lib/ecc: add documentation for GOST-related curves

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

lib: define more GOST curves

Declare GOST curves from GOST R 34.10-2001 and GOST R 34.10-2012 (test
curves) and GOST curves defined by TC26 itself.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Merge branch 'tmp-iov-fixes' into 'master'

gnutls_aead_cipher_{en,de}cryptv2: write back cached data to buffers

See merge request gnutls/gnutls!1085

gnutls_aead_cipher_{en,de}cryptv2: write back cached data to buffers

Previously, those functions failed to write the output to the buffers
if the buffer length is not multiple of cipher block size.  This makes
sure that the cached data is always flushed.

Signed-off-by: Daiki Ueno <dueno@redhat.com>

iov: add _gnutls_iov_iter_sync to write back cached data to iov

Signed-off-by: Daiki Ueno <dueno@redhat.com>

iov: _gnutls_iov_iter_next: return bytes instead of blocks

This eliminates the need of special handling of final block.  Also
adds more tests in exceptional cases.

Signed-off-by: Daiki Ueno <dueno@redhat.com>

NEWS: added entry for 3.6.11

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Merge branch 'tmp_gnutls-cli/srv_rawpk_support' into 'master'

Support for raw public keys for gnutls-cli and gnutls-serv

See merge request gnutls/gnutls!1059

Updated NEWS to reflect the added raw public-key handling functionality for gnutls-cli/serv tools.

Signed-off-by: Tom Vrancken <dev@tomvrancken.nl>

Added functional regression tests for rawpk functionality in gnutls-cli and gnutls-serv.

Signed-off-by: Tom Vrancken <dev@tomvrancken.nl>

Implemented raw public key support for gnutls-serv application.

Signed-off-by: Tom Vrancken <dev@tomvrancken.nl>

Implemented raw public key support for gnutls-cli application.

Signed-off-by: Tom Vrancken <dev@tomvrancken.nl>

Merge branch 'fix-gost-ifdef' into 'master'

nettle/mac: add missing ifdef

See merge request gnutls/gnutls!1083

nettle/mac: add missing ifdef

Add an ifdef guarding gost28147 include.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Merge branch 'gost-iana' into 'master'

lib/algorithms: add AID values assigned by IANA

See merge request gnutls/gnutls!1077

Merge branch 'tmp-20190929-junk-from-renamed-test' into 'master'

cipher-alignment: migrate LDADD/CFLAGS after rename

See merge request gnutls/gnutls!1082

cipher-alignment: migrate LDADD/CFLAGS after rename

Test was renamed from mini-alignment to cipher-alignment.

Signed-off-by: Andreas Metzler <ametzler@bebt.de>

bumped versions

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Merge branch 'tmp-asm-update-32' into 'master'

Regenerate asm files with -fPIC

Closes #818

See merge request gnutls/gnutls!1081

Merge branch 'tmp-no-pkcs8-text' into 'master'

certtool: ensure that PKCS#8 file does not contain key description

Closes #840

See merge request gnutls/gnutls!1076

.gitlab-ci.yml: run pic-check on i686-linux-gnu to catch wrong assembly

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Regenerate asm files with -fPIC

CRYPTOGAMS' perl-scripts can produce different output if -fPIC is passed
as option. Set -fPIC for the same files as openssl does.

Closes #818

Signed-off-by: Andreas Metzler <ametzler@bebt.de>

certtool: ensure that PKCS#8 file does not contain key description

Resolves: #840

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Merge branch 'gost-split-1' into 'master'

GOST-CNT split, part 1

See merge request gnutls/gnutls!1072

NEWS: document previous changes [ci skip]

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Merge branch 'gost-attrs' into 'master'

x509: add support for Russian extensions defined for qualified certificate

See merge request gnutls/gnutls!1075

Merge branch 'kx-neg-verbose' into 'master'

tests: add verbose logging to server-kx-neg tests

See merge request gnutls/gnutls!1078

Merge branch 'tmp-ocsp-fixes' into 'master'

ocsp: test suite and doc improvements

Closes #836

See merge request gnutls/gnutls!1066

tests: add verbose logging to server-kx-neg tests

Add support for verbose logging to tls*-server-kx-neg tests.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

lib/algorithms: add AID values assigned by IANA

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

x509: add support for Russian extensions defined for qualified certificate

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

crypto-selftests: add CNT and IMIT self tests

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

nettle: provide GOST 28147-89 IMIT MAC support

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

nettle: provide GOST 28147-89 CNT mode support

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Merge branch 'tmp-supported-versions' into 'master'

ext/supported_versions: reorder client precedence if necessary

Closes #837

See merge request gnutls/gnutls!1074

ext/supported_versions: reorder client precedence if necessary

If the client advertises TLS < 1.2 before TLS 1.3 and the server is
configured with TLS 1.3 enabled, the server should select TLS 1.3;
otherwise the client will disconnect when seeing downgrade sentinel.

Signed-off-by: Daiki Ueno <dueno@redhat.com>

Merge branch 'tmp-fix-session-get2' into 'master'

gnutls_session_get_data2: fix operation without a timeout callback

Closes #823

See merge request gnutls/gnutls!1068

gnutls_session_get_data2: fix operation without a timeout callback

When TLS1.3 was introduced, gnutls_session_get_data2 was modified
to assume that the callbacks set included the timeout one which was
not previously necessary except for some special cases. This corrects
that issue and makes sure that gnutls_session_get_data2() does not
fail (but not necessarily succeed), if that timeout callback is not
set.

Resolves: #823

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

_gnutls_io_check_recv: added newline to error message

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Merge branch 'tmp-update-nettle-compat' into 'master'

fix nettle 3.5 issues/warnings

Closes #835

See merge request gnutls/gnutls!1067

tests: cipher-alignment: ensure cipher registration

That is, ensure that the registered cipher is called at least
once in the program. That is, to make this test fail if the registration
API ever become deprecated/no-op.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

tests: mini-alignment moved to modern nettle API

That is, it no longer uses the deprecated API, and it is also
removed to cipher-alignment for clarity.

Resolves: #835

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

nettle: use nettle_get_secpp* consistently

We already depend on nettle 3.4.1 which provides that symbol,
ensure that we use it consistently.

Relates: #835

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Updates in OCSP status response related documentation

gnutls_certificate_set_ocsp_status_request_file2: corrected documentation

This corrects the documented return code in gnutls_certificate_set_ocsp_status_request_file2
and the applicability of gnutls_ocsp_status_request_is_checked.

Resolves: #836

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

tests: added server side OCSP check

This checks whether gnutls_ocsp_status_request_is_checked() is functional
on server-side verification.

Relates: #829

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

tests: added server-side verification test

This tests gnutls_certificate_verify_peers2() operation in server
side.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

gnutls_ocsp_status_request_is_checked: added tests in client side

This ensures that this function has functional tests.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Merge branch 'tmp-pkcs11-mock' into 'master'

pkcs11-mock: updated license based on upstream project [ci skip]

See merge request gnutls/gnutls!1065

pkcs11-mock: updated license based on upstream project [ci skip]

Based on the relicense of the original project:
https://github.com/Pkcs11Interop/pkcs11-mock

Applied in commit: 8751256956e414c1b0a30414831f5083afbf64bf

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Merge branch 'wip-guile-3.0' into 'master'

Add support for Guile 3.0

See merge request gnutls/gnutls!1020

guile: Add support for Guile 3.0.

* configure.ac: Add 3.0 to 'GUILE_PKG', as well as the
previously-supported versions.
* doc/gnutls-guile.texi (Guile Preparations): Update list of supported
versions.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

doc: Run guile with '-q'.

This makes sure we don't load the user's ~/.guile.

* doc/Makefile.am (GUILE_FOR_BUILD): Pass '-q'.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

Merge branch 'wip-guile-include-m4-macros' into 'master'

maint: Include Guile's M4 macros.

See merge request gnutls/gnutls!1061

Merge branch 'tmp-interop-old-gnutls' into 'master'

Do not forbid excess random padding in TLS1.x CBC ciphersuites

Closes #811

See merge request gnutls/gnutls!1054

tlsfuzzer: enable atypical padding check

The atypical padding check is complementary to the existing
GnuTLS 2.12.x interop test.

This commit also upgrades to the latest version, and adds new TLS1.3
tests as well.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Merge branch 'tmp-decr-len' into 'master'

gnutls_int.h: make DECR_LEN neutral to signedness

See merge request gnutls/gnutls!1056

lib/*: remove unnecessary cast to ssize_t

Signed-off-by: Daiki Ueno <dueno@redhat.com>

gnutls_int.h: make DECR_LEN neutral to signedness

DECR_LEN was previously implemented in a way that it first decrements
the given length and then checks whether the result is negative.  This
requires the caller to properly coerce the length argument to a signed
integer, before invoking the macro.

Signed-off-by: Daiki Ueno <dueno@redhat.com>

.gitlab-ci.yml: bump configure cache version

Signed-off-by: Daiki Ueno <dueno@redhat.com>

.gitlab-ci.yml: export guile related envvars for doc-dist.Fedora

Signed-off-by: Daiki Ueno <dueno@redhat.com>

Merge branch 'fix-priority-setting' into 'master'

priority: fix loop which removes systemwide disabled KX algos

See merge request gnutls/gnutls!1064

Merge branch 'fix-cli-debug' into 'master'

gnutls-cli-debug: fix early break for no version supported check

See merge request gnutls/gnutls!1063

tests: check interoperability testing with gnutls 2.12.x and SHA256

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

_gnutls_epoch_set_keys: do not forbid random padding in TLS1.x CBC ciphersuites

Since some point in 3.6.x we updated the calculation of maximum record size,
however that did not include the possibility of random record padding available
for CBC ciphersuites which exceeds the maximum. This commit allows for larger
sizes for these ciphersuites to account for random padding as applied by
gnutls 2.12.x.

Resolves: #811

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

.gitlab-ci.yml: minimal.Fedora.x86_64: Pass '--disable-guile' the 2nd time as well.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

.gitlab-ci.yml: doc-dist.Fedora: Pass "GUILE", "GUILD", and "guile_snarf" to 'configure'.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

maint: Include Guile's M4 macros.

This ensures 'GUILE_PKG' & co. behaves as we want.  Previously we had
problem in CI when using 'guile.m4' coming from potentially old distro
packages, as discussed in issue !1020:

  https://gitlab.com/gnutls/gnutls/merge_requests/1020#note_194443890

* m4/guile.m4: New file, from Guile's 'stable-2.2' branch,
commit 9846178c69445142ef0b9432417453d2d4de6635.
* .x-sc_prohibit_test_minus_ao: New file.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

priority: fix loop which removes systemwide disabled KX algos

Fix c&p error in KX-removal loop.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Merge branch 'tmp_rawpk_fuzzing' into 'master'

Raw public key fuzzing tests

Closes #687

See merge request gnutls/gnutls!1062

Merge branch 'wip-certificate-status' into 'master'

guile: Update the list of certificate status values.

See merge request gnutls/gnutls!1060

Added initial corpora for rawpk client and server fuzzers.

Signed-off-by: Tom Vrancken <dev@tomvrancken.nl>

Implemented server rawpk fuzzer.

Signed-off-by: Tom Vrancken <dev@tomvrancken.nl>

Implemented client rawpk fuzzer.

Signed-off-by: Tom Vrancken <dev@tomvrancken.nl>

gnutls-cli-debug: fix early break for no version supported check

Currently gnutls-cli-debug code hardodes index of tests, after which it
will check if any known protocols (SSL 3.0/TLS1.[0123]) are supported by
the server. However this number is hardcoded and thus easy to break.
This is exactly what happened after adding %ALLOW_SMALL_RECORDS check.
Two tests were added in front of tests lists without updating this
index.

So let's make this check robust by adding another test which will return
fatal error if no known protocols are supported. While we are at it,
also simplify tests loop by removing internal loop completely and
controlling opening/closing a socket with a flag.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

tests: added interoperability test with gnutls 2.12.x

This enables this test in debian build.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

guile: Update the list of certificate status values.

* guile/modules/gnutls/build/enums.scm (%certificate-status-enum): Add
'gnutls_certificate_status_t' values that were missing.
* guile/src/core.c (scm_gnutls_peer_certificate_status): Add
'MATCH_STATUS' clauses to handle them.
* guile/modules/gnutls.in: Export them.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

Merge branch 'mcatanzaro/typo' into 'master'

Fix typo in gnutls_db_set_cache_expiration() docs

See merge request gnutls/gnutls!1057

Fix typo in gnutls_db_set_cache_expiration() docs

21600 seconds is six hours.

Signed-off-by: Michael Catanzaro <mcatanzaro@gnome.org>

Merge branch 'tmp-encryptv2' into 'master'

crypto-api: add gnutls_aead_cipher_{en,de}cryptv2

Closes #718

See merge request gnutls/gnutls!1052

crypto-api: add gnutls_aead_cipher_{en,de}cryptv2

This adds an in-place equivalent of gnutls_aead_cipher_encrypt() and
gnutls_aead_cipher_decrypt(), that works on data buffers.

Signed-off-by: Daiki Ueno <dueno@redhat.com>

crypto-api: use giovec_t iterator interface for aead_encryptv

This replaces the macros AUTH_UPDATE and ENCRYPT used in
gnutls_aead_cipher_encryptv() with the iov_iter interface.

Signed-off-by: Daiki Ueno <dueno@redhat.com>

iov: add iterator interface for giovec_t

This adds an iterator interface over giovec_t array, extracting a
fixed sized block.

Signed-off-by: Daiki Ueno <dueno@redhat.com>

Merge branch 'tmp-deterministic-ecdsa' into 'master'

pk: implement deterministic ECDSA/DSA for provable signing

Closes #94

See merge request gnutls/gnutls!1051

nettle: prohibit deterministic ECDSA/DSA under FIPS except selftests

Signed-off-by: Daiki Ueno <dueno@redhat.com>

nettle: enable deterministic ECDSA/DSA during FIPS selftests

Signed-off-by: Daiki Ueno <dueno@redhat.com>

pk: implement deterministic ECDSA/DSA

This exposes the deterministic ECDSA/DSA functionality through the
GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag.

Signed-off-by: Daiki Ueno <dueno@redhat.com>

privkey_sign_prehashed: remove unused argument

Signed-off-by: Daiki Ueno <dueno@redhat.com>

privkey_sign_raw_data: remove unnecessary local variable

Signed-off-by: Daiki Ueno <dueno@redhat.com>

nettle: add functions for deterministic ECDSA/DSA

This adds functions to perform deterministic ECDSA/DSA, namely
_gnutls_{ecdsa,dsa}_compute_k(), which computes the k value according
to RFC 6979.  The retrieved k value can be given to
nettle_{ecdsa,dsa}_sign() through a wrapper random function.

Signed-off-by: Daiki Ueno <dueno@redhat.com>

Merge branch 'tmp-fixes' into 'master'

Minor fixes in 3.6.9 release

Closes #810 and #812

See merge request gnutls/gnutls!1053

Merge branch 'patch-1' into 'master'

Notes about Ubuntu specific software versions not available.

See merge request gnutls/gnutls!1029

read_cpuid_vals: use __get_cpuid_count() only when available

This makes the functionality available on gcc 4.8.

Resolves: #812

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

src/Makefile.am: fix detection of .bak files

This fixes detection in a way to work in builds outside the
source directory.

Resolves: #810

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

configure: AS_HELP_STRING cannot print variables; don't try

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Merge branch 'tmp-sign-cas' into 'master'

certtool: default to yes on signing certificates for CAs

See merge request gnutls/gnutls!1048

Notes about Ubuntu specific software versions not available.

Signed-off-by: Karsten Ohme <k_o_@users.sourceforge.net>

Merge branch 'tmp-missing-inih-license' into 'master'

Ship inih/LICENSE.txt in release tarball

See merge request gnutls/gnutls!1050

Ship inih/LICENSE.txt in release tarball

inih's license terms requires shipping a copy of the license when
redistributing the source.

Signed-off-by: Andreas Metzler <ametzler@bebt.de>

Merge branch 'mcatanzaro/#806' into 'master'

Improve documentation of gnutls_record_send()

Closes #806

See merge request gnutls/gnutls!1049

Improve documentation of gnutls_record_send()

It's no longer required to retry this function with the same parameters
if you want to use gnutls_record_discard_queued().

Fixes #806

Signed-off-by: Michael Catanzaro <mcatanzaro@igalia.com>