doc: fix typos found by codespell

Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

diff --git a/doc/cha-gtls-app.texi b/doc/cha-gtls-app.texi
index 8755a6a0268999d9379eb798b8f05c019c3028f1..9dccf06bfc1e0d330751f8ac39edc554f22db16b 100644 (file)
--- a/doc/cha-gtls-app.texi
+++ b/doc/cha-gtls-app.texi
@@ -1851,7 +1851,7 @@ static int ext_hook_func(void *ctx, unsigned tls_id,
                          const unsigned char *data, unsigned size)
 @{
        if (tls_id == 0) @{ /* server name */
-               /* figure the advertized name - the following hack
+               /* figure the advertised name - the following hack
                  * relies on the fact that this extension only supports
                  * DNS names, and due to a protocol bug cannot be extended
                  * to support anything else. */
@@ -2119,7 +2119,7 @@ The re-authentication process, allows the connected client to switch
 identity by presenting a new certificate. Unlike TLS 1.2, the server
 is not allowed to change identities. That client re-authentication, or
 post-handshake authentication can be initiated only by the server using
-@funcref{gnutls_reauth}, and only if a client has advertized support for it.
+@funcref{gnutls_reauth}, and only if a client has advertised support for it.
 Both server and client have to explicitly enable support for post handshake
 authentication using the @code{GNUTLS_POST_HANDSHAKE_AUTH} flag at @funcref{gnutls_init}.
 

diff --git a/doc/cha-shared-key.texi b/doc/cha-shared-key.texi
index 394fd7952f34ece64e0c318e07d6d754d748047c..9dfc7cd4e391b9f55c685bd6cc3445e80ea33f35 100644 (file)
--- a/doc/cha-shared-key.texi
+++ b/doc/cha-shared-key.texi
@@ -135,7 +135,7 @@ indication of the peer's identity.  This kind of authentication
 is vulnerable to a man in the middle attack, but can be
 used even if there is no prior communication or shared trusted parties 
 with the peer. It is useful to establish a session over which certificate
-authentication will occur in order to hide the indentities of the participants
+authentication will occur in order to hide the identities of the participants
 from passive eavesdroppers. It is only available under TLS 1.2 or earlier
 versions.
 

diff --git a/lib/algorithms/ciphersuites.c b/lib/algorithms/ciphersuites.c
index 0620735333a76829dcf9f6d24fea69e810220945..d4c10e794105cb2addd74d5dc4747c4f994895ea 100644 (file)
--- a/lib/algorithms/ciphersuites.c
+++ b/lib/algorithms/ciphersuites.c
@@ -1790,7 +1790,7 @@ static unsigned check_server_dh_params(gnutls_session_t session,
        }
 
        if (session->internals.hsk_flags & HSK_HAVE_FFDHE) {
-               /* if the client has advertized FFDHE then it doesn't matter
+               /* if the client has advertised FFDHE then it doesn't matter
                 * whether we have server DH parameters. They are no good. */
                gnutls_assert();
                return 0;

diff --git a/lib/auth/cert.c b/lib/auth/cert.c
index d331d44055aeb92494bdeef8d84ee0d46812bc69..4860b92799a8330aef65338224e7603f3de67c97 100644 (file)
--- a/lib/auth/cert.c
+++ b/lib/auth/cert.c
@@ -491,7 +491,7 @@ static int call_get_cert_callback(gnutls_session_t session,
 }
 
 /* Finds the appropriate certificate depending on the cA Distinguished name
- * advertized by the server. If none matches then returns 0 and -1 as index.
+ * advertised by the server. If none matches then returns 0 and -1 as index.
  * In case of an error a negative error code, is returned.
  *
  * 20020128: added ability to select a certificate depending on the SIGN

diff --git a/lib/crypto-api.c b/lib/crypto-api.c
index 57e7872ff54c6ff240c73461862a1f453b7a6b07..d9fb9899030c5392f900e8516356e19b22458318 100644 (file)
--- a/lib/crypto-api.c
+++ b/lib/crypto-api.c
@@ -1600,7 +1600,7 @@ static int aead_cipher_encryptv2_fallback(gnutls_aead_cipher_hd_t handle,
                }
 
                /* We must set ptext_data after the above
-                * grow/append opereations, otherwise it will point to an invalid pointer after realloc.
+                * grow/append operations, otherwise it will point to an invalid pointer after realloc.
                 */
                ptext_data = (uint8_t *)ptext.data + _tag_size;
                ptext_size = ptext.length - _tag_size;
@@ -1619,7 +1619,7 @@ static int aead_cipher_encryptv2_fallback(gnutls_aead_cipher_hd_t handle,
                }
 
                /* We must set ptext_data after the above
-                * grow/append opereations, otherwise it will point to an invalid pointer after realloc.
+                * grow/append operations, otherwise it will point to an invalid pointer after realloc.
                 */
                ptext_data = ptext.data;
                ptext_size = ptext.length;
@@ -1837,7 +1837,7 @@ static int aead_cipher_decryptv2_fallback(gnutls_aead_cipher_hd_t handle,
                }
 
                /* We must set ctext_data after the above
-                * grow/append opereations, otherwise it will point to an invalid pointer after realloc.
+                * grow/append operations, otherwise it will point to an invalid pointer after realloc.
                 */
                ctext_data = (uint8_t *)ctext.data + tag_size;
        } else {
@@ -1857,7 +1857,7 @@ static int aead_cipher_decryptv2_fallback(gnutls_aead_cipher_hd_t handle,
                ctext.length += tag_size;
 
                /* We must set ctext_data after the above
-                * grow/append opereations, otherwise it will point to an invalid pointer after realloc.
+                * grow/append operations, otherwise it will point to an invalid pointer after realloc.
                 */
                ctext_data = ctext.data;
        }

diff --git a/lib/gnutls_int.h b/lib/gnutls_int.h
index 5b9c95fac2d94b9bf97d7331dd2dd4c6c2fe5fbf..7af972e40f71319f9c47ea79e0dd318e116d1dd4 100644 (file)
--- a/lib/gnutls_int.h
+++ b/lib/gnutls_int.h
@@ -1304,7 +1304,7 @@ typedef struct {
                *auth_struct; /* used in handshake packets and KX algorithms */
 
        /* this is the highest version available
-        * to the peer. (advertized version).
+        * to the peer. (advertised version).
         * This is obtained by the Handshake Client Hello
         * message. (some implementations read the Record version)
         */
@@ -1470,7 +1470,7 @@ typedef struct {
 #define HSK_KEY_UPDATE_ASKED (1 << 7) /* flag is not used during handshake */
 #define HSK_FALSE_START_USED (1 << 8) /* TLS1.2 only */
 #define HSK_HAVE_FFDHE \
-       (1 << 9) /* whether the peer has advertized at least an FFDHE group */
+       (1 << 9) /* whether the peer has advertised at least an FFDHE group */
 #define HSK_USED_FFDHE \
        (1 << 10) /* whether ffdhe was actually negotiated and used */
 #define HSK_PSK_KE_MODES_SENT (1 << 11)

diff --git a/lib/handshake.c b/lib/handshake.c
index ebc8e90b54bc7bee68cb23b95cc300bb89d03376..6aa716f12569c1ef30881f07b4d8a6be4c18d337 100644 (file)
--- a/lib/handshake.c
+++ b/lib/handshake.c
@@ -460,7 +460,7 @@ int _gnutls_negotiate_version(gnutls_session_t session, uint8_t major,
        const version_entry_st *aversion = nversion_to_entry(major, minor);
 
        /* if we do not support that version, unless that version is TLS 1.2;
-        * TLS 1.2 is handled separately because it is always advertized under TLS 1.3 or later */
+        * TLS 1.2 is handled separately because it is always advertised under TLS 1.3 or later */
        if (aversion == NULL ||
            _gnutls_nversion_is_supported(session, major, minor) == 0) {
                if (aversion && aversion->id == GNUTLS_TLS1_2) {
@@ -2206,7 +2206,7 @@ static int send_client_hello(gnutls_session_t session, int again)
                /* if we are replying to an HRR the version is already negotiated */
                if (!(session->internals.hsk_flags & HSK_HRR_RECEIVED) ||
                    !get_version(session)) {
-                       /* Set the version we advertized as maximum
+                       /* Set the version we advertised as maximum
                         * (RSA uses it). */
                        set_adv_version(session, hver->major, hver->minor);
                        if (_gnutls_set_current_version(session, hver->id) <

diff --git a/lib/hello_ext.h b/lib/hello_ext.h
index c7d28e2b71777ee0432f9a07517fbaa7eb0eb2dd..33974dd600f340f0b7a2a783a4ebf4d8b221e895 100644 (file)
--- a/lib/hello_ext.h
+++ b/lib/hello_ext.h
@@ -158,7 +158,7 @@ typedef struct hello_ext_entry_st {
 
 /* Checks if the extension @id provided has been requested
  * by us (in client side).In server side it checks whether this
- * extension was advertized by the client.
+ * extension was advertised by the client.
  *
  * It returns non-zero for true, otherwise zero.
  */

diff --git a/lib/includes/gnutls/gnutls.h.in b/lib/includes/gnutls/gnutls.h.in
index dc9b4e307857de48d516f7e62c198a26e245f6b4..53164d0a2b5309288df10ec5394e5b1fd0f60da8 100644 (file)
--- a/lib/includes/gnutls/gnutls.h.in
+++ b/lib/includes/gnutls/gnutls.h.in
@@ -467,7 +467,7 @@ typedef enum {
  *   For example (ECDH + x25519). This is the default.
  * @GNUTLS_KEY_SHARE_TOP: Generate key share for the first group which is enabled.
  *   For example x25519. This option is the most performant for client (less CPU spent
- *   generating keys), but if the server doesn't support the advertized option it may
+ *   generating keys), but if the server doesn't support the advertised option it may
  *   result to more roundtrips needed to discover the server's choice.
  * @GNUTLS_NO_AUTO_REKEY: Disable auto-rekeying under TLS1.3. If this option is not specified
  *   gnutls will force a rekey after 2^24 records have been sent.

diff --git a/lib/record.c b/lib/record.c
index 344247a3922e64386f64298426fc8744fcef3d3b..7eefb381fbe2dfc40dbf0197f9de54417744e07b 100644 (file)
--- a/lib/record.c
+++ b/lib/record.c
@@ -681,7 +681,7 @@ static int get_packet_from_buffers(gnutls_session_t session,
        return 0;
 }
 
-/* Here we check if the advertized version is the one we
+/* Here we check if the advertised version is the one we
  * negotiated in the handshake.
  */
 inline static int record_check_version(gnutls_session_t session,
@@ -1201,7 +1201,7 @@ static int recv_headers(gnutls_session_t session,
        if ((ret = check_recv_type(session, record->type)) < 0)
                return gnutls_assert_val(ret);
 
-       /* Here we check if the advertized version is the one we
+       /* Here we check if the advertised version is the one we
         * negotiated in the handshake.
         */
        if ((ret = record_check_version(session, htype, record->version)) < 0)

diff --git a/lib/x509/privkey.c b/lib/x509/privkey.c
index e43ce81b945037877786acfb230bbcf567c5ed2f..25226ba1c52988543dab483c3b337fa47ba5f7f9 100644 (file)
--- a/lib/x509/privkey.c
+++ b/lib/x509/privkey.c
@@ -64,7 +64,7 @@ void _gnutls_x509_privkey_reinit(gnutls_x509_privkey_t key)
 {
        gnutls_pk_params_clear(&key->params);
        gnutls_pk_params_release(&key->params);
-       /* avoid re-use of fields which may have had some sensible value */
+       /* avoid reuse of fields which may have had some sensible value */
        zeroize_key(&key->params, sizeof(key->params));
 
        if (key->key)

diff --git a/lib/x509/verify.c b/lib/x509/verify.c
index 8f28ee91570ac194dfc68d46e1b7459ce03471b4..6fe072b6c75593433566bcd2f8d1b5ba7133ed9f 100644 (file)
--- a/lib/x509/verify.c
+++ b/lib/x509/verify.c
@@ -664,7 +664,7 @@ static unsigned verify_crt(gnutls_x509_trust_list_t tlist,
 
        if (vparams->max_path == 0) {
                MARK_INVALID(GNUTLS_CERT_SIGNER_CONSTRAINTS_FAILURE);
-               /* bail immediately, to avoid inconistency  */
+               /* bail immediately, to avoid inconsistency  */
                goto cleanup;
        }
        vparams->max_path--;

diff --git a/libdane/dane.c b/libdane/dane.c
index dd0851fb16cace3eee2f2720456d7e7609f43a9f..5f1c28af74be8ca248bba76ab2d8062608d21bba 100644 (file)
--- a/libdane/dane.c
+++ b/libdane/dane.c
@@ -823,7 +823,7 @@ cleanup:
  * PKIX - certificate chain - verification. To be run independently
  * the %DANE_VFLAG_ONLY_CHECK_EE_USAGE flag should be specified;
  * then the function will check whether the key of the peer matches the
- * key advertized in the DANE entry.
+ * key advertised in the DANE entry.
  *
  * Returns: a negative error code on error and %DANE_E_SUCCESS (0)
  * when the DANE entries were successfully parsed, irrespective of

diff --git a/src/pkcs11.c b/src/pkcs11.c
index 6b6ab8f08ac9ee32ce1cf8e29757d8bad53bd178..66db5b26f72747876f50a06030d2570f49ce1589 100644 (file)
--- a/src/pkcs11.c
+++ b/src/pkcs11.c
@@ -1237,7 +1237,7 @@ void pkcs11_write(FILE *outfile, const char *url, const char *label,
                    !(flags & GNUTLS_PKCS11_OBJ_FLAG_MARK_DISTRUSTED)) {
                        gnutls_datum_t hex;
                        /* attempting to discover public keys matching this one,
-                        * and if yes, re-use their ID. We don't do it for CAs (trusted/distrusted
+                        * and if yes, reuse their ID. We don't do it for CAs (trusted/distrusted
                         * or explicitly marked as such. */
 
                        /* try without login */
@@ -1257,7 +1257,7 @@ void pkcs11_write(FILE *outfile, const char *url, const char *label,
                                        app_exit(1);
                                }
                                fprintf(stderr,
-                                       "note: will re-use ID %s from corresponding public key\n",
+                                       "note: will reuse ID %s from corresponding public key\n",
                                        hex.data);
                                gnutls_free(hex.data);
 
@@ -1274,7 +1274,7 @@ void pkcs11_write(FILE *outfile, const char *url, const char *label,
                                                app_exit(1);
                                        }
                                        fprintf(stderr,
-                                               "note: will re-use ID %s from corresponding private key\n",
+                                               "note: will reuse ID %s from corresponding private key\n",
                                                hex.data);
                                        gnutls_free(hex.data);
                                }

diff --git a/tests/cert-tests/invalid-sig.sh b/tests/cert-tests/invalid-sig.sh
index 68272a13bd2b9fbbf3a54e2951ee24889c85997c..da37eba7dbbd28258b2d532b02723e72494338f7 100644 (file)
--- a/tests/cert-tests/invalid-sig.sh
+++ b/tests/cert-tests/invalid-sig.sh
@@ -34,7 +34,7 @@ fi
 
 . ${srcdir}/../scripts/common.sh
 
-#check whether a different PKCS #1 signature than the advertized in certificate is tolerated
+#check whether a different PKCS #1 signature than the advertised in certificate is tolerated
 ${VALGRIND} "${CERTTOOL}" -e --infile "${srcdir}/data/invalid-sig.pem"
 rc=$?
 

diff --git a/tests/rng-fork.c b/tests/rng-fork.c
index dec5592be6f9a47ba743c195afe006f61f7e342e..6e75b9d786372745d7b22f1bd4d7a29a426b6877 100644 (file)
--- a/tests/rng-fork.c
+++ b/tests/rng-fork.c
@@ -98,7 +98,7 @@ void doit(void)
                        }
 
                        if (memcmp(buf1, buf2, sizeof(buf1)) == 0) {
-                               fail("error in the random generator (%u). Produces same valus after fork()\n",
+                               fail("error in the random generator (%u). Produces same values after fork()\n",
                                     i);
                                return;
                        }

diff --git a/tests/set_key_utf8.c b/tests/set_key_utf8.c
index 3e7c6ccbb306af643bfbe383efde6c4da74125fe..52a226a690fae9e0f76806ee8420b41219e835f6 100644 (file)
--- a/tests/set_key_utf8.c
+++ b/tests/set_key_utf8.c
@@ -150,7 +150,7 @@ static void auto_parse(void)
                      "xn--fiqu1az03c18t.xn--mxah1amo.com", NULL, NULL,
                      NULL); /* its IDNA equivalent */
 
-       /* the raw DNS should result to verification failure as the advertized name should
+       /* the raw DNS should result to verification failure as the advertised name should
         * not be considered and the first cert should be provided */
        test_cli_serv_expect(x509_cred, clicred, "NORMAL", "NORMAL",
                             "raw:简体中文.εξτρα.com",