summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* doc update [ci skip]Nikos Mavrogiannopoulos2017-10-162-8/+16
* cmp_hsk_types: fixed check for SSLv2 helloNikos Mavrogiannopoulos2017-10-151-4/+4
* signature: on client side, only select a non-enabled signature if none matchNikos Mavrogiannopoulos2017-09-241-1/+11
* server name: refuse to resume a session which server name doesn't matchNikos Mavrogiannopoulos2017-09-243-0/+52
* Ensure the SNI extension is parsed during cache-based resumptionThomas Klute2017-09-241-1/+1
* priority_options.gperf: modified for gperf 3.1Nikos Mavrogiannopoulos2017-09-192-2/+1
* ecdh: return more appropriate error code on empty packetNikos Mavrogiannopoulos2017-09-191-0/+5
* parse_handshake_header: allow 1-byte sized fragmentsNikos Mavrogiannopoulos2017-09-191-2/+3
* handshake: check SCSVs prior to resuming a sessionNikos Mavrogiannopoulos2017-09-063-6/+21
* _gnutls_recv_server_certificate_status: use the same type in subtracted valuesNikos Mavrogiannopoulos2017-08-151-2/+2
* _gnutls_proc_srp_client_kx: use same type in subtracted valuesNikos Mavrogiannopoulos2017-08-151-1/+1
* x509: when importing the old FIPS186-4 format set the provable flagsNikos Mavrogiannopoulos2017-08-081-0/+2
* x509: never output our custom FIPS186-4 formatNikos Mavrogiannopoulos2017-08-084-77/+26
* x509: store and read provable seed in PKCS#8 form of keyNikos Mavrogiannopoulos2017-08-076-11/+201
* x509: separated PKIX1 attributes parsing code for cert request handlingNikos Mavrogiannopoulos2017-08-064-266/+335
* parse_pem_cert_mem: fixed issue resulting to accessing past the input dataNikos Mavrogiannopoulos2017-07-171-1/+3
* record: added sanity checking in the record layer version copyNikos Mavrogiannopoulos2017-07-131-3/+3
* decryption: use the same error code on all casesNikos Mavrogiannopoulos2017-07-131-5/+5
* doc: updated documentation on client authentication [ci skip]Nikos Mavrogiannopoulos2017-07-111-1/+1
* OCSP: find_signercert: improved DER length calculationNikos Mavrogiannopoulos2017-07-011-6/+24
* OCSP: check the subject public key identifier field to figure issuerNikos Mavrogiannopoulos2017-07-011-1/+16
* ocsp: print response's signature algorithm in compact listingNikos Mavrogiannopoulos2017-06-201-16/+18
* gnutls_certificate_verification_status_print: mention OCSP in error messages ...Nikos Mavrogiannopoulos2017-06-191-2/+2
* pkcs11: simplified pkcs11_login()Nikos Mavrogiannopoulos2017-06-173-28/+29
* pkcs11: the GNUTLS_PKCS11_OBJ_FLAG_LOGIN will force a loginNikos Mavrogiannopoulos2017-06-163-25/+38
* Handle specially safenet HSMs which request explicit authenticationNikos Mavrogiannopoulos2017-06-162-6/+19
* ocsp: added sanity check in returned lengthNikos Mavrogiannopoulos2017-06-151-1/+4
* pkcs11: do not set leading zeros when writing integersgnutls_3_5_x_pkcs11_leading_zeros_fixNikos Mavrogiannopoulos2017-06-121-2/+41
* Tolerate DER time encoding errorsNikos Mavrogiannopoulos2017-06-051-1/+6
* GNUTLS_E_INSUFFICIENT_SECURITY: moved to fatal errorsNikos Mavrogiannopoulos2017-05-311-2/+3
* libtasn1: updated to 4.11Nikos Mavrogiannopoulos2017-05-275-22/+55
* gnutls_ocsp_status_request_enable_client: documented requirements for parametersNikos Mavrogiannopoulos2017-05-241-3/+9
* ext/status_request: Removed the parsing of responder IDs from client extensionNikos Mavrogiannopoulos2017-05-241-52/+16
* ext/status_request: ensure response IDs are properly deinitializedNikos Mavrogiannopoulos2017-05-241-6/+11
* self-tests: limit compatibility API checks to vectors with plaintextNikos Mavrogiannopoulos2017-05-231-3/+1
* self-tests: introduced flag GNUTLS_SELF_TEST_FLAG_NO_COMPATNikos Mavrogiannopoulos2017-05-232-8/+12
* self-tests: all parameter was replaced by flagsNikos Mavrogiannopoulos2017-05-233-24/+25
* aarch64: fix AES-GCM in-place encryption and decryptionNikos Mavrogiannopoulos2017-05-231-0/+24
* crypto: self-tests: enhance to include compatibility APIsNikos Mavrogiannopoulos2017-05-231-11/+221
* crypto-api: refuse to run gnutls_cipher_init() in full AEAD modesNikos Mavrogiannopoulos2017-05-223-2/+7
* doc: corrected error in gnutls_x509_privkey_sign_data parameters [ci skip]Nikos Mavrogiannopoulos2017-05-221-1/+1
* find_signer: eliminate memory leakNikos Mavrogiannopoulos2017-05-161-1/+4
* doc: corrected typo [ci skip]Nikos Mavrogiannopoulos2017-05-111-1/+1
* pkcs11_override_cert_exts: do not use CKA_X_DISTRUSTED flag when retrievingNikos Mavrogiannopoulos2017-05-101-7/+2
* gnutls.h: introduced flag GNUTLS_EXT_FLAG_OVERRIDE_INTERNAL [ci skip]Nikos Mavrogiannopoulos2017-05-082-7/+23
* errors.h: _gnutls_cert_log will only print on non-null certificatesNikos Mavrogiannopoulos2017-05-081-1/+1
* rsa-psk: Use the correct username datumNicolas Dufresne2017-05-061-2/+2
* gnutls_x509_crt_check_hostname2: no match dns fields against IPsNikos Mavrogiannopoulos2017-04-301-9/+11
* gnutls_idna_map: fallback to IDNA2008 transitional encoding on failureNikos Mavrogiannopoulos2017-04-301-1/+7
* doc: clarifications on custom thread override [ci skip]Nikos Mavrogiannopoulos2017-04-201-0/+4
View Lorry Controller Status