1. e30fac6 Fuzz SSL_serialize_handoff() and SSL_serialize_handback(). by Matthew Braithwaite · 7 years ago
  2. 9fdf7cb SSL_apply_handback: check session is where it's expected to be. by Matthew Braithwaite · 7 years ago
  3. 0e9e0ba SSL_apply_handback: check that SSL version is valid. by Matthew Braithwaite · 7 years ago
  4. 3e87165 Avoid compiler errors for Android ARMv7. by Adam Langley · 7 years ago
  5. 0ca9214 Temporarily restore SHA256 and SHA384 cipher suite aliases. by David Benjamin · 7 years ago
  6. b95d4b4 Move srtp_profiles to SSL_CONFIG. by David Benjamin · 7 years ago
  7. 98472cb Consistently use session_ctx for session caching. by David Benjamin · 7 years ago
  8. 6e678ee Remove legacy SHA-2 CBC ciphers. by David Benjamin · 7 years ago
  9. 71666cb Allow renego and config shedding to coexist more smoothly. by David Benjamin · 7 years ago
  10. b7bc80a SSL_CONFIG: new struct for sheddable handshake configuration. by Matthew Braithwaite · 7 years ago
  11. a2dd781 Defer writing the shim settings. by Matthew Braithwaite · 7 years ago
  12. 855dabc Add an accessor for session->certs. by David Benjamin · 7 years ago
  13. 06c28d8 Simplify shim timeout logic. by David Benjamin · 7 years ago
  14. 48b276d Give ssl_cipher_preference_list_st a destructor. by David Benjamin · 7 years ago
  15. e3aba37 Fix typo in ssl_cert_cache_chain_certs. by Adam Langley · 7 years ago
  16. 56b1a8e Test the high-order bit in X25519. by David Benjamin · 7 years ago
  17. e325c3f Give CERT a destructor. by David Benjamin · 7 years ago
  18. fceca8e Move srtp_profile to ssl->s3. by David Benjamin · 7 years ago
  19. e28552d Add an API to disable RSA-PSS for certificates. by David Benjamin · 7 years ago
  20. c977532 Pretty-print TicketAEADMethod tests. by David Benjamin · 7 years ago
  21. 6879e19 Rename SSL_SIGN_RSA_PSS_SHA* constants. by David Benjamin · 7 years ago
  22. 5ad9476 Remove legacy SSL_CTX_sess_set_get_cb overload. by David Benjamin · 7 years ago
  23. 9f0e7cb Move TB state to ssl->s3. by David Benjamin · 7 years ago
  24. b8b1a9d Add SSL_SESSION_get0_cipher. by David Benjamin · 7 years ago
  25. acddb8c Avoid modifying stack in sk_find. by Steven Valdez · 7 years ago
  26. c5154f7 SSL_serialize_handoff: serialize fewer things. by Matthew Braithwaite · 7 years ago
  27. 868ec73 SSL_apply_handback: check that |max_send_fragment| is nonzero. by Matthew Braithwaite · 7 years ago
  28. 5b2a51d Check for nullptr result of SSLKeyShare::Create(). by Matthew Braithwaite · 7 years ago
  29. e2ab21d Use the actual record header, rather than reassembling it. by David Benjamin · 7 years ago
  30. 861f384 Implement TLS 1.3 draft28. by Steven Valdez · 7 years ago
  31. 56986f9 Hand back ECDHE split handshakes after the first server message. by Matthew Braithwaite · 7 years ago
  32. 8a1a5da Send the fake session ID in the test suite. by David Benjamin · 7 years ago
  33. fa3e9c3 Add |SSL_COMP_get[0_name|_id]|. by Adam Langley · 7 years ago
  34. a0bc29a Remove remnants of the HRR message. by David Benjamin · 7 years ago
  35. 40cdb3b Don't test |initial_handshake_complete| for dummy PQ padding status. by Adam Langley · 7 years ago
  36. 8df8e64 Record whether dummy PQ padding was used. by Adam Langley · 7 years ago
  37. 4702db6 Update dummy PQ extension for round two. by Adam Langley · 7 years ago
  38. e745b25 Remove trailing whitespace from ssl/. by Adam Langley · 7 years ago
  39. c03ecb9 Remove SSLv3_method and friends. by David Benjamin · 7 years ago
  40. 1bf2337 Reject compressed ECDH coordinates in TLS. by David Benjamin · 7 years ago
  41. fa65113 Push an error if custom private keys fail. by David Benjamin · 7 years ago
  42. 4866920 Fix fuzzer mode suppressions. by David Benjamin · 7 years ago
  43. ddb57cf Add tests for split handshakes. by Adam Langley · 7 years ago
  44. 3fe8fa7 Add initial, experimental support for split handshakes. by Adam Langley · 7 years ago
  45. 7e5dd25 Remove draft22 and experiment2. by Steven Valdez · 7 years ago
  46. 3c034b2 Add support for QUIC transport params. by Nick Harper · 7 years ago
  47. 5301c10 ssl_verify_peer_cert: implement |SSL_VERIFY_NONE| as advertised. by Matthew Braithwaite · 7 years ago
  48. e8d2439 Expose ssl_session_serialize to libssl. by Adam Langley · 7 years ago
  49. 0ab3f0c Notice earlier if a server echoes the TLS 1.3 compatibility session ID. by David Benjamin · 7 years ago
  50. 449a9e6 Make the gdb window larger. by Adam Langley · 7 years ago
  51. ab5a947 Reslice TLS AEAD setup. by Adam Langley · 7 years ago
  52. c61b577 Add some more utility functions to bytestring. by Adam Langley · 7 years ago
  53. 610cdbb Switch some ints to bools and Spans. by David Benjamin · 7 years ago
  54. a7bc944 Don't use the client_random entropy for GREASE. by David Benjamin · 7 years ago
  55. cb15cfd Add draft23 tests. by Steven Valdez · 7 years ago
  56. 36fcc4c Implement Token Binding by Nick Harper · 8 years ago
  57. 37c6eb4 Support TLS KDF test for NIAP. by Adam Langley · 7 years ago
  58. afd1cd9 Work around an NDK / Android bug. by David Benjamin · 7 years ago
  59. 512a289 Add support for dummy PQ padding. by Adam Langley · 7 years ago
  60. 74666da Update key share extension number for draft23. by Steven Valdez · 7 years ago
  61. 9770532 Map NOT_YET_VALID errors to |certificate_expired|. by Matthew Braithwaite · 7 years ago
  62. 2f9b47f Better pack structs in ssl/internal.h by Adam Langley · 7 years ago
  63. 11850d5 Rename all googletest CMake targets by Marek Gilbert · 7 years ago
  64. e150195 SSL_alert_from_verify_result: expose. by Matthew Braithwaite · 7 years ago
  65. 6df6540 Add a draft TLS 1.3 anti-downgrade signal. by David Benjamin · 7 years ago
  66. 02e6256 Move early_data_accepted to ssl->s3. by David Benjamin · 7 years ago
  67. d90b803 Clear the error queue in fuzzer-mode Channel ID hooks. by David Benjamin · 7 years ago
  68. 64cc121 Remove deprecated TLS 1.3 variants. by Steven Valdez · 7 years ago
  69. f88242d SSL_export_keying_material should work in half-RTT. by David Benjamin · 7 years ago
  70. f98b582 Fix tls13_variant check to check max_version. by Steven Valdez · 7 years ago
  71. 650d8c3 Implement TLS 1.3 early exporters. by David Benjamin · 7 years ago
  72. 8f53fc0 Fix fuzzer mode suppressions. by David Benjamin · 7 years ago
  73. 21baf64 Fix CustomExtensions-Server-EarlyDataAccepted test. by David Benjamin · 7 years ago
  74. 494e4d0 Add an option for False Start without ALPN. by David Benjamin · 7 years ago
  75. 9986f6b Fix renegotiation with TLS 1.3 draft 22. by Steven Valdez · 7 years ago
  76. fb53589 runner: Rewrite some more parsers. by David Benjamin · 7 years ago
  77. c5c31ab Enforce compression_method in TLS 1.3 draft 22. by Steven Valdez · 7 years ago
  78. e6cefe4 Update PR 1091 CL to use draft22 version. by Steven Valdez · 7 years ago
  79. a7673fa runner: Parse CertificateRequest with byteReader. by David Benjamin · 7 years ago
  80. 28b267b runner: Parse Certificate with byteReader. by David Benjamin · 7 years ago
  81. bd911af runner: Parse SH/HRR/EE with byteReader. by David Benjamin · 7 years ago
  82. 7ce2378 runner: Send the right alert for handshake message parsing failures. by David Benjamin · 7 years ago
  83. be8c8b4 runner: Add a byteReader type and convert ClientHello parsing. by David Benjamin · 7 years ago
  84. 66801fe Support high tag numbers in CBS/CBB. by David Benjamin · 7 years ago
  85. 855d504 Unwind legacy SSL_PRIVATE_KEY_METHOD hooks. by David Benjamin · 7 years ago
  86. 8793942 Fix fuzzer mode suppressions. by David Benjamin · 7 years ago
  87. e7c95d9 Run TLS 1.3 tests at all variants and fix bugs. by David Benjamin · 7 years ago
  88. 3bba5cc Add EndOfEarlyData to per-message tests. by David Benjamin · 7 years ago
  89. ac4d534 Add missing error path. by David Benjamin · 7 years ago
  90. e6f30e4 Add tests for post-handshake CCS in draft "22". by David Benjamin · 7 years ago
  91. 13761f2 Fix TLSInnerPlaintext limit. by David Benjamin · 7 years ago
  92. ba8f186 Disable 'draft 22' by default. by Steven Valdez · 7 years ago
  93. 964b237 Implement PR 1091 (TLS 1.3 draft '22'). by Steven Valdez · 7 years ago
  94. fdd5fed Also print name for SSL_SIGN_RSA_PKCS1_MD5_SHA1. by David Benjamin · 7 years ago
  95. 6cc352e Add helper functions for SSL_SIGN_*. by David Benjamin · 7 years ago
  96. 6dda166 Support additional curve names. by David Benjamin · 7 years ago
  97. cd8470f Adding support for draft 21 as a TLS 1.3 variant. by Steven Valdez · 7 years ago
  98. cfc120e Remove RC4 remnants in runner. by David Benjamin · 7 years ago
  99. 3b903f2 Move the SSL_eNULL special-case into the matching function. by David Benjamin · 8 years ago
  100. 5be3a74 Remove supports_cipher hook. by David Benjamin · 7 years ago