*/
#define GNUTLS_PKCS8_PLAIN GNUTLS_PKCS_PLAIN
-#define GNUTLS_PKCS8_USE_PKCS12_3DES GNUTLS_PKCS_USE_PKCS12_3DES
-#define GNUTLS_PKCS8_USE_PKCS12_ARCFOUR GNUTLS_PKCS_USE_PKCS12_ARCFOUR
-#define GNUTLS_PKCS8_USE_PKCS12_RC2_40 GNUTLS_PKCS_USE_PKCS12_RC2_40
+#define GNUTLS_PKCS8_USE_PKCS12_3DES GNUTLS_PKCS_PKCS12_3DES
+#define GNUTLS_PKCS8_USE_PKCS12_ARCFOUR GNUTLS_PKCS_PKCS12_ARCFOUR
+#define GNUTLS_PKCS8_USE_PKCS12_RC2_40 GNUTLS_PKCS_PKCS12_RC2_40
/**
* gnutls_pkcs_encrypt_flags_t:
* @GNUTLS_PKCS_PLAIN: Unencrypted private key.
* @GNUTLS_PKCS_NULL_PASSWORD: Some schemas distinguish between an empty and a NULL password.
- * @GNUTLS_PKCS_USE_PKCS12_3DES: PKCS-12 3DES.
- * @GNUTLS_PKCS_USE_PKCS12_ARCFOUR: PKCS-12 ARCFOUR.
- * @GNUTLS_PKCS_USE_PKCS12_RC2_40: PKCS-12 RC2-40.
- * @GNUTLS_PKCS_USE_PBES2_3DES: PBES2 3DES.
- * @GNUTLS_PKCS_USE_PBES2_AES_128: PBES2 AES-128.
- * @GNUTLS_PKCS_USE_PBES2_AES_192: PBES2 AES-192.
- * @GNUTLS_PKCS_USE_PBES2_AES_256: PBES2 AES-256.
+ * @GNUTLS_PKCS_PKCS12_3DES: PKCS-12 3DES.
+ * @GNUTLS_PKCS_PKCS12_ARCFOUR: PKCS-12 ARCFOUR.
+ * @GNUTLS_PKCS_PKCS12_RC2_40: PKCS-12 RC2-40.
+ * @GNUTLS_PKCS_PBES2_3DES: PBES2 3DES.
+ * @GNUTLS_PKCS_PBES2_AES_128: PBES2 AES-128.
+ * @GNUTLS_PKCS_PBES2_AES_192: PBES2 AES-192.
+ * @GNUTLS_PKCS_PBES2_AES_256: PBES2 AES-256.
+ * @GNUTLS_PKCS_PBES2_DES: PBES2 single DES.
*
* Enumeration of different PKCS encryption flags.
*/
typedef enum gnutls_pkcs_encrypt_flags_t {
GNUTLS_PKCS_PLAIN = 1,
- GNUTLS_PKCS_USE_PKCS12_3DES = 2,
- GNUTLS_PKCS_USE_PKCS12_ARCFOUR = 4,
- GNUTLS_PKCS_USE_PKCS12_RC2_40 = 8,
- GNUTLS_PKCS_USE_PBES2_3DES = 16,
- GNUTLS_PKCS_USE_PBES2_AES_128 = 32,
- GNUTLS_PKCS_USE_PBES2_AES_192 = 64,
- GNUTLS_PKCS_USE_PBES2_AES_256 = 128,
- GNUTLS_PKCS_NULL_PASSWORD = 256
+ GNUTLS_PKCS_PKCS12_3DES = 1<<1,
+ GNUTLS_PKCS_PKCS12_ARCFOUR = 1<<2,
+ GNUTLS_PKCS_PKCS12_RC2_40 = 1<<3,
+ GNUTLS_PKCS_PBES2_3DES = 1<<4,
+ GNUTLS_PKCS_PBES2_AES_128 = 1<<5,
+ GNUTLS_PKCS_PBES2_AES_192 = 1<<6,
+ GNUTLS_PKCS_PBES2_AES_256 = 1<<7,
+ GNUTLS_PKCS_NULL_PASSWORD = 1<<8,
+ GNUTLS_PKCS_PBES2_DES = 1<<9
} gnutls_pkcs_encrypt_flags_t;
+#define GNUTLS_PKCS_USE_PKCS12_3DES GNUTLS_PKCS_PKCS12_3DES
+#define GNUTLS_PKCS_USE_PKCS12_ARCFOUR GNUTLS_PKCS_PKCS12_ARCFOUR
+#define GNUTLS_PKCS_USE_PKCS12_RC2_40 GNUTLS_PKCS_PKCS12_RC2_40
+#define GNUTLS_PKCS_USE_PBES2_3DES GNUTLS_PKCS_PBES2_3DES
+#define GNUTLS_PKCS_USE_PBES2_AES_128 GNUTLS_PKCS_PBES2_AES_128
+#define GNUTLS_PKCS_USE_PBES2_AES_192 GNUTLS_PKCS_PBES2_AES_192
+#define GNUTLS_PKCS_USE_PBES2_AES_256 GNUTLS_PKCS_PBES2_AES_256
+
int gnutls_x509_privkey_init(gnutls_x509_privkey_t * key);
void gnutls_x509_privkey_deinit(gnutls_x509_privkey_t key);
gnutls_sec_param_t
/* Returns a negative error code if the encryption schema in
* the OID is not supported. The schema ID is returned.
*/
-static int check_schema(const char *oid)
-{
-
- if (strcmp(oid, PBES2_OID) == 0)
- return PBES2_GENERIC; /* ok */
-
- if (strcmp(oid, PKCS12_PBE_3DES_SHA1_OID) == 0)
- return PKCS12_3DES_SHA1;
-
- if (strcmp(oid, PKCS12_PBE_ARCFOUR_SHA1_OID) == 0)
- return PKCS12_ARCFOUR_SHA1;
-
- if (strcmp(oid, PKCS12_PBE_RC2_40_SHA1_OID) == 0)
- return PKCS12_RC2_40_SHA1;
-
- _gnutls_debug_log
- ("PKCS encryption schema OID '%s' is unsupported.\n", oid);
-
- return GNUTLS_E_UNKNOWN_CIPHER_TYPE;
-}
-
/* Encodes a private key to the raw format PKCS #8 needs.
* For RSA it is a PKCS #1 DER private key and for DSA it is
* an ASN.1 INTEGER of the x value.
}
-static const char *cipher_to_pkcs_params(int cipher, const char **oid)
-{
- switch (cipher) {
- case GNUTLS_CIPHER_AES_128_CBC:
- if (oid)
- *oid = AES_128_CBC_OID;
- return "PKIX1.pkcs-5-aes128-CBC-params";
- break;
- case GNUTLS_CIPHER_AES_192_CBC:
- if (oid)
- *oid = AES_192_CBC_OID;
- return "PKIX1.pkcs-5-aes192-CBC-params";
- break;
- case GNUTLS_CIPHER_AES_256_CBC:
- if (oid)
- *oid = AES_256_CBC_OID;
- return "PKIX1.pkcs-5-aes256-CBC-params";
- break;
- case GNUTLS_CIPHER_3DES_CBC:
- if (oid)
- *oid = DES_EDE3_CBC_OID;
- return "PKIX1.pkcs-5-des-EDE3-CBC-params";
- break;
- default:
- return NULL;
- break;
- }
-}
+struct pbes2_schema_st {
+ unsigned int schema;
+ unsigned int flag;
+ unsigned int cipher;
+ unsigned pbes2;
+ const char *oid;
+ const char *desc;
+};
-static int cipher_to_schema(int cipher)
+static const struct pbes2_schema_st avail_pbes2_schemas[] =
{
- switch (cipher) {
- case GNUTLS_CIPHER_AES_128_CBC:
- return PBES2_AES_128;
- break;
- case GNUTLS_CIPHER_AES_192_CBC:
- return PBES2_AES_192;
- break;
- case GNUTLS_CIPHER_AES_256_CBC:
- return PBES2_AES_256;
- break;
- case GNUTLS_CIPHER_3DES_CBC:
- return PBES2_3DES;
- break;
- default:
- return GNUTLS_E_UNKNOWN_CIPHER_TYPE;
- break;
+ {PBES2_3DES, GNUTLS_PKCS_PBES2_3DES, GNUTLS_CIPHER_3DES_CBC,
+ 1, DES_EDE3_CBC_OID, "PKIX1.pkcs-5-des-EDE3-CBC-params"},
+ {PBES2_DES, GNUTLS_PKCS_PBES2_DES, GNUTLS_CIPHER_DES_CBC,
+ 1, DES_CBC_OID, "PKIX1.pkcs-5-des-CBC-params"},
+ {PBES2_AES_128, GNUTLS_PKCS_PBES2_AES_128, GNUTLS_CIPHER_AES_128_CBC,
+ 1, AES_128_CBC_OID, "PKIX1.pkcs-5-aes128-CBC-params"},
+ {PBES2_AES_192, GNUTLS_PKCS_PBES2_AES_192, GNUTLS_CIPHER_AES_192_CBC,
+ 1, AES_192_CBC_OID, "PKIX1.pkcs-5-aes192-CBC-params"},
+ {PBES2_AES_256, GNUTLS_PKCS_PBES2_AES_256, GNUTLS_CIPHER_AES_256_CBC,
+ 1, AES_256_CBC_OID, "PKIX1.pkcs-5-aes256-CBC-params"},
+ {PKCS12_ARCFOUR_SHA1, GNUTLS_PKCS_PKCS12_ARCFOUR, GNUTLS_CIPHER_ARCFOUR,
+ 0, PKCS12_PBE_ARCFOUR_SHA1_OID, NULL},
+ {PKCS12_RC2_40_SHA1, GNUTLS_PKCS_PKCS12_RC2_40, GNUTLS_CIPHER_RC2_40_CBC,
+ 0, PKCS12_PBE_RC2_40_SHA1_OID, NULL},
+ {PKCS12_3DES_SHA1, GNUTLS_PKCS_PKCS12_3DES, GNUTLS_CIPHER_3DES_CBC,
+ 0, PKCS12_PBE_3DES_SHA1_OID, NULL},
+ {0, 0, 0}
+};
+
+#define PBES2_SCHEMA_LOOP(b) { \
+ const struct pbes2_schema_st * _p; \
+ for (_p=avail_pbes2_schemas;_p->schema != 0;_p++) { b; } \
}
-}
+#define PBES2_SCHEMA_FIND_FROM_FLAGS(fl, what) \
+ PBES2_SCHEMA_LOOP( if (_p->flag == fl) { what; } )
int _gnutls_pkcs_flags_to_schema(unsigned int flags)
{
- int schema;
-
- if (flags & GNUTLS_PKCS_USE_PKCS12_ARCFOUR)
- schema = PKCS12_ARCFOUR_SHA1;
- else if (flags & GNUTLS_PKCS_USE_PKCS12_RC2_40)
- schema = PKCS12_RC2_40_SHA1;
- else if (flags & GNUTLS_PKCS_USE_PBES2_3DES)
- schema = PBES2_3DES;
- else if (flags & GNUTLS_PKCS_USE_PBES2_AES_128)
- schema = PBES2_AES_128;
- else if (flags & GNUTLS_PKCS_USE_PBES2_AES_192)
- schema = PBES2_AES_192;
- else if (flags & GNUTLS_PKCS_USE_PBES2_AES_256)
- schema = PBES2_AES_256;
- else {
- gnutls_assert();
- _gnutls_debug_log
- ("Selecting default encryption PKCS12_3DES_SHA1 (flags: %u).\n",
+ PBES2_SCHEMA_FIND_FROM_FLAGS(flags, return _p->schema;);
+
+ gnutls_assert();
+ _gnutls_debug_log
+ ("Selecting default encryption PKCS12_3DES_SHA1 (flags: %u).\n",
flags);
- schema = PKCS12_3DES_SHA1;
- }
+ return PKCS12_3DES_SHA1;
+}
- return schema;
+static const char *cipher_to_pbes2_params(unsigned cipher, const char **oid)
+{
+ PBES2_SCHEMA_LOOP(if (_p->cipher == cipher && _p->pbes2 != 0) { *oid = _p->oid; return _p->desc;});
+
+ gnutls_assert();
+ return NULL;
+}
+
+static int cipher_to_pbes2_schema(unsigned cipher)
+{
+ PBES2_SCHEMA_LOOP(if (_p->cipher == cipher && _p->pbes2 != 0) { return _p->schema;});
+
+ gnutls_assert();
+ return GNUTLS_E_UNKNOWN_CIPHER_TYPE;
}
/* returns the OID corresponding to given schema
*/
-static int schema_to_oid(schema_id schema, const char **str_oid)
+static int pkcs12_schema_to_oid(schema_id schema, const char **str_oid)
{
- int result = 0;
-
- switch (schema) {
- case PBES2_3DES:
- case PBES2_AES_128:
- case PBES2_AES_192:
- case PBES2_AES_256:
- *str_oid = PBES2_OID;
- break;
- case PKCS12_3DES_SHA1:
- *str_oid = PKCS12_PBE_3DES_SHA1_OID;
- break;
- case PKCS12_ARCFOUR_SHA1:
- *str_oid = PKCS12_PBE_ARCFOUR_SHA1_OID;
- break;
- case PKCS12_RC2_40_SHA1:
- *str_oid = PKCS12_PBE_RC2_40_SHA1_OID;
- break;
- default:
- gnutls_assert();
- result = GNUTLS_E_INTERNAL_ERROR;
- }
+ PBES2_SCHEMA_LOOP(
+ if (_p->schema == schema) {
+ if (_p->pbes2 != 0) {
+ *str_oid = PBES2_OID;
+ return 0;
+ } else {
+ *str_oid = _p->oid;
+ return 0;
+ }
+ }
+ );
- return result;
+ gnutls_assert();
+ return GNUTLS_E_INTERNAL_ERROR;
+}
+
+static int check_pkcs12_schema(const char *oid)
+{
+ if (strcmp(oid, PBES2_OID) == 0)
+ return PBES2_GENERIC; /* ok */
+
+ PBES2_SCHEMA_LOOP(if (_p->pbes2 == 0 && strcmp(oid, _p->oid) == 0) {return _p->schema;});
+ _gnutls_debug_log
+ ("PKCS #12 encryption schema OID '%s' is unsupported.\n", oid);
+
+ return GNUTLS_E_UNKNOWN_CIPHER_TYPE;
+}
+
+static const struct pbes2_schema_st *pbes2_schema_get(schema_id schema)
+{
+ PBES2_SCHEMA_LOOP(if (schema == _p->schema) return _p;);
+
+ gnutls_assert();
+ return NULL;
}
+/* Converts an OID to a gnutls cipher type.
+ */
+static int
+pbes2_oid_to_cipher(const char *oid, gnutls_cipher_algorithm_t * algo)
+{
+
+ *algo = 0;
+ PBES2_SCHEMA_LOOP(if (_p->pbes2 != 0 && strcmp(_p->oid, oid) == 0) {
+ *algo = _p->cipher;
+ return 0;
+ }
+ );
+
+ _gnutls_debug_log("PKCS #8 encryption OID '%s' is unsupported.\n",
+ oid);
+ return GNUTLS_E_UNKNOWN_CIPHER_TYPE;
+}
+
+
/* Converts a PKCS #8 private key info to
* a PKCS #8 EncryptedPrivateKeyInfo.
*/
/* Write the encryption schema OID
*/
- result = schema_to_oid(schema, &str_oid);
+ result = pkcs12_schema_to_oid(schema, &str_oid);
if (result < 0) {
gnutls_assert();
return result;
/* Read the parameters cipher, IV, salt etc using the given
- * schema ID.
+ * schema ID. Initially the schema ID should have PBES2_GENERIC, for
+ * PBES2 schemas, and will be updated by this function for details.
*/
static int
read_pkcs_schema_params(schema_id * schema, const char *password,
ASN1_TYPE pbes2_asn = ASN1_TYPE_EMPTY;
int result;
gnutls_datum_t tmp;
+ const struct pbes2_schema_st *p;
- switch (*schema) {
-
- case PBES2_GENERIC:
-
+ if (*schema == PBES2_GENERIC) {
/* Now check the key derivation and the encryption
* functions.
*/
asn1_delete_structure2(&pbes2_asn, ASN1_DELETE_FLAG_ZEROIZE);
- result = cipher_to_schema(enc_params->cipher);
+ result = cipher_to_pbes2_schema(enc_params->cipher);
if (result < 0) {
gnutls_assert();
goto error;
*schema = result;
return 0;
-
- case PKCS12_3DES_SHA1:
- case PKCS12_ARCFOUR_SHA1:
- case PKCS12_RC2_40_SHA1:
-
- if ((*schema) == PKCS12_3DES_SHA1) {
- enc_params->cipher = GNUTLS_CIPHER_3DES_CBC;
- enc_params->iv_size = 8;
- } else if ((*schema) == PKCS12_ARCFOUR_SHA1) {
- enc_params->cipher = GNUTLS_CIPHER_ARCFOUR_128;
- enc_params->iv_size = 0;
- } else if ((*schema) == PKCS12_RC2_40_SHA1) {
- enc_params->cipher = GNUTLS_CIPHER_RC2_40_CBC;
- enc_params->iv_size = 8;
+ } else { /* PKCS #12 schema */
+ p = pbes2_schema_get(*schema);
+ if (p == NULL) {
+ gnutls_assert();
+ result = GNUTLS_E_UNKNOWN_CIPHER_TYPE;
+ goto error;
}
+ enc_params->cipher = p->cipher;
+ enc_params->iv_size = gnutls_cipher_get_iv_size(p->cipher);
if ((result =
asn1_create_element(_gnutls_get_pkix(),
asn1_delete_structure(&pbes2_asn);
return 0;
-
- default:
- gnutls_assert();
} /* switch */
- return GNUTLS_E_UNKNOWN_CIPHER_TYPE;
-
- error:
+ error:
asn1_delete_structure(&pbes2_asn);
return result;
}
goto error;
}
- if ((result = check_schema(enc_oid)) < 0) {
+ if ((result = check_pkcs12_schema(enc_oid)) < 0) {
gnutls_assert();
goto error;
}
}
-/* Converts an OID to a gnutls cipher type.
- */
-inline static int
-oid2cipher(const char *oid, gnutls_cipher_algorithm_t * algo)
-{
-
- *algo = 0;
-
- if (strcmp(oid, DES_EDE3_CBC_OID) == 0) {
- *algo = GNUTLS_CIPHER_3DES_CBC;
- return 0;
- } else if (strcmp(oid, DES_CBC_OID) == 0) {
- *algo = GNUTLS_CIPHER_DES_CBC;
- return 0;
- } else if (strcmp(oid, AES_128_CBC_OID) == 0) {
- *algo = GNUTLS_CIPHER_AES_128_CBC;
- return 0;
- } else if (strcmp(oid, AES_192_CBC_OID) == 0) {
- *algo = GNUTLS_CIPHER_AES_192_CBC;
- return 0;
- } else if (strcmp(oid, AES_256_CBC_OID) == 0) {
- *algo = GNUTLS_CIPHER_AES_256_CBC;
- return 0;
- }
-
- _gnutls_debug_log("PKCS #8 encryption OID '%s' is unsupported.\n",
- oid);
- return GNUTLS_E_UNKNOWN_CIPHER_TYPE;
-}
-
static int
}
_gnutls_hard_log("encryptionScheme.algorithm: %s\n", oid);
- if ((result = oid2cipher(oid, ¶ms->cipher)) < 0) {
+ if ((result = pbes2_oid_to_cipher(oid, ¶ms->cipher)) < 0) {
gnutls_assert();
goto error;
}
/* Now check the encryption parameters.
*/
- eparams = cipher_to_pkcs_params(params->cipher, NULL);
+ eparams = cipher_to_pbes2_params(params->cipher, NULL);
if (eparams == NULL) {
gnutls_assert();
return GNUTLS_E_INVALID_REQUEST;
error:
asn1_delete_structure(&pbe_asn);
return result;
-
}
static int
int ch_init = 0;
int key_size;
unsigned int pass_len = 0;
+ const struct pbes2_schema_st *p;
if (password)
pass_len = strlen(password);
/* generate the key
*/
- switch (schema) {
- case PBES2_3DES:
- case PBES2_AES_128:
- case PBES2_AES_192:
- case PBES2_AES_256:
+ p = pbes2_schema_get(schema);
+ if (p != NULL && p->pbes2 != 0) { /* PBES2 */
result = _gnutls_pbkdf2_sha1(password, pass_len,
kdf_params->salt,
kdf_params->salt_size,
gnutls_assert();
goto error;
}
- break;
- default:
+ } else if (p != NULL) { /* PKCS 12 schema */
result =
_gnutls_pkcs12_string_to_key(1 /*KEY*/,
kdf_params->salt,
gnutls_assert();
goto error;
}
+ } else {
+ gnutls_assert();
+ result = GNUTLS_E_UNKNOWN_CIPHER_TYPE;
+ goto error;
}
/* do the decryption.
/* Write the encryption algorithm
*/
- eparams = cipher_to_pkcs_params(params->cipher, &oid);
+ eparams = cipher_to_pbes2_params(params->cipher, &oid);
if (eparams == NULL) {
gnutls_assert();
return GNUTLS_E_INVALID_REQUEST;
unsigned char rnd[2];
unsigned int pass_len = 0;
int ret;
+ const struct pbes2_schema_st *p;
if (password)
pass_len = strlen(password);
kdf_params->salt_size =
MIN(sizeof(kdf_params->salt), (unsigned) (10 + (rnd[1] % 10)));
- switch (schema) {
- case PBES2_3DES:
- enc_params->cipher = GNUTLS_CIPHER_3DES_CBC;
- break;
- case PBES2_AES_128:
- enc_params->cipher = GNUTLS_CIPHER_AES_128_CBC;
- break;
- case PBES2_AES_192:
- enc_params->cipher = GNUTLS_CIPHER_AES_192_CBC;
- break;
- case PBES2_AES_256:
- enc_params->cipher = GNUTLS_CIPHER_AES_256_CBC;
- break;
+ p = pbes2_schema_get(schema);
+ if (p != NULL && p->pbes2 != 0) { /* PBES2 */
+ enc_params->cipher = p->cipher;
+ } else if (p != NULL) {
/* non PBES2 algorithms */
- case PKCS12_ARCFOUR_SHA1:
- enc_params->cipher = GNUTLS_CIPHER_ARCFOUR_128;
+ enc_params->cipher = p->cipher;
kdf_params->salt_size = 8;
- break;
- case PKCS12_3DES_SHA1:
- enc_params->cipher = GNUTLS_CIPHER_3DES_CBC;
- kdf_params->salt_size = 8;
- break;
- case PKCS12_RC2_40_SHA1:
- enc_params->cipher = GNUTLS_CIPHER_RC2_40_CBC;
- kdf_params->salt_size = 8;
- break;
- default:
+ } else {
gnutls_assert();
return GNUTLS_E_INVALID_REQUEST;
}
return GNUTLS_E_RANDOM_FAILED;
}
- kdf_params->iter_count = 256 + rnd[0];
+ kdf_params->iter_count = 1024 + rnd[0];
key->size = kdf_params->key_size =
gnutls_cipher_get_key_size(enc_params->cipher);
/* now generate the key.
*/
- switch (schema) {
- case PBES2_3DES:
- case PBES2_AES_128:
- case PBES2_AES_192:
- case PBES2_AES_256:
-
+ if (p->pbes2 != 0) {
ret = _gnutls_pbkdf2_sha1(password, pass_len,
kdf_params->salt,
kdf_params->salt_size,
return ret;
}
}
- break;
-
- default:
+ } else { /* PKCS 12 schema */
ret =
_gnutls_pkcs12_string_to_key(1 /*KEY*/,
kdf_params->salt,
{
int result;
ASN1_TYPE pbes2_asn = ASN1_TYPE_EMPTY;
+ const struct pbes2_schema_st *p;
- switch (schema) {
- case PBES2_3DES:
- case PBES2_AES_128:
- case PBES2_AES_192:
- case PBES2_AES_256:
+ p = pbes2_schema_get(schema);
+
+ if (p != NULL && p->pbes2 != 0) { /* PBES2 */
if ((result =
asn1_create_element(_gnutls_get_pkix(),
"PKIX1.pkcs-5-PBES2-params",
}
asn1_delete_structure(&pbes2_asn);
- break;
- default:
+ } else if (p != NULL) { /* PKCS #12 */
if ((result =
asn1_create_element(_gnutls_get_pkix(),
}
asn1_delete_structure(&pbes2_asn);
-
}
return 0;
goto error;
}
- if ((result = check_schema(enc_oid)) < 0) {
+ if ((result = check_pkcs12_schema(enc_oid)) < 0) {
gnutls_assert();
goto error;
}
/* Write the encryption schema OID
*/
- result = schema_to_oid(schema, &str_oid);
+ result = pkcs12_schema_to_oid(schema, &str_oid);
if (result < 0) {
gnutls_assert();
return result;
projects / thirdparty / gnutls.git / commitdiff
