www.gitorious.org Git - gnutls:gnutls.git/blob

929 logged in. * It is possible for new PKCS#11 sessions to be logged in if another logged in session already exists. * In these cases, don't log in, but detect the condition and return success. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

930

931 2011-08-01 Stef Walter <stefw@collabora.co.uk>

932

933 * lib/pkcs11_privkey.c: When finding private keys fail, return error

934 code. * Previously this would result in an endless loop. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

935

936 2011-08-01 Stef Walter <stefw@collabora.co.uk>

937

938 * lib/includes/gnutls/pkcs11.h, lib/pkcs11.c: Mark the config

939 argument of gnutls_pkcs11_init() as unused * Since its no longer used. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

940

941 2011-07-31 Nikos Mavrogiannopoulos <nmav@gnutls.org>

942

943 * NEWS, lib/gnutls_str.h, lib/gnutls_x509.c,

944 lib/includes/gnutls/x509.h, lib/x509/x509.c, tests/x509cert.c: Added

945 GNUTLS_X509_CRT_LIST_FAIL_IF_UNSORTED flag for

946 gnutls_x509_crt_list_import. It checks whether the list to be

947 imported is properly sorted.

948

949 2011-07-31 Nikos Mavrogiannopoulos <nmav@gnutls.org>

950

951 * NEWS, lib/gnutls_errors.c, lib/gnutls_x509.c,

952 lib/includes/gnutls/gnutls.h.in: Added

953 GNUTLS_E_CERTIFICATE_LIST_UNSORTED. If a certificate list is loaded

954 then verify that it is sorted with order to starts with the subject

955 and finished with the trusted root. That way we make sure we don't

956 send data that violate the TLS protocol.

957

958 2011-07-31 Nikos Mavrogiannopoulos <nmav@gnutls.org>

959

960 * doc/cha-cert-auth.texi, doc/latex/macros.tex: documentation

961 updates.

962

963 2011-07-29 Nikos Mavrogiannopoulos <nmav@gnutls.org>

964

965 * ChangeLog: updated changelog

966

967 2011-07-29 Nikos Mavrogiannopoulos <nmav@gnutls.org>

968

969 * NEWS: released 3.0.0

970

971 2011-07-28 Nikos Mavrogiannopoulos <nmav@gnutls.org>

972

973 * configure.ac: updated version

974

975 2011-07-28 Nikos Mavrogiannopoulos <nmav@gnutls.org>

976

977 * src/certtool-gaa.c, src/certtool.gaa: Corrected typo.

978

979 2011-07-27 Nikos Mavrogiannopoulos <nmav@gnutls.org>

980

981 * NEWS: documented updates.

982

983 2011-07-27 Nikos Mavrogiannopoulos <nmav@gnutls.org>

984

985 * THANKS: Added Petr.

986

987 2011-07-27 Nikos Mavrogiannopoulos <nmav@gnutls.org>

988

989 * lib/gnutls_pcert.c, lib/gnutls_privkey.c,

990 lib/includes/gnutls/abstract.h, lib/libgnutls.map: Added

991 gnutls_pcert_list_import_x509_raw() and few doc fixes.

992

993 2011-07-27 Nikos Mavrogiannopoulos <nmav@gnutls.org>

994

995 * lib/gnutls.pc.in: corrected for libnettle.

996

997 2011-06-24 Andreas Metzler <ametzler@downhill.at.eu.org>

998

999 * configure.ac: fix zlib handling in gnutls.pc Only add zlib to gnutls.pc's Requies.private if zlib ships a

1000 pkg-config file. Ancient (<< 1.2.3.1) versions don't. Otherwise add

1001 -lz to Libs.private. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

1002

1003 2011-07-27 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1004

1005 * doc/examples/ex-client-srp.c, doc/examples/ex-serv-srp.c:

1006 gnutls_global_init_extra() is not needed for SRP.

1007

1008 2011-07-25 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1009

1010 * NEWS: documented changes.

1011

1012 2011-07-25 Sjoerd Simons <sjoerd.simons@collabora.co.uk>

1013

1014 * lib/gnutls_buffers.c: writev_emu: stop on the first incomplete

1015 write Just like standard writev, we should only move on to the next block

1016 if all the previous ones have been successfully written out.

1017 Otherwise there is a potential for data loss and/or confusing push

1018 functions. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

1019

1020 2011-07-24 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1021

1022 * doc/latex/fdl.tex: increased size of fdl.

1023

1024 2011-07-24 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1025

1026 * lib/pkcs11.c: Added debug message to indicate usage of

1027 compatibility mode for /etc/gnutls/pkcs11.conf

1028

1029 2011-07-24 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1030

1031 * AUTHORS: removed pgp key from authors file.

1032

1033 2011-07-23 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1034

1035 * ChangeLog: updated changelog.

1036

1037 2011-07-23 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1038

1039 * NEWS, configure.ac, doc/announce.txt, m4/hooks.m4: released 2.99.4

1040

1041 2011-06-29 Petr Písař <petr.pisar@atlas.cz>

1042

1043 * lib/gnutls_privkey.c: Honor uninitialized private key in

1044 destructor Fixes bug #107730. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

1045

1046 2011-07-23 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1047

1048 * src/certtool.c: Corrected initialization of key when generating

1049 request. Reported by Petr Pisar.

1050

1051 2011-07-23 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1052

1053 * NEWS: updated.

1054

1055 2011-07-23 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1056

1057 * lib/gnutls_rsa_export.c, lib/x509/privkey.c,

1058 lib/x509/privkey_pkcs8.c, lib/x509/x509_int.h: The crippled status

1059 of an gnutls_x509_privkey_t was removed.

1060

1061 2011-07-23 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1062

1063 * doc/examples/ex-pkcs11-list.c: Example compilation fix.

1064

1065 2011-07-07 Stef Walter <stefw@collabora.co.uk>

1066

1067 * configure.ac, lib/includes/gnutls/pkcs11.h, lib/pkcs11.c,

1068 lib/pkcs11_int.h, lib/pkcs11_privkey.c, lib/pkcs11_write.c: pkcs11:

1069 Use p11_kit_pin_xxx() functionality when 'pinfile' is in uris. * This allows other apps to register a handler for a specific

1070 pinfile and then that application will be able to provide the PIN

1071 for those URIs. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

1072

1073 2011-07-22 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1074

1075 * lib/pkcs11.c: Added compatibility mode with

1076 /etc/gnutls/pkcs11.conf

1077

1078 2011-07-21 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1079

1080 * doc/cha-tls-app.texi: Updates in upward negotiation section.

1081

1082 2011-07-21 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1083

1084 * doc/latex/gnutls.bib: Corrected bibliography

1085

1086 2011-07-21 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1087

1088 * doc/cha-auth.texi, doc/cha-cert-auth.texi, doc/cha-gtls-app.texi,

1089 doc/cha-intro-tls.texi, doc/cha-library.texi,

1090 doc/cha-programs.texi, doc/cha-tls-app.texi: corrected section

1091 names.

1092

1093 2011-07-21 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1094

1095 * doc/cha-library.texi, doc/cha-support.texi, lib/gnutls_errors.c,

1096 lib/gnutls_srp.c: Updated information on required libraries.

1097

1098 2011-07-21 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1099

1100 * doc/cha-cert-auth.texi, doc/cha-gtls-app.texi,

1101 doc/cha-intro-tls.texi, doc/cha-library.texi, doc/cha-preface.texi:

1102 Corrected typos.

1103

1104 2011-06-28 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1105

1106 * doc/.gitignore, doc/Makefile.am, doc/alert-printlist.c,

1107 doc/cha-auth.texi, doc/cha-cert-auth.texi, doc/cha-gtls-app.texi,

1108 doc/cha-intro-tls.texi, doc/cha-library.texi, doc/gnutls.texi,

1109 doc/latex/Makefile.am, doc/latex/gnutls.tex, doc/latex/macros.tex,

1110 doc/scripts/gdoc, doc/scripts/mytexi2latex, doc/scripts/sort1.pl,

1111 doc/scripts/split.pl, lib/gnutls_x509.c: updated function listing.

1112

1113 2011-06-28 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1114

1115 * lib/gnutls_alert.c, lib/includes/gnutls/gnutls.h.in,

1116 lib/libgnutls.map: Added gnutls_alert_get_strname().

1117

1118 2011-06-27 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1119

1120 * lib/algorithms/cert_types.c, lib/algorithms/ciphers.c,

1121 lib/algorithms/ecc.c, lib/algorithms/kx.c, lib/algorithms/mac.c,

1122 lib/algorithms/protocols.c, lib/algorithms/publickey.c,

1123 lib/algorithms/secparams.c, lib/algorithms/sign.c, lib/auth/cert.c,

1124 lib/auth/psk.c, lib/auth/rsa_export.c, lib/crypto-api.c,

1125 lib/crypto-backend.c, lib/ext/max_record.c,

1126 lib/ext/safe_renegotiation.c, lib/ext/server_name.c,

1127 lib/ext/session_ticket.c, lib/gcrypt/mpi.c, lib/gnutls_alert.c,

1128 lib/gnutls_anon_cred.c, lib/gnutls_auth.c, lib/gnutls_buffers.c,

1129 lib/gnutls_cert.c, lib/gnutls_dh_primes.c, lib/gnutls_dtls.c,

1130 lib/gnutls_errors.c, lib/gnutls_global.c, lib/gnutls_handshake.c,

1131 lib/gnutls_mpi.c, lib/gnutls_pcert.c, lib/gnutls_priority.c,

1132 lib/gnutls_privkey.c, lib/gnutls_psk.c, lib/gnutls_pubkey.c,

1133 lib/gnutls_record.c, lib/gnutls_sig.c, lib/gnutls_state.c,

1134 lib/gnutls_str.c, lib/gnutls_ui.c, lib/gnutls_x509.c,

1135 lib/minitasn1/decoding.c, lib/minitasn1/errors.c,

1136 lib/nettle/ecc_verify_hash.c, lib/opencdk/kbnode.c,

1137 lib/opencdk/sig-check.c, lib/openpgp/extras.c,

1138 lib/openpgp/gnutls_openpgp.c, lib/openpgp/output.c,

1139 lib/openpgp/pgp.c, lib/openpgp/privkey.c, lib/pkcs11.c,

1140 lib/pkcs11_privkey.c, lib/pkcs11_secret.c, lib/pkcs11_write.c,

1141 lib/random.c, lib/x509/common.c, lib/x509/crl.c,

1142 lib/x509/crl_write.c, lib/x509/crq.c, lib/x509/dn.c,

1143 lib/x509/extensions.c, lib/x509/output.c, lib/x509/pkcs12.c,

1144 lib/x509/pkcs12_bag.c, lib/x509/pkcs12_encr.c, lib/x509/pkcs7.c,

1145 lib/x509/privkey.c, lib/x509/privkey_pkcs8.c,

1146 lib/x509/rfc2818_hostname.c, lib/x509/sign.c,

1147 lib/x509/verify-high.c, lib/x509/verify.c, lib/x509/x509.c,

1148 lib/x509/x509_write.c: documentation fixes

1149

1150 2011-06-23 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1151

1152 * NEWS, lib/COPYING, lib/accelerated/accelerated.c,

1153 lib/accelerated/cryptodev.c, lib/auth/anon.c, lib/auth/anon_ecdh.c,

1154 lib/auth/cert.c, lib/auth/dh_common.c, lib/auth/dhe.c,

1155 lib/auth/dhe_psk.c, lib/auth/ecdh_common.c, lib/auth/psk.c,

1156 lib/auth/psk_passwd.c, lib/auth/rsa.c, lib/auth/rsa_export.c,

1157 lib/auth/srp.c, lib/auth/srp_passwd.c, lib/auth/srp_rsa.c,

1158 lib/auth/srp_sb64.c, lib/crypto-api.c, lib/crypto-backend.c,

1159 lib/debug.c, lib/ext/cert_type.c, lib/ext/ecc.c,

1160 lib/ext/max_record.c, lib/ext/safe_renegotiation.c,

1161 lib/ext/server_name.c, lib/ext/session_ticket.c,

1162 lib/ext/signature.c, lib/ext/srp.c, lib/gnutls_alert.c,

1163 lib/gnutls_anon_cred.c, lib/gnutls_auth.c, lib/gnutls_buffers.c,

1164 lib/gnutls_cert.c, lib/gnutls_cipher.c, lib/gnutls_cipher_int.c,

1165 lib/gnutls_compress.c, lib/gnutls_constate.c, lib/gnutls_datum.c,

1166 lib/gnutls_db.c, lib/gnutls_dh.c, lib/gnutls_dh_primes.c,

1167 lib/gnutls_dtls.c, lib/gnutls_ecc.c, lib/gnutls_errors.c,

1168 lib/gnutls_extensions.c, lib/gnutls_global.c,

1169 lib/gnutls_handshake.c, lib/gnutls_hash_int.c, lib/gnutls_helper.c,

1170 lib/gnutls_kx.c, lib/gnutls_mbuffers.c, lib/gnutls_mem.c,

1171 lib/gnutls_mpi.c, lib/gnutls_num.c, lib/gnutls_pcert.c,

1172 lib/gnutls_pk.c, lib/gnutls_priority.c, lib/gnutls_privkey.c,

1173 lib/gnutls_psk.c, lib/gnutls_pubkey.c, lib/gnutls_record.c,

1174 lib/gnutls_rsa_export.c, lib/gnutls_session.c,

1175 lib/gnutls_session_pack.c, lib/gnutls_sig.c, lib/gnutls_srp.c,

1176 lib/gnutls_state.c, lib/gnutls_str.c, lib/gnutls_supplemental.c,

1177 lib/gnutls_ui.c, lib/gnutls_v2_compat.c, lib/gnutls_x509.c,

1178 lib/hash.c, lib/locks.c, lib/nettle/cipher.c,

1179 lib/nettle/ecc_free.c, lib/nettle/ecc_make_key.c,

1180 lib/nettle/ecc_map.c, lib/nettle/ecc_mulmod.c,

1181 lib/nettle/ecc_points.c, lib/nettle/ecc_projective_add_point.c,

1182 lib/nettle/ecc_projective_dbl_point.c,

1183 lib/nettle/ecc_projective_dbl_point_3.c,

1184 lib/nettle/ecc_shared_secret.c, lib/nettle/ecc_sign_hash.c,

1185 lib/nettle/ecc_verify_hash.c, lib/nettle/egd.c, lib/nettle/init.c,

1186 lib/nettle/mac.c, lib/nettle/mpi.c, lib/nettle/pk.c,

1187 lib/nettle/rnd.c, lib/opencdk/armor.c, lib/opencdk/hash.c,

1188 lib/opencdk/kbnode.c, lib/opencdk/keydb.c, lib/opencdk/literal.c,

1189 lib/opencdk/main.c, lib/opencdk/misc.c, lib/opencdk/new-packet.c,

1190 lib/opencdk/pubkey.c, lib/opencdk/read-packet.c,

1191 lib/opencdk/seskey.c, lib/opencdk/sig-check.c,

1192 lib/opencdk/stream.c, lib/opencdk/write-packet.c,

1193 lib/openpgp/compat.c, lib/openpgp/extras.c,

1194 lib/openpgp/gnutls_openpgp.c, lib/openpgp/output.c,

1195 lib/openpgp/pgp.c, lib/openpgp/pgpverify.c, lib/openpgp/privkey.c,

1196 lib/pkcs11.c, lib/pkcs11_privkey.c, lib/pkcs11_secret.c,

1197 lib/pkcs11_write.c, lib/random.c, lib/system.c,

1198 lib/system_override.c, lib/x509/common.c, lib/x509/crl.c,

1199 lib/x509/crl_write.c, lib/x509/crq.c, lib/x509/dn.c,

1200 lib/x509/extensions.c, lib/x509/key_decode.c,

1201 lib/x509/key_encode.c, lib/x509/mpi.c, lib/x509/output.c,

1202 lib/x509/pbkdf2-sha1.c, lib/x509/pkcs12.c, lib/x509/pkcs12_bag.c,

1203 lib/x509/pkcs12_encr.c, lib/x509/pkcs7.c, lib/x509/privkey.c,

1204 lib/x509/privkey_pkcs8.c, lib/x509/rfc2818_hostname.c,

1205 lib/x509/sign.c, lib/x509/verify-high.c, lib/x509/verify.c,

1206 lib/x509/x509.c, lib/x509/x509_write.c, lib/x509_b64.c: Upgraded to

1207 LGPLv3.

1208

1209 2011-06-23 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1210

1211 * doc/latex/cover.tex.in: updated cover.

1212

1213 2011-06-21 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1214

1215 * doc/latex/fdl.tex: improvements on fdl.

1216

1217 2011-06-21 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1218

1219 * AUTHORS: Added LRN.

1220

1221 2011-06-21 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1222

1223 * doc/cha-auth.texi, doc/cha-cert-auth.texi, doc/cha-gtls-app.texi,

1224 doc/cha-intro-tls.texi, doc/cha-library.texi,

1225 doc/cha-programs.texi, doc/scripts/mytexi2latex: documentation

1226 updates.

1227

1228 2011-06-21 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1229

1230 * NEWS, lib/gnutls_srp.c, lib/gnutls_srp.h: gnutls_srp_verifier()

1231 returns data allocated with gnutls_malloc() for consistency.

1232

1233 2011-06-21 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1234

1235 * lib/gnutls_errors.c: reduced error message.

1236

1237 2011-06-20 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1238

1239 * doc/cha-intro-tls.texi: simplified text.

1240

1241 2011-06-20 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1242

1243 * doc/latex/fdl.tex, doc/latex/gnutls.tex: FDL is now included using

1244 a tiny font.

1245

1246 2011-06-20 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1247

1248 * doc/cha-auth.texi, doc/cha-intro-tls.texi,

1249 doc/examples/ex-client1.c, doc/scripts/mytexi2latex: Tables were

1250 also made floating

1251

1252 2011-06-20 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1253

1254 * doc/cha-cert-auth.texi, doc/cha-internals.texi,

1255 doc/cha-intro-tls.texi, doc/cha-library.texi,

1256 doc/scripts/mytexi2latex: figures were made floating.

1257

1258 2011-06-20 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1259

1260 * doc/latex/cover.tex.in, doc/scripts/mytexi2latex: Added

1261 high-quality pdf images.

1262

1263 2011-06-19 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1264

1265 * .gitignore, doc/latex/.gitignore: more files to ignore

1266

1267 2011-06-19 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1268

1269 * configure.ac, doc/Makefile.am, doc/cha-auth.texi,

1270 doc/cha-bib.texi, doc/cha-cert-auth.texi,

1271 doc/cha-ciphersuites.texi, doc/cha-errors.texi,

1272 doc/cha-functions.texi, doc/cha-gtls-app.texi,

1273 doc/cha-internals.texi, doc/cha-intro-tls.texi,

1274 doc/cha-library.texi, doc/cha-preface.texi, doc/cha-programs.texi,

1275 doc/cha-support.texi, doc/cha-tls-app.texi, doc/errcodes.c,

1276 doc/examples/ex-client1.c, doc/examples/ex-pkcs11-list.c,

1277 doc/examples/ex-serv-anon.c, doc/gnutls.texi,

1278 doc/latex/Makefile.am, doc/latex/cover.tex.in, doc/latex/fdl.tex,

1279 doc/latex/gnutls.bib, doc/latex/gnutls.tex, doc/latex/macros.tex,

1280 doc/printlist.c, doc/scripts/mytexi2latex, doc/scripts/sort1.pl,

1281 doc/signatures.texi: updated documentation to allow latex output.

1282

1283 2011-06-19 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1284

1285 * lib/gnutls_record.c, lib/x509/crq.c, lib/x509/x509.c,

1286 lib/x509/x509_write.c: corrected typos

1287

1288 2011-06-19 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1289

1290 * doc/cha-cert-auth.texi, doc/examples/Makefile.am,

1291 doc/examples/ex-cert-select.c, doc/examples/ex-client-udp.c,

1292 doc/examples/ex-crq.c, doc/examples/ex-pkcs11-list.c,

1293 doc/examples/ex-session-info.c, doc/examples/ex-verify.c: indented

1294 code. Corrected PKCS #11 example.

1295

1296 2011-06-18 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1297

1298 * doc/Makefile.am: added missing file.

1299

1300 2011-06-18 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1301

1302 * AUTHORS, NEWS, lib/includes/gnutls/gnutls.h.in, m4/hooks.m4:

1303 bumped version.

1304

1305 2011-06-18 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1306

1307 * NEWS, lib/gnutls_errors.c, lib/includes/gnutls/pkcs11.h,

1308 lib/pkcs11.c, lib/pkcs11_write.c, src/p11tool-gaa.c,

1309 src/p11tool-gaa.h, src/p11tool.c, src/p11tool.gaa, src/p11tool.h,

1310 src/pkcs11.c: Added new PKCS #11 flags to force an object being

1311 private or not. Those are GNUTLS_PKCS11_OBJ_FLAG_MARK_PRIVATE and

1312 GNUTLS_PKCS11_OBJ_FLAG_MARK_NOT_PRIVATE. p11tool supports now the

1313 --no-private and --private options.

1314

1315 2011-06-17 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1316

1317 * src/p11common.c: Limit the number of attempts with the same PIN,

1318 to avoid attempting again and again with a wrong PIN.

1319

1320 2011-06-17 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1321

1322 * lib/pkcs11_write.c: When writing an object with CKA_TRUSTED set

1323 CKA_PRIVATE explicitly to FALSE, to allow the SO to write it.

1324 Reported by Rickard Bellgrim.

1325

1326 2011-06-16 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1327

1328 * THANKS: updated

1329

1330 2011-06-16 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1331

1332 * src/pkcs11.c: removed unneeded test.

1333

1334 2011-06-16 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1335

1336 * lib/pkcs11.c: Enforce the GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO even if

1337 GNUTLS_PKCS11_OBJ_FLAG_LOGIN is specified.

1338

1339 2011-06-16 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1340

1341 * src/Makefile.am, src/p11common.c, src/pkcs11.c: Use common code

1342 for PKCS #11 callbacks across clients. Require SO login to write a

1343 trusted object.

1344

1345 2011-06-16 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1346

1347 * lib/algorithms/ciphersuites.c, lib/ext/safe_renegotiation.h: bit

1348 fields changed to unsigned.

1349

1350 2011-06-16 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1351

1352 * lib/gnutls_pubkey.c, lib/x509/privkey.c: Moved null check before

1353 initialization.

1354

1355 2011-06-16 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1356

1357 * lib/opencdk/keydb.c: removed unreachable code warning

1358

1359 2011-06-16 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1360

1361 * lib/opencdk/hash.c, lib/opencdk/main.h, lib/opencdk/stream.c,

1362 lib/opencdk/write-packet.c: eliminated wipemem().

1363

1364 2011-06-16 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1365

1366 * lib/gnutls_pk.c: corrected uninitialized variable warning.

1367

1368 2011-06-16 Rickard Bellgrim <rickard@opendnssec.org>

1369

1370 * lib/pkcs11_write.c: The CKA_SUBJECT must be specified for a

1371 certificate. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

1372

1373 2011-06-15 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1374

1375 * lib/includes/gnutls/pkcs11.h, lib/pkcs11.c, src/pkcs11.c: When

1376 setting the TRUSTED flag login as security officer.

1377

1378 2011-06-15 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1379

1380 * lib/pkcs11_write.c: write label in PKCS #11 privkey.

1381

1382 2011-06-15 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1383

1384 * lib/gnutls_privkey.c, lib/gnutls_pubkey.c, lib/pkcs11.c,

1385 lib/pkcs11_int.h, lib/pkcs11_privkey.c, lib/pkcs11_secret.c,

1386 lib/pkcs11_write.c: define ck_bool_t to be compatible with PKCS #11

1387 bool type.

1388

1389 2011-06-15 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1390

1391 * configure.ac: ignore more warnings.

1392

1393 2011-06-09 Stef Walter <stefw@collabora.co.uk>

1394

1395 * lib/Makefile.am, lib/pkcs11_int.h, lib/pkcs11_spec.h: Use pkcs11.h

1396 specification file from p11-kit. * Remove one included briefly in gnutls. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

1397

1398 2011-06-09 Stef Walter <stefw@collabora.co.uk>

1399

1400 * lib/pkcs11.c, src/cli.c, src/p11common.c, src/pkcs11.c,

1401 tests/suite/mini-eagain2.c: Fix up compiler warnings. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

1402

1403 2011-06-09 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1404

1405 * lib/pkcs11_spec.h: Added missing file

1406

1407 2011-06-07 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1408

1409 * doc/cha-cert-auth.texi: document new config file format and path.

1410

1411 2011-06-07 Stef Walter <stefw@collabora.co.uk>

1412

1413 * configure.ac, doc/examples/Makefile.am, lib/Makefile.am,

1414 lib/auth/cert.c, lib/gnutls_global.c, lib/gnutls_privkey.c,

1415 lib/gnutls_pubkey.c, lib/gnutls_x509.c, lib/pakchois/README,

1416 lib/pakchois/dlopen.c, lib/pakchois/dlopen.h,

1417 lib/pakchois/errors.c, lib/pakchois/pakchois.c,

1418 lib/pakchois/pakchois.h, lib/pakchois/pakchois11.h, lib/pkcs11.c,

1419 lib/pkcs11_int.h, lib/pkcs11_privkey.c, lib/pkcs11_secret.c,

1420 lib/pkcs11_write.c, src/Makefile.am, src/certtool-common.c,

1421 src/certtool.c, src/cli.c, src/p11tool.c, src/serv.c: The attached

1422 patch ports gnutls to p11-kit. p11-kit is added as a dependency.

1423 p11-kit itself has no dependencies outside of basic libc stuff. The

1424 source code for p11-kit is available both in git and tarball form.

1425 [3] If the gnutls dependency on p11-kit is disabled (via a configure

1426 option) then the PKCS#11 support is disabled. This is useful in bare

1427 bones embedded systems or places where very minimal dependencies are

1428 limited.

1429

1430 2011-06-07 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1431

1432 * doc/manpages/Makefile.am: updated

1433

1434 2011-06-07 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1435

1436 * lib/pkcs11.c, lib/pkcs11_privkey.c: Return error code when an

1437 object is not found. Only request for token insertion if the

1438 expected data is not found. Based on patch by Stef Walter.

1439

1440 2011-06-07 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1441

1442 * configure.ac: Depend on automake 1.11.

1443

1444 2011-06-06 Stef Walter <stefw@collabora.co.uk>

1445

1446 * tests/suite/Makefile.am: tests: Build eagain-cli with correct

1447 libraries * Add -ldl -lpthread to linker flags Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

1448

1449 2011-05-30 Stef Walter <stefw@collabora.co.uk>

1450

1451 * src/cli.c: gnutls-cli: Fix uninitialized variable when PKCS#11

1452 uris in use. * When PKCS#11 URIs are in use previously tried to free

1453 uninitialized memory. Initialize to zero. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

1454

1455 2011-05-30 Stef Walter <stefw@collabora.co.uk>

1456

1457 * lib/pkcs11.c: pkcs11: Accept CKR_USER_ALREADY_LOGGED_IN as

1458 successful result for PAP Login * When doing CKF_PROTECTED_AUTHENTICATION_PATH login, accept CKR_USER_ALREADY_LOGGED_IN as a successful result. * Another code path, or another consumer of the same PKCS#11 module may have already logged in. * This is what the non PAP code path already does. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

1459

1460 2011-06-06 Stef Walter <stefw@collabora.co.uk>

1461

1462 * lib/auth/srp.c, lib/auth/srp_rsa.c, lib/ext/session_ticket.c,

1463 lib/gnutls_compress.c, lib/hash.c, lib/nettle/ecc_mulmod.c,

1464 lib/x509/common.c: Remove unused variables * GCC 4.6.0 prints a warning, and build failes with -Wunused Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

1465

1466 2011-06-06 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1467

1468 * lib/nettle/rnd.c: use gnutls_assert_val() in EGD errors.

1469

1470 2011-06-05 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1471

1472 * tests/dsa/testdsa, tests/openpgp-certs/testcerts,

1473 tests/scripts/common.sh, tests/suite/testcompat-main,

1474 tests/suite/testsrn: Corrected fail() shell function. Reported by

1475 Andreas Metzler.

1476

1477 2011-06-05 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1478

1479 * tests/dsa/testdsa: Corrected typo. Reported by Andreas Metzler.

1480

1481 2011-06-05 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1482

1483 * doc/manpages/Makefile.am: regenerated makefile.

1484

1485 2011-06-05 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1486

1487 * lib/x509/common.c: documentation fix.

1488

1489 2011-06-05 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1490

1491 * lib/accelerated/intel/Makefile.am,

1492 lib/accelerated/intel/aes-x86.c,

1493 lib/accelerated/intel/asm/appro-aes-gcm-x86.s: pclmul is not used on

1494 intel 32-bit systems.

1495

1496 2011-06-05 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1497

1498 * lib/accelerated/intel/aes-x86.c, lib/gnutls_global.h,

1499 lib/gnutls_priority.c: When AES and GCM acceleration is available

1500 increase the priority of AES-GCM ciphersuites in performance and

1501 normal cases.

1502

1503 2011-06-05 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1504

1505 * lib/gcrypt/cipher.c, lib/gcrypt/pk.c: prevent compilation of

1506 gcrypt support since it is incomplete.

1507

1508 2011-06-05 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1509

1510 * lib/Makefile.am, lib/algorithms/ciphers.c,

1511 lib/algorithms/ciphersuites.c, lib/gcrypt/cipher.c,

1512 lib/nettle/cipher.c, m4/hooks.m4: do not use NETTLE_LIBS to include

1513 hogweed and gmp. removed ENABLE_CAMELLIA and NETTLE_GCM.

1514

1515 2011-06-05 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1516

1517 * src/benchmark-tls.c: improved benchmark.

1518

1519 2011-06-05 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1520

1521 * doc/Makefile.am, doc/cha-cert-auth.texi, doc/cha-internals.texi,

1522 doc/cha-intro-tls.texi, doc/cha-library.texi,

1523 doc/cha-programs.texi, doc/examples/ex-session-info.c,

1524 doc/gnutls-certificate-user-use-case.pdf,

1525 doc/gnutls-client-server-use-case.pdf,

1526 doc/gnutls-extensions_st.pdf, doc/gnutls-handshake-sequence.pdf,

1527 doc/gnutls-handshake-state.pdf, doc/gnutls-internals.pdf,

1528 doc/gnutls-layers.pdf, doc/gnutls-logo.pdf,

1529 doc/gnutls-mod_auth_st.pdf, doc/gnutls-objects.pdf,

1530 doc/gnutls-pgp.pdf, doc/gnutls-x509.pdf, doc/gnutls.texi: Updated

1531 documentation. Removed all .pdf files. They were not needed.

1532

1533 2011-06-05 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1534

1535 * lib/algorithms.h, lib/algorithms/ciphersuites.c,

1536 lib/gnutls_handshake.c: Avoid memory allocations when requesting the

1537 supported ciphersuites.

1538

1539 2011-06-05 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1540

1541 * lib/accelerated/intel/aes-x86.c: more verbose if the PCLMUL

1542 instruction is detected.

1543

1544 2011-06-05 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1545

1546 * tests/cipher-test.c: Added debugging ability to cipher-test.

1547

1548 2011-06-05 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1549

1550 * doc/TODO: more cleanup.

1551

1552 2011-06-04 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1553

1554 * doc/TODO: Added new TODO items.

1555

1556 2011-06-04 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1557

1558 * doc/TODO: removed completed items from todo list

1559

1560 2011-06-04 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1561

1562 * lib/gnutls_priority.c: reinstated MAC-ALL semantics.

1563

1564 2011-06-04 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1565

1566 * .gitignore: more files to ignore.

1567

1568 2011-06-04 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1569

1570 * lib/gnutls_session_pack.c: store the ECC curve in the session

1571 resumption parameters.

1572

1573 2011-06-04 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1574

1575 * NEWS, doc/cha-cert-auth.texi, doc/examples/ex-verify.c,

1576 lib/gnutls_cert.c, lib/includes/gnutls/x509.h, lib/libgnutls.map,

1577 lib/x509/verify-high.c, tests/Makefile.am, tests/x509cert-tl.c:

1578 Added gnutls_x509_trust_list_add_named_crt() and

1579 gnutls_x509_trust_list_verify_named_crt() that allow having a list

1580 of certificates in the trusted list that will be associated with a

1581 name (e.g. server name) and will not be used as CAs.

1582

1583 2011-06-04 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1584

1585 * NEWS, doc/cha-intro-tls.texi,

1586 lib/accelerated/intel/aes-gcm-x86.c,

1587 lib/accelerated/intel/aes-x86.c, lib/algorithms/ciphersuites.c,

1588 lib/gnutls_priority.c, lib/includes/gnutls/gnutls.h.in,

1589 lib/nettle/cipher.c: Added SuiteB ciphersuites. Added SUITEB128 and

1590 SUITEB192 priority strings. SECURE256 was renamed to SECURE192

1591 (because TLS ciphersuite's security level was not enough to justify

1592 256-bits).

1593

1594 2011-06-04 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1595

1596 * NEWS, lib/includes/gnutls/gnutls.h.in, lib/libgnutls.map:

1597 gnutls_ecc_curve_get() was added.

1598

1599 2011-06-04 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1600

1601 * lib/gnutls_state.c: The PRF is now read from the ciphersuite

1602 table.

1603

1604 2011-06-04 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1605

1606 * src/common.c: Print information on elliptic curve sessions.

1607

1608 2011-06-04 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1609

1610 * lib/abstract_int.h, lib/gnutls_pubkey.c, lib/gnutls_sig.c,

1611 lib/gnutls_sig.h, lib/includes/gnutls/abstract.h,

1612 lib/includes/gnutls/compat.h, lib/libgnutls.map, lib/x509/common.c,

1613 lib/x509/common.h, lib/x509/crq.c, lib/x509/privkey.c,

1614 lib/x509/verify.c, lib/x509/x509.c, lib/x509/x509_int.h: Split

1615 pubkey_verify_sig() to pubkey_verify_hashed_data() and

1616 pubkey_verify_data(). Added gnutls_pubkey_verify_data2() to allow

1617 verification of a signature when the signature algorithm cannot be

1618 determined by the signature and the public key only.

1619

1620 2011-06-04 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1621

1622 * lib/gnutls_hash_int.h, lib/gnutls_sig.c: Allow all SHA algorithms

1623 for DSA signatures.

1624

1625 2011-06-03 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1626

1627 * lib/x509/verify.c: fixes for

1628 http://tools.ietf.org/html/draft-mavrogiannopoulos-tls-dss-00

1629

1630 2011-06-03 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1631

1632 * lib/auth/cert.h, lib/gnutls_cert.c, lib/gnutls_handshake.c:

1633 simplified _gnutls_selected_cert_supported_kx().

1634

1635 2011-06-03 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1636

1637 * lib/gnutls_pubkey.c, lib/nettle/pk.c, lib/x509/verify.c:

1638 Truncation of ECDSA and DSA signatures moved to

1639 _wrap_nettle_pk_sign() and _wrap_nettle_pk_verify().

1640

1641 2011-06-03 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1642

1643 * lib/algorithms.h, lib/algorithms/ciphersuites.c,

1644 lib/algorithms/sign.c, lib/ext/signature.c, lib/gnutls_buffers.c,

1645 lib/gnutls_buffers.h, lib/gnutls_handshake.c, lib/gnutls_int.h,

1646 lib/gnutls_sig.c, lib/nettle/pk.c: Simplified the handling of

1647 handshake messages to be hashed. Instead of doing a hash during the

1648 handshake process we now keep the data until handshake is over and

1649 hash them on demand. This uses more memory but eliminates issues

1650 with TLS 1.2 and makes the handling simpler.

1651

1652 2011-06-03 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1653

1654 * lib/ext/signature.c, lib/gnutls_pubkey.c, lib/nettle/pk.c,

1655 lib/x509/common.h, lib/x509/verify.c: Hash algorithms used for DSA

1656 and ECDSA correspond to draft-mavrogiannopoulos-tls-dss-00.txt.

1657

1658 2011-06-03 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1659

1660 * lib/ext/ecc.c: updated

1661

1662 2011-06-02 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1663

1664 * doc/cha-internals.texi, doc/gnutls.texi: Added refint macro to

1665 refer to internal -non exported- functions. Used it to reference to

1666 the gnutls_*_register() functions.

1667

1668 2011-06-02 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1669

1670 * NEWS, lib/Makefile.am, lib/auth/psk_passwd.c, lib/auth/rsa.c,

1671 lib/auth/rsa_export.c, lib/auth/srp_passwd.c, lib/crypto-api.c,

1672 lib/crypto-backend.c, lib/crypto-backend.h, lib/crypto.c,

1673 lib/ext/session_ticket.c, lib/gnutls_cipher.c,

1674 lib/gnutls_cipher_int.h, lib/gnutls_handshake.c,

1675 lib/gnutls_hash_int.h, lib/gnutls_mpi.c, lib/gnutls_mpi.h,

1676 lib/gnutls_pk.c, lib/includes/gnutls/crypto.h, lib/libgnutls.map,

1677 lib/nettle/mpi.c, lib/nettle/pk.c, lib/opencdk/misc.c,

1678 lib/pkcs11_secret.c, lib/random.h, lib/x509/pkcs12.c,

1679 lib/x509/privkey_pkcs8.c, libextra/gnutls_openssl.c, src/psk.c,

1680 src/srptool.c, tests/Makefile.am, tests/crypto_rng.c,

1681 tests/rng-fork.c: gnutls/crypto.h no longer includes functions to

1682 register ciphers. Thus the following functions - gnutls_crypto_bigint_register - gnutls_crypto_cipher_register - gnutls_crypto_digest_register - gnutls_crypto_mac_register - gnutls_crypto_pk_register - gnutls_crypto_rnd_register - gnutls_crypto_single_cipher_register - gnutls_crypto_single_digest_register - gnutls_crypto_single_mac_register are only available internally

1683 via crypto-backend.h.

1684

1685 2011-06-02 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1686

1687 * build-aux/config.rpath: updated

1688

1689 2011-06-01 Nikos Mavrogiannopoulos <nmav@gnutls.org>

1690

1691 * lib/accelerated/intel/asm/appro-aes-gcm-x86-64.s,

1692 lib/accelerated/intel/asm/appro-aes-gcm-x86.s,

1693 lib/accelerated/intel/asm/appro-aes-x86-64.s,

1694 lib/accelerated/intel/asm/appro-aes-x86.s: typos and date fix in