summaryrefslogtreecommitdiff
path: root/wocky/wocky-tls.c
AgeCommit message (Expand)AuthorFilesLines
2013-09-10stop using deprecated gnutls_certificate_credentialsGuillaume Desmottes1-1/+1
2012-11-21gnutls: explain why wildcard verification is neededWill Thompson1-4/+6
2012-11-21gnutls: simplify wildcard validationWill Thompson1-20/+6
2012-05-10Add CRL support to wocky-tls and wocky-opensslVivek Dasmohapatra1-0/+56
2012-05-09Disallow *oogle.com certs on gnutls as well (cf *.google.com)Vivek Dasmohapatra1-13/+106
2012-04-03Remove wocky_tls_session_add_crlNicolas Dufresne1-34/+15
2012-02-21GNUTLS backend: don't use 0 as an error domainSimon McVittie1-12/+5
2012-02-06Namespace debug flags.Will Thompson1-1/+1
2012-02-06Move most of debug.h to debug-internal.hWill Thompson1-1/+1
2012-02-06Include foo-enumtypes.h from each foo.hWill Thompson1-1/+0
2012-02-01Merge remote-tracking branch 'siraj/mingw32-warn'Jonny Lamb1-7/+7
2012-01-31Remove <gcrypt.h> and other remnants of gcryptSimon McVittie1-1/+0
2012-01-31Use g_getenv and g_strtoull instead of getenv and atoiSimon McVittie1-4/+4
2012-01-26TLS: replace gsize and gssize with size_t and ssize_tSiraj Razick1-4/+4
2012-01-26TLS: Rename _stat variable to peer_cert_statusSiraj Razick1-3/+3
2011-08-03tls: prefer stream ciphers when --enable-stream-ciphers is usedMarco Barisione1-4/+23
2011-07-27Merge branch 'gabble-0.12'Will Thompson1-4/+37
2011-07-27Always write out all data gnutls requestedSjoerd Simons1-4/+37
2011-07-08Fix GnuTLS build with --disable-debugWill Thompson1-2/+0
2011-07-08Merge branch 'debug-stubs'Will Thompson1-7/+4
2011-07-08TLS: use GEnum for WockyTLSVerificationLevel namesWill Thompson1-6/+4
2011-07-07GnuTLS: remove a massive row of asterisksWill Thompson1-1/+0
2011-07-07tls: check the certificate name against the extra identities tooMarco Barisione1-4/+58
2011-07-07tls: rename the variable for the number of peers for clarityMarco Barisione1-5/+6
2011-07-07tls: rearrange wocky_tls_session_verify_peer() to reduce code duplicationMarco Barisione1-14/+12
2011-07-07tls: style fix; add missing braces around a long if blockMarco Barisione1-44/+46
2011-07-07Add an extra_identify argument to the TLS verification functionsMarco Barisione1-0/+1
2011-03-08tls: stop using OPAQUE_TYPE_ prefixes; it confuses gtk-docJonny Lamb1-2/+2
2010-12-20Add assertions to ensure async resources are freedNicolas Dufresne1-0/+1
2010-10-13More style fix when doing if on pointersNicolas Dufresne1-8/+8
2010-10-13Don't leak last read bufferNicolas Dufresne1-0/+5
2010-10-13Keep GCancellable alive during the async callsNicolas Dufresne1-2/+7
2010-09-30Handle the connection being disconnected by the remote side more gracefullySjoerd Simons1-7/+15
2010-08-11Improve debugging output slightlySjoerd Simons1-6/+7
2010-08-11Use NORMAL instead of SECURE as the priority stringSjoerd Simons1-1/+1
2010-07-22Add a way to get certificates from the session.Cosimo Cecchi1-1/+44
2010-06-22Remove GNUTLS_VERIFY_DO_NOT_ALLOW_SAME from VERIFY_NORMAL modeLars Noschinski1-2/+1
2009-12-22Rename verification level variable from 'flags'Will Thompson1-2/+2
2009-12-21Use a simple enum for the tls verification levelSjoerd Simons1-3/+5
2009-12-20only define hdesc_to_string when debugging is enabledSjoerd Simons1-0/+2
2009-12-17Remove wocky-openssl.h, no headers use the USING_OPENSSL #define (or config.h)Vivek Dasmohapatra1-1/+20
2009-11-24Implement the close virtual functionSjoerd Simons1-0/+11
2009-11-23Change g_message to DEBUG, explain number logged is DH bit size.Vivek Dasmohapatra1-1/+1
2009-11-23Cache DH parameters on generation (for each valid DH param size)Vivek Dasmohapatra1-4/+40
2009-10-19Turn openpgp cert support back off.Vivek Dasmohapatra1-3/+2
2009-10-19Comments explaining gnutls default protocol options we use.Vivek Dasmohapatra1-2/+7
2009-10-19Activate deflate compression, openpgp certs and secure (slow) crypto by default.Vivek Dasmohapatra1-5/+9
2009-10-19Fix gnutls session protocol detail setup.Vivek Dasmohapatra1-6/+32
2009-10-05Typos: environnement -> environment; updated doc section title.Vivek Dasmohapatra1-3/+3
2009-09-21Permit server initialiasation without an x509 certificate/key pair.Vivek Dasmohapatra1-5/+8