1. 25 Jan, 2017 1 commit
  2. 22 Dec, 2016 1 commit
  3. 15 Aug, 2016 1 commit
  4. 11 Aug, 2016 2 commits
  5. 05 Aug, 2016 1 commit
    • Daniel Kahn Gillmor's avatar
      Log key-pinning strings for TLS keys · 0cd371a4
      Daniel Kahn Gillmor authored
      RFC 7858 explicitly defines an out-of-band key pinning profile as one
      authentication mechanism.  It uses the same format for representing
      the pin as HPKP does (RFC 7469).
      
      By logging this pin directly upon first use of the X.509 credentials,
      we make it a little bit easier for an admin to publish part of a
      pinset.
      
      For ideal operation (including preparation for key rollover), a backup
      public key should also be provided, but this is not defined
      functionally here.
      0cd371a4
  6. 16 Jul, 2016 1 commit
  7. 20 May, 2016 1 commit
    • Marek Vavrusa's avatar
      lib: cache api v2, removed dep on libknot db.h · e68c3a0a
      Marek Vavrusa authored
      this change introduces new API for cache backends,
      that is a subset of knot_db_api_t from libknot
      with several cache-specific operations
      
      major changes are:
      * merged 'cachectl' module into 'cache' as it is
        99% default-on and it simplifies things
      * not transaction oriented, transactions may be
        reused and cached for higher performance
      * scatter/gather API, this is important for
        latency and performance of non-local backends
        like Redis
      * faster and reliable cache clearing
      * cache-specific operations (prefix scan, ...) in
        the API not hacked in
      * simpler code for both backends and caller
      e68c3a0a
  8. 18 May, 2016 1 commit
  9. 15 May, 2016 1 commit
  10. 17 Dec, 2015 1 commit
  11. 10 Dec, 2015 1 commit
  12. 09 Dec, 2015 1 commit
  13. 28 Nov, 2015 1 commit
  14. 25 Nov, 2015 1 commit
    • Marek Vavruša's avatar
      build: amalgamated build support with AMALG=1 · af4254d1
      Marek Vavruša authored
      amalgamated build concatenates all files into a single .c file to
      allow compiler see all symbols and produce possibly smaller code.
      for binary distributions this is what you want, as it's faster but
      may consume more memory during compilation.
      it however cannot do incremental builds.
      af4254d1
  15. 24 Nov, 2015 1 commit
  16. 19 Nov, 2015 1 commit
  17. 06 Oct, 2015 1 commit
  18. 05 Oct, 2015 1 commit
  19. 04 Aug, 2015 3 commits
  20. 15 Jul, 2015 1 commit
  21. 01 Jul, 2015 1 commit
  22. 30 Jun, 2015 1 commit
  23. 08 Jun, 2015 1 commit
  24. 07 Jun, 2015 2 commits
  25. 01 Jun, 2015 1 commit
  26. 25 May, 2015 1 commit
  27. 28 Apr, 2015 1 commit
    • Marek Vavruša's avatar
      contrib: created 'contrib' directory with ccan/isaac as csprng · dbca2316
      Marek Vavruša authored
      previously cryptolib random function was used to generate message id,
      this works well but it is slow especially when the entropy is low,
      replaced with cryptographically safe prng ISAAC
      
      the ccan directory is going to be used in the future, as it's include
      structure makes it easy to embed C snippets instead of reimplementing
      them
      dbca2316