From: Nikos Mavrogiannopoulos Date: Sun, 6 Jun 2004 14:31:37 +0000 (+0000) Subject: *** empty log message *** X-Git-Tag: gnutls_1_1_11~39 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=24ebcbe8e34507774f26878bfa7385649fe4e318;p=thirdparty%2Fgnutls.git *** empty log message *** --- diff --git a/doc/tex/certificate.tex b/doc/tex/certificate.tex index 80475542f1..4210a5dcdc 100644 --- a/doc/tex/certificate.tex +++ b/doc/tex/certificate.tex @@ -155,8 +155,8 @@ A certificate request is a structure, which contain information about an applicant of a certificate service. It usually contains a private key, a distinguished name and secondary data such as a challenge password. \gnutls{} supports the requests -defined in PKCS \#10. Other certificate request's format such as -PKIX's RFC2511 are not currently supported. +defined in PKCS \#10 \cite{RFC2986}. Other certificate request's format such as +PKIX's RFC2511 \cite{RFC2511} are not currently supported. In \gnutls{} the PKCS \#10 structures are handled using the \emph{gnutls\_x509\_crq} type. @@ -164,7 +164,7 @@ An example of a certificate request generation can be found at section \ref{ex:c on page \pageref{ex:crq}. \subsection{PKCS \#12 structures\index{PKCS \#12}} -A PKCS \#12 structure usually contains a user's private keys and +A PKCS \#12 structure \cite{PKCS12} usually contains a user's private keys and certificates. It is commonly used in browsers to export and import the user's identities. \par @@ -210,7 +210,7 @@ signs other people's keys without being sure that they belong to the actual owner. \subsection*{OpenPGP keys} -In \gnutls{} the OpenPGP key structures are handled using the +In \gnutls{} the OpenPGP key structures \cite{RFC2440} are handled using the \emph{gnutls\_openpgp\_key} type and the corresponding private keys with the \emph{gnutls\_openpgp\_privkey} type. All the prototypes for the key handling functions can be found at \emph{gnutls/openpgp.h}. diff --git a/doc/tex/gnutls.bib b/doc/tex/gnutls.bib index 942a974ad5..55c265fa0d 100644 --- a/doc/tex/gnutls.bib +++ b/doc/tex/gnutls.bib @@ -1,3 +1,30 @@ +@Misc{RFC2246, + author = "Tim Dierks and Christopher Allen", + title = "The TLS Protocol Version 1.0", + month = "January", + year = {1999}, + note = "Available from http://kaizi.viagenie.qc.ca/ietf/rfc/rfc2246.txt", + url = "http://kaizi.viagenie.qc.ca/ietf/rfc/rfc2246.txt" +} + +@Misc{RFC2440, + author = "Jon Callas and Lutz Donnerhacke and Hal Finney and Rodney Thayer", + title = "OpenPGP Message Format", + month = "November", + year = {1998}, + note = "Available from http://kaizi.viagenie.qc.ca/ietf/rfc/rfc2440.txt", + url = "http://kaizi.viagenie.qc.ca/ietf/rfc/rfc2440.txt" +} + +@Misc{RFC2511, + author = "Michael Myers and Carlisle Adams and Dave Solo and David Kemp", + title = "Internet X.509 Certificate Request Message Format", + month = "March", + year = {1999}, + note = "Available from http://kaizi.viagenie.qc.ca/ietf/rfc/rfc2511.txt", + url = "http://kaizi.viagenie.qc.ca/ietf/rfc/rfc2511.txt" +} + @Misc{RFC2817, author = "Rohit Khare and Scott Lawrence", title = "Upgrading to TLS Within HTTP/1.1", @@ -7,15 +34,16 @@ url = "http://kaizi.viagenie.qc.ca/ietf/rfc/rfc2817.txt" } -@Misc{RFC2246, - author = "Tim Dierks and Christopher Allen", - title = "The TLS Protocol Version 1.0", - month = "January", - year = {1999}, - note = "Available from http://kaizi.viagenie.qc.ca/ietf/rfc/rfc2246.txt", - url = "http://kaizi.viagenie.qc.ca/ietf/rfc/rfc2246.txt" +@Misc{RFC2818, + author = "Eric Rescola", + title = "HTTP Over TLS", + month = "May", + year = {2000}, + note = "Available from http://kaizi.viagenie.qc.ca/ietf/rfc/rfc2818.txt", + url = "http://kaizi.viagenie.qc.ca/ietf/rfc/rfc2818.txt" } + @Misc{RFC2945, author = "Tom Wu", title = "The SRP Authentication and Key Exchange System", @@ -25,6 +53,15 @@ url = "http://kaizi.viagenie.qc.ca/ietf/rfc/rfc2945.txt" } +@Misc{RFC2986, + author = "Magnus Nystrom and Burt Kaliski", + title = "PKCS 10 v1.7: Certification Request Syntax Specification", + month = "November", + year = {2000}, + note = "Available from http://kaizi.viagenie.qc.ca/ietf/rfc/rfc2986.txt", + url = "http://kaizi.viagenie.qc.ca/ietf/rfc/rfc2986.txt" +} + @Misc{RFC3280, author = "Russell Housley and Tim Polk and Warwick Ford and David Solo", title = "Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile", @@ -43,6 +80,13 @@ url = "http://wp.netscape.com/eng/ssl3/draft302.txt" } +@Misc{PKCS12, + author = "RSA Laboratories", + title = "PKCS 12 v1.0: Personal Information Exchange Syntax", + month = "June", + year = {1999}, +} + @Misc{TLSEXT, author = "Simon Blake-Wilson and Magnus Nystrom and David Hopwood and Jan Mikkelsen and Tim Wright", title = "Transport Layer Security (TLS) Extensions", diff --git a/doc/tex/howto.tex b/doc/tex/howto.tex index d6823848f7..d4ebd935d8 100644 --- a/doc/tex/howto.tex +++ b/doc/tex/howto.tex @@ -17,7 +17,7 @@ that if a user requests a secure session then the client will try to connect to the secure port and fail otherwise. The only possible attack with this method is a denial of service one. The most famous example of this method is the famous ``HTTP over TLS'' or HTTPS\footnote{RFC2818} -protocol. +protocol \cite{RFC2818}. \par Despite its wide use, this method is not as good as it seems. This approach starts the \tls{} Handshake procedure just after the