SKIP tests/suite/eagain if libev not available

Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

Merge branch 'topsrcdir' into 'master'

tests/Makefile.am: use absolute top_srcdir for GNUTLS_PRIORITY_FILE

See merge request gnutls/gnutls!1156

tests/Makefile.am: use absolute top_srcdir for GNUTLS_PRIORITY_FILE

Some tests, e.g. in suite/tls-fuzzer execute scripts from
sub-directories, making the relative path to system.prio in the
environment pointing to a non-existent file. Export system.prio
testsuite file as an absolute path to avoid this issue.

Signed-off-by: Dimitri John Ledkov <xnox@ubuntu.com>

Merge branch 'estanglerbm-getrandom' into 'master'

Fixes dummy getrandom() when errno = EAGAIN.

Closes #892

See merge request gnutls/gnutls!1150

Merge branch 'tmp-ci-remove-command-concat' into 'master'

Remove && command concatenation in .gitlab-ci.yml

Closes #896

See merge request gnutls/gnutls!1152

doc: updated epub.texi from gnutls.texi

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

.gitlab-ci.yml: identify on runtime to db2epub directory

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Remove && command concatenation in .gitlab-ci.yml

As it turns out, `set -e` doesn't work if one of the commands fail,
maybe except the last command.
Seen, tested and reproduced on Fedora28 image.

Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

Merge branch 'tmp-check-fuzz' into 'master'

UB+ASAN: Fail tests if UB detected

Closes #882 and #878

See merge request gnutls/gnutls!1136

.gitlab-ci.yml: merged ASAN and UBSAN runs

This in addition to merging the two CI runs, it also attempts
to run the fuzz code under SHANI for CI.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Fixes dummy getrandom() when errno = EAGAIN.

Fixes #892.

Signed-off-by: Edward Stangler <estangler@bradmark.com>

Fix '-Werror=unused-const-variable=' in fuzz/

Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

Fix NULL ptr access in _gnutls_iov_iter_next()

Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

Use check_for_datefudge in tests

Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

Fix "left shift cannot be represented in type 'int'" in hello_ext.[ch]

Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

Fix 2x -Wunused-function in tests/

Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

certtool-cfg.c: Silence -Wunused-variable if HAVE_IPV6 not set

Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

status_request.c: Silence -Wsign-compare

Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

rnd-fuzzer.c: Suppress shift sanitization check

Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

handshake.c: Suppress warning in fuzzing build

Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

Fix implicit value change in verify-high.c

verify-high.c:284:7: runtime error: implicit conversion from type 'size_t'
(aka 'unsigned long') of value 15421545260338 418178 (64-bit, unsigned) to
type 'uint32_t' (aka 'unsigned int') changed the value to 437555714 (32-bit,
unsigned)

Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

UBSAN: Fail tests if UB detected

Suppressions are in devel/ubsan.supp.
Suppressions only work on recoverable checks.

Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

Merge branch 'tmp-libev' into 'master'

ecore cli: updated and rewritten to use libev

Closes #884

See merge request gnutls/gnutls!1148

tests/suite: do not include scripts into dist

This part of the test suite is only run on CI.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

ecore cli: updated and rewritten to use libev

That removes a lot of code that was not necessary in the gnutls test
suite.

Resolves: #884

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

.gitlab-ci.yml: use separate images for mingw and fedora builds

This should result to faster image loading for CI builds.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Merge branch 'tmp-fix-slow-tests' into 'master'

tests: use newer nettle APIs in cipher-override.c

See merge request gnutls/gnutls!1149

tests: use newer nettle APIs in cipher-override.c

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Merge branch 'tmp-update-copyright' into 'master'

doc: updated copyrights for 2020

See merge request gnutls/gnutls!1147

doc: updated copyrights for 2020

This updates the copyright year for documentation
and excludes gnulib files from the copyright check.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Merge branch 'wip-arch-independent-scm' into 'master'

guile: Arrange to make 'gnutls.scm' architecture-independent.

Closes #838

See merge request gnutls/gnutls!1121

Merge branch 'fix-gost-bench' into 'master'

Fix gnutls-cli compilation with GOST disabled

See merge request gnutls/gnutls!1143

cli: fix building with GOST disabled

Fix building gnutls-cli (benchmark part) with GOST keys support being
disabled.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

cli: support building with OCSP and ANON disabled

Support gnutls-cli when building GnuTLS with OCSP and ANON
authentication API disabled.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

serv: support building with OCSP disabled

Support gnutls-serv when building GnuTLS with OCSP API disabled.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Merge branch 'gost-split-5' into 'master'

Workaround for SChannel limitations

See merge request gnutls/gnutls!1138

tls12-server-kx-neg: add tests without GOST signature algorithms

Add tests mimicking SChannel clients which are unable to send proper
SignatureAlgorithms extension.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

SignatureAlgorithms: force-enable GOST signatures for GOST KX

SChannel-based clients can not send GOST identifiers as a part of
SignatureAlgorithms extension. To mitigate this forcefully enable GOST
signature algorithms if client sends GOST ciphersuite.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Merge branch 'gost-bench' into 'master'

Benchmark GOST ciphers/ciphersuites

See merge request gnutls/gnutls!1142

benchmark: enable benchmarking of GOST CNT ciphersuite/KX

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

benchmark: support benchmarking GOST ciphers/MACs

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

benchmark: use mac key size instead of block size

Use newly added gnutls_hmac_get_key_size() to get key size instead of
assuming that key size = block size (incorrect for GOST 28147 IMIT).

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

crypto-api: add gnutls_hmac_get_key_size() function

Add gnutls_hmac_get_key_size() to retrieve MAC key size.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

nettle/gost: remove gost28147_imit_init

Rewrite gost28147 imit code to clean up state and index on key setup to
be sure that imit context is properly cleaned.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

guile: Arrange to make 'gnutls.scm' architecture-independent.

Fixes #838.
Reported by Andreas Metzler.

* configure.ac: Define and substitute 'maybe_guileextensiondir'.
* guile/Makefile.am (.in.scm): Substitute 'maybe_guileextensiondir'.
* guile/modules/gnutls.in <top level>: Use @maybe_guileextensiondir@.
Check if %LIBDIR is true.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

Merge branch 'tmp-strict-x509-time' into 'master'

Do not tolerate invalid DER time

Closes #207

See merge request gnutls/gnutls!1141

x509: do not tolerate invalid DER time

This effectively reverts !400 and ensures that we no longer tolerate
invalid DER time. This complements the previous commit by Lili Quan
and ensures we provide the --disable-strict-der-time backwards compatibility
option.

Resolves: #207

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Merge branch 'tmp-certtool-crq' into 'master'

certtool: always set extensions from template

See merge request gnutls/gnutls!1130

Merge branch 'tmp-gnutls-cli' into 'master'

Improvements in gnutls-cli --benchmark-tls-kx

See merge request gnutls/gnutls!1128

certtool: always set extensions from template

Previously we would only set these extensions specific with add_extension
when generating using --generate-certificate. The change makes sure these
options are considered even when generating an extension from a certificate
request. Issue reported on the mailing list.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

tests: check certificate generation from certificate request

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Merge branch 'tmp-fix-serv-exit' into 'master'

gnutls-serv: do not exit on command failure

Closes #868

See merge request gnutls/gnutls!1129

Merge branch 'abi-fix' into 'master'

abi-check: fix include paths

See merge request gnutls/gnutls!1139

Merge branch 'tmp-check-same-certs' into 'master'

_gnutls_verify_crt_status: apply algorithm checks to trusted CAs and other cert improvements

Closes #877

See merge request gnutls/gnutls!1140

tests: ensure test suite does not apply global config

When running the test suite we do not apply the global
gnutls configration as it may change options that are
tested.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

gnutls-cli: improved output of --benchmark-tls-kx

It is now printed in a way that separates the tests. Example:
```
(TLS1.3)-(ECDHE-SECP256R1)-(RSA-PSS-RSAE-SHA256)-(AES-128-GCM)
 - 179.19 transactions/sec
 - avg. handshake time: 5.57 ms
 - standard deviation: 0.57

(TLS1.3)-(ECDHE-X25519)-(RSA-PSS-RSAE-SHA256)-(AES-128-GCM)
 - 182.24 transactions/sec
 - avg. handshake time: 5.48 ms
 - standard deviation: 0.64
```

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

gnutls-cli: benchmark-tls-kx can work with sub-ms accuracy

This allows micro and nanoseconds to be reported if necessary,
and it changes reporting of sample variance to standard deviation
giving a possibly better overview as it is in the same units as
the average.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Merge branch 'gost-split-4' into 'master'

gnutls-cli-debug: add GOST_CNT-related KX/cipher/MAC tests

See merge request gnutls/gnutls!1137

gnutls-cli-debug: add GOST_CNT-related KX/cipher/MAC tests

Add test for VKO-GOST-12, GOST28147-TC26Z-CNT and GOST28147-TC26Z-IMIT
support by the server.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

README.md: updated to list fuzz coverage results [ci skip]

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

doc: update reference to the default configuration file

Signed-off-by: Dimitri John Ledkov <xnox@ubuntu.com>

updated auto-generated files

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

_gnutls_verify_crt_status: apply algorithm checks to trusted CAs

If a CA is found in the trusted list, check in addition to
time validity, whether the algorithms comply to the expected
level. This addresses the problem of accepting CAs which would
have been marked as insecure otherwise.

Resolves: #877

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

certtool: added option to apply a certificate verification profile

This applies to the --verify and --verify-chain commands.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Export profile ID/name handling functions

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

is_level_acceptable: apply the system-wide profile in all verifications

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Introduced check to reject certificates with non-digits in time field

According to RFC5280 we should reject such certificates.

Resolves: #870

Signed-off-by: Lili Quan <13132239506@163.com>

abi-check: fix include paths

If GnuTLS is built outside of source tree, abicheck will miss gnutls.h
header which is generated in the build tree. Expand arguments to include
it.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Merge branch 'gost-split-3' into 'master'

Add GOST-CNT ciphersuite support

See merge request gnutls/gnutls!1119

doc: document GROUP-GOST-ALL keyword

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

NEWS: add news entry, describing TLS 1.3 vs GOST issues

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

ext/signature: use GOST signatures for GOST ciphersiuites

draft-smyshlyaev-tls12-gost-suites limits SignatureAndHash algorithms
in CertificateRequest message to GOST values if GOST cipher suite is
selected.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

tls13-server-kx-neg: add test for GOST-enabled server and client

If both client and server have enabled TLS 1.3 and GOST-CNT
ciphersuites, they should correctly negotiate a connection, but using
TLS 1.2 version.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

tests: added testcases for ciphersuite/KX negotiation with VKO-GOST

This verifies whether the ciphersuite negotiation will detect and
reject incompatible data present in credentials.

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

tests: add tests for KX-GOST-VKO using different key variants

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Add GOST cipher suites

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

priority: add GROUP-GOST-ALL keyword

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Support GOST certificate request values

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

lib: fix group selection in case of GOST cipher suites

Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>

Merge branch 'tmp-ext-fuzzer' into 'master'

fuzzer: added fuzzer for gnutls_ext_raw_parse() [ci skip]

See merge request gnutls/gnutls!1133

Sync with fuzzers from OSS-Fuzz

Only lots of corpora removed (by merge step). Not sure why.
But there are several new UBs detected.

Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

Amend fuzz scripts and README for clang-8

Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

Add fuzz corpora for gnutls_ext_raw_parse_fuzzer

Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

fuzzer: added fuzzer for gnutls_ext_raw_parse()

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

README.md: updated CI build badge [ci skip]

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Merge branch 'tmp-more-const-1' into 'master'

Add const to function arguments in lib/x509

See merge request gnutls/gnutls!1007

abi: updated to latest const changes and added NEWS entry

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Add const to function arguments in lib/x509

This change does not introduce functionality changes.
It just adds const promises to the caller.

Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>

gnutls-serv: do not exit on command failure

If gnutls_reauth() or gnutls_heartbeat_ping() fail, gnutls-serv
would simply quit. This prevents using this tool in a test environment
like tlsfuzzer. Ensure that we don't quit on error.

Resolves: #868

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

Merge branch 'AVOID_INTERNALS' into 'master'

lib: remove obsolete AVOID_INTERNALS

See merge request gnutls/gnutls!1127

.triage-policies.yml: updated to work with latest gitlab-triage [ci skip]

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

lib: remove obsolete AVOID_INTERNALS

Although commit 1f246c381e8a7449d84b143ffe50a0818622d2a3 enabled
the self-check functions unconditionally, the #ifdefs AVOID_INTERNALS
remained in lib/crypto-selftests-pk.c.

Signed-off-by: Vitezslav Cizek <vcizek@suse.com>

Revert "Released 3.6.11.1 including missing files"

This reverts commit 1e9c9ba0c0798b5566902e6c5ab83418826dd7f5.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Released 3.6.11.1 including missing files

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Merge branch 'tmp-libopts-fix' into 'master'

libopts: include new files into dist

Closes #867

See merge request gnutls/gnutls!1126

libopts: include new files into dist

This also includes --enable-local-libopts flag to make dist
to catch future regressions.

Resolves: #867

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

released 3.6.11

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Write OCSP status request debug information to logfile, if set

The status information not part of the payload data and should be
separate when using --logfile.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>

Send log messages about loading client credentials to logfile, if set

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>

.travis.yml: explicitly install openssl to address build issue

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>