summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* Enforce the max packet length for OpenPGP subpackets as wellAlex Gaynor2017-03-051-2/+7
* opencdk: do not parse any secret keys in packet when reading a certificateNikos Mavrogiannopoulos2017-03-018-17/+28
* Use p11_kit_uri_get_pin_value() if available in p11-kitNikos Mavrogiannopoulos2017-02-221-0/+20
* nettle/pk: added error checking in _rsa_params_to_pubkeyNikos Mavrogiannopoulos2017-02-221-1/+3
* nettle/pk: corrected memcpy of Q in DSA paramsNikos Mavrogiannopoulos2017-02-211-2/+2
* opencdk/read-packet.c: corrected typo in type castNikos Mavrogiannopoulos2017-02-211-1/+1
* cdk_pkt_read: enforce packet limitsNikos Mavrogiannopoulos2017-02-211-0/+9
* gnutls_pkcs11_obj_list_import_url2: Always return an initialized pointerNikos Mavrogiannopoulos2017-02-031-0/+1
* opencdk: improved error code checking in the stream reading functionsNikos Mavrogiannopoulos2017-01-181-2/+3
* opencdk: added error checking in the stream reading functionsNikos Mavrogiannopoulos2017-01-091-5/+35
* opencdk: cdk_pk_get_keyid: fix stack overflowNikos Mavrogiannopoulos2017-01-091-1/+7
* opencdk: read_attribute: added more precise checks when reading streamNikos Mavrogiannopoulos2017-01-091-11/+29
* Corrected a leak in OpenPGP sub-packet parsing.Alex Gaynor2017-01-091-1/+3
* Attempt to fix a leak in OpenPGP cert parsing.Alex Gaynor2017-01-091-1/+3
* Do not infinite loop if an EOF occurs while skipping a PGP packetAlex Gaynor2017-01-091-5/+16
* opencdk: Fixes to prevent undefined behavior (found with libubsan)Nikos Mavrogiannopoulos2017-01-091-1/+1
* auth rsa: eliminated memory leak on pkcs-1 formatting attack pathNikos Mavrogiannopoulos2017-01-041-1/+6
* pkcs11 verification: ensure that an issuer we retrieve is not blacklisttmp-gnutls_3_3_x-blacklisted-issuer-fixNikos Mavrogiannopoulos2016-12-311-0/+11
* gnutls_x509_ext_import_proxy: fix issue reading the policy languageNikos Mavrogiannopoulos2016-12-171-11/+11
* PKCS#7 decrypt_data: merge all errors during decryption to GNUTLS_E_DECRYPTIO...Nikos Mavrogiannopoulos2016-12-141-2/+3
* pkcs8: ensure that the correct error code is returned on decryption failureNikos Mavrogiannopoulos2016-12-141-0/+1
* PKCS#5,7 decryption: added sanity check on padding sizeNikos Mavrogiannopoulos2016-12-141-2/+8
* PKCS#5,7 decryption: fail without leak on unknown MACNikos Mavrogiannopoulos2016-12-141-1/+4
* PKCS#5,7 decryption: fail early on invalid block sizesNikos Mavrogiannopoulos2016-12-141-3/+13
* PKCS#5,7 decryption: enforce limits in the support parameter sizesNikos Mavrogiannopoulos2016-12-142-12/+30
* tpm: backported improvements from master branchNikos Mavrogiannopoulos2016-12-138-81/+263
* added gnutls_pkcs11_obj_set_info()Nikos Mavrogiannopoulos2016-11-295-0/+183
* exported new functionsNikos Mavrogiannopoulos2016-11-291-0/+3
* pkcs11: enhanced key generation functions to allow specifying a CKA_IDNikos Mavrogiannopoulos2016-11-292-16/+65
* enhanced copy functions to allow specifying a CKA_IDNikos Mavrogiannopoulos2016-11-292-29/+110
* pkcs12: fixed the calculation of p_sizeNikos Mavrogiannopoulos2016-11-291-1/+1
* pkcs12: fixed the calculation of p_sizeNikos Mavrogiannopoulos2016-11-281-1/+1
* _wrap_nettle_pk_verify: use FAIL_IF_LIB_ERROR prior to returning successNikos Mavrogiannopoulos2016-11-071-0/+1
* Terminate handshake if only unknown or disabled signatures are advertized by ...Nikos Mavrogiannopoulos2016-10-272-8/+8
* certificate status requestion response is optional according to RFC6066Nikos Mavrogiannopoulos2016-10-261-1/+1
* handshake: set a maximum number of warning messages that can be received per ...Nikos Mavrogiannopoulos2016-10-143-9/+14
* record: disallow parsing of alert messages prior to session startNikos Mavrogiannopoulos2016-10-141-1/+6
* TLS extensions: only cache the extension IDs from exts that the server supportsNikos Mavrogiannopoulos2016-10-091-3/+9
* Increased the maximum size allowed for handshake messages to 128kbNikos Mavrogiannopoulos2016-09-192-2/+5
* gnutls_certificate_set_*key: ensure proper cleanup on key mismatch failuresNikos Mavrogiannopoulos2016-09-121-1/+10
* _gnutls_ucs2_to_utf8: fixed use of WideCharToMultiByte in windowsNikos Mavrogiannopoulos2016-09-071-2/+2
* Added gnutls_x509_crt_set_issuer_unique_id() and gnutls_x509_crt_set_subject_...Nikos Mavrogiannopoulos2016-09-053-18/+98
* _gnutls_encode_ber_rs_raw: zero-pad values when necessaryNikos Mavrogiannopoulos2016-09-051-13/+46
* gnutls_pkcs12_simple_parse: set the key value to null on failureDavid Woodhouse2016-08-291-1/+3
* ocsp: corrected the comparison of the serial size in OCSP responseNikos Mavrogiannopoulos2016-08-271-0/+1
* Added support for decrypting PKCS#8 files which use HMAC-SHA256 as PRFNikos Mavrogiannopoulos2016-08-2413-506/+283
* pkcs12: increased the number of iterations for MACNikos Mavrogiannopoulos2016-08-241-1/+1
* gnutls_key_generate: fail if the state of the library is invalidNikos Mavrogiannopoulos2016-08-101-1/+4
* Fix gnutls_pkcs12_simple_parse to always extract the complete chainStefan Sørensen2016-08-091-20/+15
* nettle: use rsa_*_key_prepare on key importNikos Mavrogiannopoulos2016-08-081-10/+52
View Lorry Controller Status