summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* TLS extensions: only cache the extension IDs from exts that the server supportsNikos Mavrogiannopoulos2016-10-091-3/+9
* Increased the maximum size allowed for handshake messages to 128kbNikos Mavrogiannopoulos2016-09-192-2/+5
* gnutls_certificate_set_*key: ensure proper cleanup on key mismatch failuresNikos Mavrogiannopoulos2016-09-121-1/+10
* _gnutls_ucs2_to_utf8: fixed use of WideCharToMultiByte in windowsNikos Mavrogiannopoulos2016-09-071-2/+2
* Added gnutls_x509_crt_set_issuer_unique_id() and gnutls_x509_crt_set_subject_...Nikos Mavrogiannopoulos2016-09-053-18/+98
* _gnutls_encode_ber_rs_raw: zero-pad values when necessaryNikos Mavrogiannopoulos2016-09-051-13/+46
* gnutls_pkcs12_simple_parse: set the key value to null on failureDavid Woodhouse2016-08-291-1/+3
* ocsp: corrected the comparison of the serial size in OCSP responseNikos Mavrogiannopoulos2016-08-271-0/+1
* Added support for decrypting PKCS#8 files which use HMAC-SHA256 as PRFNikos Mavrogiannopoulos2016-08-2413-506/+283
* pkcs12: increased the number of iterations for MACNikos Mavrogiannopoulos2016-08-241-1/+1
* gnutls_key_generate: fail if the state of the library is invalidNikos Mavrogiannopoulos2016-08-101-1/+4
* Fix gnutls_pkcs12_simple_parse to always extract the complete chainStefan Sørensen2016-08-091-20/+15
* nettle: use rsa_*_key_prepare on key importNikos Mavrogiannopoulos2016-08-081-10/+52
* Revert "nettle: use rsa_*_key_prepare"Nikos Mavrogiannopoulos2016-08-081-32/+12
* nettle: use rsa_*_key_prepareNikos Mavrogiannopoulos2016-08-011-12/+32
* gnutls_x509_crt_list_import2 was ignoring the passed flags if all certificate...Tim Kosse2016-07-281-1/+1
* gnutls_x509_crl_list_import2 was ignoring the passed flags if all CTLs in the...Tim Kosse2016-07-281-1/+1
* minitasn1: updated to libtasn1 4.9Nikos Mavrogiannopoulos2016-07-259-369/+435
* pkcs11_get_attribute_avalue: correctly handle a -1 value length from C_GetAtt...Nikos Mavrogiannopoulos2016-06-301-0/+6
* pkcs11_get_attribute_avalue: do not assign values on failureNikos Mavrogiannopoulos2016-06-291-0/+1
* gnutls_pkcs11_crt_is_known: always assume GNUTLS_PKCS11_OBJ_FLAG_COMPARE unle...Nikos Mavrogiannopoulos2016-06-281-3/+3
* find_cert_cb: minor cleanups in find_cert_cbNikos Mavrogiannopoulos2016-06-281-28/+28
* pkcs11: correctly encode the serial number when searching for certificateNikos Mavrogiannopoulos2016-06-221-16/+9
* pkcs11: correctly account check_found_cert()Nikos Mavrogiannopoulos2016-06-221-0/+1
* Amended "Corrected the writing of serial number in PKCS#11 modules"Nikos Mavrogiannopoulos2016-06-221-2/+2
* dtls: corrected reconstruction of handshake packets received out of orderNikos Mavrogiannopoulos2016-06-161-4/+4
* Corrected the writing of serial number in PKCS#11 modulesNikos Mavrogiannopoulos2016-06-161-4/+9
* pkcs11: when generating a private key ensure the public key is not privateNikos Mavrogiannopoulos2016-05-311-0/+5
* x86-common: use secure_getenv()Nikos Mavrogiannopoulos2016-05-281-1/+1
* env: use secure_getenv when reading environment variablesNikos Mavrogiannopoulos2016-05-274-5/+11
* pkcs11: added sanity check to find_obj_url_cb() for object validityNikos Mavrogiannopoulos2016-05-231-3/+3
* gnutls_priority_init: recognize the VERS-ALL keywordNikos Mavrogiannopoulos2016-05-211-0/+7
* gnutls_global_init: log gnutls' version on initializationNikos Mavrogiannopoulos2016-05-151-1/+1
* server_name: only save the supported server names in the sessionNikos Mavrogiannopoulos2016-05-121-10/+14
* cert cred: add the CN to the list of known hostnames only if no dns_namesNikos Mavrogiannopoulos2016-05-101-9/+14
* gnutls_certificate_set_key: import the DNS names of the certificatesNikos Mavrogiannopoulos2016-05-101-1/+25
* Fixed _NETTLE_UPDATE macroNikos Mavrogiannopoulos2016-05-031-1/+1
* gnutls_certificate_set_key: duplicate the provided memoryNikos Mavrogiannopoulos2016-05-031-2/+11
* pkcs11: find_cert_cb: do not use C_FindObjectsInit() when another is already ...Nikos Mavrogiannopoulos2016-05-031-35/+37
* pkcs11: the flag GNUTLS_PKCS11_OBJ_FLAG_OVERWRITE_TRUSTMOD_EXT will be respec...Nikos Mavrogiannopoulos2016-05-031-0/+18
* pkcs11: find_ext_cb: eliminated memory leakNikos Mavrogiannopoulos2016-05-031-0/+1
* gnutls_pkcs11_obj_get_exts: updated documentation [ci skip]Nikos Mavrogiannopoulos2016-05-021-4/+7
* corrected import issue in gnutls_privkey_import_ecc_rawNikos Mavrogiannopoulos2016-04-291-1/+1
* x509/privkey: in raw import functions set the parameter's algorithm typeNikos Mavrogiannopoulos2016-04-291-0/+3
* doc: improved documentation on certificate and DANE verification functionsNikos Mavrogiannopoulos2016-04-261-3/+9
* _wrap_nettle_pk_derive: reject values of public key that are over the primeNikos Mavrogiannopoulos2016-04-181-10/+4
* handshake: do not overwrite the server's signature algorithmNikos Mavrogiannopoulos2016-04-131-1/+2
* gnutls_ocsp_resp_get_single: fail if thisUpdate is not available or unparsableNikos Mavrogiannopoulos2016-04-121-2/+3
* x509 output: don't warn about insecure algorithm when unknownNikos Mavrogiannopoulos2016-04-092-3/+3
* pkix.asn: corrected byKey definitionNikos Mavrogiannopoulos2016-04-082-2/+2