- Minimum supported GnuTLS version is 3.6.5 now

Revision 9144 - (view) (annotate) - [select for diffs]
Modified Sun Jan 12 09:53:33 2020 UTC (6 years, 6 months ago) by michael
File length: 9734 byte(s)
Diff to previous 9136

- In the serverinfo {} block, the following configuration directives have been renamed:

   ssl_certificate_file -> tls_certificate_file
   ssl_dh_param_file -> tls_dh_param_file
   ssl_dh_elliptic_curve -> tls_supported_groups
   ssl_cipher_list -> tls_cipher_list
   ssl_message_digest_algorithm -> tls_message_digest_algorithm

- In the operator {} block, the following configuration directives have been renamed:

   ssl_certificate_fingerprint -> tls_certificate_fingerprint
   ssl_connection_required -> tls_connection_required
   
- In the connect {} block, the following configuration directives have been renamed:

   ssl_cipher_list -> tls_cipher_list
   ssl_certificate_fingerprint -> tls_certificate_fingerprint

- tls_gnutls.c, tls_openssl.c: stylistic changes

Revision 9102 - (view) (annotate) - [select for diffs]
Modified Wed Jan 1 09:58:57 2020 UTC (6 years, 6 months ago) by michael
File length: 9760 byte(s)
Diff to previous 9099

- Bump copyright years everywhere

- tls_gnutls.c:tls_verify_cert(): we're actually not interested in the length of the certificate list. i.e. pass NULL as second argument to gnutls_certificate_get_peers().

Revision 9065 - (view) (annotate) - [select for diffs]
Modified Sun Sep 1 11:55:20 2019 UTC (6 years, 10 months ago) by michael
File length: 9806 byte(s)
Diff to previous 9055

- tls_gnutls.c:tls_new_cred(): fixed segfault issue in case there's no DH parameter file. Reported by Dominic Hargreaves <dom@debian.org>

- tls_gnutls.c:tls_new_cred(): test the return value of gnutls_dh_params_init() and act accordingly

Revision 8960 - (view) (annotate) - [select for diffs]
Modified Sat May 11 08:50:02 2019 UTC (7 years, 2 months ago) by michael
File length: 9545 byte(s)
Diff to previous 8958

- tls_gnutls.c, tls_openssl.c: stylistic changes

- tls_gnutls.c: avoid maintaining multiple priority strings

Revision 8957 - (view) (annotate) - [select for diffs]
Modified Fri May 10 17:07:45 2019 UTC (7 years, 2 months ago) by michael
File length: 9512 byte(s)
Diff to previous 8820

- Made read/write functions use ssize_t

- tls_gnutls.c, tls_openssl.c: disable TLSv1.1

Revision 8781 - (view) (annotate) - [select for diffs]
Modified Tue Jan 15 18:58:48 2019 UTC (7 years, 6 months ago) by michael
File length: 9444 byte(s)
Diff to previous 8751

- tls_gnutls.c, tls_openssl.c: disable TLSv1.0

- Update copyright years

Revision 8663 - (view) (annotate) - [select for diffs]
Modified Thu Nov 22 14:25:57 2018 UTC (7 years, 7 months ago) by michael
File length: 9418 byte(s)
Diff to previous 8659

- Make use of bool even more

- Make use of the bool data type in some more places

Revision 8280 - (view) (annotate) - [select for diffs]
Modified Tue Feb 20 19:30:33 2018 UTC (8 years, 4 months ago) by michael
File length: 9353 byte(s)
Diff to previous 7925

- Update copyright years

- Update copyright years

Revision 7707 - (view) (annotate) - [select for diffs]
Modified Fri Sep 23 16:45:18 2016 UTC (9 years, 9 months ago) by michael
File length: 9353 byte(s)
Diff to previous 7667

- Show GnuTLS/OpenSSL library/header versions in /INFO as suggested by Adam

- Fixed svn properties

Revision 7273 - (view) (annotate) - [select for diffs]
Modified Sat Feb 6 20:55:20 2016 UTC (10 years, 5 months ago) by michael
File length: 9137 byte(s)
Diff to previous 7272

- Let's do this better

- Don't exit out with GnuTLS when there's no key and/or certificate

Revision 7195 - (view) (annotate) - [select for diffs]
Modified Sat Jan 30 19:42:19 2016 UTC (10 years, 5 months ago) by michael
File length: 8962 byte(s)
Diff to previous 7194

- tls_gnutls.c: explicitly disable SSLv3 for releases prior to 3.4

- tls_gnutls.c: add %SERVER_PRECEDENCE to priorities

Revision 7163 - (view) (annotate) - [select for diffs]
Modified Thu Jan 28 11:41:36 2016 UTC (10 years, 5 months ago) by michael
File length: 8802 byte(s)
Diff to previous 7151

- tls*: more copyright fixups

- Move report_crypto_errors from rsa.c to tls_openssl.c
- Move binary_to_hex from rsa.c to misc.c
- Removed rsa.c & rsa.h

Revision 7149 - (view) (annotate) - [select for diffs]
Modified Thu Jan 28 10:04:18 2016 UTC (10 years, 5 months ago) by michael
File length: 8801 byte(s)
Diff to previous 7147

- More copyright -- from Adam

- Fix gnutls error handling -- from Adam

Revision 7144 - (view) (annotate) - [select for diffs]
Modified Thu Jan 28 10:00:55 2016 UTC (10 years, 5 months ago) by michael
File length: 8575 byte(s)
Diff to previous 7143

- Fix cert leak in tls_verify_cert -- from Adam

- Remove useless raw_result -- from Adam

Revision 7133 - (view) (annotate) - [select for diffs]
Modified Mon Jan 25 19:51:19 2016 UTC (10 years, 5 months ago) by michael
File length: 8579 byte(s)
Diff to previous 7119

- tls_gnutls.h, tls_gnutls.c: minor cleanups

- tls_gnutls.c:tls_get_cipher(): make the string look similar to the openssl variant (add protocol information)

Revision 7111 - (view) (annotate) - [select for diffs]
Modified Sat Jan 23 20:24:52 2016 UTC (10 years, 5 months ago) by michael
File length: 8395 byte(s)
Diff to previous 7106

- propset

- Incorporate gnutls support by Adam & Attila