summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* gnutls_global_init: log gnutls' version on initializationNikos Mavrogiannopoulos2016-05-151-1/+1
* server_name: only save the supported server names in the sessionNikos Mavrogiannopoulos2016-05-121-10/+14
* cert cred: add the CN to the list of known hostnames only if no dns_namesNikos Mavrogiannopoulos2016-05-101-9/+14
* gnutls_certificate_set_key: import the DNS names of the certificatesNikos Mavrogiannopoulos2016-05-101-1/+25
* Fixed _NETTLE_UPDATE macroNikos Mavrogiannopoulos2016-05-031-1/+1
* gnutls_certificate_set_key: duplicate the provided memoryNikos Mavrogiannopoulos2016-05-031-2/+11
* pkcs11: find_cert_cb: do not use C_FindObjectsInit() when another is already ...Nikos Mavrogiannopoulos2016-05-031-35/+37
* pkcs11: the flag GNUTLS_PKCS11_OBJ_FLAG_OVERWRITE_TRUSTMOD_EXT will be respec...Nikos Mavrogiannopoulos2016-05-031-0/+18
* pkcs11: find_ext_cb: eliminated memory leakNikos Mavrogiannopoulos2016-05-031-0/+1
* gnutls_pkcs11_obj_get_exts: updated documentation [ci skip]Nikos Mavrogiannopoulos2016-05-021-4/+7
* corrected import issue in gnutls_privkey_import_ecc_rawNikos Mavrogiannopoulos2016-04-291-1/+1
* x509/privkey: in raw import functions set the parameter's algorithm typeNikos Mavrogiannopoulos2016-04-291-0/+3
* doc: improved documentation on certificate and DANE verification functionsNikos Mavrogiannopoulos2016-04-261-3/+9
* _wrap_nettle_pk_derive: reject values of public key that are over the primeNikos Mavrogiannopoulos2016-04-181-10/+4
* handshake: do not overwrite the server's signature algorithmNikos Mavrogiannopoulos2016-04-131-1/+2
* gnutls_ocsp_resp_get_single: fail if thisUpdate is not available or unparsableNikos Mavrogiannopoulos2016-04-121-2/+3
* x509 output: don't warn about insecure algorithm when unknownNikos Mavrogiannopoulos2016-04-092-3/+3
* pkix.asn: corrected byKey definitionNikos Mavrogiannopoulos2016-04-082-2/+2
* name constraints: enforce the rules for IP constraints when addingNikos Mavrogiannopoulos2016-04-051-2/+13
* x509/output: simplified cidr_to_string()Nikos Mavrogiannopoulos2016-03-301-33/+4
* x509/output: print RFC5280 CIDRs in name constraintsNikos Mavrogiannopoulos2016-03-301-9/+98
* system_recv_timeout(): verify that the file descriptor is acceptable for sele...Nikos Mavrogiannopoulos2016-03-301-0/+5
* x86-common: CPUID override will only work if CPU has already the capability p...Nikos Mavrogiannopoulos2016-03-181-10/+56
* handshake: parse the mandatory to parse extension prior to any callback callNikos Mavrogiannopoulos2016-03-181-7/+7
* alpn: ALPN state is per-connection, it should not be saved with session dataYuriy M. Kaminskiy2016-03-181-48/+2
* Remove SSL 3.0 from the default priority stringsNikos Mavrogiannopoulos2016-03-031-0/+2
* gnutls_openpgp_keyring_import: backported mem leak fixNikos Mavrogiannopoulos2016-03-011-3/+11
* ecc: optimized extension parsingNikos Mavrogiannopoulos2016-02-291-1/+8
* timespec_sub_ms: fixed operation in 32-bit systemsNikos Mavrogiannopoulos2016-02-291-2/+9
* pkcs11: Fixes to prevent undefined behavior (found with libubsan)Nikos Mavrogiannopoulos2016-02-291-1/+2
* gnutls.h: Fixes to prevent undefined behavior (found with libubsan)Nikos Mavrogiannopoulos2016-02-291-3/+3
* x509: Fixes to prevent undefined behavior (found with libubsan)Nikos Mavrogiannopoulos2016-02-292-1/+14
* gnutls_x509_privkey_import: add missing algorithm setting for DSA keysJan Vcelak2016-02-261-0/+1
* When writing the Time ASN.1 structure follow the RFC5280 recommendationsNikos Mavrogiannopoulos2016-02-252-23/+76
* Prevent the encryption or decryption of more than 2^32 bytes with nettle2Nikos Mavrogiannopoulos2016-02-191-0/+11
* nettle: use the correct type for hash and MAC functionsNikos Mavrogiannopoulos2016-02-139-69/+103
* Revert "Fix out-of-bounds read in gnutls_x509_ext_export_key_usage"Nikos Mavrogiannopoulos2016-01-301-1/+1
* Added configure flag --with-arcfour128Nikos Mavrogiannopoulos2016-01-211-0/+6
* Revert "Revert "ARCFOUR is disabled from the default priority strings""Nikos Mavrogiannopoulos2016-01-201-2/+0
* gnutls_pubkey_import_x509_raw: fixed memory leakNikos Mavrogiannopoulos2016-01-131-1/+1
* x509: place newline when printing unsupported othernamesNikos Mavrogiannopoulos2016-01-121-0/+1
* alpn: when parsing the list of protocols return at the first mutually commonNikos Mavrogiannopoulos2016-01-101-1/+2
* alpn: document how the selected protocol is selected [ci skip]Nikos Mavrogiannopoulos2016-01-101-0/+3
* Revert "ARCFOUR is disabled from the default priority strings"Nikos Mavrogiannopoulos2016-01-081-0/+2
* Fix out-of-bounds read in gnutls_x509_ext_export_key_usageTim Kosse2016-01-041-1/+1
* pkcs11: fixes to store the imported URLNikos Mavrogiannopoulos2015-12-311-1/+12
* pkcs11: import public keys from any available objectNikos Mavrogiannopoulos2015-12-311-15/+56
* gnutls_pkcs11_copy_x509_privkey2: corrected the writing of ECC private keyNikos Mavrogiannopoulos2015-12-311-1/+1
* gnutls_pkcs11_copy_x509_privkey2: corrected the type of the written objectNikos Mavrogiannopoulos2015-12-311-5/+5
* max_record: don't consider this extension on DTLSNikos Mavrogiannopoulos2015-12-231-0/+6