Sign in
boringssl
/
boringssl.git
/
3a322f5e4837a0c761d1a64f1bfea82a19f44e45
/
ssl
/
t1_lib.c
3a322f5
Revise signing preferences.
by David Benjamin
· 8 years ago
9559401
Use SHA256_CTX instead of EVP_MD_CTX when computing Channel ID.
by Nick Harper
· 8 years ago
60a85cb
Implement ChannelID for TLS 1.3.
by Nick Harper
· 9 years ago
3ef7697
Don't accept {sha1, ecdsa} and {sha512, ecdsa}.
by David Benjamin
· 8 years ago
a128a55
Update the TLS 1.3 draft version to draft 16.
by David Benjamin
· 8 years ago
3baa6e1
Implement draft 16 HelloRetryRequest and cookie.
by David Benjamin
· 8 years ago
53a2dfc
Remove incorrect ciphers check.
by David Benjamin
· 8 years ago
52bf690
Saved Finished messages are twelve bytes.
by David Benjamin
· 8 years ago
43612b6
Move peer_supported_group_list to SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
f04976b
Remove the get_peer_groups parameter to tls1_get_grouplist.
by David Benjamin
· 8 years ago
9d0b4bc
Trim tls1_check_group_id.
by David Benjamin
· 8 years ago
938fa7c
Inline tls1_check_ec_cert.
by David Benjamin
· 8 years ago
b74b081
Move next_proto_neg_seen into SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
f5d2cd0
Move extensions bitmasks into SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
a048678
Move some fields from tmp to hs.
by David Benjamin
· 8 years ago
7f78df4
Add a few more tests around processing the server PSK extension.
by David Benjamin
· 8 years ago
803c77a
Update crypto negotation to draft 15.
by Steven Valdez
· 9 years ago
5b98608
Updating NewSessionTicket message and updating PSK to Draft 15.
by Steven Valdez
· 9 years ago
daa8850
Add tests for OCSP's interaction with resumption.
by David Benjamin
· 8 years ago
5fd1807
Implement SSL_CTX_set1_curves_list()
by Alessandro Ghedini
· 8 years ago
d9791bf
Apply GREASE to the version extension.
by David Benjamin
· 8 years ago
fdd1099
Moving TLS 1.3 version negotiation into extension.
by Steven Valdez
· 9 years ago
65ac997
Implement draft-davidben-tls-grease-01.
by David Benjamin
· 9 years ago
fbc45d7
No-op ticket encryption in fuzzer mode.
by David Benjamin
· 9 years ago
c8b6b4f
Only predict X25519 in TLS 1.3.
by David Benjamin
· 9 years ago
7e1f984
Fix some bugs in TLS 1.3 server key_share code.
by David Benjamin
· 9 years ago
2dc0204
Don't return invalid versions in version_from_wire.
by David Benjamin
· 9 years ago
4fe3c90
Release TLS 1.3 key shares earlier in TLS 1.2.
by David Benjamin
· 9 years ago
3d458dc
Revert of Determining certificate_auth and key_exchange based on SSL.
by David Benjamin
· 9 years ago
5409123
Use C99 for size_t loops.
by David Benjamin
· 9 years ago
bd09ecc
Determining certificate_auth and key_exchange based on SSL.
by Steven Valdez
· 9 years ago
57e929f
Enable RSA-PSS in TLS 1.2 by default.
by David Benjamin
· 9 years ago
163c956
Forbid EMS from changing during renegotation.
by David Benjamin
· 9 years ago
0fc37ef
Fix a number of sigalg scope issues.
by David Benjamin
· 9 years ago
7c7d831
Trim a few extensions when min_version is TLS 1.3.
by David Benjamin
· 9 years ago
5c4e857
Fill in the curve ID for TLS 1.3.
by David Benjamin
· 9 years ago
cb96654
Adding ARRAY_SIZE macro for getting the size of constant arrays.
by Steven Valdez
· 9 years ago
0e95015
RSA-PSS should work in TLS 1.2.
by David Benjamin
· 9 years ago
ee32bea
Fix TLS 1.2 sigalgs fallback logic for ECDSA.
by David Benjamin
· 9 years ago
4aa154e
Adding code to send session as PSK Identity.
by Steven Valdez
· 9 years ago
4ac2dc4
Add a comment about ServerHello.supported_groups.
by David Benjamin
· 9 years ago
version_for_cocoapods_6.0
3e51757d
Enforce the server ALPN protocol was advertised.
by David Benjamin
· 9 years ago
1deb41b
Move SCSV handling out of cipher list parsing.
by David Benjamin
· 9 years ago
e14ff06
Only have one ClientHello parser, not three.
by David Benjamin
· 9 years ago
cec7344
Add a CBS version of SSL_early_callback_ctx_extension_get.
by David Benjamin
· 9 years ago
7259f2f
Prefix ext_key_share methods.
by Steven Valdez
· 9 years ago
a70de14
Check for trailing data in key_share extension.
by David Benjamin
· 9 years ago
ce079fd
Add SSL_is_dtls.
by David Benjamin
· 9 years ago
0c40a96
Send unsupported_extension on unexpected ServerHello extensions.
by David Benjamin
· 9 years ago
87eab49
Splitting SSL session state.
by Steven Valdez
· 9 years ago
d7573dc
Tweak ssl_early_callback_init.
by David Benjamin
· 9 years ago
5440fe0
Adding HelloRetryRequest.
by Steven Valdez
· 9 years ago
3a28755
Fix sending draft_version.
by Steven Valdez
· 9 years ago
942f4ed
Implement OCSP stapling in TLS 1.3.
by David Benjamin
· 9 years ago
143e8b3
Add TLS 1.3 1-RTT.
by Steven Valdez
· 9 years ago
0c0b7e1
Widen SSL_PRIVATE_KEY_METHOD types to include the curve name.
by David Benjamin
· 9 years ago
eff1e8d
Adding RSA-PSS signature algorithms.
by Steven Valdez
· 9 years ago
1fb125c
Enforce ECDSA curve matching in TLS 1.3.
by David Benjamin
· 9 years ago
75ea5bb
Don't check certificates against the curve list in TLS 1.3.
by David Benjamin
· 9 years ago
887c300
Move the key type check from tls12_check_peer_sigalg to ssl_verify_*.
by David Benjamin
· 9 years ago
51dd7d6
Don't fall back to SHA-1 in TLS 1.3, only TLS 1.2.
by David Benjamin
· 9 years ago
6b8509a
Add default handlers for extension parsing.
by Steven Valdez
· 9 years ago
ea9a0d5
Refine SHA-1 default in signature algorithm negotiation.
by David Benjamin
· 9 years ago
d246b81
Don't decompose sigalgs in key preferences.
by David Benjamin
· 9 years ago
9e68f19
Add SSL_get_curve_id and SSL_get_dhe_group_size.
by David Benjamin
· 9 years ago
b6a0a51
Simplify version configuration.
by David Benjamin
· 9 years ago
f0451ca
Cleaning up internal use of Signature Algorithms.
by Steven Valdez
· 9 years ago
0256385
Changing representation of signature/hash to use SignatureScheme.
by Steven Valdez
· 9 years ago
ce902a9
Generalizing curves to groups in preparation for TLS 1.3.
by Steven Valdez
· 9 years ago
9b611e2
Simplify server_name extension parsing.
by David Benjamin
· 9 years ago
9819367
Remove some easy obj.h dependencies.
by David Benjamin
· 9 years ago
1e4ae00
Add a comment about final empty extension intolerance.
by David Benjamin
· 9 years ago
78f8aab
ssl->ctx cannot be NULL.
by David Benjamin
· 9 years ago
51545ce
Remove a number of unnecessary stdio.h includes.
by David Benjamin
· 9 years ago
fde5afc
Remove dead comment.
by David Benjamin
· 9 years ago
5ba0689
Don't cast |OPENSSL_malloc|/|OPENSSL_realloc| result.
by Brian Smith
· 9 years ago
43946d4
Update references to the extended master secret draft.
by David Benjamin
· 9 years ago
72f7e21
Stop allowing SHA-224 in TLS 1.2.
by David Benjamin
· 9 years ago
a1e9cab
Replace enc_flags with normalized version checks.
by David Benjamin
· 9 years ago
ce9d85e
Tweaks for node.js
by Adam Langley
· 9 years ago
fc6e5a7
Drop the silly 'ECDH_' prefix on X25519.
by David Benjamin
· 9 years ago
d2f0ce8
Enable X25519 by default in TLS.
by David Benjamin
· 9 years ago
23b0a65
Move some functions to file scope.
by David Benjamin
· 9 years ago
baa1216
Prune finished labels from SSL3_ENC_METHOD.
by David Benjamin
· 9 years ago
f8d8071
Remove a few unnecessary SSL3_ENC_METHOD hooks.
by David Benjamin
· 9 years ago
79978df
Move aead_{read,write}_ctx and next_proto_negotiated into ssl->s3.
by David Benjamin
· 9 years ago
57997da
Simplify the ChangeCipherSpec logic.
by David Benjamin
· 9 years ago
ef1b009
Consider session if the client supports tickets but offered a session ID.
by David Benjamin
· 9 years ago
0d56f88
Switch s to ssl everywhere.
by David Benjamin
· 9 years ago
4298d77
Implement draft-ietf-tls-curve25519-01 in C.
by David Benjamin
· 9 years ago
64d9250
Completely remove P-224 from the TLS stack.
by David Benjamin
· 9 years ago
fc82512
Convert ssl3_send_cert_verify to CBB.
by David Benjamin
· 9 years ago
a01deee
Make CBB_len relative to its argument.
by David Benjamin
· 9 years ago
5ddffbb
Make SSL_(CTX_)?set_tmp_ecdh call SSL_(CTX_)?set1_curves.
by David Benjamin
· 9 years ago
53e5c2c
Remove SSL_(CTX_)?set_ecdh_callback.
by David Benjamin
· 9 years ago
e9cddb8
Remove SSL_OP_LEGACY_SERVER_CONNECT.
by David Benjamin
· 9 years ago
3e052de
Tighten SSL_OP_LEGACY_SERVER_CONNECT to align with RFC 5746.
by David Benjamin
· 9 years ago
758d127
Add get0 getters for EVP_PKEY.
by David Benjamin
· 9 years ago
99fdfb9
Move curve check out of tls12_check_peer_sigalg.
by David Benjamin
· 9 years ago
6e80765
Add SSL_get_server_key_exchange_hash.
by David Benjamin
· 9 years ago
Next »