1. 3ef7697 Don't accept {sha1, ecdsa} and {sha512, ecdsa}. by David Benjamin · 8 years ago
  2. e228bd2 Hide SSL3_STATE. by David Benjamin · 8 years ago
  3. a128a55 Update the TLS 1.3 draft version to draft 16. by David Benjamin · 8 years ago
  4. 3baa6e1 Implement draft 16 HelloRetryRequest and cookie. by David Benjamin · 8 years ago
  5. c4aa727 Updating Key Schedule and KeyUpdate to draft 16. by Steven Valdez · 8 years ago
  6. a4c8ff0 Move TLS 1.2 key exchange fields to SSL_HANDSHAKE. by David Benjamin · 8 years ago
  7. 43612b6 Move peer_supported_group_list to SSL_HANDSHAKE. by David Benjamin · 8 years ago
  8. f04976b Remove the get_peer_groups parameter to tls1_get_grouplist. by David Benjamin · 8 years ago
  9. 9d0b4bc Trim tls1_check_group_id. by David Benjamin · 8 years ago
  10. 938fa7c Inline tls1_check_ec_cert. by David Benjamin · 8 years ago
  11. b74b081 Move next_proto_neg_seen into SSL_HANDSHAKE. by David Benjamin · 8 years ago
  12. f5d2cd0 Move extensions bitmasks into SSL_HANDSHAKE. by David Benjamin · 8 years ago
  13. a048678 Move some fields from tmp to hs. by David Benjamin · 8 years ago
  14. 1a5e8ec Apply GREASE to TLS 1.3 tickets. by David Benjamin · 8 years ago
  15. 803c77a Update crypto negotation to draft 15. by Steven Valdez · 9 years ago
  16. 5b98608 Updating NewSessionTicket message and updating PSK to Draft 15. by Steven Valdez · 9 years ago
  17. 5fd1807 Implement SSL_CTX_set1_curves_list() by Alessandro Ghedini · 9 years ago
  18. d9791bf Apply GREASE to the version extension. by David Benjamin · 9 years ago
  19. 65ac997 Implement draft-davidben-tls-grease-01. by David Benjamin · 9 years ago
  20. c8b6b4f Only predict X25519 in TLS 1.3. by David Benjamin · 9 years ago
  21. 2dc0204 Don't return invalid versions in version_from_wire. by David Benjamin · 9 years ago
  22. c027999 Take the version parameter out of ssl_do_msg_callback. by David Benjamin · 9 years ago
  23. e0ff767 Remove SSL_set_fallback_version. by David Benjamin · 9 years ago
  24. bac75b8 Move peer_psk_identity_hint to SSL_HANDSHAKE. by David Benjamin · 9 years ago
  25. 4fe3c90 Release TLS 1.3 key shares earlier in TLS 1.2. by David Benjamin · 9 years ago
  26. 8aaa9e1 Remove RC4 from TLS for real. by Matthew Braithwaite · 9 years ago
  27. 3d458dc Revert of Determining certificate_auth and key_exchange based on SSL. by David Benjamin · 9 years ago
  28. bd09ecc Determining certificate_auth and key_exchange based on SSL. by Steven Valdez · 9 years ago
  29. 4d0be24 Only allow SSL_set_session before the handshake. by David Benjamin · 9 years ago
  30. 0fc37ef Fix a number of sigalg scope issues. by David Benjamin · 9 years ago
  31. cb96654 Adding ARRAY_SIZE macro for getting the size of constant arrays. by Steven Valdez · 9 years ago
  32. 7aa31d6 Remove ssl->verify_result. by David Benjamin · 9 years ago
  33. 8a8349b Request contexts are now illegal during the handshake. by David Benjamin · 9 years ago
  34. 4aa154e Adding code to send session as PSK Identity. by Steven Valdez · 9 years ago
  35. fddbadc Pass a ClientHello into ssl3_choose_cipher. by David Benjamin · 9 years ago
  36. 1deb41b Move SCSV handling out of cipher list parsing. by David Benjamin · 9 years ago
  37. e14ff06 Only have one ClientHello parser, not three. by David Benjamin · 9 years ago
  38. 4087df9 Move more side-specific code out of tls13_process_certificate. by David Benjamin · 9 years ago
  39. 721e8b7 Test that servers enforce session timeouts. by David Benjamin · 9 years ago
  40. 33dad1b Stop pretending to ssl_clear_bad_session. by David Benjamin · 9 years ago
  41. cec7344 Add a CBS version of SSL_early_callback_ctx_extension_get. by David Benjamin · 9 years ago
  42. 1e6f11a Adding NewSessionTicket. by Steven Valdez · 9 years ago
  43. 7259f2f Prefix ext_key_share methods. by Steven Valdez · 9 years ago
  44. ce079fd Add SSL_is_dtls. by David Benjamin · 9 years ago
  45. 1dc53d2 Adding handling for KeyUpdate post-handshake message. by Steven Valdez · 9 years ago
  46. 8e1c7be Adding Post-Handshake message handling. by Steven Valdez · 9 years ago
  47. 87eab49 Splitting SSL session state. by Steven Valdez · 9 years ago
  48. 163f29a Move post-handshake message handling out of read_app_data. by David Benjamin · 9 years ago
  49. 4497e58 Switch finish_handshake to release_current_message. by David Benjamin · 9 years ago
  50. 481b9d2 Remove begin_handshake and allocate init_buf lazily. by David Benjamin · 9 years ago
  51. 5e7e7cc Add SSL_set_fallback_version. by David Benjamin · 9 years ago
  52. d7573dc Tweak ssl_early_callback_init. by David Benjamin · 9 years ago
  53. 5440fe0 Adding HelloRetryRequest. by Steven Valdez · 9 years ago
  54. 13f1ebe Factor out the client_cert_cb code. by David Benjamin · 9 years ago
  55. e776cc2 Implement SSLKEYLOGFILE support for TLS 1.3. by David Benjamin · 9 years ago
  56. f2401eb Add a ssl_hs_flush_and_read_message wait mode. by David Benjamin · 9 years ago
  57. 143e8b3 Add TLS 1.3 1-RTT. by Steven Valdez · 9 years ago
  58. 6167281 Check for buffered handshake messages on cipher change in DTLS. by David Benjamin · 9 years ago
  59. d3440b4 Give SSL_PRIVATE_KEY_METHOD a message-based API. by David Benjamin · 9 years ago
  60. 0c0b7e1 Widen SSL_PRIVATE_KEY_METHOD types to include the curve name. by David Benjamin · 9 years ago
  61. bf5aa84 Moving ssl_check_leaf_certificate to ssl_cert. by Steven Valdez · 9 years ago
  62. 5c900c8 Factor out certificate list parsing. by David Benjamin · 9 years ago
  63. e0332e8 Factor out CA list parsing. by David Benjamin · 9 years ago
  64. 32a66d5 Tidy up a few certificate-related utility functions. by David Benjamin · 9 years ago
  65. 1f61f0d Implement TLS 1.3's downgrade signal. by David Benjamin · 9 years ago
  66. 1fb125c Enforce ECDSA curve matching in TLS 1.3. by David Benjamin · 9 years ago
  67. 887c300 Move the key type check from tls12_check_peer_sigalg to ssl_verify_*. by David Benjamin · 9 years ago
  68. ea9a0d5 Refine SHA-1 default in signature algorithm negotiation. by David Benjamin · 9 years ago
  69. d246b81 Don't decompose sigalgs in key preferences. by David Benjamin · 9 years ago
  70. 0aa25bd Don't call tls12_get_hash in the server handshake. by David Benjamin · 9 years ago
  71. 09eb655 Simplify ssl_get_message somewhat. by David Benjamin · 9 years ago
  72. 528bd26 Don't use init_buf in DTLS. by David Benjamin · 9 years ago
  73. 97718f1 Move references to init_buf into SSL_PROTOCOL_METHOD. by David Benjamin · 9 years ago
  74. 2b8415e Move the Digest/Sign split for SignatureAlgorithms to a lower level. by Steven Valdez · 9 years ago
  75. 9e68f19 Add SSL_get_curve_id and SSL_get_dhe_group_size. by David Benjamin · 9 years ago
  76. 18a3518 Don't allocate a group/curve ID for CECPQ1. by David Benjamin · 9 years ago
  77. b6a0a51 Simplify version configuration. by David Benjamin · 9 years ago
  78. f0451ca Cleaning up internal use of Signature Algorithms. by Steven Valdez · 9 years ago
  79. 352d0a9 Remove a/b parameters to send_change_cipher_spec. by David Benjamin · 9 years ago
  80. 0256385 Changing representation of signature/hash to use SignatureScheme. by Steven Valdez · 9 years ago
  81. aad50db Stop using the word 'buffer' everywhere. by David Benjamin · 9 years ago
  82. 7583643 Disconnect handshake message creation from init_buf. by David Benjamin · 9 years ago
  83. ec847ce Replace the incoming message buffer with a ring buffer. by David Benjamin · 9 years ago
  84. 778f57e Store only one handshake write sequence number. by David Benjamin · 9 years ago
  85. 29a83c5 Rewrite DTLS outgoing message buffering. by David Benjamin · 9 years ago
  86. b5eb195 Make dtls1_do_handshake_write less stateful. by David Benjamin · 9 years ago
  87. f0ee907 Remove the 'ssl_' prefix on most SSL_PROTOCOL_METHOD hooks. by David Benjamin · 9 years ago
  88. a353cdb Wrap MSVC-only warning pragmas in a macro. by David Benjamin · 9 years ago
  89. 2446db0 Require in == out for in-place encryption. by David Benjamin · 9 years ago
  90. 1a01e1f Remove in-place TLS record assembly for now. by David Benjamin · 9 years ago
  91. 45d45c1 Trim the DTLS write code slightly. by David Benjamin · 9 years ago
  92. 9f1dc82 A bit of cleanup post state machine merging. by David Benjamin · 9 years ago
  93. df50eec Fold DTLS server state machine into TLS state machine. by David Benjamin · 9 years ago
  94. aa7734b Fold the DTLS client handshake into the TLS one. by David Benjamin · 9 years ago
  95. af62d61 Remove dtls1_read_bytes. by David Benjamin · 9 years ago
  96. c660417 Don't use dtls1_read_bytes to read messages. by David Benjamin · 9 years ago
  97. a7810c1 Make tls_open_record always in-place. by David Benjamin · 9 years ago
  98. 728f354 Push alert handling down into the record functions. by David Benjamin · 9 years ago
  99. 4e9cc71 Add helper functions for info_callback and msg_callback. by David Benjamin · 9 years ago
  100. 15aa895 Tidy up the DTLS code's blocking-mode retransmits. by David Benjamin · 9 years ago