1. a365138 Factor out the default signature algorithm logic. by David Benjamin · 8 years ago
  2. 7e06de5 Really remove DHE ciphersuites from TLS. by Matthew Braithwaite · 8 years ago
  3. 6952211 Support Ed25519 in TLS. by David Benjamin · 8 years ago
  4. cc17c24 Stop pretending RSA and ECDSA sigalgs are configurable. by David Benjamin · 8 years ago
  5. a232a71 Deprecate SSL_PRIVATE_KEY_METHOD type and max_signature_len. by David Benjamin · 8 years ago
  6. ccbb165 Tidy up ssl3_choose_cipher. by David Benjamin · 8 years ago
  7. 681eb6a Adding support for receiving early data on the server. by Steven Valdez · 8 years ago
  8. 57e81e6 Name |select_certificate_cb| return values by Alessandro Ghedini · 8 years ago
  9. 4c341d0 Support asynchronous ticket decryption with TLS 1.0–1.2. by Adam Langley · 8 years ago
  10. ad8f5e1 Don't use long for timestamps. by David Benjamin · 8 years ago
  11. 94a62e6 Hang ssl_auto_chain_if_needed off |X509_METHOD|. by Adam Langley · 8 years ago
  12. 2a3b343 Move X509-related verification code into ssl_x509.c. by Adam Langley · 8 years ago
  13. fc02b59 Move tmp.extended_master_secret to SSL_HANDSHAKE. by David Benjamin · 8 years ago
  14. 45738dd Move new_cipher and new_session to SSL_HANDSHAKE. by David Benjamin · 8 years ago
  15. 83a3212 Move SCT lists and OCSP responses to CERT. by David Benjamin · 8 years ago
  16. 16b1b1d Simplify state and info_callback management. by David Benjamin · 8 years ago
  17. 35ed523 Remove an unnecessary state transition. by David Benjamin · 8 years ago
  18. 46db7af Remove |X509| things from SSL_SESSION. by Adam Langley · 8 years ago
  19. 908ac19 Moving transcript and PRF functions to SSL_TRANSCRIPT. by Steven Valdez · 8 years ago
  20. 04540a7 Set the default value of a last |alert|. by Adam Langley · 8 years ago
  21. c68e5b9 Establish that the default value of an out-arg for alerts is SSL_AD_DECODE_ERROR. by Adam Langley · 8 years ago
  22. 59bae5a Split TLS 1.2 ClientHello processing into separate functions. by David Benjamin · 8 years ago
  23. 2f82a0e Don't stash tlsext_hostname in ssl_get_new_session. by Steven Valdez · 8 years ago
  24. daa0539 Remove an unnecessary TLS 1.3 ClientHello state. by David Benjamin · 8 years ago
  25. 42bfeb3 Remove an unnecessary TLS 1.2 ClientHello state. by David Benjamin · 8 years ago
  26. 17b3083 Use a separate timeout scheme for TLS 1.3. by David Benjamin · 8 years ago
  27. f71036e Remove ssl_hash_message_t from ssl_get_message. by David Benjamin · 8 years ago
  28. 276b7e8 Move optional message type checks out of ssl_get_message. by David Benjamin · 8 years ago
  29. 3a2b47a Don't use |X509| objects in |CERT|, by default. by Adam Langley · 8 years ago
  30. 258508f Adding V2ClientHello counter. by Steven Valdez · 8 years ago
  31. 16315f7 Remove the rest of write_message. by David Benjamin · 8 years ago
  32. daf207a Don't use the buffer BIO in TLS. by David Benjamin · 8 years ago
  33. 8d5f9da Abstract away BIO_flush calls in the handshake. by David Benjamin · 8 years ago
  34. 958346a Run select_certificate_cb multiple times by Alessandro Ghedini · 8 years ago
  35. 650aa1c Clean up certificate auto-chaining. by David Benjamin · 8 years ago
  36. 17cf2cb Work around language and compiler bug in memcpy, etc. by David Benjamin · 8 years ago
  37. f1050fd Preserve the peer signature algorithm across resumes. by David Benjamin · 8 years ago
  38. 4882a6c Replace key_exchange_info with group_id. by David Benjamin · 8 years ago
  39. d515722 Don't depend on the X509 code for getting public keys. by Adam Langley · 8 years ago
  40. d519bf6 Add |SSL_CTX_set0_buffer_pool|. by Adam Langley · 8 years ago
  41. 68e7124 Hold certificates in an SSL_SESSION as CRYPTO_BUFFERSs as well. by Adam Langley · 8 years ago
  42. 364f7a6 Push the difference in chain semantics to the edge. by Adam Langley · 8 years ago
  43. cb0c29f Move state and next_state to SSL_HANDSHAKE. by David Benjamin · 8 years ago
  44. c0fc7a1 Revert "Add |SSL_CTX_set0_buffer_pool|." and "Hold certificates in an SSL_SESSION as CRYPTO_BUFFERSs as well." by Adam Langley · 8 years ago
  45. 651aaef Remove CECPQ1 (experimental post-quantum key agreement). by Matthew Braithwaite · 8 years ago
  46. e850909 Hold certificates in an SSL_SESSION as CRYPTO_BUFFERSs as well. by Adam Langley · 8 years ago
  47. 559f064 Support setting per-connection OCSP staple by Alessandro Ghedini · 8 years ago
  48. f04c2e9 Move client_version into SSL_HANDSHAKE. by David Benjamin · 8 years ago
  49. 2578b29 Make ssl3_choose_cipher and dependencies static. by David Benjamin · 8 years ago
  50. 731058e Typedef ssl_early_callback_ctx to SSL_CLIENT_HELLO. by David Benjamin · 8 years ago
  51. f3c8f8d Pass explicit parameters elsewhere. by David Benjamin · 8 years ago
  52. 6773972 Pass explicit hs parameters into t1_enc.c. by David Benjamin · 8 years ago
  53. 8c880a2 Pass explicit hs parameters to kExtensions callbacks. by David Benjamin · 8 years ago
  54. c3c8882 Match state machine functions with new calling convention. by David Benjamin · 8 years ago
  55. ce8c9d2 Maintain SSL_HANDSHAKE lifetime outside of handshake_func. by David Benjamin · 8 years ago
  56. bbaf367 Add |SSL_set_retain_only_sha256_of_client_certs|. by David Benjamin · 8 years ago
  57. f01f42a Negotiate ciphers before resumption. by David Benjamin · 8 years ago
  58. 34202b9 Call cert_cb before resolving resumption. by David Benjamin · 8 years ago
  59. 4eb95cc Parse ClientHello extensions before deciding on resumption. by David Benjamin · 8 years ago
  60. 75f9914 Align TLS 1.2 and 1.3 server session validity checks. by David Benjamin · 8 years ago
  61. ced9479 Replace hash_current_message with get_current_message. by David Benjamin · 8 years ago
  62. 78476f6 Move tlsext_ticket_expected to SSL_HANDSHAKE. by David Benjamin · 8 years ago
  63. 5eead16 Splitting finish_message to finish_message/queue_message. by Steven Valdez · 8 years ago
  64. c5ac2b6 Rename X.509 members in |SSL_SESSION| and |CERT|. by Adam Langley · 8 years ago
  65. 4e41926 Move key_block into SSL_HANDSHAKE. by David Benjamin · 8 years ago
  66. 123db57 Measure session->timeout from ticket issuance. by David Benjamin · 8 years ago
  67. e75cc27 Fix ssl3_send_new_session_ticket error-handling. by David Benjamin · 8 years ago
  68. 9ef31f0 Negotiate the cipher suite before ALPN. by David Benjamin · 8 years ago
  69. f85d323 TLS: Choose the max version supported by the client, not first. by Brian Smith · 8 years ago
  70. b6b6ff3 Verifying resumption cipher validity with current configuration. by Steven Valdez · 8 years ago
  71. 60a85cb Implement ChannelID for TLS 1.3. by Nick Harper · 9 years ago
  72. 3ef7697 Don't accept {sha1, ecdsa} and {sha512, ecdsa}. by David Benjamin · 8 years ago
  73. a4c8ff0 Move TLS 1.2 key exchange fields to SSL_HANDSHAKE. by David Benjamin · 8 years ago
  74. b74b081 Move next_proto_neg_seen into SSL_HANDSHAKE. by David Benjamin · 8 years ago
  75. a048678 Move some fields from tmp to hs. by David Benjamin · 8 years ago
  76. fdd1099 Moving TLS 1.3 version negotiation into extension. by Steven Valdez · 9 years ago
  77. 1032df5 Disable Channel ID signature checking in fuzzer mode. by David Benjamin · 9 years ago
  78. 196df5b Add a InvalidChannelIDSignature test. by David Benjamin · 9 years ago
  79. 2dc0204 Don't return invalid versions in version_from_wire. by David Benjamin · 9 years ago
  80. 2c66e07 Don't send the access_denied alert innappropriately. by David Benjamin · 9 years ago
  81. 3d458dc Revert of Determining certificate_auth and key_exchange based on SSL. by David Benjamin · 9 years ago
  82. 639846e Add tests for trailing data in handshake messages. by David Benjamin · 9 years ago
  83. 5409123 Use C99 for size_t loops. by David Benjamin · 9 years ago
  84. bd09ecc Determining certificate_auth and key_exchange based on SSL. by Steven Valdez · 9 years ago
  85. 4d0be24 Only allow SSL_set_session before the handshake. by David Benjamin · 9 years ago
  86. fc0c9d9 Use a common state to begin the handshake. by David Benjamin · 9 years ago
  87. 5510863 Temporary remove the TLS 1.3 anti-downgrade mechanism. by David Benjamin · 9 years ago
  88. 0fc37ef Fix a number of sigalg scope issues. by David Benjamin · 9 years ago
  89. 7aa31d6 Remove ssl->verify_result. by David Benjamin · 9 years ago
  90. dd634eb s/nginx/NGINX/ by David Benjamin · 9 years ago
  91. 3764683 Have |SSL_get_verify_result| return |X509_V_OK| when no client certificate is given. by Adam Langley · 9 years ago
  92. 4aa154e Adding code to send session as PSK Identity. by Steven Valdez · 9 years ago
  93. 37b486a Remove optimisation for known DH groups. by Adam Langley · 9 years ago
  94. 25fe85b Insert a state before cert_cb. by David Benjamin · 9 years ago
  95. fddbadc Pass a ClientHello into ssl3_choose_cipher. by David Benjamin · 9 years ago
  96. 1deb41b Move SCSV handling out of cipher list parsing. by David Benjamin · 9 years ago
  97. e14ff06 Only have one ClientHello parser, not three. by David Benjamin · 9 years ago
  98. b919540 Align SSL_SESSION_up_ref with OpenSSL. by David Benjamin · 9 years ago
  99. e455e51 Push some duplicated code into ssl_verify_cert_chain. by David Benjamin · 9 years ago
  100. 721e8b7 Test that servers enforce session timeouts. by David Benjamin · 9 years ago