summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* pkcs11: respect Mozilla's time-based distrust upon issuer lookupDaiki Ueno2023-03-175-2/+206
* ktls: Do not return GNUTLS_E_INTERRUPTED/AGAIN from short writesRichard W.M. Jones2023-03-101-2/+10
* Merge branch 'wip/dueno/ems' into 'master'Daiki Ueno2023-03-094-8/+39
|\
| * fips: enable %FORCE_SESSION_HASH by default under FIPS modeDaiki Ueno2023-03-091-0/+4
| * priority: add %FORCE_SESSION_HASH modifierDaiki Ueno2023-03-094-8/+35
* | pk: extend pair-wise consistency to cover DH key generationPedro Monreal2023-02-271-0/+29
* | ecdh: perform SP800-56A rev3 full pubkey validation on key derivationPedro Monreal2023-02-241-3/+125
|/
* rsa: remove dead codeHubert Kario2023-02-081-17/+3
* auth/rsa: side-step potential side-channelAlexander Sosedkin2023-02-081-10/+0
* remove inoperative variablexuraoqing2023-02-071-2/+0
* Indent cpp headerZoltan Fridrich2023-01-301-907/+746
* gnutlsxx: add source file for shared libraryNikolaos Chatzikonstantinou2023-01-302-2/+28
* gnutlsxx: become header-only libraryNikolaos Chatzikonstantinou2023-01-303-931/+918
* Indent codeZoltan Fridrich2023-01-27457-39364/+53302
* Fix indent errorsZoltan Fridrich2023-01-274-56/+68
* trust: make filesystem path construction flexibleDaiki Ueno2023-01-117-63/+314
* Merge branch 'zfridric_devel2' into 'master'Zoltán Fridrich2023-01-104-8/+53
|\
| * Fix error codes for unsolicited compressed certificateZoltan Fridrich2023-01-101-1/+5
| * Forbid unsolicited CompressedCertificate messageZoltan Fridrich2023-01-033-1/+4
| * Fail when received cert is compressed with disabled methodZoltan Fridrich2023-01-033-3/+34
| * Slight reformating of compress_certificate codeZoltan Fridrich2023-01-032-5/+12
* | Merge branch 'wip/dueno/srtp' into 'master'Daiki Ueno2023-01-062-13/+31
|\ \
| * | srtp: support AES-GCM profilesDaiki Ueno2022-12-242-13/+31
* | | Merge branch 'wip/dueno/max-record-send-size' into 'master'Daiki Ueno2023-01-064-12/+9
|\ \ \ | |_|/ |/| |
| * | build: remove MAX_RECORD_SEND_SIZE in favor of max_record_send_sizeDaiki Ueno2022-12-244-12/+9
| |/
* | Merge branch 'https' into 'master'Daiki Ueno2022-12-2734-52/+34
|\ \
| * | Replace FSF snail mail addresses with URLStefan Kangas2022-12-2712-30/+12
| * | Prefer HTTPS to HTTP in URLsStefan Kangas2022-12-2722-22/+22
| |/
* | Fix typosStefan Kangas2022-12-272-3/+3
|/
* record: enable check on CCS content also in TLS 1.2Daiki Ueno2022-12-211-8/+25
* Merge branch 'master' into 'master'Daiki Ueno2022-12-203-9/+13
|\
| * fix memory leak when process client ecdh key exchagexuraoqing2022-12-191-3/+7
| * fix log print server write mac key size errorxuraoqing2022-12-121-1/+1
| * fix log print client write mac key size errorxuraoqing2022-12-121-1/+1
| * fix get credential type with key exchange algorithm failxuraoqing2022-12-121-4/+4
* | cert-auth: alloc_and_load_x509_certs: check requested cert countDaiki Ueno2022-12-181-1/+7
* | build: avoid using implicit int to adhere to C99Daiki Ueno2022-12-181-1/+1
* | Merge branch 'wip/dueno/stubs' into 'master'Daiki Ueno2022-12-166-108/+122
|\ \
| * | build: remove code guarded with no longer defined ENABLE_RSA_EXPORTDaiki Ueno2022-12-161-96/+0
| * | build: remove checks on no longer defined ENABLE_OPENPGPDaiki Ueno2022-12-161-2/+0
| * | srp: provide stubs of public functions even if SRP is disabledDaiki Ueno2022-12-166-10/+122
* | | Merge branch 'zfridric_devel' into 'master'Zoltán Fridrich2022-12-142-155/+174
|\ \ \ | |/ / |/| |
| * | Use soname instead of file name in fipshmac sectionsZoltan Fridrich2022-12-072-155/+174
* | | KTLS: Invalidate session on ktls errorFrantisek Krenzelok2022-12-042-4/+11
* | | KTLS: add ciphersuitesFrantisek Krenzelok2022-12-021-6/+153
|/ /
* | Merge branch 'wip/dueno/fipshmac-followup2' into 'master'Daiki Ueno2022-11-302-15/+18
|\ \
| * | fips: rename .gnutls.hmac back to .libgnutls.so.*.hmacDaiki Ueno2022-11-302-15/+18
* | | Merge branch 'wip/dueno/ktls-fixes2' into 'master'Daiki Ueno2022-11-303-21/+23
|\ \ \ | |/ / |/| |
| * | priority: accept "ktls = false" in configuration fileDaiki Ueno2022-11-281-0/+2
| * | includes: move KTLS function definition out of <gnutls/socket.h>Daiki Ueno2022-11-282-21/+21