summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* hmac-sha384 and sha256 ciphersuites were removed from defaultsNikos Mavrogiannopoulos2018-06-131-8/+0
* cbc_mac_verify: require minimum padding under SSL3.0Nikos Mavrogiannopoulos2018-06-131-1/+6
* dummy_wait: always hash the same amount of blocks that would have been on min...Nikos Mavrogiannopoulos2018-06-131-30/+33
* dummy_wait: correctly account the length field in SHA384 HMACNikos Mavrogiannopoulos2018-06-122-15/+13
* Use gcc's attribute to mark fallthrough statementsNikos Mavrogiannopoulos2018-05-265-2/+46
* retrieve_pin: refuse to retrieve PIN from URI more than one timeNikos Mavrogiannopoulos2018-04-251-0/+10
* nettle: corrected typo in version check for compatibility mode with 3.3Nikos Mavrogiannopoulos2018-03-271-1/+1
* nettle/pk: include nettle/version.hNikos Mavrogiannopoulos2018-03-201-0/+1
* cryptodev: fix prototype of cryptodev_mac_fast [ci skip]Nikos Mavrogiannopoulos2018-03-081-0/+4
* cryptodev: added missing macro [ci skip]Nikos Mavrogiannopoulos2018-03-071-0/+4
* pkcs11 verification: always use the GNUTLS_PKCS11_OBJ_FLAG_PRESENT_IN_TRUSTED...Nikos Mavrogiannopoulos2018-02-162-6/+10
* pkcs11: simplify trusted module loading stateNikos Mavrogiannopoulos2018-02-162-13/+15
* _gnutls_pkcs11_check_init: improved transition between statesNikos Mavrogiannopoulos2018-02-163-20/+59
* accelerated: make explicit key size check to all accelerated ciphersNikos Mavrogiannopoulos2018-02-0916-6/+37
* accelerated: check keysize in SSSE3 cipher setkeyVitezslav Cizek2018-02-091-0/+3
* nettle: use the nettle_get_secp API when availableNikos Mavrogiannopoulos2018-02-071-5/+15
* sed: use it in a portable way in makefilesNikos Mavrogiannopoulos2018-02-061-1/+3
* accelerated: aarch64: fix GCM counter incrementNikos Mavrogiannopoulos2018-02-061-2/+3
* accelerated: fix use of SSSE3 vpaes_encrypttmp-gnutls_3_5_x-aesni-fixNikos Mavrogiannopoulos2018-02-061-1/+7
* accelerated: fix use of aesni_ecb_encrypt()Nikos Mavrogiannopoulos2018-02-051-1/+1
* DTLS: improved data MTU calculation under CBC ciphersuitesNikos Mavrogiannopoulos2018-01-161-31/+34
* libtasn1: updated to latest master branchtmp-gnutls_3_5_x-update-libtasn1Nikos Mavrogiannopoulos2018-01-093-8/+32
* x509/verify: when verifying against a self signed certificate ignore issuerNikos Mavrogiannopoulos2018-01-071-5/+7
* sysrng-linux: improved detection of getrandom()Nikos Mavrogiannopoulos2017-12-191-2/+2
* pkcs11: refuse to load modules with duplicate informationNikos Mavrogiannopoulos2017-11-061-1/+2
* pkcs11: allow loading trusted modules when pkcs11 was initialized in manual modeNikos Mavrogiannopoulos2017-11-043-28/+26
* pkcs11: introduce multiple levels of loadingNikos Mavrogiannopoulos2017-11-044-15/+50
* doc update [ci skip]Nikos Mavrogiannopoulos2017-10-162-8/+16
* cmp_hsk_types: fixed check for SSLv2 helloNikos Mavrogiannopoulos2017-10-151-4/+4
* signature: on client side, only select a non-enabled signature if none matchNikos Mavrogiannopoulos2017-09-241-1/+11
* server name: refuse to resume a session which server name doesn't matchNikos Mavrogiannopoulos2017-09-243-0/+52
* Ensure the SNI extension is parsed during cache-based resumptionThomas Klute2017-09-241-1/+1
* priority_options.gperf: modified for gperf 3.1Nikos Mavrogiannopoulos2017-09-192-2/+1
* ecdh: return more appropriate error code on empty packetNikos Mavrogiannopoulos2017-09-191-0/+5
* parse_handshake_header: allow 1-byte sized fragmentsNikos Mavrogiannopoulos2017-09-191-2/+3
* handshake: check SCSVs prior to resuming a sessionNikos Mavrogiannopoulos2017-09-063-6/+21
* _gnutls_recv_server_certificate_status: use the same type in subtracted valuesNikos Mavrogiannopoulos2017-08-151-2/+2
* _gnutls_proc_srp_client_kx: use same type in subtracted valuesNikos Mavrogiannopoulos2017-08-151-1/+1
* x509: when importing the old FIPS186-4 format set the provable flagsNikos Mavrogiannopoulos2017-08-081-0/+2
* x509: never output our custom FIPS186-4 formatNikos Mavrogiannopoulos2017-08-084-77/+26
* x509: store and read provable seed in PKCS#8 form of keyNikos Mavrogiannopoulos2017-08-076-11/+201
* x509: separated PKIX1 attributes parsing code for cert request handlingNikos Mavrogiannopoulos2017-08-064-266/+335
* parse_pem_cert_mem: fixed issue resulting to accessing past the input dataNikos Mavrogiannopoulos2017-07-171-1/+3
* record: added sanity checking in the record layer version copyNikos Mavrogiannopoulos2017-07-131-3/+3
* decryption: use the same error code on all casesNikos Mavrogiannopoulos2017-07-131-5/+5
* doc: updated documentation on client authentication [ci skip]Nikos Mavrogiannopoulos2017-07-111-1/+1
* OCSP: find_signercert: improved DER length calculationNikos Mavrogiannopoulos2017-07-011-6/+24
* OCSP: check the subject public key identifier field to figure issuerNikos Mavrogiannopoulos2017-07-011-1/+16
* ocsp: print response's signature algorithm in compact listingNikos Mavrogiannopoulos2017-06-201-16/+18
* gnutls_certificate_verification_status_print: mention OCSP in error messages ...Nikos Mavrogiannopoulos2017-06-191-2/+2
View Lorry Controller Status