gnutls:gnutls.git
9 years agorequire automake 1.12.2 for guile.
Nikos Mavrogiannopoulos [Fri, 7 Jun 2013 17:59:08 +0000 (19:59 +0200)]
require automake 1.12.2 for guile.

9 years agoSECURE -> SECURE128
Nikos Mavrogiannopoulos [Fri, 7 Jun 2013 06:51:34 +0000 (08:51 +0200)]
SECURE -> SECURE128

9 years agocorrected priority strings
Nikos Mavrogiannopoulos [Thu, 6 Jun 2013 21:32:22 +0000 (23:32 +0200)]
corrected priority strings

9 years agoAdd NETTLE_CFLAGS in makefiles
Martin Storsjo [Thu, 6 Jun 2013 12:26:53 +0000 (15:26 +0300)]
Add NETTLE_CFLAGS in makefiles

This is required for using nettle/memxor.h, which now is included
implicitly via gnutls_int.h, if the nettle include directories
aren't in one of the compiler standard paths.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
9 years agocrywrap: Use the libidn pkg-config include and lib paths
Martin Storsjo [Thu, 6 Jun 2013 12:26:52 +0000 (15:26 +0300)]
crywrap: Use the libidn pkg-config include and lib paths

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
9 years agoguile: Use `LOG_COMPILER', as required by Automake 1.12+.
Ludovic Courtès [Thu, 6 Jun 2013 14:09:27 +0000 (16:09 +0200)]
guile: Use `LOG_COMPILER', as required by Automake 1.12+.

9 years agoAdd nettle dependencies to libcrypto.la
Nikos Mavrogiannopoulos [Mon, 3 Jun 2013 19:21:44 +0000 (21:21 +0200)]
Add nettle dependencies to libcrypto.la

9 years agocorrectly place cflags
Nikos Mavrogiannopoulos [Mon, 3 Jun 2013 19:17:39 +0000 (21:17 +0200)]
correctly place cflags

9 years agodiscourage usage of anonymous authentication
Nikos Mavrogiannopoulos [Mon, 3 Jun 2013 19:09:01 +0000 (21:09 +0200)]
discourage usage of anonymous authentication

9 years agodoc update
Nikos Mavrogiannopoulos [Sun, 2 Jun 2013 17:25:39 +0000 (19:25 +0200)]
doc update

9 years agoDirectly link to gmp library. Based on original patch by Alon Bar-Lev <alon.barlev...
Nikos Mavrogiannopoulos [Sun, 2 Jun 2013 17:10:52 +0000 (19:10 +0200)]
Directly link to gmp library. Based on original patch by Alon Bar-Lev <alon.barlev@gmail.com>.

9 years agoupdated cross.mk
Nikos Mavrogiannopoulos [Sun, 2 Jun 2013 13:46:12 +0000 (15:46 +0200)]
updated cross.mk

9 years agoseveral updates for tests to run under win32
Nikos Mavrogiannopoulos [Sun, 2 Jun 2013 13:34:13 +0000 (15:34 +0200)]
several updates for tests to run under win32

9 years agonull terminate strings in windows
Nikos Mavrogiannopoulos [Sun, 2 Jun 2013 13:24:39 +0000 (15:24 +0200)]
null terminate strings in windows

9 years agoupdated makefile
Nikos Mavrogiannopoulos [Sun, 2 Jun 2013 13:14:29 +0000 (15:14 +0200)]
updated makefile

9 years agofix windows extension
Nikos Mavrogiannopoulos [Sun, 2 Jun 2013 13:12:49 +0000 (15:12 +0200)]
fix windows extension

9 years agoavoid running tests which require datefudge in windows
Nikos Mavrogiannopoulos [Sun, 2 Jun 2013 13:11:08 +0000 (15:11 +0200)]
avoid running tests which require datefudge in windows

9 years agoavoid struct sigaction in win32
Nikos Mavrogiannopoulos [Sun, 2 Jun 2013 11:25:55 +0000 (13:25 +0200)]
avoid struct sigaction in win32

9 years agoAvoid comparing the expiration date to prevent false positive error in 32-bit systems.
Nikos Mavrogiannopoulos [Sun, 2 Jun 2013 10:10:06 +0000 (12:10 +0200)]
Avoid comparing the expiration date to prevent false positive error in 32-bit systems.

9 years agoRevert "Avoid comparing the expiration date to prevent false positive error in 32...
Nikos Mavrogiannopoulos [Sun, 2 Jun 2013 10:08:01 +0000 (12:08 +0200)]
Revert "Avoid comparing the expiration date to prevent false positive error in 32-bit systems."

This reverts commit 64f9b5787c9b404763f59b3252fe4ef1b862aa00.

9 years agoAvoid comparing the expiration date to prevent false positive error in 32-bit systems.
Nikos Mavrogiannopoulos [Sun, 2 Jun 2013 10:04:59 +0000 (12:04 +0200)]
Avoid comparing the expiration date to prevent false positive error in 32-bit systems.

9 years agoupdated
Nikos Mavrogiannopoulos [Sat, 1 Jun 2013 16:50:42 +0000 (18:50 +0200)]
updated

9 years agodoc updates
Nikos Mavrogiannopoulos [Sat, 1 Jun 2013 12:09:34 +0000 (14:09 +0200)]
doc updates

9 years agoupdated from 3.2.1
Nikos Mavrogiannopoulos [Sat, 1 Jun 2013 11:19:11 +0000 (13:19 +0200)]
updated from 3.2.1

9 years agocheck for suse's CA bundle file
Nikos Mavrogiannopoulos [Sat, 1 Jun 2013 10:42:01 +0000 (12:42 +0200)]
check for suse's CA bundle file

9 years agocall cleanup and deinit on the correct number of parameters
Nikos Mavrogiannopoulos [Fri, 31 May 2013 14:12:30 +0000 (16:12 +0200)]
call cleanup and deinit on the correct number of parameters

9 years agoavoid calling clear on null values
Nikos Mavrogiannopoulos [Fri, 31 May 2013 14:10:57 +0000 (16:10 +0200)]
avoid calling clear on null values

9 years agouse pkg-config to detect nettle
Nikos Mavrogiannopoulos [Thu, 30 May 2013 14:59:48 +0000 (16:59 +0200)]
use pkg-config to detect nettle

9 years agoignore sigpipe
Nikos Mavrogiannopoulos [Thu, 30 May 2013 06:49:30 +0000 (08:49 +0200)]
ignore sigpipe

9 years agoallow ciphersuites with elliptic curves even when using SSL 3.0. This works around...
Nikos Mavrogiannopoulos [Wed, 29 May 2013 19:16:38 +0000 (21:16 +0200)]
allow ciphersuites with elliptic curves even when using SSL 3.0. This works around a bug on openssl in certain Debian systems.

9 years agoSync with TP.
Nikos Mavrogiannopoulos [Wed, 29 May 2013 18:36:57 +0000 (20:36 +0200)]
Sync with TP.

9 years agomore files to ignore
Nikos Mavrogiannopoulos [Wed, 29 May 2013 18:12:15 +0000 (20:12 +0200)]
more files to ignore

9 years agoupdated xssl.
Nikos Mavrogiannopoulos [Wed, 29 May 2013 18:11:49 +0000 (20:11 +0200)]
updated xssl.

9 years agodoc update
Nikos Mavrogiannopoulos [Wed, 29 May 2013 17:09:41 +0000 (19:09 +0200)]
doc update

9 years agodocument sizes
Nikos Mavrogiannopoulos [Wed, 29 May 2013 17:03:05 +0000 (19:03 +0200)]
document sizes

9 years agomore precise calculation of overhead
Nikos Mavrogiannopoulos [Wed, 29 May 2013 16:50:48 +0000 (18:50 +0200)]
more precise calculation of overhead

9 years agoCheck overhead in DTLS.
Nikos Mavrogiannopoulos [Wed, 29 May 2013 16:45:31 +0000 (18:45 +0200)]
Check overhead in DTLS.

9 years agodoc update
Nikos Mavrogiannopoulos [Wed, 29 May 2013 16:17:51 +0000 (18:17 +0200)]
doc update

9 years agodoc update
Nikos Mavrogiannopoulos [Sat, 25 May 2013 19:43:17 +0000 (21:43 +0200)]
doc update

9 years agobumped version
Nikos Mavrogiannopoulos [Sat, 25 May 2013 19:46:25 +0000 (21:46 +0200)]
bumped version

9 years agorevert prototype move
Nikos Mavrogiannopoulos [Wed, 29 May 2013 15:26:38 +0000 (17:26 +0200)]
revert prototype move

9 years agodoc update
Nikos Mavrogiannopoulos [Wed, 29 May 2013 15:26:14 +0000 (17:26 +0200)]
doc update

9 years agoEliminated memory copy on decryption.
Nikos Mavrogiannopoulos [Mon, 27 May 2013 22:22:57 +0000 (00:22 +0200)]
Eliminated memory copy on decryption.

9 years agocorrected likely()
Nikos Mavrogiannopoulos [Mon, 27 May 2013 22:07:15 +0000 (00:07 +0200)]
corrected likely()

9 years agouse various ciphers in tests.
Nikos Mavrogiannopoulos [Mon, 27 May 2013 21:55:25 +0000 (23:55 +0200)]
use various ciphers in tests.

9 years agodoc update
Nikos Mavrogiannopoulos [Mon, 27 May 2013 20:34:20 +0000 (22:34 +0200)]
doc update

9 years agoavoid delays by using a reliable transport layer.
Nikos Mavrogiannopoulos [Sun, 26 May 2013 18:10:41 +0000 (20:10 +0200)]
avoid delays by using a reliable transport layer.

9 years agoremoved test file from repository
Nikos Mavrogiannopoulos [Sun, 26 May 2013 18:04:48 +0000 (20:04 +0200)]
removed test file from repository

9 years agoavoid delays by using a reliable transport layer.
Nikos Mavrogiannopoulos [Sun, 26 May 2013 18:03:05 +0000 (20:03 +0200)]
avoid delays by using a reliable transport layer.

9 years agoEliminated memory copy at encryption.
Nikos Mavrogiannopoulos [Sun, 26 May 2013 17:46:19 +0000 (19:46 +0200)]
Eliminated memory copy at encryption.

9 years agoeliminated unused variable
Nikos Mavrogiannopoulos [Sun, 26 May 2013 10:01:11 +0000 (12:01 +0200)]
eliminated unused variable

9 years agorevive gnutls_handshake_get_last_in(). Report by Mann Ern Kang.
Nikos Mavrogiannopoulos [Sat, 25 May 2013 18:45:28 +0000 (20:45 +0200)]
revive gnutls_handshake_get_last_in(). Report by Mann Ern Kang.

9 years agosimplified code by passing an mbuffer.
Nikos Mavrogiannopoulos [Sat, 25 May 2013 14:00:01 +0000 (16:00 +0200)]
simplified code by passing an mbuffer.

9 years agobetter name
Nikos Mavrogiannopoulos [Sat, 25 May 2013 13:52:32 +0000 (15:52 +0200)]
better name

9 years agoalways set hash length
Nikos Mavrogiannopoulos [Sat, 25 May 2013 10:50:25 +0000 (12:50 +0200)]
always set hash length

9 years agocorrected bug with _gnutls_dsa_q_to_hash() usage introduced previously
Nikos Mavrogiannopoulos [Sat, 25 May 2013 10:45:51 +0000 (12:45 +0200)]
corrected bug with _gnutls_dsa_q_to_hash() usage introduced previously

9 years agooptimized access to TLS protocol version properties.
Nikos Mavrogiannopoulos [Sat, 25 May 2013 10:25:22 +0000 (12:25 +0200)]
optimized access to TLS protocol version properties.

9 years agosimplified access to cipher and mac properties to reduce wasted cycles.
Nikos Mavrogiannopoulos [Sat, 25 May 2013 07:45:05 +0000 (09:45 +0200)]
simplified access to cipher and mac properties to reduce wasted cycles.

9 years agomodified openssl compat API to use the exported API
Nikos Mavrogiannopoulos [Sat, 25 May 2013 07:56:14 +0000 (09:56 +0200)]
modified openssl compat API to use the exported API

9 years agono longer export internal hash functions
Nikos Mavrogiannopoulos [Sat, 25 May 2013 07:52:45 +0000 (09:52 +0200)]
no longer export internal hash functions

9 years agoremoved memory leak
Nikos Mavrogiannopoulos [Sat, 25 May 2013 07:47:16 +0000 (09:47 +0200)]
removed memory leak

9 years agoinlined simple functions
Nikos Mavrogiannopoulos [Thu, 23 May 2013 23:23:50 +0000 (01:23 +0200)]
inlined simple functions

9 years agoavoid calloc
Nikos Mavrogiannopoulos [Thu, 23 May 2013 22:07:37 +0000 (00:07 +0200)]
avoid calloc

9 years agofixes in record version checking
Nikos Mavrogiannopoulos [Tue, 21 May 2013 20:52:25 +0000 (22:52 +0200)]
fixes in record version checking

9 years agouse sigaction instead of signal in gnutls-cli
Nikos Mavrogiannopoulos [Tue, 21 May 2013 19:30:38 +0000 (21:30 +0200)]
use sigaction instead of signal in gnutls-cli

9 years agoRevert "break the loop when a SIGALRM has been received"
Nikos Mavrogiannopoulos [Tue, 21 May 2013 18:26:51 +0000 (20:26 +0200)]
Revert "break the loop when a SIGALRM has been received"

This reverts commit c3b3a0c6bd14a542e11873ebe0975a5ddd0ab46b.

9 years agorelax check on requirement on headers for libopts. Reported by Mark Brand.
Nikos Mavrogiannopoulos [Tue, 21 May 2013 18:25:34 +0000 (20:25 +0200)]
relax check on requirement on headers for libopts. Reported by Mark Brand.

9 years agomore files to ignore
Nikos Mavrogiannopoulos [Mon, 20 May 2013 07:52:16 +0000 (09:52 +0200)]
more files to ignore

9 years agoImproved record version checks
Nikos Mavrogiannopoulos [Mon, 20 May 2013 07:47:22 +0000 (09:47 +0200)]
Improved record version checks

9 years agoAdded test for hello verify message
Nikos Mavrogiannopoulos [Mon, 20 May 2013 07:45:55 +0000 (09:45 +0200)]
Added test for hello verify message

9 years agofail on wrong key sizes
Nikos Mavrogiannopoulos [Sun, 19 May 2013 17:02:54 +0000 (19:02 +0200)]
fail on wrong key sizes

9 years agocorrected record overhead calculations
Nikos Mavrogiannopoulos [Sun, 19 May 2013 16:23:49 +0000 (18:23 +0200)]
corrected record overhead calculations

9 years agomore detailed error
Nikos Mavrogiannopoulos [Sun, 19 May 2013 12:08:32 +0000 (14:08 +0200)]
more detailed error

9 years agocorrected resumption check
Nikos Mavrogiannopoulos [Sun, 19 May 2013 12:08:05 +0000 (14:08 +0200)]
corrected resumption check

9 years agoupdated doc
Nikos Mavrogiannopoulos [Sun, 19 May 2013 11:21:02 +0000 (13:21 +0200)]
updated doc

9 years agoAllow record layer packets with version less than the negotiated.
Nikos Mavrogiannopoulos [Sun, 19 May 2013 11:18:04 +0000 (13:18 +0200)]
Allow record layer packets with version less than the negotiated.

Allowing such records avoids issue in DTLS client hello request verification.

9 years agoremoved undefined variable
Nikos Mavrogiannopoulos [Sun, 19 May 2013 09:10:20 +0000 (11:10 +0200)]
removed undefined variable

9 years agognutls_session_set_id() was added
Nikos Mavrogiannopoulos [Sun, 19 May 2013 08:16:03 +0000 (10:16 +0200)]
gnutls_session_set_id() was added

9 years agobreak the loop when a SIGALRM has been received
Nikos Mavrogiannopoulos [Sat, 18 May 2013 14:26:34 +0000 (16:26 +0200)]
break the loop when a SIGALRM has been received

9 years agoconfigure proceeds if regex library isn't found
Nikos Mavrogiannopoulos [Sat, 18 May 2013 13:39:56 +0000 (15:39 +0200)]
configure proceeds if regex library isn't found

9 years agodocumented function behavior
Nikos Mavrogiannopoulos [Fri, 17 May 2013 18:14:17 +0000 (20:14 +0200)]
documented function behavior

9 years agocorrected typo
Nikos Mavrogiannopoulos [Wed, 15 May 2013 22:30:52 +0000 (00:30 +0200)]
corrected typo

9 years agoseveral updates
Nikos Mavrogiannopoulos [Wed, 15 May 2013 22:27:13 +0000 (00:27 +0200)]
several updates

9 years agoprint message on certificate verification
Nikos Mavrogiannopoulos [Sat, 11 May 2013 18:05:10 +0000 (20:05 +0200)]
print message on certificate verification

9 years agodoc update
Nikos Mavrogiannopoulos [Sat, 11 May 2013 08:04:38 +0000 (10:04 +0200)]
doc update

9 years agomore verbose messages
Nikos Mavrogiannopoulos [Sat, 11 May 2013 08:00:30 +0000 (10:00 +0200)]
more verbose messages

9 years agoWhen retrying gnutls_record_send due to GNUTLS_E_AGAIN, also try passing null data...
Tim Kosse [Fri, 10 May 2013 17:49:37 +0000 (19:49 +0200)]
When retrying gnutls_record_send due to GNUTLS_E_AGAIN, also try passing null data and length. Tests will fail after this patch until next patch is applied that fixes a bug in gnutls_record_send.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
9 years agoIf gnutls_record_send fails with GNUTLS_E_AGAIN or GNUTLS_E_INTERRUPTED, the document...
Tim Kosse [Fri, 10 May 2013 17:49:38 +0000 (19:49 +0200)]
If gnutls_record_send fails with GNUTLS_E_AGAIN or GNUTLS_E_INTERRUPTED, the documentation allows passing null for the data and size on retry.

Commit 2ec84d6 broke this usage of gnutls_record_send. This patch fixes the problem.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
9 years agotypo fixes by Andreas Metzler
Nikos Mavrogiannopoulos [Fri, 10 May 2013 16:43:01 +0000 (18:43 +0200)]
typo fixes by Andreas Metzler

9 years agoreleased 3.2.0 gnutls_3_2_0
Nikos Mavrogiannopoulos [Fri, 10 May 2013 16:24:30 +0000 (18:24 +0200)]
released 3.2.0

9 years agosimplified node referencing and add NEW_PADDING in doc
Nikos Mavrogiannopoulos [Fri, 10 May 2013 16:07:01 +0000 (18:07 +0200)]
simplified node referencing and add NEW_PADDING in doc

9 years agoincreased revision
Nikos Mavrogiannopoulos [Fri, 10 May 2013 15:56:33 +0000 (17:56 +0200)]
increased revision

9 years agodoc update
Nikos Mavrogiannopoulos [Fri, 10 May 2013 15:56:24 +0000 (17:56 +0200)]
doc update

9 years agoAdded more options for salsa20 ciphers
Nikos Mavrogiannopoulos [Fri, 10 May 2013 11:08:34 +0000 (13:08 +0200)]
Added more options for salsa20 ciphers

9 years agoapplied libregex patch
Nikos Mavrogiannopoulos [Fri, 10 May 2013 06:50:48 +0000 (08:50 +0200)]
applied libregex patch

9 years agouse C's style comments to compile in old MacOSX systems. Reported by Ryan Schmidt.
Nikos Mavrogiannopoulos [Wed, 8 May 2013 10:34:02 +0000 (12:34 +0200)]
use C's style comments to compile in old MacOSX systems. Reported by Ryan Schmidt.

9 years agodoc update
Nikos Mavrogiannopoulos [Sun, 5 May 2013 15:52:05 +0000 (18:52 +0300)]
doc update

9 years agoclarified doc
Nikos Mavrogiannopoulos [Sun, 5 May 2013 13:23:11 +0000 (16:23 +0300)]
clarified doc

9 years agoupdated for new autogen
Nikos Mavrogiannopoulos [Sun, 5 May 2013 13:22:59 +0000 (16:22 +0300)]
updated for new autogen

9 years agoupdated for new api
Nikos Mavrogiannopoulos [Sun, 5 May 2013 13:22:41 +0000 (16:22 +0300)]
updated for new api