- Handshake messages are not kept in memory any more. Now we use less memory
during a handshake
- Added check for the requested TLS extensions
+- gnutls_*_get_algo() renamed to gnutls_*_get()
Version 0.3.5 (25/01/2002)
- Corrected the RSA key exchange method, to avoid attacks against
/* print the key exchange's algorithm name
*/
- kx = gnutls_kx_get_algo(state);
+ kx = gnutls_kx_get(state);
tmp = gnutls_kx_get_name(kx);
printf("- Key Exchange: %s\n", tmp);
tmp = gnutls_protocol_get_name(gnutls_protocol_get_version(state));
printf("- Version: %s\n", tmp);
- tmp = gnutls_compression_get_name(gnutls_compression_get_algo(state));
+ tmp = gnutls_compression_get_name(gnutls_compression_get(state));
printf("- Compression: %s\n", tmp);
- tmp = gnutls_cipher_get_name(gnutls_cipher_get_algo(state));
+ tmp = gnutls_cipher_get_name(gnutls_cipher_get(state));
printf("- Cipher: %s\n", tmp);
- tmp = gnutls_mac_get_name(gnutls_mac_get_algo(state));
+ tmp = gnutls_mac_get_name(gnutls_mac_get(state));
printf("- MAC: %s\n", tmp);
return 0;
tmp = gnutls_protocol_get_name(gnutls_protocol_get_version(state));
printf("- Version: %s\n", tmp);
- tmp = gnutls_kx_get_name(gnutls_kx_get_algo(state));
+ tmp = gnutls_kx_get_name(gnutls_kx_get(state));
printf("- Key Exchange: %s\n", tmp);
tmp =
gnutls_compression_get_name
- (gnutls_compression_get_algo(state));
+ (gnutls_compression_get(state));
printf("- Compression: %s\n", tmp);
- tmp = gnutls_cipher_get_name(gnutls_cipher_get_algo(state));
+ tmp = gnutls_cipher_get_name(gnutls_cipher_get(state));
printf("- Cipher: %s\n", tmp);
- tmp = gnutls_mac_get_name(gnutls_mac_get_algo(state));
+ tmp = gnutls_mac_get_name(gnutls_mac_get(state));
printf("- MAC: %s\n", tmp);
}
if ((ret =
_gnutls_check_x509pki_key_usage(&peer_certificate_list[0],
- gnutls_kx_get_algo(state)))
+ gnutls_kx_get(state)))
< 0) {
gnutls_assert();
CLEAR_CERTS;
int gnutls_alert_send_appropriate( GNUTLS_STATE state, int err);
/* get information on the current state */
-GNUTLS_BulkCipherAlgorithm gnutls_cipher_get_algo( GNUTLS_STATE state);
-GNUTLS_KXAlgorithm gnutls_kx_get_algo( GNUTLS_STATE state);
-GNUTLS_MACAlgorithm gnutls_mac_get_algo( GNUTLS_STATE state);
-GNUTLS_CompressionMethod gnutls_compression_get_algo( GNUTLS_STATE state);
+GNUTLS_BulkCipherAlgorithm gnutls_cipher_get( GNUTLS_STATE state);
+GNUTLS_KXAlgorithm gnutls_kx_get( GNUTLS_STATE state);
+GNUTLS_MACAlgorithm gnutls_mac_get( GNUTLS_STATE state);
+GNUTLS_CompressionMethod gnutls_compression_get( GNUTLS_STATE state);
/* the name of the specified algorithms */
const char *gnutls_cipher_get_name( GNUTLS_BulkCipherAlgorithm);
/* This file contains functions needed only for binary compatibility
* with previous versions.
*/
+#define GNUTLS_BACKWARDS_COMPATIBLE
+
+
+#ifdef GNUTLS_BACKWARDS_COMPATIBLE
/* used in 0.3.x */
int gnutls_anon_set_server_cred( GNUTLS_ANON_SERVER_CREDENTIALS res, int dh_bits) {
int gnutls_set_max_handshake_data_buffer_size( GNUTLS_STATE state) {
return 0;
}
+
+GNUTLS_BulkCipherAlgorithm gnutls_cipher_get_algo( GNUTLS_STATE state) {
+ return gnutls_cipher_get( state);
+}
+GNUTLS_KXAlgorithm gnutls_kx_get_algo( GNUTLS_STATE state) {
+ return gnutls_kx_get( state);
+}
+
+GNUTLS_MACAlgorithm gnutls_mac_get_algo( GNUTLS_STATE state) {
+ return gnutls_mac_get( state);
+}
+
+GNUTLS_CompressionMethod gnutls_compression_get_algo( GNUTLS_STATE state) {
+ return gnutls_compression_get( state);
+}
+
+#endif /* GNUTLS_BACKWARDS_COMPATIBLE */
}
/**
- * gnutls_cipher_get_algo - Returns the currently used cipher.
+ * gnutls_cipher_get - Returns the currently used cipher.
* @state: is a &GNUTLS_STATE structure.
*
* Returns the currently used cipher.
**/
-GNUTLS_BulkCipherAlgorithm gnutls_cipher_get_algo( GNUTLS_STATE state) {
+GNUTLS_BulkCipherAlgorithm gnutls_cipher_get( GNUTLS_STATE state) {
return state->security_parameters.read_bulk_cipher_algorithm;
}
/**
- * gnutls_kx_get_algo - Returns the key exchange algorithm.
+ * gnutls_kx_get - Returns the key exchange algorithm.
* @state: is a &GNUTLS_STATE structure.
*
* Returns the key exchange algorithm used in the last handshake.
**/
-GNUTLS_KXAlgorithm gnutls_kx_get_algo( GNUTLS_STATE state) {
+GNUTLS_KXAlgorithm gnutls_kx_get( GNUTLS_STATE state) {
return state->security_parameters.kx_algorithm;
}
/**
- * gnutls_mac_get_algo - Returns the currently used mac algorithm.
+ * gnutls_mac_get - Returns the currently used mac algorithm.
* @state: is a &GNUTLS_STATE structure.
*
* Returns the currently used mac algorithm.
**/
-GNUTLS_MACAlgorithm gnutls_mac_get_algo( GNUTLS_STATE state) {
+GNUTLS_MACAlgorithm gnutls_mac_get( GNUTLS_STATE state) {
return state->security_parameters.read_mac_algorithm;
}
/**
- * gnutls_compression_get_algo - Returns the currently used compression algorithm.
+ * gnutls_compression_get - Returns the currently used compression algorithm.
* @state: is a &GNUTLS_STATE structure.
*
* Returns the currently used compression method.
**/
-GNUTLS_CompressionMethod gnutls_compression_get_algo( GNUTLS_STATE state) {
+GNUTLS_CompressionMethod gnutls_compression_get( GNUTLS_STATE state) {
return state->security_parameters.read_compression_algorithm;
}
-KXAlgorithm gnutls_kx_get_algo( GNUTLS_STATE state);
+KXAlgorithm gnutls_kx_get( GNUTLS_STATE state);
ssize_t gnutls_send_int( GNUTLS_STATE state, ContentType type, HandshakeType htype, const void* data, size_t sizeofdata);
ssize_t gnutls_recv_int( GNUTLS_STATE state, ContentType type, HandshakeType, char* data, size_t sizeofdata);
ssize_t _gnutls_send_change_cipher_spec( GNUTLS_STATE state, int again);
/* print the key exchange's algorithm name
*/
- kx = gnutls_kx_get_algo(state);
+ kx = gnutls_kx_get(state);
tmp = gnutls_kx_get_name( kx);
printf("- Key Exchange: %s\n", tmp);
tmp = gnutls_protocol_get_name(gnutls_protocol_get_version(state));
printf("- Version: %s\n", tmp);
- tmp = gnutls_compression_get_name(gnutls_compression_get_algo( state));
+ tmp = gnutls_compression_get_name(gnutls_compression_get( state));
printf("- Compression: %s\n", tmp);
- tmp = gnutls_cipher_get_name(gnutls_cipher_get_algo( state));
+ tmp = gnutls_cipher_get_name(gnutls_cipher_get( state));
printf("- Cipher: %s\n", tmp);
- tmp = gnutls_mac_get_name(gnutls_mac_get_algo( state));
+ tmp = gnutls_mac_get_name(gnutls_mac_get( state));
printf("- MAC: %s\n", tmp);
return 0;
*/
/* print srp specific data */
- if (gnutls_kx_get_algo(state) == GNUTLS_KX_SRP) {
+ if (gnutls_kx_get(state) == GNUTLS_KX_SRP) {
sprintf(tmp2, "<p>Connected as user '%s'.</p>\n",
gnutls_srp_server_get_username( state));
}
- if (gnutls_kx_get_algo(state) == GNUTLS_KX_ANON_DH) {
+ if (gnutls_kx_get(state) == GNUTLS_KX_ANON_DH) {
sprintf(tmp2, "<p> Connect using anonymous DH (prime of %d bits)</p>\n",
gnutls_dh_get_bits( state));
}
tmp = gnutls_protocol_get_name(gnutls_protocol_get_version(state));
sprintf(tmp2, "Protocol version: <b>%s</b><br>\n", tmp);
- tmp = gnutls_kx_get_name(gnutls_kx_get_algo(state));
+ tmp = gnutls_kx_get_name(gnutls_kx_get(state));
sprintf(tmp2, "Key Exchange: <b>%s</b><br>\n", tmp);
- if (gnutls_kx_get_algo(state) == GNUTLS_KX_DHE_RSA || gnutls_kx_get_algo(state) == GNUTLS_KX_DHE_DSS) {
+ if (gnutls_kx_get(state) == GNUTLS_KX_DHE_RSA || gnutls_kx_get(state) == GNUTLS_KX_DHE_DSS) {
sprintf(tmp2, "Ephemeral DH using prime of <b>%d</b> bits.<br>\n",
gnutls_dh_get_bits( state));
}
tmp =
gnutls_compression_get_name
- (gnutls_compression_get_algo(state));
+ (gnutls_compression_get(state));
sprintf(tmp2, "Compression: <b>%s</b><br>\n", tmp);
- tmp = gnutls_cipher_get_name(gnutls_cipher_get_algo(state));
+ tmp = gnutls_cipher_get_name(gnutls_cipher_get(state));
sprintf(tmp2, "Cipher: <b>%s</b><br>\n", tmp);
- tmp = gnutls_mac_get_name(gnutls_mac_get_algo(state));
+ tmp = gnutls_mac_get_name(gnutls_mac_get(state));
sprintf(tmp2, "MAC: <b>%s</b><br>\n", tmp);
strcat( http_buffer, "</P>\n");