Age | Commit message (Collapse) | Author |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
and returning an AD bit for lookups.
|
|
be dnssec before declaring the lookup was secure.
|
|
|
|
|
|
Not actually excercising DANE yet,
this will take additions in the fakedns and
probably changes in certificates.
|
|
|
|
|
|
|
|
|
|
Insert a custom-munge for the new transport option.
This may be removed once the code goes mainline.
|
|
|
|
|
|
|
|
being explored by the test
|
|
Bug 1489
|
|
|
|
Enable EXPERIMENTAL_CERTNAMES to include.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Fix an unterminated comment from 018058b
|
|
|
|
|
|
and smtp transport option hosts_request_ocsp
|
|
|
|
|
|
|
|
Typo
|
|
|
|
|
|
Includes docs and test suite
|
|
Requires GnuTLS version 3.1.3 or later.
Under EXPERIMENTAL_OCSP
|
|
|
|
GnuTLS early versions (pre 3.0.0 ?) fail to send a reasonable
client-cert request when tls_verify_certificates is an empty file.
Since the test is for missing *server* certs (tls_certificate)
avoid this by pointing to a real (if non-verifying) cert in
tls_verify_certificates.
|
|
by restricting operations and logging to fewer items of interest
|