1. ca4971c Sync bundled bits of golang.org/x/crypto. by David Benjamin · 7 years ago
  2. 0990a55 Set up Go modules. by David Benjamin · 7 years ago
  3. 8c7c635 Support symbol prefixes by Joshua Liebow-Feeser · 7 years ago
  4. 492c9aa Fill in a fake session ID for TLS 1.3. by David Benjamin · 7 years ago
  5. e768212 shim: don't clear environment when invoking handshaker. by Matthew Braithwaite · 7 years ago
  6. 6855e0a Switch the default TLS 1.3 variant to tls13_rfc. by David Benjamin · 7 years ago
  7. 23849f0 Fix TLS 1.3 downgrade tests. by David Benjamin · 7 years ago
  8. a130ce0 Update TLS 1.3 citations for the final RFC. by David Benjamin · 7 years ago
  9. f1af129 Implement TLS 1.3 anti-downgrade signal. by Steven Valdez · 7 years ago
  10. ae32239 Remove dummy PQ padding extension. by Adam Langley · 7 years ago
  11. d451453 Implement final TLS 1.3 RFC!!! by Steven Valdez · 7 years ago
  12. 1c337e5 Option to reverify certs on resumption. by Jesse Selover · 7 years ago
  13. 69e9190 Work around missing MSan interceptor for posix_spawn. by David Benjamin · 7 years ago
  14. e833a6d handshaker: kick PRNG when resuming in UNSAFE_DETERMINISTIC_MODE. by Matthew Braithwaite · 7 years ago
  15. 74bfa0c Fix header include for handshake. by Steven Valdez · 7 years ago
  16. e5388e0 Add handshaker as run_tests dependency. by Steven Valdez · 7 years ago
  17. e7b7877 Ask shim whether it supports split handshakes. by Adam Langley · 7 years ago
  18. 548c276 shim: perform split handshakes in a separate binary. by Matthew Braithwaite · 7 years ago
  19. d154c7c shim: call SSL_CTX_set_tlsext_ticket_keys() only once. by Matthew Braithwaite · 7 years ago
  20. 6d597a3 shim: rewrite MoveTestState() to use a serialized representation. by Matthew Braithwaite · 7 years ago
  21. 0cbb1af Don't mint TLS 1.3 tickets if SSL_OP_NO_TICKETS is set. by David Benjamin · 7 years ago
  22. bc118ee6 Add SSL_get0_peer_verify_algorithms. by David Benjamin · 7 years ago
  23. 0a3e07a Remove custom extensions support. by David Benjamin · 7 years ago
  24. ce77762 shim: extract a |DoSplitHandshake| helper function. by Matthew Braithwaite · 7 years ago
  25. e0afc85 Send an alert if we fail to pick a signature algorithm. by Adam Langley · 7 years ago
  26. c312fd0 Remove MoveTestConfig(). by Matthew Braithwaite · 7 years ago
  27. 50596f8 Switch some easy SSL fields to UniquePtr. by David Benjamin · 7 years ago
  28. 4979803 Unsplit SSL and SSL_CTX. by David Benjamin · 7 years ago
  29. 8596795 Drop C++ from certificate compression API. by Adam Langley · 7 years ago
  30. d2f87a7 shim: move handshake helper functions into their own file. by Matthew Braithwaite · 7 years ago
  31. f2bc5f4 shim: move |TestState| and |TestConfig| to their own files. by Matthew Braithwaite · 7 years ago
  32. 63c7912 Remove the redundant version check in ssl_session_cmp. by David Benjamin · 7 years ago
  33. 53d2c7a Remove fail_second_ddos_callback. by David Benjamin · 7 years ago
  34. 2908dd1 Add bssl::UpRef. by David Benjamin · 7 years ago
  35. 997ff09 shim: move |SettingsWriter| into its own file. by Matthew Braithwaite · 7 years ago
  36. a037318 Update QUIC transport parameters extension codepoint by Alessandro Ghedini · 7 years ago
  37. 9bb15f5 Remove SSL 3.0 implementation. by David Benjamin · 7 years ago
  38. 0080d83 Implement the client side of certificate compression. by Adam Langley · 7 years ago
  39. 5267ef7 Reject unexpected application data in bidirectional shutdown. by David Benjamin · 7 years ago
  40. a307cb7 Preliminary support for compressed certificates. by Adam Langley · 7 years ago
  41. 700631b Pack encrypted handshake messages together. by David Benjamin · 7 years ago
  42. fa544f1 Reject if the ALPN callback returned an empty protocol. by David Benjamin · 7 years ago
  43. 911cc0a The legacy client OCSP callback should run without server OCSP. by David Benjamin · 7 years ago
  44. 103ed08 Implement legacy OCSP APIs for libssl. by David Benjamin · 7 years ago
  45. 5f001d1 Const-correct some functions. by David Benjamin · 7 years ago
  46. 56c4ed9 Allow enabling all TLS 1.3 variants by setting |tls13_default|. by Steven Valdez · 7 years ago
  47. 02de7bd Add some more accessors to SSL_SESSION. by David Benjamin · 7 years ago
  48. ed188fd Enforce supported_versions in the second ServerHello. by David Benjamin · 7 years ago
  49. e30fac6 Fuzz SSL_serialize_handoff() and SSL_serialize_handback(). by Matthew Braithwaite · 7 years ago
  50. 6e678ee Remove legacy SHA-2 CBC ciphers. by David Benjamin · 7 years ago
  51. 71666cb Allow renego and config shedding to coexist more smoothly. by David Benjamin · 7 years ago
  52. b7bc80a SSL_CONFIG: new struct for sheddable handshake configuration. by Matthew Braithwaite · 7 years ago
  53. a2dd781 Defer writing the shim settings. by Matthew Braithwaite · 7 years ago
  54. 06c28d8 Simplify shim timeout logic. by David Benjamin · 7 years ago
  55. 56b1a8e Test the high-order bit in X25519. by David Benjamin · 7 years ago
  56. e28552d Add an API to disable RSA-PSS for certificates. by David Benjamin · 7 years ago
  57. 6879e19 Rename SSL_SIGN_RSA_PSS_SHA* constants. by David Benjamin · 7 years ago
  58. 861f384 Implement TLS 1.3 draft28. by Steven Valdez · 7 years ago
  59. 56986f9 Hand back ECDHE split handshakes after the first server message. by Matthew Braithwaite · 7 years ago
  60. 8a1a5da Send the fake session ID in the test suite. by David Benjamin · 7 years ago
  61. 8df8e64 Record whether dummy PQ padding was used. by Adam Langley · 7 years ago
  62. 4702db6 Update dummy PQ extension for round two. by Adam Langley · 7 years ago
  63. 1bf2337 Reject compressed ECDH coordinates in TLS. by David Benjamin · 7 years ago
  64. 4866920 Fix fuzzer mode suppressions. by David Benjamin · 7 years ago
  65. ddb57cf Add tests for split handshakes. by Adam Langley · 7 years ago
  66. 7e5dd25 Remove draft22 and experiment2. by Steven Valdez · 7 years ago
  67. 3c034b2 Add support for QUIC transport params. by Nick Harper · 7 years ago
  68. 0ab3f0c Notice earlier if a server echoes the TLS 1.3 compatibility session ID. by David Benjamin · 7 years ago
  69. 449a9e6 Make the gdb window larger. by Adam Langley · 7 years ago
  70. cb15cfd Add draft23 tests. by Steven Valdez · 7 years ago
  71. 36fcc4c Implement Token Binding by Nick Harper · 8 years ago
  72. afd1cd9 Work around an NDK / Android bug. by David Benjamin · 7 years ago
  73. 512a289 Add support for dummy PQ padding. by Adam Langley · 7 years ago
  74. 74666da Update key share extension number for draft23. by Steven Valdez · 7 years ago
  75. 6df6540 Add a draft TLS 1.3 anti-downgrade signal. by David Benjamin · 7 years ago
  76. 64cc121 Remove deprecated TLS 1.3 variants. by Steven Valdez · 7 years ago
  77. f88242d SSL_export_keying_material should work in half-RTT. by David Benjamin · 7 years ago
  78. f98b582 Fix tls13_variant check to check max_version. by Steven Valdez · 7 years ago
  79. 650d8c3 Implement TLS 1.3 early exporters. by David Benjamin · 7 years ago
  80. 8f53fc0 Fix fuzzer mode suppressions. by David Benjamin · 7 years ago
  81. 21baf64 Fix CustomExtensions-Server-EarlyDataAccepted test. by David Benjamin · 7 years ago
  82. 494e4d0 Add an option for False Start without ALPN. by David Benjamin · 7 years ago
  83. 9986f6b Fix renegotiation with TLS 1.3 draft 22. by Steven Valdez · 7 years ago
  84. fb53589 runner: Rewrite some more parsers. by David Benjamin · 7 years ago
  85. c5c31ab Enforce compression_method in TLS 1.3 draft 22. by Steven Valdez · 7 years ago
  86. e6cefe4 Update PR 1091 CL to use draft22 version. by Steven Valdez · 7 years ago
  87. a7673fa runner: Parse CertificateRequest with byteReader. by David Benjamin · 7 years ago
  88. 28b267b runner: Parse Certificate with byteReader. by David Benjamin · 7 years ago
  89. bd911af runner: Parse SH/HRR/EE with byteReader. by David Benjamin · 7 years ago
  90. 7ce2378 runner: Send the right alert for handshake message parsing failures. by David Benjamin · 7 years ago
  91. be8c8b4 runner: Add a byteReader type and convert ClientHello parsing. by David Benjamin · 7 years ago
  92. 855d504 Unwind legacy SSL_PRIVATE_KEY_METHOD hooks. by David Benjamin · 7 years ago
  93. 8793942 Fix fuzzer mode suppressions. by David Benjamin · 7 years ago
  94. e7c95d9 Run TLS 1.3 tests at all variants and fix bugs. by David Benjamin · 7 years ago
  95. 3bba5cc Add EndOfEarlyData to per-message tests. by David Benjamin · 7 years ago
  96. e6f30e4 Add tests for post-handshake CCS in draft "22". by David Benjamin · 7 years ago
  97. 13761f2 Fix TLSInnerPlaintext limit. by David Benjamin · 7 years ago
  98. ba8f186 Disable 'draft 22' by default. by Steven Valdez · 7 years ago
  99. 964b237 Implement PR 1091 (TLS 1.3 draft '22'). by Steven Valdez · 7 years ago
  100. cd8470f Adding support for draft 21 as a TLS 1.3 variant. by Steven Valdez · 7 years ago