summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* bumped versionNikos Mavrogiannopoulos2016-11-041-1/+1
* Terminate handshake if only unknown or disabled signatures are advertized by ...Nikos Mavrogiannopoulos2016-10-272-4/+4
* gnutls_server_name_get: fix the returned length on GNUTLS_E_SHORT_MEMORY_BUFFERNikos Mavrogiannopoulos2016-10-271-1/+1
* restrict the validity of handshake messages during handshake processNikos Mavrogiannopoulos2016-10-254-2/+24
* gnutls_priority: corrected typo in the cipher performance prioritiesNikos Mavrogiannopoulos2016-10-251-1/+0
* Restrict the allowed signature algorithms for SKE to the enabled onesNikos Mavrogiannopoulos2016-10-213-5/+12
* signature algorithms: only forbid non-SHA1 or non-SHA256 hashes for Certifica...Nikos Mavrogiannopoulos2016-10-173-18/+25
* gcrypt: don't use gcry_thread_cbs in 1.6.x and laterNikos Mavrogiannopoulos2016-10-121-0/+4
* Removed the unused _gnutls_atfork() function.tmp-gnutls-2-12-x-no-atforkNikos Mavrogiannopoulos2016-10-052-24/+0
* priority strings: allow as no-op the ARCFOUR-40 and RSA-EXPORT stringsNikos Mavrogiannopoulos2016-09-201-1/+12
* Increased the maximum size allowed for handshake messages to 128kbNikos Mavrogiannopoulos2016-09-192-2/+2
* removed ARCFOUR-128 from all default priority listsNikos Mavrogiannopoulos2016-09-181-5/+0
* PSK: set and read the hint in DHE-PSK ciphersuitesNikos Mavrogiannopoulos2016-08-246-26/+68
* introduced priority strings from later gnutls versions to enhance compatibilityNikos Mavrogiannopoulos2016-08-241-2/+11
* gcrypt: corrected sign issueNikos Mavrogiannopoulos2016-08-231-1/+1
* Enhanced error checking in _gnutls_buffer_append_data_prefixNikos Mavrogiannopoulos2016-08-231-1/+5
* configure: do not link with pthread unless necessaryNikos Mavrogiannopoulos2016-08-231-1/+19
* Remove random padding; always use minimal paddingNikos Mavrogiannopoulos2016-08-233-7/+2
* Give priority to RSA ciphersuites to improve compatibilityNikos Mavrogiannopoulos2016-08-231-1/+6
* gnutls_calc_dh_key: reject values of public key that are over the primeNikos Mavrogiannopoulos2016-08-231-5/+7
* client key exchange: fail if the client KX message is padded with additional ...Nikos Mavrogiannopoulos2016-08-231-0/+3
* Disable SSL 3.0 by defaultNikos Mavrogiannopoulos2016-08-231-1/+0
* ARCFOUR-128 is prioritized lower than any other cipherNikos Mavrogiannopoulos2016-08-101-8/+8
* Removed support for EXPORT ciphersuitesNikos Mavrogiannopoulos2016-08-1021-921/+21
* The minimum Diffie-Hellman bits size was raised to 1023Nikos Mavrogiannopoulos2016-08-101-1/+1
* Prohibit DSA-224 and DSA-256 from being used as signature algorithms with gcryptNikos Mavrogiannopoulos2016-08-102-0/+10
* Backported from gnutls3.x the removal of the strict check on signature algori...Nikos Mavrogiannopoulos2016-08-096-77/+2
* gcrypt: backported PKCS#1 size check on verificationNikos Mavrogiannopoulos2016-08-091-0/+6
* No longer set SSL 3.0 as the record layer version by defaultNikos Mavrogiannopoulos2016-08-091-1/+1
* removed dead codeNikos Mavrogiannopoulos2016-08-091-5/+0
* Fix initialization error in mpi-print of libgcryptNikos Mavrogiannopoulos2016-08-091-0/+2
* simplify casting to mpz_t using __mpz_struct and cleaned up mpz_t access.Nikos Mavrogiannopoulos2016-08-094-23/+25
* When resuming a session send only the mandatory extensions.Nikos Mavrogiannopoulos2016-08-091-1/+2
* Account the length byte in SRP extension.Nikos Mavrogiannopoulos2016-08-091-0/+2
* when freeing priority_cache make sure it is set to NULLNikos Mavrogiannopoulos2016-08-091-0/+1
* More precise packet length checking.Nikos Mavrogiannopoulos2016-08-092-6/+8
* small fixes identified by coverity.Nikos Mavrogiannopoulos2016-08-091-3/+5
* Better check for null signature method.Nikos Mavrogiannopoulos2016-08-091-2/+4
* initialize to null the SRP extension data on allocation.Nikos Mavrogiannopoulos2016-08-091-1/+1
* backported signature checks.Nikos Mavrogiannopoulos2016-08-092-2/+3
* Do not call the user_hello_func multiple times when performing ticket resumpt...Nikos Mavrogiannopoulos2016-08-091-1/+1
* pkcs8: initialize parameters on decryptionNikos Mavrogiannopoulos2016-08-091-0/+1
* restrict the number of non-fatal errors gnutls_handshake() can returnNikos Mavrogiannopoulos2016-08-091-1/+2
* Improvements to timing protection in TLS CBC record parsingNikos Mavrogiannopoulos2016-08-091-8/+10
* _gnutls_session_sign_algo_enabled: do not consider any values from the extens...Nikos Mavrogiannopoulos2015-04-251-16/+1
* Added fix for GNUTLS-SA-2015-1Nikos Mavrogiannopoulos2015-02-2610-42/+127
* added fix for certificate algorithm consistency checkNikos Mavrogiannopoulos2015-02-261-1/+33
* updated autotools generated filesNikos Mavrogiannopoulos2015-02-232-86/+67
* added AM_PROG_AR in configureNikos Mavrogiannopoulos2015-02-231-0/+1
* Prevent memory corruption due to server hello parsing.Nikos Mavrogiannopoulos2014-05-301-1/+1