1. 4a6c8fd Support handshake hints for TLS 1.2 full handshakes. by David Benjamin · 2 years, 8 months ago
  2. dfddbc4 Align with OpenSSL on TLS 1.3 cipher suite constants. by David Benjamin · 2 years, 8 months ago
  3. 2144076 Remove VS 2015 support. by David Benjamin · 3 years ago
  4. 44425dd Fold ssl_decode_client_hello_inner into ssl_client_hello_decrypt. by David Benjamin · 3 years, 2 months ago
  5. 50e7ea5 LSC: Apply clang-tidy's modernize-use-bool-literals to boringssl by Anton Bikineev · 3 years, 2 months ago
  6. 18b6836 Update to draft-ietf-tls-esni-13. by David Benjamin · 3 years, 9 months ago
  7. 006f20a Add Span::first() and Span::last(). by David Benjamin · 3 years, 9 months ago
  8. ba423c9 Implement ClientHelloOuter handshakes. by David Benjamin · 3 years, 10 months ago
  9. a10017c Reduce bouncing on the cache lock in ssl_update_cache. by David Benjamin · 3 years, 10 months ago
  10. 10a76ac Only clear not_resumable after the handshake. by David Benjamin · 3 years, 10 months ago
  11. 83a4993 Add most of an ECH client implementation. by David Benjamin · 3 years, 10 months ago
  12. c3b373b Rename SSL_ECH_SERVER_CONFIG_LIST to SSL_ECH_KEYS. by David Benjamin · 3 years, 10 months ago
  13. 3a036c7 Add SSL_ech_accepted API and ech_is_required alerts. by David Benjamin · 3 years, 10 months ago
  14. 8acec00 Manage Channel ID handshake state better. by David Benjamin · 3 years, 10 months ago
  15. 47cefed Don't copy client's session ID into server's session. by Adam Langley · 3 years, 10 months ago
  16. 962b375 Move session ID assignment out of ssl_get_new_session. by David Benjamin · 3 years, 11 months ago
  17. 070a6c3 Export the HPKE implementation. by David Benjamin · 3 years, 11 months ago
  18. 1d58cd1 Shift the KEM dependency in HPKE up a step. by David Benjamin · 3 years, 11 months ago
  19. 9b2cdb7 Add SSL_can_release_private_key. by David Benjamin · 4 years ago
  20. f39c81d Introduce EVP_HPKE_{AEAD,KDF} types. by David Benjamin · 4 years ago
  21. 94a63a5 Implement ECH draft 10 and update HPKE to draft 08. by Steven Valdez · 4 years ago
  22. b571e77 Add experimental handshake hints API. by David Benjamin · 4 years ago
  23. 00e434d Add ECH server (draft-ietf-tls-esni-09). by Daniel McArdle · 4 years, 1 month ago
  24. c295935 Send ECH acceptance signal from backend server. by Dan McArdle · 4 years, 5 months ago
  25. 5351c8b Rename the master_key field in SSL_SESSION to secret. by David Benjamin · 4 years, 4 months ago
  26. 3743aaf Add SSL_CIPHER_get_protocol_id. by David Benjamin · 4 years, 6 months ago
  27. cd8f3d3 Enforce the keyUsage extension in TLS 1.2 client certs. by David Benjamin · 4 years, 10 months ago
  28. f9cc26f Require handshake flights end at record boundaries. by David Benjamin · 5 years ago
  29. f6cc8dd Rename ssl3_choose_cipher. by David Benjamin · 5 years ago
  30. ebad508 Switch verify sigalg pref functions to SSL_HANDSHAKE. by David Benjamin · 5 years ago
  31. f249840 Remove SSL_CTX_set_rsa_pss_rsae_certs_enabled. by David Benjamin · 5 years ago
  32. 3ba9586 Rename a number of BUF_* functions to OPENSSL_*. by David Benjamin · 5 years ago
  33. ef0183c Make SSL_get_servername work in the early callback. by David Benjamin · 6 years ago
  34. 4dfd5af Only bypass the signature verification itself in fuzzer mode. by David Benjamin · 6 years ago
  35. 6477012 Add SSL_get_early_data_reason. by David Benjamin · 6 years ago
  36. c9827e0 Output a ClientHello during handoff. by Adam Langley · 6 years ago
  37. fa81cc6 Update comments around JDK11 workaround. by David Benjamin · 6 years ago
  38. 9cde848 Use handshake parameters to decide if cert/key are available by Christopher Patton · 7 years ago
  39. a6a049a Add start of infrastructure for checking constant-time properties. by Adam Langley · 6 years ago
  40. 7b93593 Add initial HRSS support. by Adam Langley · 6 years ago
  41. 6965d25 Work around a JDK 11 TLS 1.3 bug. by David Benjamin · 6 years ago
  42. 8c7c635 Support symbol prefixes by Joshua Liebow-Feeser · 7 years ago
  43. f1af129 Implement TLS 1.3 anti-downgrade signal. by Steven Valdez · 7 years ago
  44. 861abcc Switch a bunch of ints to bools. by David Benjamin · 7 years ago
  45. e0afc85 Send an alert if we fail to pick a signature algorithm. by Adam Langley · 7 years ago
  46. 4685376 Remove other unnecessary tlsext_ prefixes. by David Benjamin · 7 years ago
  47. 0ce090a A bunch more scopers. by David Benjamin · 7 years ago
  48. 50596f8 Switch some easy SSL fields to UniquePtr. by David Benjamin · 7 years ago
  49. bfdd1a9 Give SSL_SESSION a destructor. by David Benjamin · 7 years ago
  50. 2908dd1 Add bssl::UpRef. by David Benjamin · 7 years ago
  51. a3a71e9 Flip SSL_SESSION fields to bool. by David Benjamin · 7 years ago
  52. 9bb15f5 Remove SSL 3.0 implementation. by David Benjamin · 7 years ago
  53. 3e2b3ee Hand back in-progress handshakes after a session resumption. by Matthew Braithwaite · 7 years ago
  54. 103ed08 Implement legacy OCSP APIs for libssl. by David Benjamin · 7 years ago
  55. b7bc80a SSL_CONFIG: new struct for sheddable handshake configuration. by Matthew Braithwaite · 7 years ago
  56. 48b276d Give ssl_cipher_preference_list_st a destructor. by David Benjamin · 7 years ago
  57. e325c3f Give CERT a destructor. by David Benjamin · 7 years ago
  58. e28552d Add an API to disable RSA-PSS for certificates. by David Benjamin · 7 years ago
  59. acddb8c Avoid modifying stack in sk_find. by Steven Valdez · 7 years ago
  60. 56986f9 Hand back ECDHE split handshakes after the first server message. by Matthew Braithwaite · 7 years ago
  61. 3fe8fa7 Add initial, experimental support for split handshakes. by Adam Langley · 7 years ago
  62. 6df6540 Add a draft TLS 1.3 anti-downgrade signal. by David Benjamin · 7 years ago
  63. 2637f3c Even more fun with Span. by David Benjamin · 7 years ago
  64. 8e7bbba Use more scopers. by David Benjamin · 7 years ago
  65. 75a1f23 Have a bit more fun with Span. by David Benjamin · 7 years ago
  66. 00f48c8 Rename and move a few more ssl3_ functions around. by David Benjamin · 7 years ago
  67. d1e3ce1 Rename ssl3_send_alert and ssl3_protocol_version. by David Benjamin · 7 years ago
  68. 879efc3 Switch more things to Array. by David Benjamin · 8 years ago
  69. 6b3ab72 Add an implicit CBS to Span<const uint8_t> conversion. by David Benjamin · 8 years ago
  70. 499742c Introduce bssl::Array<T> and use it in SSLKeyShare. by David Benjamin · 8 years ago
  71. e58f8a6 Simplify tls1_change_cipher_spec. by David Benjamin · 8 years ago
  72. c7d4d21 Add experiment without client CCS and fix session ID bug. by Steven Valdez · 8 years ago
  73. a861460 Make SNI per-connection, not per-session. by David Benjamin · 8 years ago
  74. 046bc1f SSL3_STATE ints to bools. by David Benjamin · 8 years ago
  75. fd45ee7 Replace bits in SSL_HANDSHAKE with bool. by David Benjamin · 8 years ago
  76. d816874 Set SSL_in_init to false before new_session_cb. by Steven Valdez · 8 years ago
  77. c11ea942 Convert comments in ssl. by David Benjamin · 8 years ago
  78. 398085b Simplify states with hs_wait_t returns. by Steven Valdez · 8 years ago
  79. 4d71a9a Migrate TLS 1.2 and below state machines to the new style. by Steven Valdez · 8 years ago
  80. ca9e8f5 Tidy up handshake digest logic. by David Benjamin · 8 years ago
  81. 7934f08 Replace init_msg/init_num with a get_message hook. by David Benjamin · 8 years ago
  82. 8f94c31 Replace reuse_message with an explicit next_message call. by David Benjamin · 8 years ago
  83. e3dee27 Remove the free_buffer parameter to release_current_message. by David Benjamin · 8 years ago
  84. 9bbdf58 Remove expect and received flight hooks. by David Benjamin · 8 years ago
  85. 37af90f Convert a few more scopers. by David Benjamin · 8 years ago
  86. ee910bf Use new STACK_OF helpers. by David Benjamin · 8 years ago
  87. e664a53 Return null from SSL_get0_peer_certificates if unauthenticated. by David Benjamin · 8 years ago
  88. c642aca Convert SSL_ECDH_CTX to C++. by David Benjamin · 8 years ago
  89. 6dc8bf6 Convert SSL_TRANSCRIPT to C++. by David Benjamin · 8 years ago
  90. 31b0c9b Add a bunch of scopers. by David Benjamin · 8 years ago
  91. e39ac8f Switch BORINGSSL_INTERNAL_CXX_TYPES in favor of subclassing games. by David Benjamin · 8 years ago
  92. 1386aad Switch various things to scopers. by David Benjamin · 8 years ago
  93. 86e95b8 Move libssl's internals into the bssl namespace. by David Benjamin · 8 years ago
  94. 3a1dd46 Add async certificate verification callback. by David Benjamin · 8 years ago
  95. d781fc4 Switch handshake_client and handshake_server to C++. by David Benjamin · 8 years ago[Renamed (96%) from ssl/handshake_server.c]
  96. 99a93d4 Remove some unnecessary error codes. by David Benjamin · 8 years ago
  97. eb083b0 Remove some dead code. by David Benjamin · 8 years ago
  98. 8f36c51 Revise version negotiation logic on the C side. by Steven Valdez · 8 years ago
  99. 68161cb Stash the computed version range in SSL_HANDSHAKE. by David Benjamin · 8 years ago
  100. 4414874 Simplify ssl_private_key_* state machine points. by David Benjamin · 8 years ago