summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
...
* ktls: basic implementation of SW modeHedgehog50402021-10-197-25/+506
* fix mingw64 detectionSteve Lhomme2021-09-231-1/+1
* Merge branch 'x25519-and-x448' into 'master'Daiki Ueno2021-09-2313-6/+357
|\
| * lib/x509: Avoid memcpy when string is emptyDaniel Kahn Gillmor2021-09-171-1/+2
| * x509: handle X25519 and X448 in read_pubkeyDaniel Kahn Gillmor2021-09-171-0/+20
| * nettle: handle X25519 and X448 in pk_fixupDaniel Kahn Gillmor2021-09-171-0/+24
| * x509: enable importing secret keys for X448 and X25519.Daniel Kahn Gillmor2021-09-171-0/+54
| * Enable X25519 and X448 everywhere that EdDSA is supported.Daniel Kahn Gillmor2021-09-178-2/+23
| * x509: handle X448 and X25519 in write_pubkeyDaniel Kahn Gillmor2021-09-171-0/+32
| * pubkey: handle X25519 and X448 in gnutls_pubkey_import_pkcs11Daniel Kahn Gillmor2021-09-171-0/+137
| * nettle: extend pk_verify_priv_params to handle X25519 and X448Daniel Kahn Gillmor2021-09-171-0/+41
| * lib/pk: treat modern ECDH octet streams the same way as eddsa streams.Daniel Kahn Gillmor2021-09-171-1/+1
| * lib/algorithms: add modern ecdh functions comparable to curve_is_eddsaDaniel Kahn Gillmor2021-09-171-0/+16
| * algorithms: Explicitly name ECDH_X448_OID and ECDH_X25519_OIDDaniel Kahn Gillmor2021-09-173-2/+7
* | wrap_nettle_hash_exists: add missing hash algorithmsDaiki Ueno2021-09-201-5/+8
|/
* build: remove tautological if conditionsDaiki Ueno2021-09-095-11/+13
* ext/{client,server}_cert_type: use proper types for integersDaiki Ueno2021-09-092-8/+10
* fix SSSE3 SHA384 to work more than onceMiroslav Lichvar2021-09-071-1/+1
* x509: pin/password callback support for openssl encrypted private keysCraig Gallek2021-08-151-0/+10
* Merge branch 'wip/dueno/asan-poisoning' into 'master'Daiki Ueno2021-08-106-85/+149
|\
| * mem: instrument with ASan memory poisoning as well as valgrindDaiki Ueno2021-08-096-85/+149
* | Merge branch 'wip/dueno/tls13-rsa-pss-salt' into 'master'Daiki Ueno2021-08-077-4/+30
|\ \
| * | pk: add flags to force RSA-PSS salt length to match digest lengthDaiki Ueno2021-08-077-4/+30
| |/
* | fips: allow more RSA modulus sizesDaiki Ueno2021-08-051-3/+25
|/
* devel: suppress cppcheck 2.5 false-positivesDaiki Ueno2021-08-0411-46/+40
* gnutls_ocsp_resp_verify: Check key purpose if signer not on trust listFiona Klute2021-07-141-8/+8
* key_share: treat X25519 and X448 as same PK type when advertisingDaiki Ueno2021-06-251-3/+21
* Fix gnutls_certificate_set_trust_list() return value documentationMichael Catanzaro2021-06-221-2/+0
* priority: reflect system wide config when constructing sigalgsDaiki Ueno2021-06-111-3/+6
* build: fix interface version dependencies in libgnutls.mapDaiki Ueno2021-05-281-2/+2
* Merge branch 'wip/dueno/earlydata-server' into 'master'Daiki Ueno2021-05-262-10/+22
|\
| * pre_shared_key: limit 0-RTT to resumption connectionsDaiki Ueno2021-05-172-10/+22
* | ASN1 : Remove warnings related to old libtasn1 namingsLeonardo Bras2021-05-2139-338/+338
* | Merge branch 'omit-empty-policy-qualifiers' into 'master'Daiki Ueno2021-05-181-0/+10
|\ \
| * | x509: Omit empty sequences of policyQualifiers.Daniel Kahn Gillmor2021-05-171-0/+10
| |/
* | Merge branch 'wip/dueno/tls12-cert-type' into 'master'Daiki Ueno2021-05-171-6/+70
|\ \ | |/ |/|
| * cert auth: filter out unsupported cert types from TLS 1.2 CRDaiki Ueno2021-05-171-6/+70
* | x509: Write keyUsage extension with minimal BIT STRINGDaniel Kahn Gillmor2021-05-141-2/+29
|/
* gnutls_early_{cipher,prf_hash}_get: new functionsDaiki Ueno2021-05-133-1/+80
* gnutls_init: add flag to omit EndOfEarlyData messagesDaiki Ueno2021-05-132-8/+16
* gnutls_init: redefine GNUTLS_ENABLE_EARLY_DATA flag for clientDaiki Ueno2021-05-133-4/+15
* state: call secret_func on early write key change as wellDaiki Ueno2021-05-131-0/+5
* keylog: suppress -Wanalyzer-file-leak warningsDaiki Ueno2021-05-131-0/+6
* _tls13_{derive,expand}_secret2: fix array parameter mismatchDaiki Ueno2021-05-112-3/+3
* _gnutls_retrieve_pin: remove array declarator in function argumentDaiki Ueno2021-05-111-1/+1
* spelling: The possessive pronoun "its" has no apostrophe.Daniel Kahn Gillmor2021-05-052-2/+2
* Merge branch 'wip/dueno/trusted-ca-sha1' into 'master'Daiki Ueno2021-05-041-9/+17
|\
| * x509/verify: treat SHA-1 signed CA in the trusted set differentlyDaiki Ueno2021-05-041-9/+17
* | global: rename GNUTLS_NO_EXPLICIT_INIT to GNUTLS_NO_IMPLICIT_INITDaiki Ueno2021-05-031-4/+21
* | Add tls-server-end-point tls channel binding implementation.Ruslan N. Marchenko2021-05-031-0/+75