1. 51545ce Remove a number of unnecessary stdio.h includes. by David Benjamin · 9 years ago
  2. a5177cb Use a less tedious pattern for X509_NAME. by David Benjamin · 9 years ago
  3. 6b6e0b2 Fix a memory leak in ssl3_get_certificate_request. by David Benjamin · 9 years ago
  4. 15c1488 Clear the error queue on entry to core SSL operations. by David Benjamin · 9 years ago
  5. df28c3a Tidy up the client Certificate message skipping slightly. by David Benjamin · 9 years ago
  6. 454aa4c Rewrite ssl3_send_client_certificate. by David Benjamin · 9 years ago
  7. bf82aed Disable all TLS crypto in fuzzer mode. by David Benjamin · 9 years ago
  8. 2b07fa4 Fix a memory leak in an error path. by David Benjamin · 9 years ago
  9. b83003e Don't initialize enc_method before version negotiation. by David Benjamin · 9 years ago
  10. a1e9cab Replace enc_flags with normalized version checks. by David Benjamin · 9 years ago
  11. b9e4fa5 Add a helper function to normalize the current version. by David Benjamin · 9 years ago
  12. baa1216 Prune finished labels from SSL3_ENC_METHOD. by David Benjamin · 9 years ago
  13. f8d8071 Remove a few unnecessary SSL3_ENC_METHOD hooks. by David Benjamin · 9 years ago
  14. b35d684 Minor cleanup. by David Benjamin · 9 years ago
  15. 79978df Move aead_{read,write}_ctx and next_proto_negotiated into ssl->s3. by David Benjamin · 9 years ago
  16. 57997da Simplify the ChangeCipherSpec logic. by David Benjamin · 9 years ago
  17. 0623bce Fill in ssl->session->cipher when resumption is resolved. by David Benjamin · 9 years ago
  18. 0d56f88 Switch s to ssl everywhere. by David Benjamin · 9 years ago
  19. 974c7ba Route DHE through the SSL_ECDH abstraction as well. by David Benjamin · 9 years ago
  20. 4298d77 Implement draft-ietf-tls-curve25519-01 in C. by David Benjamin · 9 years ago
  21. fc82512 Convert ssl3_send_cert_verify to CBB. by David Benjamin · 9 years ago
  22. ae0eaaa Convert ssl3_send_client_key_exchange to CBB. by David Benjamin · 9 years ago
  23. 48cce66 Tidy up ssl3_get_server_key_exchange slightly. by David Benjamin · 9 years ago
  24. c1cc858 Check for EC_KEY_set_public_key error. by David Benjamin · 9 years ago
  25. a41280d Pull ChangeCipherSpec into the handshake state machine. by David Benjamin · 9 years ago
  26. 758d127 Add get0 getters for EVP_PKEY. by David Benjamin · 9 years ago
  27. d28f59c Switch the keylog BIO to a callback. by David Benjamin · 9 years ago
  28. af07365 Check for overflow when parsing a CBS with d2i_*. by David Benjamin · 9 years ago
  29. cd24a39 Limit DHE groups to 4096-bit. by David Benjamin · 9 years ago
  30. 99fdfb9 Move curve check out of tls12_check_peer_sigalg. by David Benjamin · 9 years ago
  31. 6e80765 Add SSL_get_server_key_exchange_hash. by David Benjamin · 9 years ago
  32. c7817d8 Add SSL_CIPHER_get_min_version and tidy up SSL_TLSV1_2 logic. by David Benjamin · 9 years ago
  33. 09d68c9 Expand a comment. by Adam Langley · 9 years ago
  34. 13e81fc Fix DTLS asynchronous write handling. by David Benjamin · 9 years ago
  35. 274341d Change the type of |EC_GROUP_get_degree| and friends to |unsigned|. by Brian Smith · 9 years ago
  36. 1269ddd Never use the internal session cache for a client. by David Benjamin · 9 years ago
  37. dc2aea2 Remove all the logic around custom session IDs and retrying on collisions. by David Benjamin · 9 years ago
  38. 8217024 Document the info callback. by David Benjamin · 9 years ago
  39. dd6fed9 Explicitly handle empty NewSessionTickets on the client. by David Benjamin · 9 years ago
  40. 79a0589 Ditch remaining filename comments from public headers and ssl/ by David Benjamin · 9 years ago
  41. 96e97b1 Convert ssl3_send_channel_id to CBB. by David Benjamin · 9 years ago
  42. e97b962 Convert ssl3_send_next_proto to CBB. by David Benjamin · 9 years ago
  43. e8d5350 Convert ssl3_send_client_hello to CBB. by David Benjamin · 9 years ago
  44. fd8e69f Better document the callbacks around client certificates. by David Benjamin · 9 years ago
  45. 0d62f26 Adding more options for signing digest fallback. by Steven Valdez · 10 years ago
  46. 9e4e01e Align the SSL stack on #include style. by David Benjamin · 10 years ago
  47. 8f1c268 Wait for CertificateStatus message to verify certificate. by Paul Lietar · 10 years ago
  48. 26416e9 Remove the last of SESS_CERT. by David Benjamin · 10 years ago
  49. b1bdc5b Remove peer_cert from SESS_CERT. by David Benjamin · 10 years ago
  50. 6505567 Move peer_dh_tmp and peer_ecdh_tmp out of SESS_CERT. by David Benjamin · 10 years ago
  51. 2b23d24 Make key exchange strength available. by Sigbjorn Vik · 10 years ago
  52. d6a4ae9 Simplify tls1_channel_id_hash. by David Benjamin · 10 years ago
  53. 9550c3a Decouple the handshake buffer and digest. by David Benjamin · 10 years ago
  54. 601448a Add server-side support for asynchronous signing. by nagendra modadugu · 10 years ago
  55. 821464e Remove old 'prepare' extensions functions. by David Benjamin · 10 years ago
  56. 49c7af1 Convert the Channel ID extension to the new system. by Adam Langley · 10 years ago
  57. 3570d73 Remove the func parameter to OPENSSL_PUT_ERROR. by David Benjamin · 10 years ago
  58. d1d8078 Fold away certificate slots mechanism. by David Benjamin · 10 years ago
  59. 396a441 ssl3_cert_verify_hash should take the EVP_PKEY type. by David Benjamin · 10 years ago
  60. 67dc838 Fix ssl3_send_client_certificate state machine. by David Benjamin · 10 years ago
  61. a865320 Add CBB_zero to set a CBB to the zero state. by David Benjamin · 10 years ago
  62. 961ad6a Sign channel IDs with ECDSA_do_sign. by David Benjamin · 10 years ago
  63. ba4594a Don't put sessions from renegotiations in the cache. by David Benjamin · 10 years ago
  64. b4d65fd Implement asynchronous private key operations for client auth. by David Benjamin · 10 years ago
  65. 680ca96 Preserve session->sess_cert on ticket renewal. by David Benjamin · 10 years ago
  66. 95d3182 Duplicate SSL_SESSIONs when renewing them. by David Benjamin · 10 years ago
  67. fd67aa8 Add SSL_SESSION_from_bytes. by David Benjamin · 10 years ago
  68. d1c1c8e Remove EVP_PKEY_missing_parameters in ssl3_check_certificate_for_cipher. by David Benjamin · 10 years ago
  69. 436bf82 Prune ssl3_check_cert_and_algorithm. by David Benjamin · 10 years ago
  70. 8923c0b Explicitly check for empty certificate list. by David Benjamin · 10 years ago
  71. f4958e7 Slightly simplify ServerKeyExchange handling. by David Benjamin · 10 years ago
  72. b31040d Get rid of CERT_PKEY slots in SESS_CERT. by David Benjamin · 10 years ago
  73. ba5934b Tighten up EMS resumption behaviour. by Adam Langley · 10 years ago
  74. a1c90a5 Further tidy up cipher logic. by David Benjamin · 10 years ago
  75. e76ccae Release handshake buffer when sending no certificate. by David Benjamin · 10 years ago
  76. 5f04b65 Release the handshake buffer on the client for abbreviated handshakes. by David Benjamin · 10 years ago
  77. 74d8bc2 Don't make SSL_MODE_*HELLO_TIME configurable. by David Benjamin · 10 years ago
  78. be05c63 Remove compatibility s->version checks. by David Benjamin · 10 years ago
  79. 8ec8810 Remove SSL_in_before and SSL_ST_BEFORE. by David Benjamin · 10 years ago
  80. cd90f3a Remove renegotiation deferral logic. by David Benjamin · 10 years ago
  81. 44d3eed Forbid caller-initiated renegotiations and all renego as a servers. by David Benjamin · 10 years ago
  82. a7997f1 Set minimum DH group size to 1024 bits. by Adam Langley · 10 years ago
  83. 4b27d9f Never resume sessions on renegotiations. by David Benjamin · 10 years ago
  84. e6df054 Add s->s3->initial_handshake_complete. by David Benjamin · 10 years ago
  85. 6a08da2 Remove redundant setup buffer calls. by David Benjamin · 10 years ago
  86. 60da0cd Fix STACK_OF pointer style. by David Benjamin · 10 years ago
  87. 1d0a194 Promote max_cert_list and max_send_fragment to functions. by David Benjamin · 10 years ago
  88. 2755a3e Remove unnecessary NULL checks, part 5. by David Benjamin · 10 years ago
  89. dcd979f CertificateStatus is optional. by David Benjamin · 10 years ago
  90. b16346b Add SSL_set_reject_peer_renegotiations. by David Benjamin · 10 years ago
  91. 107db58 Switch cipher masks to uint32_t. by David Benjamin · 10 years ago
  92. f0ae170 Include-what-you-use ssl/internal.h. by David Benjamin · 10 years ago
  93. 2ee94aa Rename ssl_locl.h to internal.h by David Benjamin · 10 years ago
  94. 32fbdf2 Remove anonymous cipher suites. by David Benjamin · 10 years ago
  95. ece3de9 Enforce that sessions are resumed at the version they're created. by David Benjamin · 10 years ago
  96. b6d0c6d Remove the stats block in SSL_CTX. by David Benjamin · 10 years ago
  97. ab2479a Clean up error reporting. by Håvard Molland · 10 years ago
  98. 7061e28 Rename EECDH and EDH to ECDHE and DHE. by David Benjamin · 10 years ago
  99. 8b36841 Minor formatting fixes. by David Benjamin · 10 years ago
  100. 2ddba8c Check for RAND_bytes failures in the ClientHello. by David Benjamin · 10 years ago