aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Add test case for bzip2 compression filter.Marcus Brinkmann2017-11-251-0/+36
|
* Update newsJack Lloyd2017-11-241-38/+40
| | | | Mention #1307 and reformat.
* Merge GH #1307 Add Pipe::append_filterJack Lloyd2017-11-243-13/+36
|\
| * Add Pipe::append_filterJack Lloyd2017-11-243-13/+36
|/ | | | | Similar to append but it only allows modfication before start_msg. See GH #1306
* Update support EOL datesJack Lloyd2017-11-242-13/+18
| | | | | | | | | Extend lifetime of 1.10 through end of 2018; some of the slower distros are still shipping only 1.10 so we need to give some additional support coverage. Also add one year to expected 2.x lifetime, and add expected dates wrt botan-3.
* Update Sonarcloud badge URLs [ci skip]Jack Lloyd2017-11-221-3/+3
|
* Update newsJack Lloyd2017-11-211-0/+9
|
* Merge GH #1304 Avoid infinite recursion on nested indefinite length constructsJack Lloyd2017-11-212-17/+69
|\
| * Avoid uncontrolled recusion on indefinite length encodingsJack Lloyd2017-11-202-17/+69
| | | | | | | | | | A sufficiently nested indefinite length construction would cause stack exhaustion and a crash. Found by OSS-Fuzz - issue 4353
* | Allow building asn1print even if PEM is disabledJack Lloyd2017-11-212-2/+12
| | | | | | | | Just throws if --pem arg is used.
* | Link to distro wiki page from indexJack Lloyd2017-11-201-4/+4
|/ | | | [ci skip]
* Add keywrap documentationJack Lloyd2017-11-193-1/+62
|
* Merge #1301 Add AES key wrap with paddingJack Lloyd2017-11-1911-75/+1008
|\
| * Add AES key wrap with paddingJack Lloyd2017-11-1911-75/+1008
|/
* Avoid OCSPing on the Let's Encrypt CA certJack Lloyd2017-11-191-6/+2
| | | | | | Their issuing CA seems to have some performance problems with OCSP (https://github.com/letsencrypt/boulder/issues/1929) and it's currently causing timeouts in the tests.
* Constify variables in AES-NI codeJack Lloyd2017-11-181-104/+104
|
* Add a function for checking if poly_double_n supports a particular sizeJack Lloyd2017-11-183-6/+10
|
* Allow parsing and printing certificates with unknown public key algosJack Lloyd2017-11-182-6/+31
|
* Add timings for RFC 3394 keywrapJack Lloyd2017-11-181-0/+40
|
* Add feature macro for Sqlite3 being enabled in buildJack Lloyd2017-11-181-0/+3
|
* Merge GH #1298 fix Python invocation for install scriptJack Lloyd2017-11-174-2/+5
|\ | | | | | | Closes #1297
| * Prefix execution of install.py with Python binaryJack Lloyd2017-11-164-2/+5
|/ | | | | | | Fixes GH #1297 This is done even on GNU make builds, since the same issue affects MinGW
* Fix encoding of subject key identifierJack Lloyd2017-11-165-23/+27
| | | | | | Changed in #884 - we were copying the entire public key as the public key id. Instead hash it with whatever hash we are using to sign the certificate.
* Optimize TwofishJack Lloyd2017-11-163-95/+159
| | | | | Interleaving two blocks is 40-50% faster for any mode that supports parallel operation.
* Fix path to cert test dataJack Lloyd2017-11-161-1/+1
|
* Merge GH #1296 Allow using secure_allocator with std::string under VC2013Jack Lloyd2017-11-161-5/+21
|\
| * Fix secure_allocator with std::string on VS2013Daniel Neus2017-11-161-5/+21
| | | | | | | | Closes #1295
* | Fix Python testsJack Lloyd2017-11-161-1/+1
| |
* | Move all the various X509 test data files under src/tests/data/x509Jack Lloyd2017-11-16659-41/+41
| |
* | Add todosJack Lloyd2017-11-161-0/+1
|/
* Fix a memory leak in the case where certificate extension decoding fails.Jack Lloyd2017-11-162-30/+33
| | | | | | Introduced in #884 Found by OSS-Fuzz (bug 4249)
* Correct CAST-128 decryption with more than 1 blockJack Lloyd2017-11-162-32/+36
|
* Optimizations for CAST-128Jack Lloyd2017-11-162-46/+136
| | | | | Similarly to Blowfish, 2x unrolling produces a 50-60% perf boost due to increased ILP.
* Optimize BlowfishJack Lloyd2017-11-162-42/+83
| | | | | | | Doing two blocks at a time exposes more ILP and substantially improves performance. Idea from http://jultika.oulu.fi/files/nbnfioulu-201305311409.pdf
* Update newsJack Lloyd2017-11-151-0/+18
|
* Update ASN.1 fuzzerJack Lloyd2017-11-152-12/+12
|
* Correct handling of nested context specificJack Lloyd2017-11-151-4/+3
|
* Move ASN1 printer to the libraryJack Lloyd2017-11-155-382/+418
|
* Encapsulate ASN1 printer logic in a classJack Lloyd2017-11-151-133/+163
|
* Increase the size of an ASN.1 tag enum to 32-bitsJack Lloyd2017-11-151-1/+1
| | | | Fixes GH #751
* Merge GH #884 Refactor X.509 cert/CRL internalsJack Lloyd2017-11-1535-1051/+1719
|\
| * Documentation updatesJack Lloyd2017-11-141-52/+89
| |
| * Remove debug abort [ci skip]Jack Lloyd2017-11-141-1/+0
| |
| * Consolidate function for testing for ASN.1 string typesJack Lloyd2017-11-144-34/+25
| |
| * Check for keyCertSign on non-CA certificates during validationJack Lloyd2017-11-141-0/+14
| | | | | | | | GH #1089
| * Catch exceptions in NIST validation testsJack Lloyd2017-11-141-33/+41
| |
| * Fix PKCS10 subject alt name usageJack Lloyd2017-11-145-7/+31
| | | | | | | | GH #1010
| * Add a test for GH #1252Jack Lloyd2017-11-144-1/+61
| |
| * Small cleanups in X509 testsJack Lloyd2017-11-141-22/+41
| |
| * Avoid deprecated functions in FFIJack Lloyd2017-11-141-3/+3
| |