Age | Commit message (Collapse) | Author | |
---|---|---|---|
2018-02-15 | DANE: move to mainline | Jeremy Harris | |
2017-12-22 | DANE/GnuTLS: split verification of mixed sets of TLSA records by usage | Jeremy Harris | |
This is because we cannot do the required CA-anchor and names checks for TA-mode and not for EE-mode, without knowing which usage TLSA was used. | |||
2017-12-20 | DANE/GnuTLS: ignore traditional CA anchor validation in DANE-EE mode | Jeremy Harris | |
Not quite right for a mixed TA+EE set of TLSA records, but better than always-enforcing | |||
2017-12-19 | DANE: support under GnuTLS. Bug 1523 | Jeremy Harris | |
GnuTLS version 3.0.0 onwards; still Experimental | |||
2014-08-14 | Shuffle test order | Jeremy Harris | |