1. 6e80765 Add SSL_get_server_key_exchange_hash. by David Benjamin · 9 years ago
  2. c7817d8 Add SSL_CIPHER_get_min_version and tidy up SSL_TLSV1_2 logic. by David Benjamin · 9 years ago
  3. 09d68c9 Expand a comment. by Adam Langley · 9 years ago
  4. 13e81fc Fix DTLS asynchronous write handling. by David Benjamin · 9 years ago
  5. 274341d Change the type of |EC_GROUP_get_degree| and friends to |unsigned|. by Brian Smith · 9 years ago
  6. 1269ddd Never use the internal session cache for a client. by David Benjamin · 9 years ago
  7. dc2aea2 Remove all the logic around custom session IDs and retrying on collisions. by David Benjamin · 9 years ago
  8. 8217024 Document the info callback. by David Benjamin · 9 years ago
  9. dd6fed9 Explicitly handle empty NewSessionTickets on the client. by David Benjamin · 9 years ago
  10. 79a0589 Ditch remaining filename comments from public headers and ssl/ by David Benjamin · 9 years ago
  11. 96e97b1 Convert ssl3_send_channel_id to CBB. by David Benjamin · 9 years ago
  12. e97b962 Convert ssl3_send_next_proto to CBB. by David Benjamin · 9 years ago
  13. e8d5350 Convert ssl3_send_client_hello to CBB. by David Benjamin · 9 years ago
  14. fd8e69f Better document the callbacks around client certificates. by David Benjamin · 9 years ago
  15. 0d62f26 Adding more options for signing digest fallback. by Steven Valdez · 10 years ago
  16. 9e4e01e Align the SSL stack on #include style. by David Benjamin · 10 years ago
  17. 8f1c268 Wait for CertificateStatus message to verify certificate. by Paul Lietar · 10 years ago
  18. 26416e9 Remove the last of SESS_CERT. by David Benjamin · 10 years ago
  19. b1bdc5b Remove peer_cert from SESS_CERT. by David Benjamin · 10 years ago
  20. 6505567 Move peer_dh_tmp and peer_ecdh_tmp out of SESS_CERT. by David Benjamin · 10 years ago
  21. 2b23d24 Make key exchange strength available. by Sigbjorn Vik · 10 years ago
  22. d6a4ae9 Simplify tls1_channel_id_hash. by David Benjamin · 10 years ago
  23. 9550c3a Decouple the handshake buffer and digest. by David Benjamin · 10 years ago
  24. 601448a Add server-side support for asynchronous signing. by nagendra modadugu · 10 years ago
  25. 821464e Remove old 'prepare' extensions functions. by David Benjamin · 10 years ago
  26. 49c7af1 Convert the Channel ID extension to the new system. by Adam Langley · 10 years ago
  27. 3570d73 Remove the func parameter to OPENSSL_PUT_ERROR. by David Benjamin · 10 years ago
  28. d1d8078 Fold away certificate slots mechanism. by David Benjamin · 10 years ago
  29. 396a441 ssl3_cert_verify_hash should take the EVP_PKEY type. by David Benjamin · 10 years ago
  30. 67dc838 Fix ssl3_send_client_certificate state machine. by David Benjamin · 10 years ago
  31. a865320 Add CBB_zero to set a CBB to the zero state. by David Benjamin · 10 years ago
  32. 961ad6a Sign channel IDs with ECDSA_do_sign. by David Benjamin · 10 years ago
  33. ba4594a Don't put sessions from renegotiations in the cache. by David Benjamin · 10 years ago
  34. b4d65fd Implement asynchronous private key operations for client auth. by David Benjamin · 10 years ago
  35. 680ca96 Preserve session->sess_cert on ticket renewal. by David Benjamin · 10 years ago
  36. 95d3182 Duplicate SSL_SESSIONs when renewing them. by David Benjamin · 10 years ago
  37. fd67aa8 Add SSL_SESSION_from_bytes. by David Benjamin · 10 years ago
  38. d1c1c8e Remove EVP_PKEY_missing_parameters in ssl3_check_certificate_for_cipher. by David Benjamin · 10 years ago
  39. 436bf82 Prune ssl3_check_cert_and_algorithm. by David Benjamin · 10 years ago
  40. 8923c0b Explicitly check for empty certificate list. by David Benjamin · 10 years ago
  41. f4958e7 Slightly simplify ServerKeyExchange handling. by David Benjamin · 10 years ago
  42. b31040d Get rid of CERT_PKEY slots in SESS_CERT. by David Benjamin · 10 years ago
  43. ba5934b Tighten up EMS resumption behaviour. by Adam Langley · 10 years ago
  44. a1c90a5 Further tidy up cipher logic. by David Benjamin · 10 years ago
  45. e76ccae Release handshake buffer when sending no certificate. by David Benjamin · 10 years ago
  46. 5f04b65 Release the handshake buffer on the client for abbreviated handshakes. by David Benjamin · 10 years ago
  47. 74d8bc2 Don't make SSL_MODE_*HELLO_TIME configurable. by David Benjamin · 10 years ago
  48. be05c63 Remove compatibility s->version checks. by David Benjamin · 10 years ago
  49. 8ec8810 Remove SSL_in_before and SSL_ST_BEFORE. by David Benjamin · 10 years ago
  50. cd90f3a Remove renegotiation deferral logic. by David Benjamin · 10 years ago
  51. 44d3eed Forbid caller-initiated renegotiations and all renego as a servers. by David Benjamin · 10 years ago
  52. a7997f1 Set minimum DH group size to 1024 bits. by Adam Langley · 10 years ago
  53. 4b27d9f Never resume sessions on renegotiations. by David Benjamin · 10 years ago
  54. e6df054 Add s->s3->initial_handshake_complete. by David Benjamin · 10 years ago
  55. 6a08da2 Remove redundant setup buffer calls. by David Benjamin · 10 years ago
  56. 60da0cd Fix STACK_OF pointer style. by David Benjamin · 10 years ago
  57. 1d0a194 Promote max_cert_list and max_send_fragment to functions. by David Benjamin · 10 years ago
  58. 2755a3e Remove unnecessary NULL checks, part 5. by David Benjamin · 10 years ago
  59. dcd979f CertificateStatus is optional. by David Benjamin · 10 years ago
  60. b16346b Add SSL_set_reject_peer_renegotiations. by David Benjamin · 10 years ago
  61. 107db58 Switch cipher masks to uint32_t. by David Benjamin · 10 years ago
  62. f0ae170 Include-what-you-use ssl/internal.h. by David Benjamin · 10 years ago
  63. 2ee94aa Rename ssl_locl.h to internal.h by David Benjamin · 10 years ago
  64. 32fbdf2 Remove anonymous cipher suites. by David Benjamin · 10 years ago
  65. ece3de9 Enforce that sessions are resumed at the version they're created. by David Benjamin · 10 years ago
  66. b6d0c6d Remove the stats block in SSL_CTX. by David Benjamin · 10 years ago
  67. ab2479a Clean up error reporting. by Håvard Molland · 10 years ago
  68. 7061e28 Rename EECDH and EDH to ECDHE and DHE. by David Benjamin · 10 years ago
  69. 8b36841 Minor formatting fixes. by David Benjamin · 10 years ago
  70. 2ddba8c Check for RAND_bytes failures in the ClientHello. by David Benjamin · 10 years ago
  71. 4f7783e Use EC_KEY_new_by_curve_name. by David Benjamin · 10 years ago
  72. 2fa83de Move handshake method hooks to SSL_PROTOCOL_METHOD. by David Benjamin · 10 years ago
  73. 5ca39fb Switch SSL_GET_MESSAGE_HASH_MESSAGE to an enum. by David Benjamin · 10 years ago
  74. fbdfefb Handle failures in ssl3_finish_mac. by David Benjamin · 10 years ago
  75. 9d0847a Add some missing error failure checks. by David Benjamin · 10 years ago
  76. ed7c475 Rename cutthrough to False Start. by David Benjamin · 10 years ago
  77. c35fb01 Fix more memory leaks on malloc failure. by David Benjamin · 10 years ago
  78. 6eb000d Add in missing curly braces part 3. by David Benjamin · 10 years ago
  79. ccf74f8 Revise SSL_cutthrough_complete and SSL_in_init. by David Benjamin · 10 years ago
  80. 6807062 Check for EVP_Digest failure. by David Benjamin · 10 years ago
  81. f3a8b12 Remove SSL_SESSION::cipher_id. by David Benjamin · 10 years ago
  82. 780d6dd Treat handshake_failure in response to ClientHello special. by David Benjamin · 10 years ago
  83. 1bea173 Reformatting of s3_{cbc|clnt}.c by Adam Langley · 10 years ago
  84. a6d8101 Consistently use RAND_bytes and check for failure. by David Benjamin · 10 years ago
  85. 263eac0 Remove X509 parameter from ssl_cert_type. by David Benjamin · 10 years ago
  86. ef5885e Don't change s->version after have_version is set. by David Benjamin · 10 years ago
  87. e4824e8 Add outgoing messages to the handshake hash at set_handshake_header. by David Benjamin · 10 years ago
  88. 07046a0 Consistently use ssl_handshake_start and ssl_set_handshake_header. by David Benjamin · 10 years ago
  89. 87909c0 Add tests for version negotiation failure alerts. by David Benjamin · 10 years ago
  90. 82c9e90 Merge SSLv23_method and DTLS_ANY_VERSION. by David Benjamin · 10 years ago
  91. accb454 Add min_version tests. by David Benjamin · 10 years ago
  92. 9ec6bca Remove method swap in DTLS_ANY_VERSION. by David Benjamin · 10 years ago
  93. e99e912 Pull SSL3_ENC_METHOD out of SSL_METHOD. by David Benjamin · 10 years ago
  94. ceb6f28 Factor out remaining version-related functions. by David Benjamin · 10 years ago
  95. 138c2ac Drop unnecessary version checks. by David Benjamin · 10 years ago
  96. 226a872 Don't set client_version to the ServerHello version. by David Benjamin · 10 years ago
  97. e3594df Shorten certificate parsing code a little. by David Benjamin · 10 years ago
  98. 90eeb11 Remove SSL_set_debug. by David Benjamin · 10 years ago
  99. 00505ec Add EVP_md5_sha1. by David Benjamin · 10 years ago
  100. 128dbc3 Factor out the client max-version logic into a helper function. by David Benjamin · 10 years ago