master
build: define GNUTLS_BUILDING_LIB while compiling sources in lib/
devel: make local header inclusion consistent
build: re-indent code
x509: avoid integer overflow when escaping DN
x509: add bare-bones awareness of SRV virtual SAN
build: fix confusions between libtasn1 and GnuTLS error codes
x509: reject zero-length version in certificate request
build: fix comment indentation after applying clang-format
x509: prevent fallback on oversized SAN
x509: avoid double free when exporting othernames in SAN
Fixed some compilation warnings
pkcs8: remove HAVE_LIBOQS ifdefs
x509: encode ECDSA private key in fixed length
algorithms: rename GNUTLS_{PK,SIGN}_ML_DSA_* to GNUTLS_*_MLDSA*
x509/ocsp: check OCSP delegated signer EKU OID to full length
pkcs12: enable PBMAC1 by default in FIPS mode
x509/pkcs12_bag: fix off-by-one in bag element bounds check
build: indent code using Clang 18
x509: support PBES1-DES-SHA1
Make raw pubkey optional for raw privkey import.
lib/x509/privkey_openssl: mind header size more carefully
spki: support RSA-OAEP parameters
supported_exts: inhibit anypolicy is listed as supported
lib/x509: fix cleanup when gnutls_x509_crt_list_import_pkcs11 fails
lib/x509/x509_dn.c: Add check for gnutls_calloc
x509: optimize name constraints processing
_gnutls_x509_name_constraints_is_empty: remove type argument