memleakDaiki Ueno2020-08-311-4/+14
* gnutls_aead_cipher_init: fix potential memleakDaiki Ueno2020-08-311-4/+11
* crypto-api: always allocate memory when serializing iovec_ttmp-fix-iov-3_6Daiki Ueno2020-06-141-25/+11
* Merge the extra libraries to link dynamically in GNUTLS_LIBS_PRIVATESteve Lhomme2020-06-072-2/+2
* valgrind: check if session ticket key is used without initializationtmp-totp-initDaiki Ueno2020-06-032-1/+12
* stek: differentiate initial state from valid time window of TOTPDaiki Ueno2020-06-031-12/+5
* Merge branch 'tmp-known-certs' into 'master'Daiki Ueno2020-05-314-35/+87
|\
| * x509: trigger fallback verification path when cert is expiredDaiki Ueno2020-05-311-5/+7
| * _gnutls_pkcs11_verify_crt_status: check validity against system certDaiki Ueno2020-05-313-30/+80
* | Merge branch 'nowincrypt' into 'master'Dmitry Baryshkov2020-05-313-1/+93
|\ \ | |/ |/|
| * win32: use bcrypt instead of CryptoAPI on Vista+ for random numbersSteve Lhomme2020-05-283-1/+93
* | Merge branch 'add-aes192-gcm' into 'master'Dmitry Baryshkov2020-05-3013-0/+122
|\ \
| * | lib: add support for AES-192-GCMDmitry Baryshkov2020-05-2713-0/+122
* | | Merge branch 'tmp-fileio' into 'master'Daiki Ueno2020-05-3013-77/+80
|\ \ \ | |_|/ |/| |
| * | build: write "FILE *fp" instead of "FILE *fd"tmp-fileioDaiki Ueno2020-05-304-38/+38
| * | gnutls_load_file: document limitation regarding partial failureDaiki Ueno2020-05-301-0/+4
| * | cert-cred: clear private key data loaded from fileDaiki Ueno2020-05-302-6/+15
| * | lib: avoid file descriptor leak when application forksDaiki Ueno2020-05-308-11/+19
| * | gnulib: update git submoduleDaiki Ueno2020-05-296-32/+14