- 4a6c8fd Support handshake hints for TLS 1.2 full handshakes. by David Benjamin · 2 years, 8 months ago
- dfddbc4 Align with OpenSSL on TLS 1.3 cipher suite constants. by David Benjamin · 2 years, 8 months ago
- 2144076 Remove VS 2015 support. by David Benjamin · 3 years ago
- 44425dd Fold ssl_decode_client_hello_inner into ssl_client_hello_decrypt. by David Benjamin · 3 years, 2 months ago
- 50e7ea5 LSC: Apply clang-tidy's modernize-use-bool-literals to boringssl by Anton Bikineev · 3 years, 2 months ago
- 18b6836 Update to draft-ietf-tls-esni-13. by David Benjamin · 3 years, 9 months ago
- 006f20a Add Span::first() and Span::last(). by David Benjamin · 3 years, 9 months ago
- ba423c9 Implement ClientHelloOuter handshakes. by David Benjamin · 3 years, 10 months ago
- a10017c Reduce bouncing on the cache lock in ssl_update_cache. by David Benjamin · 3 years, 10 months ago
- 10a76ac Only clear not_resumable after the handshake. by David Benjamin · 3 years, 10 months ago
- 83a4993 Add most of an ECH client implementation. by David Benjamin · 3 years, 10 months ago
- c3b373b Rename SSL_ECH_SERVER_CONFIG_LIST to SSL_ECH_KEYS. by David Benjamin · 3 years, 10 months ago
- 3a036c7 Add SSL_ech_accepted API and ech_is_required alerts. by David Benjamin · 3 years, 10 months ago
- 8acec00 Manage Channel ID handshake state better. by David Benjamin · 3 years, 10 months ago
- 47cefed Don't copy client's session ID into server's session. by Adam Langley · 3 years, 10 months ago
- 962b375 Move session ID assignment out of ssl_get_new_session. by David Benjamin · 3 years, 11 months ago
- 070a6c3 Export the HPKE implementation. by David Benjamin · 3 years, 11 months ago
- 1d58cd1 Shift the KEM dependency in HPKE up a step. by David Benjamin · 3 years, 11 months ago
- 9b2cdb7 Add SSL_can_release_private_key. by David Benjamin · 4 years ago
- f39c81d Introduce EVP_HPKE_{AEAD,KDF} types. by David Benjamin · 4 years ago
- 94a63a5 Implement ECH draft 10 and update HPKE to draft 08. by Steven Valdez · 4 years ago
- b571e77 Add experimental handshake hints API. by David Benjamin · 4 years ago
- 00e434d Add ECH server (draft-ietf-tls-esni-09). by Daniel McArdle · 4 years, 1 month ago
- c295935 Send ECH acceptance signal from backend server. by Dan McArdle · 4 years, 5 months ago
- 5351c8b Rename the master_key field in SSL_SESSION to secret. by David Benjamin · 4 years, 4 months ago
- 3743aaf Add SSL_CIPHER_get_protocol_id. by David Benjamin · 4 years, 6 months ago
- cd8f3d3 Enforce the keyUsage extension in TLS 1.2 client certs. by David Benjamin · 4 years, 10 months ago
- f9cc26f Require handshake flights end at record boundaries. by David Benjamin · 5 years ago
- f6cc8dd Rename ssl3_choose_cipher. by David Benjamin · 5 years ago
- ebad508 Switch verify sigalg pref functions to SSL_HANDSHAKE. by David Benjamin · 5 years ago
- f249840 Remove SSL_CTX_set_rsa_pss_rsae_certs_enabled. by David Benjamin · 5 years ago
- 3ba9586 Rename a number of BUF_* functions to OPENSSL_*. by David Benjamin · 5 years ago
- ef0183c Make SSL_get_servername work in the early callback. by David Benjamin · 6 years ago
- 4dfd5af Only bypass the signature verification itself in fuzzer mode. by David Benjamin · 6 years ago
- 6477012 Add SSL_get_early_data_reason. by David Benjamin · 6 years ago
- c9827e0 Output a ClientHello during handoff. by Adam Langley · 6 years ago
- fa81cc6 Update comments around JDK11 workaround. by David Benjamin · 6 years ago
- 9cde848 Use handshake parameters to decide if cert/key are available by Christopher Patton · 7 years ago
- a6a049a Add start of infrastructure for checking constant-time properties. by Adam Langley · 6 years ago
- 7b93593 Add initial HRSS support. by Adam Langley · 6 years ago
- 6965d25 Work around a JDK 11 TLS 1.3 bug. by David Benjamin · 6 years ago
- 8c7c635 Support symbol prefixes by Joshua Liebow-Feeser · 7 years ago
- f1af129 Implement TLS 1.3 anti-downgrade signal. by Steven Valdez · 7 years ago
- 861abcc Switch a bunch of ints to bools. by David Benjamin · 7 years ago
- e0afc85 Send an alert if we fail to pick a signature algorithm. by Adam Langley · 7 years ago
- 4685376 Remove other unnecessary tlsext_ prefixes. by David Benjamin · 7 years ago
- 0ce090a A bunch more scopers. by David Benjamin · 7 years ago
- 50596f8 Switch some easy SSL fields to UniquePtr. by David Benjamin · 7 years ago
- bfdd1a9 Give SSL_SESSION a destructor. by David Benjamin · 7 years ago
- 2908dd1 Add bssl::UpRef. by David Benjamin · 7 years ago
- a3a71e9 Flip SSL_SESSION fields to bool. by David Benjamin · 7 years ago
- 9bb15f5 Remove SSL 3.0 implementation. by David Benjamin · 7 years ago
- 3e2b3ee Hand back in-progress handshakes after a session resumption. by Matthew Braithwaite · 7 years ago
- 103ed08 Implement legacy OCSP APIs for libssl. by David Benjamin · 7 years ago
- b7bc80a SSL_CONFIG: new struct for sheddable handshake configuration. by Matthew Braithwaite · 7 years ago
- 48b276d Give ssl_cipher_preference_list_st a destructor. by David Benjamin · 7 years ago
- e325c3f Give CERT a destructor. by David Benjamin · 7 years ago
- e28552d Add an API to disable RSA-PSS for certificates. by David Benjamin · 7 years ago
- acddb8c Avoid modifying stack in sk_find. by Steven Valdez · 7 years ago
- 56986f9 Hand back ECDHE split handshakes after the first server message. by Matthew Braithwaite · 7 years ago
- 3fe8fa7 Add initial, experimental support for split handshakes. by Adam Langley · 7 years ago
- 6df6540 Add a draft TLS 1.3 anti-downgrade signal. by David Benjamin · 7 years ago
- 2637f3c Even more fun with Span. by David Benjamin · 7 years ago
- 8e7bbba Use more scopers. by David Benjamin · 7 years ago
- 75a1f23 Have a bit more fun with Span. by David Benjamin · 7 years ago
- 00f48c8 Rename and move a few more ssl3_ functions around. by David Benjamin · 7 years ago
- d1e3ce1 Rename ssl3_send_alert and ssl3_protocol_version. by David Benjamin · 7 years ago
- 879efc3 Switch more things to Array. by David Benjamin · 8 years ago
- 6b3ab72 Add an implicit CBS to Span<const uint8_t> conversion. by David Benjamin · 8 years ago
- 499742c Introduce bssl::Array<T> and use it in SSLKeyShare. by David Benjamin · 8 years ago
- e58f8a6 Simplify tls1_change_cipher_spec. by David Benjamin · 8 years ago
- c7d4d21 Add experiment without client CCS and fix session ID bug. by Steven Valdez · 8 years ago
- a861460 Make SNI per-connection, not per-session. by David Benjamin · 8 years ago
- 046bc1f SSL3_STATE ints to bools. by David Benjamin · 8 years ago
- fd45ee7 Replace bits in SSL_HANDSHAKE with bool. by David Benjamin · 8 years ago
- d816874 Set SSL_in_init to false before new_session_cb. by Steven Valdez · 8 years ago
- c11ea942 Convert comments in ssl. by David Benjamin · 8 years ago
- 398085b Simplify states with hs_wait_t returns. by Steven Valdez · 8 years ago
- 4d71a9a Migrate TLS 1.2 and below state machines to the new style. by Steven Valdez · 8 years ago
- ca9e8f5 Tidy up handshake digest logic. by David Benjamin · 8 years ago
- 7934f08 Replace init_msg/init_num with a get_message hook. by David Benjamin · 8 years ago
- 8f94c31 Replace reuse_message with an explicit next_message call. by David Benjamin · 8 years ago
- e3dee27 Remove the free_buffer parameter to release_current_message. by David Benjamin · 8 years ago
- 9bbdf58 Remove expect and received flight hooks. by David Benjamin · 8 years ago
- 37af90f Convert a few more scopers. by David Benjamin · 8 years ago
- ee910bf Use new STACK_OF helpers. by David Benjamin · 8 years ago
- e664a53 Return null from SSL_get0_peer_certificates if unauthenticated. by David Benjamin · 8 years ago
- c642aca Convert SSL_ECDH_CTX to C++. by David Benjamin · 8 years ago
- 6dc8bf6 Convert SSL_TRANSCRIPT to C++. by David Benjamin · 8 years ago
- 31b0c9b Add a bunch of scopers. by David Benjamin · 8 years ago
- e39ac8f Switch BORINGSSL_INTERNAL_CXX_TYPES in favor of subclassing games. by David Benjamin · 8 years ago
- 1386aad Switch various things to scopers. by David Benjamin · 8 years ago
- 86e95b8 Move libssl's internals into the bssl namespace. by David Benjamin · 8 years ago
- 3a1dd46 Add async certificate verification callback. by David Benjamin · 8 years ago
- d781fc4 Switch handshake_client and handshake_server to C++. by David Benjamin · 8 years ago[Renamed (96%) from ssl/handshake_server.c]
- 99a93d4 Remove some unnecessary error codes. by David Benjamin · 8 years ago
- eb083b0 Remove some dead code. by David Benjamin · 8 years ago
- 8f36c51 Revise version negotiation logic on the C side. by Steven Valdez · 8 years ago
- 68161cb Stash the computed version range in SSL_HANDSHAKE. by David Benjamin · 8 years ago
- 4414874 Simplify ssl_private_key_* state machine points. by David Benjamin · 8 years ago