doc: assorted typo fixes

Spotted by codespell.

Signed-off-by: Daiki Ueno <ueno@gnu.org>

diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 96fb7ff0cc7ac3810c28ddb3dd24cd71d8e5c5ff..47037a3dd6e07ec6358d715069b847a216eb1e71 100644 (file)
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -2,7 +2,7 @@
 
  Anyone is welcome to contribute to GnuTLS. You can either take up
 tasks from our [planned list](https://gitlab.com/gnutls/gnutls/milestones),
-or suprise us with enhancement we didn't plan for. In all cases be prepared
+or surprise us with enhancement we didn't plan for. In all cases be prepared
 to defend and justify your enhancements, and get through few rounds
 of changes. 
 
@@ -92,7 +92,7 @@ E.g. ```gnutls_x509_crt_get_dn```, refers to the X.509
 certificate parsing part of gnutls. Some of the used prefixes are the
 following.
  * ```gnutls_x509_crt_``` for the X.509 certificate part
- * ```gnutls_session_``` for the TLS session part (but this may be omited)
+ * ```gnutls_session_``` for the TLS session part (but this may be omitted)
  * ```gnutls_handshake_``` for the TLS handshake part
  * ```gnutls_record_``` for the TLS record protocol part
  * ```gnutls_alert_``` for the TLS alert protocol part
@@ -176,7 +176,7 @@ in a way that may break existing applications which use the API in a
 reasonable way. If the existing function allows flags, then a new flag
 should be introduced to enable the new behavior.
 
-When it is necessary, or desireable to enable the new features by default
+When it is necessary, or desirable to enable the new features by default
 (e.g., TLS1.3 introduction), the "next" releases should be used (and
 introduced if necessary), to allow the modification to be tested for an
 extended amount of time (see the [Release policy](RELEASES.md)).

diff --git a/SECURITY.md b/SECURITY.md
index b8d055c28235c17d8509d66d540d6a8e7ba67ec8..26d3e8457bbe2687d0fc4627ed97b7b1598771ef 100644 (file)
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -15,7 +15,7 @@ issues are handled with the normal release process.
 
 # Committing a fix
 
-The fix when is made available, preferrably within 1 month of the report,
+The fix when is made available, preferably within 1 month of the report,
 is pushed to the repository using a detailed message on all supported
 branches which are affected. The commit message must refer to the bug
 report addressed (e.g., our issue tracker or some external issue tracker).
@@ -30,7 +30,7 @@ and other relevant parties to the problem.
 # Releasing
 
 Currently our releases are time-based, thus there are no special releases
-targetting security fixes. At release time the NEWS entries must reflect
+targeting security fixes. At release time the NEWS entries must reflect
 the issues addressed (also referring to the relevant issue trackers), and
 security-related entries get assigned a GNUTLS-SA (gnutls security advisory
 number). The assignment is done at release time at the web repository, in

diff --git a/doc/cha-cert-auth.texi b/doc/cha-cert-auth.texi
index cea30cf4657b64b6a4cae6c4115a3f0e9c0cd8e8..3f2856f804d4d87eefb4141367ada6736222f9b4 100644 (file)
--- a/doc/cha-cert-auth.texi
+++ b/doc/cha-cert-auth.texi
@@ -484,7 +484,7 @@ this functionality completely in 3.6.0.
 @cindex Raw public-keys
 
 There are situations in which a rather large certificate / certificate chain is undesirable or impractical.
-An example could be a resource contrained sensor network in which you do want to use authentication of and
+An example could be a resource constrained sensor network in which you do want to use authentication of and
 encryption between your devices but where your devices lack loads of memory or processing power. Furthermore,
 there are situations in which you don't want to or can't rely on a PKIX. TLS is, next to a PKIX environment,
 also commonly used with self-signed certificates in smaller deployments where the self-signed certificates

diff --git a/doc/cha-config.texi b/doc/cha-config.texi
index f094407900bf0983462580b4ddf846f5c5ef9cf6..c0f7048fc200d5cbe5aeafb004e4f189a8e4a9c8 100644 (file)
--- a/doc/cha-config.texi
+++ b/doc/cha-config.texi
@@ -14,7 +14,7 @@ the environment variable @code{GNUTLS_SYSTEM_PRIORITY_FAIL_ON_INVALID} is
 set to 1, where it would cause the library to exit on unknown options.
 
 The location of the default configuration file is @code{/etc/gnutls/config},
-but its actual location may be overriden during compile time or at run-time
+but its actual location may be overridden during compile time or at run-time
 using the @code{GNUTLS_SYSTEM_PRIORITY_FILE} environment variable. The file
 used can be queried using @funcref{gnutls_get_system_config_file}.
 

diff --git a/doc/cha-gtls-app.texi b/doc/cha-gtls-app.texi
index ab82f14aad1d37956f15f29f68b6a40927a707b4..eb5764b554aec88a26910d35e6889c4570c35724 100644 (file)
--- a/doc/cha-gtls-app.texi
+++ b/doc/cha-gtls-app.texi
@@ -1269,7 +1269,7 @@ with access to priority strings for overriding the default behavior,
 on configuration files, or other UI. Following such a principle,
 makes the GnuTLS library as the default settings provider. That is
 necessary and a good practice, because TLS protocol hardening and
-phasing out of legacy algorithms, is easier to co-ordinate when happens
+phasing out of legacy algorithms, is easier to coordinate when happens
 in a single library.
 
 @showfuncC{gnutls_set_default_priority,gnutls_set_default_priority_append,gnutls_priority_set_direct}

diff --git a/doc/cha-tokens.texi b/doc/cha-tokens.texi
index ab7a5fbf3298be3d2f9a8559344bf162b2978955..1ae054045f6de6e81c7ede2c25add0974aee59e6 100644 (file)
--- a/doc/cha-tokens.texi
+++ b/doc/cha-tokens.texi
@@ -620,7 +620,7 @@ can access TPM URLs.
 The registered keys (that are stored in the TPM) can be listed using one of
 the following functions. Those keys are unfortunately only identified by
 their UUID and have no label or other human friendly identifier.
-Keys can be deleted from permament storage using @funcref{gnutls_tpm_privkey_delete}.
+Keys can be deleted from permanent storage using @funcref{gnutls_tpm_privkey_delete}.
 
 @showfuncC{gnutls_tpm_get_registered,gnutls_tpm_key_list_deinit,gnutls_tpm_key_list_get_url}
 

diff --git a/doc/examples/tlsproxy/README.md b/doc/examples/tlsproxy/README.md
index a34a18c55c7e732acaa2ca78865bd479a80392b0..3c7a17fe63643b9a81b08f51400ed3a7b078664c 100644 (file)
--- a/doc/examples/tlsproxy/README.md
+++ b/doc/examples/tlsproxy/README.md
@@ -31,7 +31,7 @@ Usage:
 A TLS client or server proxy
 
 Options:
-     -c, --connect ADDRRESS    Connect to ADDRESS
+     -c, --connect ADDRESS     Connect to ADDRESS
      -l, --listen ADDRESS      Listen on ADDRESS
      -K, --key FILE            Use FILE as private key
      -C, --cert FILE           Use FILE as public key
@@ -50,4 +50,4 @@ Options:
 License
 =======
 
-MIT
\ No newline at end of file
+MIT

diff --git a/lib/algorithms/ecc.c b/lib/algorithms/ecc.c
index 14351b87add4059e6c472a3be8fc46aa36bcc84f..917f83a62424e383b876c7414ed738af683d73d7 100644 (file)
--- a/lib/algorithms/ecc.c
+++ b/lib/algorithms/ecc.c
@@ -123,7 +123,7 @@ gnutls_ecc_curve_entry_st ecc_curves[] = {
         * exchange (CryptoPro-XchA = CryptoPro-A and CryptoPro-XchB =
         * CryptoPro-C).
         *
-        * Then TC26 (Standard comitee working on cryptographic standards) has
+        * Then TC26 (Standard comittee working on cryptographic standards) has
         * defined one 256-bit curve (TC26-256-A) and three 512-bit curves
         * (TC26-512-A, -B, -C).
         *

diff --git a/lib/auth/ecdhe.c b/lib/auth/ecdhe.c
index 883f6cd04692dfc50f760183d338549645cb5c4b..9f53b1b0531a0714a62c855c926e82980c155706 100644 (file)
--- a/lib/auth/ecdhe.c
+++ b/lib/auth/ecdhe.c
@@ -23,7 +23,7 @@
 
 /* This file contains common stuff in Ephemeral Diffie-Hellman (DHE)
  * and Anonymous DH key exchange(DHA). These are used in the handshake
- * procedure of the certificate and anoymous authentication.
+ * procedure of the certificate and anonymous authentication.
  */
 
 #include "gnutls_int.h"

diff --git a/lib/dtls.c b/lib/dtls.c
index f0ded635c073809933f41b9e090a8d24e329bfe0..002c7145efb411c4738e067fa4690a50acf29465 100644 (file)
--- a/lib/dtls.c
+++ b/lib/dtls.c
@@ -553,7 +553,7 @@ unsigned _gnutls_record_overhead(const version_entry_st *ver,
  * This function will return the set size in bytes of the overhead
  * due to TLS (or DTLS) per record.
  *
- * Note that this function may provide inacurate values when TLS
+ * Note that this function may provide inaccurate values when TLS
  * extensions that modify the record format are negotiated. In these
  * cases a more accurate value can be obtained using gnutls_record_overhead_size() 
  * after a completed handshake.

diff --git a/lib/ext/session_ticket.c b/lib/ext/session_ticket.c
index 8d4595821a8d9eac73b2889983e2f386cd013fdb..8f22462faeed8bb6c11792ac68f84e0dc7b99fc9 100644 (file)
--- a/lib/ext/session_ticket.c
+++ b/lib/ext/session_ticket.c
@@ -441,11 +441,11 @@ session_ticket_send_params(gnutls_session_t session,
                if (ret >= 0)
                        priv = epriv;
 
-               /* no previous data. Just advertize it */
+               /* no previous data. Just advertise it */
                if (ret < 0)
                        return GNUTLS_E_INT_RET_0;
 
-               /* previous data had session tickets disabled. Don't advertize. Ignore. */
+               /* previous data had session tickets disabled. Don't advertise. Ignore. */
                if (session->internals.flags & GNUTLS_NO_TICKETS)
                        return 0;
 

diff --git a/lib/ext/supported_versions.c b/lib/ext/supported_versions.c
index 69193b60a3fe53f392f1d8eb6c8b0e9dfd77033c..157a0a77eeb0334355ee3b4e7643d8f841d2f6f7 100644 (file)
--- a/lib/ext/supported_versions.c
+++ b/lib/ext/supported_versions.c
@@ -71,7 +71,7 @@ supported_versions_recv_params(gnutls_session_t session,
 
                /* do not parse this extension when we haven't TLS1.3
                 * enabled. That is because we cannot handle earlier protocol
-                * negotiotation (such as SSL3.0) with this */
+                * negotiation (such as SSL3.0) with this */
                if (vers && !vers->tls13_sem)
                        return 0;
 

diff --git a/lib/gnutls_int.h b/lib/gnutls_int.h
index 4db7a2534d62d26086cc66659ba65403ea0a3327..bb6c19713851e1f59f98237b587deb86429ad0e0 100644 (file)
--- a/lib/gnutls_int.h
+++ b/lib/gnutls_int.h
@@ -533,7 +533,7 @@ struct gnutls_key_st {
                        uint8_t ap_rms[MAX_HASH_SIZE]; /* resumption_master_secret */
                } tls13; /* tls1.3 */
 
-               /* Folow the SSL3.0 and TLS1.2 key exchanges */
+               /* Follow the SSL3.0 and TLS1.2 key exchanges */
                struct {
                        /* For ECDH KX */
                        struct {

diff --git a/lib/handshake.c b/lib/handshake.c
index 8d58fa48e780d3ef128dfc03ec95e3703fb04014..cb215b223c28e8229fabc6153a1fa6ca7be10558 100644 (file)
--- a/lib/handshake.c
+++ b/lib/handshake.c
@@ -2164,7 +2164,7 @@ static int send_client_hello(gnutls_session_t session, int again)
                }
 
                if (session->internals.priorities->min_record_version != 0) {
-                       /* Advertize the lowest supported (SSL 3.0) record packet
+                       /* Advertise the lowest supported (SSL 3.0) record packet
                         * version in record packets during the handshake.
                         * That is to avoid confusing implementations
                         * that do not support TLS 1.2 and don't know

diff --git a/lib/session.c b/lib/session.c
index 71bcb40515ce3b2ee20700590bec2c148677a128..b9a23e8d023fa16c40e3081bd96323a0d99bdea2 100644 (file)
--- a/lib/session.c
+++ b/lib/session.c
@@ -100,7 +100,7 @@ gnutls_session_get_data(gnutls_session_t session,
  * is received by the client. To ensure that such a ticket has been received use
  * gnutls_session_get_flags() and check for flag %GNUTLS_SFLAGS_SESSION_TICKET;
  * if this flag is not set, this function will wait for a new ticket within
- * an estimated rountrip, and if not received will return dummy data which
+ * an estimated roundtrip, and if not received will return dummy data which
  * cannot lead to resumption.
  *
  * To get notified when new tickets are received by the server

diff --git a/lib/x509/key_encode.c b/lib/x509/key_encode.c
index 18668c8ad2ca51df0db5a66af7e663e405c41834..3e9e0466bc7477a577023efecdae7e2a271aedd2 100644 (file)
--- a/lib/x509/key_encode.c
+++ b/lib/x509/key_encode.c
@@ -562,7 +562,7 @@ _gnutls_x509_write_gost_params(const gnutls_pk_params_st * params,
 
        /* For compatibility per R 1323565.1.023—2018 provide digest OID only
         * for GOST-2001 keys or GOST-2012 keys with CryptoPro curves. Do not
-        * set this optional paramter for TC26 curves */
+        * set this optional parameter for TC26 curves */
        if (params->algo == GNUTLS_PK_GOST_01)
                oid = HASH_OID_GOST_R_3411_94_CRYPTOPRO_PARAMS;
        else if (params->algo == GNUTLS_PK_GOST_12_256 &&

diff --git a/lib/x509/name_constraints.c b/lib/x509/name_constraints.c
index dba2fd4b9faf82fbe7696e0b1f39687f774a2677..b93527ee54206ee86528804b47979843eb3640cb 100644 (file)
--- a/lib/x509/name_constraints.c
+++ b/lib/x509/name_constraints.c
@@ -178,7 +178,7 @@ int _gnutls_extract_name_constraints(ASN1_TYPE c2, const char *vstr,
 
 /*-
  * _gnutls_name_constraints_node_free:
- * @node: name constriants node
+ * @node: name constraints node
  *
  * Deallocate a list of name constraints nodes starting at the given node.
  -*/

diff --git a/lib/x509/pkcs7-crypt.c b/lib/x509/pkcs7-crypt.c
index 274ac14248d6a60e99ba159726715d874b288b68..d64862df43dd09d2c097fe4fb8c812b781bef2ff 100644 (file)
--- a/lib/x509/pkcs7-crypt.c
+++ b/lib/x509/pkcs7-crypt.c
@@ -237,7 +237,7 @@ int _gnutls_pkcs_flags_to_schema(unsigned int flags)
  * This function will return a human readable description of the
  * PKCS12 or PBES2 schema.
  *
- * Returns: a constrant string or %NULL on error.
+ * Returns: a constraint string or %NULL on error.
  *
  * Since: 3.4.0
  */
@@ -255,7 +255,7 @@ const char *gnutls_pkcs_schema_get_name(unsigned int schema)
  * This function will return the object identifier of the
  * PKCS12 or PBES2 schema.
  *
- * Returns: a constrant string or %NULL on error.
+ * Returns: a constraint string or %NULL on error.
  *
  * Since: 3.4.0
  */

diff --git a/src/certtool-args.def b/src/certtool-args.def
index 645dc563cc3b48725103724e5e1793168fa1bd72..242a01871a6ecd57be97f682fc759660415e1253 100644 (file)
--- a/src/certtool-args.def
+++ b/src/certtool-args.def
@@ -1080,7 +1080,7 @@ encryption_key
 #honor_crq_ext = 2.5.29.17
 #honor_crq_ext = 2.5.29.15
 
-# Path length contraint. Sets the maximum number of
+# Path length constraint. Sets the maximum number of
 # certificates that can be used to certify this certificate.
 # (i.e. the certificate chain length)
 #path_len = -1

diff --git a/src/cli-args.def b/src/cli-args.def
index 56ae77b0779e069c61c5307a0dadad3cb0b38ec4..ac04591325e7a256bb466b10290d5f61ab53e233 100644 (file)
--- a/src/cli-args.def
+++ b/src/cli-args.def
@@ -393,7 +393,7 @@ flag = {
     name      = recordsize;
     arg-type  = number;
     arg-range = "0->4096";
-    descrip   = "The maximum record size to advertize";
+    descrip   = "The maximum record size to advertise";
     doc      = "";
 };
 

diff --git a/src/list.h b/src/list.h
index 967eb193e2c19f9d950ff16311e3406805061343..1b3c9e4635ccdc723b34b89608a633577fb7ae07 100644 (file)
--- a/src/list.h
+++ b/src/list.h
@@ -40,7 +40,7 @@
            slow because these operations search all the way
            through the list.
 
-       queues: whats the difference between a queue and a list?
+       queues: what's the difference between a queue and a list?
            very little really.
 
     The system implemented here is a doubly linked list with previous

diff --git a/src/tests.c b/src/tests.c
index c7f2662efedb11e65624d0f0c20207b264a0a9e7..76b896b8fd4959513a964d770af89de8e232b9a5 100644 (file)
--- a/src/tests.c
+++ b/src/tests.c
@@ -1209,7 +1209,7 @@ test_code_t test_tls1_6_fallback(gnutls_session_t session)
        return TEST_SUCCEED;
 }
 
-/* Advertize both TLS 1.0 and SSL 3.0. If the connection fails,
+/* Advertise both TLS 1.0 and SSL 3.0. If the connection fails,
  * but the previous SSL 3.0 test succeeded then disable TLS 1.0.
  */
 test_code_t test_tls_disable0(gnutls_session_t session)
@@ -1426,7 +1426,7 @@ void _gnutls_rsa_pms_set_version(gnutls_session_t session,
 test_code_t test_rsa_pms_version_check(gnutls_session_t session)
 {
        int ret;
-       /* here we use an arbitary version in the RSA PMS
+       /* here we use an arbitrary version in the RSA PMS
         * to see whether to server will check this version.
         *
         * A normal server would abort this handshake.

diff --git a/tests/logfile-option.sh b/tests/logfile-option.sh
index 1eb7a492f79d39240e26b16632cf988d24b6a0c6..8cd8f9b53fc960ec5318ed1c582669b66c93e7ca 100755 (executable)
--- a/tests/logfile-option.sh
+++ b/tests/logfile-option.sh
@@ -96,7 +96,7 @@ kill ${PID}
 wait
 
 if ! test -f ${TMPFILE1};then
-       echo "Logfile shoule be created!"
+       echo "Logfile should be created!"
        exit 1
 fi
 if test -s ${TMPFILE2};then
@@ -150,7 +150,7 @@ kill ${PID}
 wait
 
 if ! test -f ${TMPFILE1};then
-       echo "Logfile shoule be created!"
+       echo "Logfile should be created!"
        exit 1
 fi
 if test -s ${TMPFILE2};then