Fix typos

Signed-off-by: Stefan Kangas <stefankangas@gmail.com>

diff --git a/NEWS b/NEWS
index a45cbc89e86ffd312b27c9f3bfc468a661d7308a..6e6bd2076fa687400fb9d6977714f6176bf37aab 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -334,7 +334,7 @@ gnutls_early_prf_hash_get: Added
    chain (#1131).
 
 ** libgnutls: Fixed sending of session ID in TLS 1.3 middlebox
-   compatibiltiy mode. In that mode the client shall always send a
+   compatibility mode. In that mode the client shall always send a
    non-zero session ID to make the handshake resemble the TLS 1.2
    resumption; this was not true in the previous versions (#1074).
 
@@ -418,7 +418,7 @@ gnutls_crypto_register_digest: Deprecated; no-op
    the size of the internal base64 blob (#1025). The new behavior aligns to the
    existing documentation.
 
-** libgnutls: Certificate verification failue due to OCSP must-stapling is not
+** libgnutls: Certificate verification failure due to OCSP must-stapling is not
    honered is now correctly marked with the GNUTLS_CERT_INVALID flag
    (!1317). The new behavior aligns to the existing documentation.
 
@@ -546,7 +546,7 @@ gnutls_psk_set_server_credentials_function2: Added
 
 ** libgnutls: The min-verification-profile from system configuration applies
    for all certificate verifications, not only under TLS. The configuration can
-   be overriden using the GNUTLS_SYSTEM_PRIORITY_FILE environment variable.
+   be overridden using the GNUTLS_SYSTEM_PRIORITY_FILE environment variable.
 
 ** libgnutls: The stapled OCSP certificate verification adheres to the convention
    used throughout the library of setting the 'GNUTLS_CERT_INVALID' flag.
@@ -790,7 +790,7 @@ No changes since last version.
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
 
 ** libgnutls: When on server or client side we are sending no extensions we do
-   not set an empty extensions field but we rather remove that field competely.
+   not set an empty extensions field but we rather remove that field completely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
 
@@ -907,7 +907,7 @@ gnutls_privkey_decrypt_data2: Added
    and export GOST parameters in the "native" little endian format used for these
    curves. This is an intentional incompatible change with 3.6.3.
 
-** libgnutls: Added support for seperately negotiating client and server certificate types
+** libgnutls: Added support for separately negotiating client and server certificate types
    as defined in RFC7250. This mechanism must be explicitly enabled via the
    GNUTLS_ENABLE_CERT_TYPE_NEG flag in gnutls_init().
 
@@ -1104,7 +1104,7 @@ gnutls_srp_8192_group_prime: Added
    to enable DSA-SHA1 (and thus make it acceptable for the server's certificate).
    The previous approach was to allow a smooth move for client infrastructure
    after the DSA algorithm became disabled by default, and is no longer necessary
-   as DSA is now being universally depracated.
+   as DSA is now being universally deprecated.
 
 ** libgnutls: Refuse to resume a session which had a different SNI advertised. That
    improves RFC6066 support in server side. Reported by Thomas Klute.
@@ -1696,7 +1696,7 @@ gnutls_ext_get_name: Added
 ** libgnutls: Applications are allowed to override the built-in key and
    certificate URLs.
 
-** libgnutls: The gnutls.h header marks constant and pure functions explictly.
+** libgnutls: The gnutls.h header marks constant and pure functions explicitly.
 
 ** certtool: Added the ability to sign certificates using SHA3.
 
@@ -1859,7 +1859,7 @@ explicitly enabled, since they reduce the overall security level.
 draft-mavrogiannopoulos-chacha-tls-05 and draft-irtf-cfrg-chacha20-poly1305-10.
 That is currently provided as technology preview and is not enabled by
 default, since there are no assigned ciphersuite points by IETF and there
-is no guarrantee of compatibility between draft versions. The ciphersuite
+is no guarantee of compatibility between draft versions. The ciphersuite
 priority string to enable it is "+CHACHA20-POLY1305".
 
 ** libgnutls: Added support for encrypt-then-authenticate in CBC
@@ -3208,7 +3208,7 @@ gnutls_pubkey_verify_data: Deprecated (use gnutls_pubkey_verify_data2)
 is now supported on OpenBSD.
 
 ** libgnutls: When verifying a certificate chain make sure it is chain.
-If the chain is wronly interrupted at some point then truncate it,
+If the chain is wrongly interrupted at some point then truncate it,
 and only try to verify the correct part. Patch by David Woodhouse
 
 ** libgnutls: Restored the behavior of gnutls_x509_privkey_import_pkcs8()
@@ -3674,7 +3674,7 @@ Thanks to Joseph Graham for providing access to such a system.
 Reported by Fabrice Gautier.
 
 ** libgnutls: In ECDHE verify that the received point lies on
-the selected curve. The ECDHE ciphersuites now take precendence
+the selected curve. The ECDHE ciphersuites now take precedence
 to plain DHE.
 
 ** API and ABI modifications:
@@ -4778,7 +4778,7 @@ The error you would get was "The OID is not supported.".  Problem
 introduced for the v2.8.x branch in 2.7.6.
 
 ** certtool: Added the --pkcs-cipher option.
-To explicitely specify the encryption algorithm to use.
+To explicitly specify the encryption algorithm to use.
 
 ** tests: Added "pkcs12_encode" self-test to check PKCS#12 functions.
 
@@ -4975,7 +4975,7 @@ different from values computed using earlier versions of GnuTLS.
 
 ** libgnutls: For CSRs on DSA keys, don't add DSA parameters to the
 ** optional SignatureAlgorithm parameter field.
-VeriSign rejected these CSRs.  They are stricly speaking not needed
+VeriSign rejected these CSRs.  They are strictly speaking not needed
 since you need the signer's certificate to verify the certificate
 signature anyway.  Reported by Wilankar Trupti
 <trupti.wilankar@hp.com> and Boyan Kasarov <bkasarov@gmail.com>.
@@ -5237,7 +5237,7 @@ gnutls_x509_crt_set_crq_extensions: ADDED
 *** Several self-tests were added and others improved.
 
 *** API/ABI changes in GnuTLS 2.8 compared to GnuTLS 2.6.x
-No offically supported interfaces have been modified or removed.  The
+No officially supported interfaces have been modified or removed.  The
 library should be completely backwards compatible on both the source
 and binary level.
 
@@ -6432,7 +6432,7 @@ CA certificates.  (The earlier limit was 16kb.)
 
 *** LZO compression is now disabled by default.
 The main reason is that LZO compression in TLS is not standardized,
-but license compatiblity issues with minilzo triggered us to make this
+but license compatibility issues with minilzo triggered us to make this
 decision now.
 
 *** Improvements for cross-compilation to Windows and OpenWRT.
@@ -8831,7 +8831,7 @@ and EAP-TTLS.  One function to access the raw PRF and one to access
 the PRF seeded with the client/server random fields are provided.
 Suggested by Jouni Malinen <jkmaline@cc.hut.fi>.
 
-** New APIs to acceess the client and server random fields in a session.
+** New APIs to access the client and server random fields in a session.
 These fields can be useful by protocols using TLS.  Note that these
 fields are typically used as input to the TLS PRF, and if this is your
 intended use, you should use the TLS PRF API that use the
@@ -9109,7 +9109,7 @@ LIBGNUTLS_VERSION_NUMBER: New CPP symbols, indicating the GnuTLS
 
 * Version 1.2.8 (2005-10-07)
 - Libgcrypt 1.2.2 is required to fix a bug for forking GnuTLS servers.
-- Don't install the auxilliary libexamples library used by the
+- Don't install the auxiliary libexamples library used by the
   examples in doc/examples/ on "make install", report and tiny patch
   from Thomas Klausner <tk@giga.or.at>.
 - If you pass a X.509 CA or PGP trust database to the command line
@@ -9208,7 +9208,7 @@ LIBGNUTLS_VERSION_NUMBER: New CPP symbols, indicating the GnuTLS
   function prototypes during compile time.
 - API and ABI modifications:
   No changes since last version.  At least not intentional, but due
-  to the include header changes, there may be inadvertant changes,
+  to the include header changes, there may be inadvertent changes,
   please let us know if you find any.
 
 * Version 1.2.1 (2005-04-04)
@@ -9693,7 +9693,7 @@ LIBGNUTLS_VERSION_NUMBER: New CPP symbols, indicating the GnuTLS
 - Building with openpgp support is now mandatory.
 - gnutls4 compatibility header is no longer included by default in
   gnutls.h.
-- gnutls8 function usage yelds a deprecation warning in gcc3.
+- gnutls8 function usage yields a deprecation warning in gcc3.
 - gnutls_x509_*_set_dn_by_oid() and gnutls_x509_*_get_*_dn_by_oid()
   functions have a raw_flag parameter added.
 - Added gnutls_x509_*_get_dn_oid() and gnutls_x509_crt_get_extension_oid()
@@ -10003,7 +10003,7 @@ LIBGNUTLS_VERSION_NUMBER: New CPP symbols, indicating the GnuTLS
 - gnutls_global_init_extra() now fails if the library versions do
   not match.
 - Fixes in client and server example programs. Null encryption can
-  be used in these programs, to assist in debuging.
+  be used in these programs, to assist in debugging.
 - Fixes in zlib compression code.
 
 * Version 0.5.0 (2002-07-06)
@@ -10102,7 +10102,7 @@ LIBGNUTLS_VERSION_NUMBER: New CPP symbols, indicating the GnuTLS
 
 * Version 0.3.5 (2002-01-25)
 - Corrected the RSA key exchange method, to avoid attacks against
-  PKCS-1 formating.
+  PKCS-1 formatting.
 
 * Version 0.3.4 (2002-01-20)
 - Corrected bugs in DHE_RSA key exchange method

diff --git a/devel/release-steps.md b/devel/release-steps.md
index 27b6eae418c44f28d9380b5cfa8ef01d38237df1..a04ac8ea0c1f9fcb79226e891b3fc8f2664a13a6 100644 (file)
--- a/devel/release-steps.md
+++ b/devel/release-steps.md
@@ -17,7 +17,7 @@
    the documentation to be generated. See the `doc-dist.Fedora` job in
    [.gitlab-ci.yml](.gitlab-ci.yml), which does the same thing in the CI:
    ```console
-   # Install necesarry packages for documentation, and then:
+   # Install necessary packages for documentation, and then:
    make distcheck
    ```
 1. Create a detached GPG signature:

diff --git a/doc/danetool-examples.texi b/doc/danetool-examples.texi
index 1c5ec786ef0214fc96f9fbe43121b0f86a3518ea..7539e4693ef5bfc83e336c10748ddbd2f34174c5 100644 (file)
--- a/doc/danetool-examples.texi
+++ b/doc/danetool-examples.texi
@@ -1,7 +1,7 @@
 @subheading DANE TLSA RR generation
 
 To create a DANE TLSA resource record for a certificate (or public key) 
-that was issued localy and may or may not be signed by a CA use the following command.
+that was issued locally and may or may not be signed by a CA use the following command.
 @example
 $ danetool --tlsa-rr --host www.example.com --load-certificate cert.pem
 @end example

diff --git a/lib/crypto-selftests.c b/lib/crypto-selftests.c
index e51e0826f71aa61e9d34d4637673a94a52cac27e..cf3b7e142e577e2683e95c5310d47ea9d28a7293 100644 (file)
--- a/lib/crypto-selftests.c
+++ b/lib/crypto-selftests.c
@@ -548,7 +548,7 @@ const struct cipher_vectors_st gost28147_tc26z_cnt_vectors[] = {
 };
 
 /* Manually calculated to overcome section size differences between TLS cipher
- * and test vectors defined in recommendation for standarization
+ * and test vectors defined in recommendation for standardization
  * R 1323565.1.017-2018. TLS uses 1024 byte sections, we need more to have at
  * least one rekeying. */
 const struct cipher_vectors_st magma_ctr_acpkm_vectors[] = {
@@ -697,7 +697,7 @@ const struct cipher_vectors_st magma_ctr_acpkm_vectors[] = {
 };
 
 /* Manually calculated to overcome section size differences between TLS cipher
- * and test vectors defined in recommendation for standarization
+ * and test vectors defined in recommendation for standardization
  * R 1323565.1.017-2018. TLS uses 4096 byte sections, we need more to have at
  * least one rekeying. */
 const struct cipher_vectors_st kuznyechik_ctr_acpkm_vectors[] = {

diff --git a/lib/ext/compress_certificate.c b/lib/ext/compress_certificate.c
index 2e35a1f36279c54f60d45ed7e0b3bcd305e1e14f..7d94e47aeaa8853005321c20d1cb25656f30ebde 100644 (file)
--- a/lib/ext/compress_certificate.c
+++ b/lib/ext/compress_certificate.c
@@ -110,7 +110,7 @@ gnutls_compress_certificate_get_selected_method(gnutls_session_t session)
  * for a) requesting the compression of peer's certificate and b) selecting the
  * method to compress the local certificate before sending it to the peer.
  * The order of compression methods inside the list does matter as the method
- * that appears earlier in the list will be preffered before the later ones.
+ * that appears earlier in the list will be preferred before the later ones.
  * Note that even if you set the list of supported compression methods, the
  * compression might not be used if the peer does not support any of your chosen
  * compression methods.

diff --git a/libdane/dane.c b/libdane/dane.c
index c9cbe8408a7372270e974c2c1039f123feadea39..5d89f38454fabd984c6b76bb7e84dc97479c53cb 100644 (file)
--- a/libdane/dane.c
+++ b/libdane/dane.c
@@ -846,7 +846,7 @@ dane_verify_crt_raw(dane_state_t s,
  * Due to the many possible options of DANE, there is no single threat
  * model countered. When notifying the user about DANE verification results
  * it may be better to mention: DANE verification did not reject the certificate,
- * rather than mentioning a successful DANE verication.
+ * rather than mentioning a successful DANE verification.
  *
  * Note that this function is designed to be run in addition to
  * PKIX - certificate chain - verification. To be run independently

diff --git a/tests/cert-tests/suppressions.valgrind b/tests/cert-tests/suppressions.valgrind
index 12b43e651dcab8ff389c174e7ca29bd759e5b316..0ea802fdb9cc101843e7d4b3af7518c77d7e552b 100644 (file)
--- a/tests/cert-tests/suppressions.valgrind
+++ b/tests/cert-tests/suppressions.valgrind
@@ -1,4 +1,4 @@
-# suppressions -- Valgrind suppresion file for libgcrypt
+# suppressions -- Valgrind suppression file for libgcrypt
 
 # Copyright (C) 2015 Red Hat, Inc.
 

diff --git a/tests/suite/suppressions.valgrind b/tests/suite/suppressions.valgrind
index ff8486e8104f6fc54d1e9b779a838399e7bb7ee1..c32e82ee6f82189da1c6f2fcbf550d4a9dea57a7 100644 (file)
--- a/tests/suite/suppressions.valgrind
+++ b/tests/suite/suppressions.valgrind
@@ -1,4 +1,4 @@
-# suppressions -- Valgrind suppresion file for libgcrypt
+# suppressions -- Valgrind suppression file for libgcrypt
 
 # Copyright (C) 2008-2012 Free Software Foundation, Inc.
 

diff --git a/tests/suite/x509paths/suppressions.valgrind b/tests/suite/x509paths/suppressions.valgrind
index ff8486e8104f6fc54d1e9b779a838399e7bb7ee1..c32e82ee6f82189da1c6f2fcbf550d4a9dea57a7 100644 (file)
--- a/tests/suite/x509paths/suppressions.valgrind
+++ b/tests/suite/x509paths/suppressions.valgrind
@@ -1,4 +1,4 @@
-# suppressions -- Valgrind suppresion file for libgcrypt
+# suppressions -- Valgrind suppression file for libgcrypt
 
 # Copyright (C) 2008-2012 Free Software Foundation, Inc.
 

diff --git a/tests/suppressions.valgrind b/tests/suppressions.valgrind
index 1dc54549218f1cb1a0d31d2108c346f5af68463b..27c875241e47768c9201b9d59a6e5ecb387306e7 100644 (file)
--- a/tests/suppressions.valgrind
+++ b/tests/suppressions.valgrind
@@ -1,4 +1,4 @@
-# suppressions -- Valgrind suppresion file for libgcrypt
+# suppressions -- Valgrind suppression file for libgcrypt
 
 # Copyright (C) 2008-2012 Free Software Foundation, Inc.
 

diff --git a/tests/trustdb-tofu.c b/tests/trustdb-tofu.c
index 5917fadf1de22b187fcceefa47fed628ec66eacf..9fa58ba008ea1eb32f98896377efd86f069c4f3f 100644 (file)
--- a/tests/trustdb-tofu.c
+++ b/tests/trustdb-tofu.c
@@ -170,7 +170,7 @@ void doit(void)
 #ifndef _WIN32
        setenv("HOME", getcwd(path, sizeof(path)), 1);
 
-       /* verify whether the stored hash verification succeeeds */
+       /* verify whether the stored hash verification succeeds */
        ret = gnutls_store_commitment(NULL, NULL, "localhost", "https",
                                      GNUTLS_DIG_SHA1, &hash, 0, GNUTLS_SCOMMIT_FLAG_ALLOW_BROKEN);
        if (ret != 0) {

diff --git a/tests/x509-upnconstraint.c b/tests/x509-upnconstraint.c
index a25e06b9036add5660348b63e484aaff5df55dbc..8ba6888b9f2c41191af0f6ac495422952b64cdda 100644 (file)
--- a/tests/x509-upnconstraint.c
+++ b/tests/x509-upnconstraint.c
@@ -259,7 +259,7 @@ void doit(void)
        gnutls_x509_name_constraints_deinit(name_constraints);
        gnutls_x509_crt_deinit(issuingca);
 
-       success("UPN constraints tests completed succesfully\n");
+       success("UPN constraints tests completed successfully\n");
 }
 
 /* The following cert is the root CA that signed the intermediate CA used in