Sign in
boringssl
/
boringssl.git
/
4323e22793d32319a12fa6d3143f4c22f09978fd
/
ssl
/
handshake_server.c
a365138
Factor out the default signature algorithm logic.
by David Benjamin
· 8 years ago
7e06de5
Really remove DHE ciphersuites from TLS.
by Matthew Braithwaite
· 8 years ago
6952211
Support Ed25519 in TLS.
by David Benjamin
· 8 years ago
cc17c24
Stop pretending RSA and ECDSA sigalgs are configurable.
by David Benjamin
· 8 years ago
a232a71
Deprecate SSL_PRIVATE_KEY_METHOD type and max_signature_len.
by David Benjamin
· 8 years ago
ccbb165
Tidy up ssl3_choose_cipher.
by David Benjamin
· 8 years ago
681eb6a
Adding support for receiving early data on the server.
by Steven Valdez
· 8 years ago
57e81e6
Name |select_certificate_cb| return values
by Alessandro Ghedini
· 8 years ago
4c341d0
Support asynchronous ticket decryption with TLS 1.0–1.2.
by Adam Langley
· 8 years ago
ad8f5e1
Don't use long for timestamps.
by David Benjamin
· 8 years ago
94a62e6
Hang ssl_auto_chain_if_needed off |X509_METHOD|.
by Adam Langley
· 8 years ago
2a3b343
Move X509-related verification code into ssl_x509.c.
by Adam Langley
· 8 years ago
fc02b59
Move tmp.extended_master_secret to SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
45738dd
Move new_cipher and new_session to SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
83a3212
Move SCT lists and OCSP responses to CERT.
by David Benjamin
· 8 years ago
16b1b1d
Simplify state and info_callback management.
by David Benjamin
· 8 years ago
35ed523
Remove an unnecessary state transition.
by David Benjamin
· 8 years ago
46db7af
Remove |X509| things from SSL_SESSION.
by Adam Langley
· 8 years ago
908ac19
Moving transcript and PRF functions to SSL_TRANSCRIPT.
by Steven Valdez
· 8 years ago
04540a7
Set the default value of a last |alert|.
by Adam Langley
· 8 years ago
c68e5b9
Establish that the default value of an out-arg for alerts is SSL_AD_DECODE_ERROR.
by Adam Langley
· 8 years ago
59bae5a
Split TLS 1.2 ClientHello processing into separate functions.
by David Benjamin
· 8 years ago
2f82a0e
Don't stash tlsext_hostname in ssl_get_new_session.
by Steven Valdez
· 8 years ago
daa0539
Remove an unnecessary TLS 1.3 ClientHello state.
by David Benjamin
· 8 years ago
42bfeb3
Remove an unnecessary TLS 1.2 ClientHello state.
by David Benjamin
· 8 years ago
17b3083
Use a separate timeout scheme for TLS 1.3.
by David Benjamin
· 8 years ago
f71036e
Remove ssl_hash_message_t from ssl_get_message.
by David Benjamin
· 8 years ago
276b7e8
Move optional message type checks out of ssl_get_message.
by David Benjamin
· 8 years ago
3a2b47a
Don't use |X509| objects in |CERT|, by default.
by Adam Langley
· 8 years ago
258508f
Adding V2ClientHello counter.
by Steven Valdez
· 8 years ago
16315f7
Remove the rest of write_message.
by David Benjamin
· 8 years ago
daf207a
Don't use the buffer BIO in TLS.
by David Benjamin
· 8 years ago
8d5f9da
Abstract away BIO_flush calls in the handshake.
by David Benjamin
· 8 years ago
958346a
Run select_certificate_cb multiple times
by Alessandro Ghedini
· 8 years ago
650aa1c
Clean up certificate auto-chaining.
by David Benjamin
· 8 years ago
17cf2cb
Work around language and compiler bug in memcpy, etc.
by David Benjamin
· 8 years ago
f1050fd
Preserve the peer signature algorithm across resumes.
by David Benjamin
· 8 years ago
4882a6c
Replace key_exchange_info with group_id.
by David Benjamin
· 8 years ago
d515722
Don't depend on the X509 code for getting public keys.
by Adam Langley
· 8 years ago
d519bf6
Add |SSL_CTX_set0_buffer_pool|.
by Adam Langley
· 8 years ago
68e7124
Hold certificates in an SSL_SESSION as CRYPTO_BUFFERSs as well.
by Adam Langley
· 8 years ago
364f7a6
Push the difference in chain semantics to the edge.
by Adam Langley
· 8 years ago
cb0c29f
Move state and next_state to SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
c0fc7a1
Revert "Add |SSL_CTX_set0_buffer_pool|." and "Hold certificates in an SSL_SESSION as CRYPTO_BUFFERSs as well."
by Adam Langley
· 8 years ago
651aaef
Remove CECPQ1 (experimental post-quantum key agreement).
by Matthew Braithwaite
· 8 years ago
e850909
Hold certificates in an SSL_SESSION as CRYPTO_BUFFERSs as well.
by Adam Langley
· 8 years ago
559f064
Support setting per-connection OCSP staple
by Alessandro Ghedini
· 8 years ago
f04c2e9
Move client_version into SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
2578b29
Make ssl3_choose_cipher and dependencies static.
by David Benjamin
· 8 years ago
731058e
Typedef ssl_early_callback_ctx to SSL_CLIENT_HELLO.
by David Benjamin
· 8 years ago
f3c8f8d
Pass explicit parameters elsewhere.
by David Benjamin
· 8 years ago
6773972
Pass explicit hs parameters into t1_enc.c.
by David Benjamin
· 8 years ago
8c880a2
Pass explicit hs parameters to kExtensions callbacks.
by David Benjamin
· 8 years ago
c3c8882
Match state machine functions with new calling convention.
by David Benjamin
· 8 years ago
ce8c9d2
Maintain SSL_HANDSHAKE lifetime outside of handshake_func.
by David Benjamin
· 8 years ago
bbaf367
Add |SSL_set_retain_only_sha256_of_client_certs|.
by David Benjamin
· 8 years ago
f01f42a
Negotiate ciphers before resumption.
by David Benjamin
· 8 years ago
34202b9
Call cert_cb before resolving resumption.
by David Benjamin
· 8 years ago
4eb95cc
Parse ClientHello extensions before deciding on resumption.
by David Benjamin
· 8 years ago
75f9914
Align TLS 1.2 and 1.3 server session validity checks.
by David Benjamin
· 8 years ago
ced9479
Replace hash_current_message with get_current_message.
by David Benjamin
· 8 years ago
78476f6
Move tlsext_ticket_expected to SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
5eead16
Splitting finish_message to finish_message/queue_message.
by Steven Valdez
· 8 years ago
c5ac2b6
Rename X.509 members in |SSL_SESSION| and |CERT|.
by Adam Langley
· 8 years ago
4e41926
Move key_block into SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
123db57
Measure session->timeout from ticket issuance.
by David Benjamin
· 8 years ago
e75cc27
Fix ssl3_send_new_session_ticket error-handling.
by David Benjamin
· 8 years ago
9ef31f0
Negotiate the cipher suite before ALPN.
by David Benjamin
· 8 years ago
f85d323
TLS: Choose the max version supported by the client, not first.
by Brian Smith
· 8 years ago
b6b6ff3
Verifying resumption cipher validity with current configuration.
by Steven Valdez
· 8 years ago
60a85cb
Implement ChannelID for TLS 1.3.
by Nick Harper
· 9 years ago
3ef7697
Don't accept {sha1, ecdsa} and {sha512, ecdsa}.
by David Benjamin
· 8 years ago
a4c8ff0
Move TLS 1.2 key exchange fields to SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
b74b081
Move next_proto_neg_seen into SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
a048678
Move some fields from tmp to hs.
by David Benjamin
· 8 years ago
fdd1099
Moving TLS 1.3 version negotiation into extension.
by Steven Valdez
· 9 years ago
1032df5
Disable Channel ID signature checking in fuzzer mode.
by David Benjamin
· 9 years ago
196df5b
Add a InvalidChannelIDSignature test.
by David Benjamin
· 9 years ago
2dc0204
Don't return invalid versions in version_from_wire.
by David Benjamin
· 9 years ago
2c66e07
Don't send the access_denied alert innappropriately.
by David Benjamin
· 9 years ago
3d458dc
Revert of Determining certificate_auth and key_exchange based on SSL.
by David Benjamin
· 9 years ago
639846e
Add tests for trailing data in handshake messages.
by David Benjamin
· 9 years ago
5409123
Use C99 for size_t loops.
by David Benjamin
· 9 years ago
bd09ecc
Determining certificate_auth and key_exchange based on SSL.
by Steven Valdez
· 9 years ago
4d0be24
Only allow SSL_set_session before the handshake.
by David Benjamin
· 9 years ago
fc0c9d9
Use a common state to begin the handshake.
by David Benjamin
· 9 years ago
5510863
Temporary remove the TLS 1.3 anti-downgrade mechanism.
by David Benjamin
· 9 years ago
0fc37ef
Fix a number of sigalg scope issues.
by David Benjamin
· 9 years ago
7aa31d6
Remove ssl->verify_result.
by David Benjamin
· 9 years ago
dd634eb
s/nginx/NGINX/
by David Benjamin
· 9 years ago
3764683
Have |SSL_get_verify_result| return |X509_V_OK| when no client certificate is given.
by Adam Langley
· 9 years ago
4aa154e
Adding code to send session as PSK Identity.
by Steven Valdez
· 9 years ago
37b486a
Remove optimisation for known DH groups.
by Adam Langley
· 9 years ago
25fe85b
Insert a state before cert_cb.
by David Benjamin
· 9 years ago
fddbadc
Pass a ClientHello into ssl3_choose_cipher.
by David Benjamin
· 9 years ago
1deb41b
Move SCSV handling out of cipher list parsing.
by David Benjamin
· 9 years ago
e14ff06
Only have one ClientHello parser, not three.
by David Benjamin
· 9 years ago
b919540
Align SSL_SESSION_up_ref with OpenSSL.
by David Benjamin
· 9 years ago
e455e51
Push some duplicated code into ssl_verify_cert_chain.
by David Benjamin
· 9 years ago
721e8b7
Test that servers enforce session timeouts.
by David Benjamin
· 9 years ago
Next »