summaryrefslogtreecommitdiffstats
path: root/source4/lib/tls
Commit message (Collapse)AuthorAgeFilesLines
* tls_tstream: use a dynamic buffer for the push caseStefan Metzmacher2010-12-041-6/+21
| | | | | | | | | Some versions of gnutls doesn't handle EAGAIN correctly, so we better allow sending buffers without a low size limitation, the limit is now UINT16_MAX (0xFFFF) and we allocate the buffer with talloc each time. metze
* tls_tstream: increase the buffer sizeMatthieu Patou2010-12-041-1/+1
| | | | | | | | | | | | | | | | The problem is that with certain version of gnutls are not working properly if the server is sending in different packet things like (at least) * Certificate * Server Key exchange * Client certificate Somehow it really expect this to be done in one packet as some structures used _gnutls_send_handshake are reinitialized at every packet exchange and intermediate steps didn't expect it Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4:lib/tls/tls_tstream.c - quiet warning on Solaris "cc" by castsMatthias Dieter Wallnöfer2010-11-291-2/+2
|
* s4: Remove the old perl/m4/make/mk-based build system.Jelmer Vernooij2010-10-312-53/+0
| | | | | | | | The new waf-based build system now has all the same functionality, and the old build system has been broken for quite some time. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Oct 31 02:01:44 UTC 2010 on sn-devel-104
* tls: Inform the user if the cert/ca/private key can't be savedMatthieu Patou2010-10-271-3/+12
| | | | | | | | Most of the time this problem is due to a missing <private>/tls dir. Should close bug 7640. Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Wed Oct 27 20:08:54 UTC 2010 on sn-devel-104
* waf: Remove lib prefix from libraries manually.Jelmer Vernooij2010-10-261-1/+1
|
* s4: Rename LIBSAMBA-* to libsamba-*Jelmer Vernooij2010-10-241-1/+1
|
* tls: add missing dependency on util_tevent.Jelmer Vernooij2010-10-101-1/+1
|
* s4:lib/tls: buffer writes in tstream_tls_push_function()Stefan Metzmacher2010-10-081-10/+76
| | | | | | | | | | | | This works arround bugs in gnutls_handshake(), which diesn't handle EAGAIN correctly, when they use the push function. Thanks to Marcel.Ritter@rrze.uni-erlangen.de and Matthieu Patou <mat@samba.org> for the debugging work on bug #7218. metze
* s4:lib/tls: make more clear what the immediate event is forStefan Metzmacher2010-10-081-6/+6
| | | | metze
* s4:lib/tls: fix enabled logic in tstream_tls_params_server()Stefan Metzmacher2010-10-082-2/+12
| | | | metze
* s4:lib/tls: add gnutls backend for tstreamStefan Metzmacher2010-09-283-3/+1298
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Sep 28 02:29:42 UTC 2010 on sn-devel-104
* s4-loadparm: 2nd half of lp_ to lpcfg_ conversionAndrew Tridgell2010-07-161-8/+8
| | | | | | | this converts all callers that use the Samba4 loadparm lp_ calling convention to use the lpcfg_ prefix. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-waf: mark the wscript files as python so vim/emacs knows how to highlight ↵Andrew Tridgell2010-04-061-0/+2
| | | | them
* s4-waf: disable_gnutls is goneAndrew Tridgell2010-04-061-1/+1
|
* build: need to mark disabled libraries as DISABLEDAndrew Tridgell2010-04-061-2/+4
|
* build: honor both --enable-gnutls and --disable-gnutlsAndrew Tridgell2010-04-061-5/+12
| | | | | This shows how we can do the dual-boolean rules we use so much with autoconf
* build: add cflags from pkg_config results to header/function testsAndrew Tridgell2010-04-061-4/+8
| | | | | | | | | When we find a package with pkg_config we may need to use the resulting ccflags and ldflags in later tests. Support this by adding lib= options to CHECK_FUNC and CHECK_HEADER This gets gnutls on FreeBSD working
* build: configure fixes for opensolarisAndrew Tridgell2010-04-061-0/+7
|
* build: updated configure checks or new syntaxAndrew Tridgell2010-04-061-6/+3
|
* build: fixed gnutls checkAndrew Tridgell2010-04-061-1/+1
|
* build: nearly there on samba4 buildAndrew Tridgell2010-04-061-1/+3
|
* build: check for libgpg-errorAndrew Tridgell2010-04-061-1/+3
|
* build: gcrypt functionsAndrew Tridgell2010-04-061-1/+1
|
* build: more config checksAndrew Tridgell2010-04-061-0/+3
|
* build: waf build for lib/tlsAndrew Tridgell2010-04-061-0/+27
|
* s4:tls: fix the build on SolarisBrian Lu2009-12-151-0/+3
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4: Changes the old occurences of "lp_realm" in "lp_dnsdomain" where neededMatthias Dieter Wallnöfer2009-10-141-1/+2
| | | | | | For KERBEROS applications the realm should be upcase (function "lp_realm") but for DNS ones it should be used lowcase (function "lp_dnsdomain"). This patch implements the use of both in the right way.
* raise the debug level for a common messageAndrew Tridgell2009-08-121-1/+1
| | | | | when a client disconnects we expect this to happen, so don't print an error each time
* s4:tls: avoid using talloc_reference() in tls_init_client()Stefan Metzmacher2009-07-311-6/+2
| | | | metze
* s4:tls: avoid using talloc_reference() in tls_init_server()Stefan Metzmacher2009-07-311-8/+1
| | | | metze
* s4:tls Enable GnuTLS back to version 1.4 (an into the future)Andrew Bartlett2009-07-281-1/+1
| | | | | | We think we have the bug fixed. Andrew Bartlett
* Fixed some uninitialised variablesMatthias Dieter Wallnöfer2009-06-191-2/+1
| | | | I tried hard to not change the program logic. Should fix bug #6439.
* Make S4 build on OpenSolaris.Jeremy Allison2009-02-242-1/+3
| | | | Jeremy.
* fixed some of the TLS problemsAndrew Tridgell2009-02-183-10/+22
| | | | | | | | | | | | | This fixes two things in the TLS support for Samba4. The first is to use a somewhat more correct hostname instead of 'Samba' when generating the test certificates. That allows TLS test clients (such as gnutls-cli) to connect to Samba4 using auto-generated certificates. The second fix is to add a call to gcry_control() to tell gcrypt to use /dev/urandom instead of /dev/random (on systems that support that). That means that test certificate generation is now very fast, which was previously an impediment to putting the TLS tests on the build farm.
* Fix indentation for some configure options.Jelmer Vernooij2009-01-151-1/+1
|
* Don't attempt to use GNUTLS >= 2.6, as it is known broken with the ↵Jelmer Vernooij2009-01-081-30/+28
| | | | socket-tls backend.
* s4:lib/tevent: rename structsStefan Metzmacher2008-12-292-7/+7
| | | | | | | | | | | | | | | | | | | | list="" list="$list event_context:tevent_context" list="$list fd_event:tevent_fd" list="$list timed_event:tevent_timer" for s in $list; do o=`echo $s | cut -d ':' -f1` n=`echo $s | cut -d ':' -f2` r=`git grep "struct $o" |cut -d ':' -f1 |sort -u` files=`echo "$r" | grep -v source3 | grep -v nsswitch | grep -v packaging4` for f in $files; do cat $f | sed -e "s/struct $o/struct $n/g" > $f.tmp mv $f.tmp $f done done metze
* Rename samba-socket -> samba_socket to fix a couple more compilerJelmer Vernooij2008-12-241-1/+1
| | | | warnings.
* Fix more compiler warnings.Jelmer Vernooij2008-12-231-10/+10
|
* Make lp_tls_* return absolute paths.Jelmer Vernooij2008-10-231-5/+5
|
* Make sure prototypes are always included, make some functions static andJelmer Vernooij2008-10-202-1/+4
| | | | remove some unused functions.
* Use common util_file code.Jelmer Vernooij2008-10-121-1/+1
|
* Make it possible to disable gnutls at configure time,Simo Sorce2008-06-081-25/+36
| | | | | until someone will finally decide to fix it. (This used to be commit 0671dce355432a2a4c08ab010831eadd73e4561e)
* Use variables for source directory in remaining subsystems.Jelmer Vernooij2008-05-181-1/+1
| | | | (This used to be commit 6b6b2196a8a8d9e741f5c399185ded7a16938da0)
* Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-gmake3Jelmer Vernooij2008-04-081-3/+1
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: source/auth/credentials/config.mk source/auth/gensec/config.mk source/build/smb_build/makefile.pm source/heimdal_build/config.mk source/lib/events/config.mk source/lib/nss_wrapper/config.mk source/lib/policy/config.mk source/lib/registry/config.mk source/lib/socket_wrapper/config.mk source/lib/tdb/config.mk source/lib/tls/config.mk source/lib/util/config.mk source/libcli/config.mk source/libcli/ldap/config.mk source/libnet/config.mk source/librpc/config.mk source/param/config.mk source/rpc_server/config.mk source/scripting/ejs/config.mk source/smbd/process_model.mk (This used to be commit 760378e0294dd0cd4523a83448328478632d7e3d)
| * Rename libsamba-config to libsamba-hostconfig.Jelmer Vernooij2008-04-011-1/+1
| | | | | | | | (This used to be commit c46b7e90e347da76156ddcae4866adb88e9fec21)
* | Move object file lists to the Makefile.Jelmer Vernooij2008-03-031-6/+2
|/ | | | (This used to be commit a7e6d2a1832db388fdafa1279f84c9a8bbfc87d6)
* Make data about what subsystems/libraries are enabled available in the ↵Jelmer Vernooij2008-02-111-1/+3
| | | | | | mkconfig.mk file. (This used to be commit 4cc93a98f984d322e41f403169cfa4945b469935)
* r26238: Add a loadparm context parameter to torture_context, remove more ↵Jelmer Vernooij2007-12-212-18/+17
| | | | | | uses of global_loadparm. (This used to be commit a33a5530545086b81a3b205aa109dff11c546926)