Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Mon Aug 21 08:35:07 2017 +0200

    fuzz: temporarily disable -static build of fuzz/ in MacOSX
    
    This allows running the MacOSX CI tests on travis.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Mon Aug 21 08:26:57 2017 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Mon Aug 21 07:56:58 2017 +0200

    tests: verify the output size of gnutls_x509_privkey_export
    
    That is, make sure that gnutls_x509_privkey_export() and
    gnutls_x509_privkey_export2() agrees with the strlen()
    value on the data.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sun Aug 20 20:46:31 2017 +0200

    .travis.yml: print failed log files in fuzz after failure
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sun Aug 20 19:43:52 2017 +0200

    hooks.m4: reduce the gap between minor soversion of 3.5.x and 3.6.0
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sun Aug 20 09:24:19 2017 +0200

    tests: make mini-record more friendly for OSes with limited buffers
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sun Aug 20 09:18:05 2017 +0200

    pull/push backends: ECONNRESET is translated to GNUTLS_E_PREMATURE_TERMINATION
    
    This returns a more reasonable error code on platforms where
    this errno is set.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sun Aug 20 09:05:02 2017 +0200

    tests: gnutls_x509_privkey_import: address issue on error path
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sun Aug 20 00:18:44 2017 +0200

    sed: use it in a portable way in makefiles
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sat Aug 19 23:33:46 2017 +0200

    configure: disable hardware acceleration on aarch64/ilp32 mode
    
    Our included assembly code for aarch64 is not suitable for that
    data mode.
    
    Resolves #252
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sat Aug 19 13:39:28 2017 +0200

    create_tls_random: avoid warning in fuzzying mode
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sat Aug 19 08:58:37 2017 +0200

    configure.ac: removed conditional FUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION
    
    Instead rely only on the definition, to make fuzzying mode to be
    enabled even if --enable-fuzzer-target is not specified, but defined
    b the compiler.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sat Aug 19 08:56:28 2017 +0200

    rnd-fuzzer: use ifdef instead of conditional compilation
    
    This allows compiling in fuzzying mode even when --enable-fuzzer-target
    is not specified on configure, but the definition is present.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Tim Rühsen <tim.ruehsen@gmx.de>
Date:   Fri Aug 18 21:39:13 2017 +0200

    fuzzer: Update base64 fuzzers + corpora
    
    Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

Author: Tim Rühsen <tim.ruehsen@gmx.de>
Date:   Fri Aug 18 21:32:28 2017 +0200

    fuzzer: Fix include path in run-clang.sh [skip ci]
    
    Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Fri Aug 18 15:43:43 2017 +0200

    gnutls_x509_privkey_export: use _gnutls_copy_string on PEM data
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Fri Aug 18 13:05:34 2017 +0200

    Corrected argument names of functions to correspond to declaration
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Fri Aug 18 12:57:07 2017 +0200

    lib: use casts and be explicit on intentional enumeration use
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Fri Aug 18 13:56:04 2017 +0200

    gnutls-cli-debug: do not run non-FIPS cipher tests when in FIPS mode
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Fri Aug 18 12:52:20 2017 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Fri Aug 18 12:47:12 2017 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Fri Aug 18 11:51:53 2017 +0200

    tests: added basic test for the operation of gnutls-cli-debug
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Fri Aug 18 11:44:55 2017 +0200

    tests: verify the presence of GNUTLS_SFLAGS_RFC7919 flag in server and client mode
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Fri Aug 18 11:34:46 2017 +0200

    gnutls-cli-debug: check whether RFC7919 is supported
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Fri Aug 18 11:31:52 2017 +0200

    gnutls_session_get_flags: introduced GNUTLS_SFLAGS_RFC7919
    
    This allows checking whether the DHE parameters used were negotiated
    using RFC7919.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Fri Aug 18 11:22:11 2017 +0200

    gnutls_auth_*: check cs parameter for validity prior to use
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Fri Aug 18 11:16:50 2017 +0200

    certtool: simplified certificate PEM printing
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Fri Aug 18 11:14:16 2017 +0200

    gnutls-cli: fixed bounds check on benchmark-tls
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Fri Aug 18 10:44:21 2017 +0200

    lib: removed legacy debugging code
    
    That code was code from the initial versions of gnutls. It was neither
    used nor updated for long time.
    
    Relates #248
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Fri Aug 18 10:35:03 2017 +0200

    fuzz: added missing files into dist [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Fri Aug 18 10:06:36 2017 +0200

    tests: added missing files in dist [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Fri Aug 18 10:05:36 2017 +0200

    tests: do not suppress stderr errors on servers startup
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Thu Aug 17 17:41:34 2017 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Fri Aug 18 08:39:50 2017 +0200

    abi-check: added check for 3.6.0 ABI compatibility
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Fri Aug 18 08:38:48 2017 +0200

    gnutls_x509_crl_get_issuer_dn: removed unnecessary const
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Thu Aug 17 11:27:24 2017 +0200

    certtool: fixed documentation of sign-params
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Thu Aug 17 10:50:56 2017 +0200

    README.md: mention lockfile-progs dependency
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Thu Aug 17 10:02:47 2017 +0200

    tests: tls-neg-ext4-key: explicitly restrict to TLS 1.2, 1.1 and 1.0
    
    This allows testing all signature types used in the protocol.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Thu Aug 17 09:59:53 2017 +0200

    sign APIs: introduce RSA-RAW signing algorithm
    
    This ensures that there is a signing algorithm for all the operations
    we support. Previously, we required GNUTLS_SIGN_UNKNOWN to be acceptable
    by signing functions to accomodate for raw RSA operations. Now we make
    that explicit and in the process clean-up the API.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Thu Aug 17 10:09:13 2017 +0200

    removed devel/fuzz; functionality moved to fuzz/ [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Tim Rühsen <tim.ruehsen@gmx.de>
Date:   Fri Aug 11 21:42:02 2017 +0200

    fuzzer: Add 'make -C fuzz coverage' [ci skip]
    
    This reports how much code is covered by fuzzing.
    
    Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Mon Aug 14 08:46:03 2017 +0200

    _gnutls_recv_server_certificate_status: use the same type in subtracted values
    
    This ensures that there are no issues with subtracting those values.
    Note that the second is read from an uint24_t and thus it is always
    positive regardless its type.
    
    Resolves #245
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Mon Aug 14 08:42:51 2017 +0200

    _gnutls_proc_srp_client_kx: use same type in subtracted values
    
    This ensures that there are no issues with subtracting those values.
    Note that the second is read from an uint16_t and thus it is always
    positive regardless its type.
    
    Resolves #244
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Tim Rühsen <tim.ruehsen@gmx.de>
Date:   Tue Aug 15 12:34:25 2017 +0200

    fuzzer: Move regression corpora from tests/ to fuzz/
    
    See fuzz/README.md for the corresponding paths.
    
    Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

Author: Tim Rühsen <tim.ruehsen@gmx.de>
Date:   Mon Aug 14 12:34:00 2017 +0200

    fuzzer: Suppress leak in libgmp <= 6.1.2
    
    Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

Author: Tim Rühsen <tim.ruehsen@gmx.de>
Date:   Fri Aug 11 18:31:35 2017 +0200

    fuzzer: Suppress unsigned integer overflow in rnd-fuzzer.c
    
    Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

Author: Tim Rühsen <tim.ruehsen@gmx.de>
Date:   Sat Aug 5 20:49:19 2017 +0200

    fuzzer: Initial check in for improved fuzzing
    
    Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Wed Aug 9 08:24:59 2017 +0200

    fuzzer: added a fuzzer target
    
    This allows to compile the library with flags which will add predictable
    random generation and eliminate some crypto checks, in order for the
    library to be used for testing (fuzzying).
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Aug 15 16:40:41 2017 +0200

    updated auto-generated files
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Aug 15 16:39:36 2017 +0200

    gnutls_x509_privkey_export: made a wrapper over gnutls_x509_privkey_export2()
    
    In addition, improved function description.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Aug 15 13:23:39 2017 +0200

    gnutls-http-serv: use RSA-PSS key
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Aug 15 13:11:03 2017 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Aug 15 12:58:02 2017 +0200

    tests: use certtool to check RSA-PSS to RSA conversion
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Aug 15 12:07:01 2017 +0200

    certtool: introduced --to-rsa option
    
    This allows converting an RSA-PSS key to raw RSA.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Fri Aug 11 16:37:21 2017 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Fri Aug 11 12:30:17 2017 +0200

    updated auto-generated files
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Fri Aug 4 15:51:34 2017 +0200

    tests: added unit tests for gnutls_privkey_import_ext4
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Fri Aug 4 15:00:46 2017 +0200

    gnutls_privkey_import_ext4: introduced to allow signing with RSA-PSS or Ed25519 keys
    
    That function allows a signing callback which passes the signature
    algorithm, providing all the information to callback for signing.
    It also introduces GNUTLS_PRIVKEY_INFO_HAVE_SIGN_ALGO flag which
    allows the library to query the private key of the supported
    signature algorithms.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Aug 15 10:47:11 2017 +0200

    reduce common asserts to assist in debugging the library
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Aug 15 10:29:42 2017 +0200

    doc: algorithms.texi: include list of groups but skip compression methods
    
    Compression methods are no longer relevant or supported, and groups
    replace the elliptic curves.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Aug 15 10:27:19 2017 +0200

    doc: improved elliptic curve and group documentation
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Mon Aug 14 19:02:45 2017 +0200

    doc: mention the AES-DRBG random generator [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Fri Aug 11 12:40:14 2017 +0200

    tests: improved detection of 64-bit systems
    
    We now use the ${ac_cv_sizeof_unsigned_long_int} variable which
    gives the numbers used in the host system, not the build one.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Thu Aug 10 10:51:26 2017 +0200

    tests: updated for new x86 host
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Thu Aug 10 09:37:07 2017 +0200

    .gitlab-ci.yml: replaced the f23 x86 build with a f26 x86 build
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Fri Aug 11 11:09:39 2017 +0200

    fuzz: explicitly initialize and deinitialize the library [ci skip]
    
    This enables the fuzzers to run even when statically linked.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Jul 18 13:08:31 2017 +0200

    handshake: eliminated unnecessary function wrappers
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Jul 18 10:35:13 2017 +0200

    gnutls_int.h: reduce memory occupied by ext_data
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Jul 18 10:25:10 2017 +0200

    gnutls_int.h: reduced the maximum number of epoch states we keep
    
    There was no need to keep 16 epochs, as we typically we have only
    one or two active.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Jul 18 10:14:11 2017 +0200

    gnutls_int.h: removed unused variable from state
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Fri Jul 14 11:30:51 2017 +0200

    extensions: simplified requirements from send callback
    
    The callback no longer needs to return the number of sent data;
    they are now calculated by the caller.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Jun 27 11:42:25 2017 +0200

    ext/ecc: renamed Supported curves extension
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Jun 27 11:01:08 2017 +0200

    gnutls-serv: --require-client-cert no longer implies --verify-client-cert
    
    That is, it is now possible to require a client certificate without
    verifying it.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Thu Aug 10 10:35:22 2017 +0200

    CONTRIBUTING.md: corrected typo [ci skip]
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Wed Aug 9 16:59:15 2017 +0200

    doc update
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Wed Aug 9 10:30:04 2017 +0200

    updated auto-generated files
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Wed Aug 9 09:40:03 2017 +0200

    CONTRIBUTING.md: added section on symbol versioning
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Fri Aug 4 11:06:18 2017 +0200

    libgnutls.map: separated symbols introduced in 3.6.0
    
    This separation assists tools like rpm which can detect
    the right version of the library to use, by using the
    symbol version.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Wed Aug 9 10:21:06 2017 +0200

    tests: added reproducer for private key import leak
    
    Issue found using oss-fuzz:
      https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=561
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Wed Aug 9 13:18:33 2017 +0200

    rnd: use time_t for prng_reseed_time
    
    This ensures that all time comparisons are done
    under the same type.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Wed Aug 9 10:20:36 2017 +0200

    gnutls_x509_privkey_import_pkcs8: fixed memory leak on incorrect key import
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Wed Aug 9 09:58:17 2017 +0200

    tests: added reproducer for memory leak in SRP server
    
    Issue found using oss-fuzz:
      https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2859
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Wed Aug 9 09:57:49 2017 +0200

    gnutls_srp_verifier: corrected memory leak
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Wed Aug 9 09:52:37 2017 +0200

    tests: added reproducer for memory leak in RSA-PSK
    
    Issue found using oss-fuzz:
      https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2863
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Wed Aug 9 09:52:21 2017 +0200

    rsa-psk: corrected memory leak on invalid decrypt
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Wed Aug 9 10:44:56 2017 +0200

    updated auto-generated files
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Wed Aug 9 10:41:58 2017 +0200

    p11tool: --generate-xxx options were replaced by generate-privkey
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Tim Rühsen <tim.ruehsen@gmx.de>
Date:   Mon Aug 7 23:04:36 2017 +0200

    Fix memleaks in gnutls_x509_trust_list_add_crls()
    
    Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

Author: Tim Rühsen <tim.ruehsen@gmx.de>
Date:   Mon Aug 7 23:04:05 2017 +0200

    Fix memleak in gnutls_x509_crl_list_import()
    
    Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Aug 8 15:03:53 2017 +0200

    publickey: fixed incorrect assignment
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Aug 8 15:03:11 2017 +0200

    mac: simplified iteration functions
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Aug 8 14:59:56 2017 +0200

    corrected input to gnutls_sign_supports_pk_algorithm
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Aug 8 14:59:44 2017 +0200

    extensions: corrected flag check
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Aug 8 15:50:44 2017 +0200

    tests: updated for new rsa-pss key in doc/credentials
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Aug 8 12:51:58 2017 +0200

    cert selection: prioritize RSA-PSS certs over RSA
    
    RSA and RSA-PSS can both be used for RSA-PSS operations, and
    as such without prioritizing RSA-PSS certificates it is unknown
    which certificate will be used for an RSA-PSS operation. The
    reason we want to have only RSA-PSS keys used for RSA-PSS operations
    is to cover the use case where a server uses a legacy RSA certificate
    for clients that don't support RSA-PSS and an RSA-PSS certificate
    for the rest, thus separating the keys used for these client
    groups. That separation ensures that any issue on PKCS#1 1.5
    (legacy RSA), would not affect sessions which use RSA-PSS.
    
    Resolves #243
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Aug 8 11:35:26 2017 +0200

    gnutls_certificate_credentials_t: combine privkey into cert_st structure
    
    This reduces the number of applications and allows for easier
    use of the structure information, as they are now self-contained
    for most uses.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Aug 8 10:56:17 2017 +0200

    tests: verify whether the RSA-PSS key is preferred on RSA-PSS sigs
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Aug 8 09:27:57 2017 +0200

    certtool: eliminated unused variable
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Mon Aug 7 16:32:17 2017 +0200

    tests: added negative tests in provable-privkey
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Mon Aug 7 16:23:29 2017 +0200

    gnutls_pk_params_st: separate flags/qbits and curve
    
    Previously we were using the field flags to store the
    size of q in case of GNUTLS_PK_DH, some key generation flags
    in case of GNUTLS_PK_RSA, and the curve in case of elliptic
    curve key. Separate this into multiple fields to reduce
    confusion on the field.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Mon Aug 7 14:55:38 2017 +0200

    tests: check whether validation parameters are lost on key re-import
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sat Aug 5 20:08:31 2017 +0200

    certtool: improved documentation on --provable option
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sat Aug 5 19:52:40 2017 +0200

    certtool: create mapping between --load-x and --info options
    
    That allows using:
    certtool --certificate-info --load-certificate FILE
    and
    certtool --certificate-info --infile FILE
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sat Aug 5 19:35:53 2017 +0200

    certtool: removed definitions of non-existing functions
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sat Aug 5 17:08:16 2017 +0200

    tests: updated for the new provable private key format
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sat Aug 5 10:17:46 2017 +0200

    gnutls_x509_privkey_verify_seed: improved error on missing validation parameters
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Aug 1 16:17:45 2017 +0200

    certtool: silence warnings related to --pkcs8
    
    There is no reason to bug the user with such details by default.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Aug 1 15:18:34 2017 +0200

    certtool: better print provable key validation parameters
    
    That is, include hash in the printable set, and keep spaces
    from next fields.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Aug 1 15:11:12 2017 +0200

    certtool: provable private keys are always exported in PKCS#8 form
    
    That allows the provable parameters to be included.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Aug 1 14:43:04 2017 +0200

    x509: no longer emit the previous custom format for provable parameters
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Aug 1 14:30:06 2017 +0200

    x509: store and read provable seed in PKCS#8 form of key
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Wed Aug 2 10:28:07 2017 +0200

    Added information on OID registry
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Aug 1 14:23:31 2017 +0200

    pkix.asn: removed unused DomainParameters
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Tue Aug 1 11:29:26 2017 +0200

    x509: separated PKIX1 attributes parsing code for cert request handling
    
    This allows other code to utilize it.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date:   Mon Aug 7 09:36:20 2017 +0200

    _gnutls_fbase64_decode will always return non-zero
    
    That is, document that fact and update its callers to remove
    checks for zero.
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sun Aug 6 17:23:52 2017 +0200

    _gnutls_base64_decode: reject all zero-length string encodings on decoding
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sun Aug 6 11:34:39 2017 +0200

    wrap_nettle_pk_fixup: added sanity check in RSA-PSS param checking
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sun Aug 6 11:34:10 2017 +0200

    _decode_pkcs8_rsa_key: signal error in RSA privkey decoding
    
    Addresses oss-fuzz issue:
      https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2865
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sun Aug 6 11:28:15 2017 +0200

    tests: added reproducer for private key crash
    
    Found using oss-fuzz:
      https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2865
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sun Aug 6 10:17:29 2017 +0200

    tests: added unit test of gnutls_x509_crt_list_import
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sat Aug 5 09:35:14 2017 +0200

    tests: added reproducer applications for psk and srp fuzzers
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Fri Aug 4 19:47:00 2017 +0200

    updated auto-generated files
    
    Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Author: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date:   Sun Jul 30 02:57:03 2017 +0200
