samba.git/source4/lib/tls, branch talloc-2.3.2

s3:lib:tls: Use better priority lists for modern GnuTLS

2020-06-17T17:42:02+00:00

We should use the default priority list. That is a good practice,
because TLS protocol hardening and phasing out of legacy algorithms,
is easier to co-ordinate when happens at a single place. See crypto
policies of Fedora.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14408

Signed-off-by: Andreas Schneider 
Reviewed-by: Alexander Bokovoy 

Autobuild-User(master): Andreas Schneider 
Autobuild-Date(master): Wed Jun 17 17:42:02 UTC 2020 on sn-devel-184

s4:tls: Fix generating TLS RSA certs with FIPS140-2

2020-04-08T13:02:39+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Guenther Deschner

s4:lib:tls: Fix cert and privkey types

2019-11-19T04:48:29+00:00

../../source4/lib/tls/tlscert.c:42:2: warning: ‘gnutls_x509_crt’ is
    deprecated [-Wdeprecated-declarations]
   42 |  gnutls_x509_crt cacrt, crt;
      |  ^~~~~~~~~~~~~~~
../../source4/lib/tls/tlscert.c:43:2: warning: ‘gnutls_x509_privkey’ is
    deprecated [-Wdeprecated-declarations]
   43 |  gnutls_x509_privkey key, cakey;
      |  ^~~~~~~~~~~~~~~~~~~

Signed-off-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett

s4:lib: Remove gnutls_global_(de)init() from libtls

2019-11-14T08:01:44+00:00

This is handled by the gnutls library constructor/destructor.

Signed-off-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett

lib/tls: Remove unused header definitions from source4/lib/tls/tls.h (tls socket wrapper)

2019-06-26T04:12:32+00:00

These were removed in eb15acdd35600878aba3319e070199200d9a1357 but the
header declarations were not removed.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall

lib/tls: Remove unused source4/lib/tls/tls.c (tls socket wrapper)

2019-05-06T05:46:11+00:00

The last caller was removed in 72c79e30f07bcc98610cca878f5de50e7db239a0
to remove the web server as all other callers use tls_tstream.

Found by callcatcher.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Gary Lockyer

waf: Remove configure steps from source4/lib/tls

2019-04-30T23:18:27+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett

s3:tls: Remove #ifdef for GnuTLS

2019-04-30T23:18:26+00:00

This is a requirement now.

Signed-off-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett

s4:lib: Use #ifdef instead of #if for config.h definitions

2018-11-28T22:19:24+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Gary Lockyer

source4/lib/tls/wscript: update to handle waf 2.0.4

2018-09-05T04:37:24+00:00

Signed-off-by: Alexander Bokovoy 
Reviewed-by: Andrew Bartlett