Daniel P. Berrangé d58f9b20c7 crypto: deprecate use of external dh-params.pem file ...

GNUTLS has deprecated use of externally provided diffie-hellman
parameters. Since 3.6.0 it will automatically negotiate DH params
in accordance with RFC7919.

Reviewed-by: Marc-André Lureau <marcandre.lureau@redhat.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>

2025-11-03 10:45:55 +00:00

..

aes.c

target/riscv: Use existing lookup tables for MixColumns

2023-09-11 11:45:54 +10:00

afalg.c

qapi/crypto: Rename QCryptoAFAlg to QCryptoAFAlgo

2024-09-10 14:03:30 +02:00

afalgpriv.h

qapi/crypto: Rename QCryptoAFAlg to QCryptoAFAlgo

2024-09-10 14:03:30 +02:00

afsplit.c

qapi/crypto: Rename QCryptoHashAlgorithm to *Algo, and drop prefix

2024-09-10 14:02:16 +02:00

akcipher-gcrypt.c.inc

include: Rename sysemu/ -> system/

2024-12-20 17:44:56 +01:00

akcipher-nettle.c.inc

include: Rename sysemu/ -> system/

2024-12-20 17:44:56 +01:00

akcipher.c

qapi/crypto: Rename QCryptoAkCipherAlgorithm to *Algo, and drop prefix

2024-09-10 14:03:30 +02:00

akcipherpriv.h

qapi/crypto: Rename QCryptoAkCipherAlgorithm to *Algo, and drop prefix

2024-09-10 14:03:30 +02:00

block-luks-priv.h

crypto: Clean up includes

2023-02-08 07:16:23 +01:00

block-luks.c

qapi/crypto: Rename QCryptoIVGenAlgorithm to *Algo, and drop prefix

2024-09-10 14:03:30 +02:00

block-luks.h

…

block-qcow.c

qapi/crypto: Rename QCryptoIVGenAlgorithm to *Algo, and drop prefix

2024-09-10 14:03:30 +02:00

block-qcow.h

…

block.c

qapi/crypto: Rename QCryptoCipherAlgorithm to *Algo, and drop prefix

2024-09-10 14:03:30 +02:00

blockpriv.h

qapi/crypto: Rename QCryptoCipherAlgorithm to *Algo, and drop prefix

2024-09-10 14:03:30 +02:00

cipher-afalg.c

qapi/crypto: Rename QCryptoAFAlg to QCryptoAFAlgo

2024-09-10 14:03:30 +02:00

cipher-gcrypt.c.inc

qapi/crypto: Rename QCryptoCipherAlgorithm to *Algo, and drop prefix

2024-09-10 14:03:30 +02:00

cipher-gnutls.c.inc

crypto: unconditionally enable gnutls XTS support

2025-11-03 10:45:55 +00:00

cipher-nettle.c.inc

crypto: drop in-tree XTS cipher mode impl

2025-11-03 10:45:55 +00:00

cipher-stub.c.inc

crypto: fully drop built-in cipher provider

2025-05-22 11:24:25 +01:00

cipher.c

crypto: bump min gnutls to 3.7.5

2025-11-03 10:45:55 +00:00

cipherpriv.h

qapi/crypto: Rename QCryptoCipherAlgorithm to *Algo, and drop prefix

2024-09-10 14:03:30 +02:00

clmul.c

crypto: Add generic 64-bit carry-less multiply routine

2023-09-15 13:57:00 +00:00

der.c

crypto: Remove unused DER string functions

2024-10-22 11:44:23 +01:00

der.h

crypto: Remove unused DER string functions

2024-10-22 11:44:23 +01:00

hash-afalg.c

overall: Remove unnecessary g_strdup_printf() calls

2025-02-14 08:49:06 +03:00

hash-gcrypt.c

crypto: perform runtime check for hash/hmac support in gcrypt

2024-11-05 18:37:18 +00:00

hash-glib.c

crypto/hash: avoid overwriting user supplied result pointer

2024-10-22 11:44:23 +01:00

hash-gnutls.c

crypto/hash: avoid overwriting user supplied result pointer

2024-10-22 11:44:23 +01:00

hash-nettle.c

crypto: Introduce SM3 hash hmac pbkdf algorithm

2024-11-05 18:37:18 +00:00

hash.c

crypto/hash: Have hashing functions take void * buffer argument

2025-11-03 10:05:40 +00:00

hashpriv.h

crypto/hashpriv: Remove old hash API function

2024-10-10 12:34:11 +01:00

hmac-gcrypt.c

crypto/hmac: Allow to build hmac over multiple qcrypto_gnutls_hmac_bytes[v] calls

2025-09-02 17:58:05 +02:00

hmac-glib.c

crypto/hmac: Allow to build hmac over multiple qcrypto_gnutls_hmac_bytes[v] calls

2025-09-02 17:58:05 +02:00

hmac-gnutls.c

crypto/hmac: Allow to build hmac over multiple qcrypto_gnutls_hmac_bytes[v] calls

2025-09-02 17:58:05 +02:00

hmac-nettle.c

crypto/hmac: Allow to build hmac over multiple qcrypto_gnutls_hmac_bytes[v] calls

2025-09-02 17:58:05 +02:00

hmac.c

crypto/hash: Have hashing functions take void * buffer argument

2025-11-03 10:05:40 +00:00

hmacpriv.h

qapi/crypto: Rename QCryptoAFAlg to QCryptoAFAlgo

2024-09-10 14:03:30 +02:00

init.c

crypto: drop gnutls debug logging support

2024-07-24 10:39:10 +01:00

ivgen-essiv.c

…

ivgen-essiv.h

…

ivgen-plain64.c

…

ivgen-plain64.h

…

ivgen-plain.c

…

ivgen-plain.h

Clean up ill-advised or unusual header guards

2022-05-11 16:50:01 +02:00

ivgen.c

qapi/crypto: Rename QCryptoIVGenAlgorithm to *Algo, and drop prefix

2024-09-10 14:03:30 +02:00

ivgenpriv.h

qapi/crypto: Rename QCryptoIVGenAlgorithm to *Algo, and drop prefix

2024-09-10 14:03:30 +02:00

meson.build

crypto: introduce a wrapper around gnutls credentials

2025-11-03 10:45:55 +00:00

pbkdf-gcrypt.c

crypto: Introduce SM3 hash hmac pbkdf algorithm

2024-11-05 18:37:18 +00:00

pbkdf-gnutls.c

qapi/crypto: Rename QCryptoHashAlgorithm to *Algo, and drop prefix

2024-09-10 14:02:16 +02:00

pbkdf-nettle.c

crypto: Introduce SM3 hash hmac pbkdf algorithm

2024-11-05 18:37:18 +00:00

pbkdf-stub.c

qapi/crypto: Rename QCryptoHashAlgorithm to *Algo, and drop prefix

2024-09-10 14:02:16 +02:00

pbkdf.c

crypto: fix bogus error benchmarking pbkdf on fast machines

2025-01-22 08:28:49 +01:00

random-gcrypt.c

…

random-gnutls.c

…

random-none.c

…

random-platform.c

…

rsakey-builtin.c.inc

qapi/crypto: Drop unwanted 'prefix'

2024-09-10 13:22:47 +02:00

rsakey-nettle.c.inc

qapi/crypto: Drop unwanted 'prefix'

2024-09-10 13:22:47 +02:00

rsakey.c

crypto: Support export akcipher to pkcs8

2022-11-02 06:56:32 -04:00

rsakey.h

crypto: Support export akcipher to pkcs8

2022-11-02 06:56:32 -04:00

secret_common.c

qom: Make InterfaceInfo[] uses const

2025-04-25 17:00:41 +02:00

secret_keyring.c

qom: Have class_init() take a const data argument

2025-04-25 17:00:41 +02:00

secret.c

qom: Have class_init() take a const data argument

2025-04-25 17:00:41 +02:00

sm4.c

crypto: Add SM4 constant parameter CK

2023-09-11 11:45:55 +10:00

tls-cipher-suites.c

qom: Make InterfaceInfo[] uses const

2025-04-25 17:00:41 +02:00

tlscreds.c

crypto: deprecate use of external dh-params.pem file

2025-11-03 10:45:55 +00:00

tlscredsanon.c

crypto: deprecate use of external dh-params.pem file

2025-11-03 10:45:55 +00:00

tlscredsbox.c

crypto: introduce a wrapper around gnutls credentials

2025-11-03 10:45:55 +00:00

tlscredsbox.h

crypto: introduce a wrapper around gnutls credentials

2025-11-03 10:45:55 +00:00

tlscredspriv.h

crypto: make TLS credentials structs private

2025-11-03 10:45:55 +00:00

tlscredspsk.c

crypto: deprecate use of external dh-params.pem file

2025-11-03 10:45:55 +00:00

tlscredsx509.c

crypto: deprecate use of external dh-params.pem file

2025-11-03 10:45:55 +00:00

tlssession.c

crypto: fix lifecycle handling of gnutls credentials objects

2025-11-03 10:45:55 +00:00

trace-events

crypto: add tracing & warning about GNUTLS countermeasures

2025-07-22 19:39:30 -03:00

trace.h

…

x509-utils.c

crypto/x509-utils: Check for error from gnutls_x509_crt_init()

2025-07-16 11:27:30 +01:00