1. ba4594a Don't put sessions from renegotiations in the cache. by David Benjamin · 10 years ago
  2. b4d65fd Implement asynchronous private key operations for client auth. by David Benjamin · 10 years ago
  3. 680ca96 Preserve session->sess_cert on ticket renewal. by David Benjamin · 10 years ago
  4. 95d3182 Duplicate SSL_SESSIONs when renewing them. by David Benjamin · 10 years ago
  5. fd67aa8 Add SSL_SESSION_from_bytes. by David Benjamin · 10 years ago
  6. d1c1c8e Remove EVP_PKEY_missing_parameters in ssl3_check_certificate_for_cipher. by David Benjamin · 10 years ago
  7. 436bf82 Prune ssl3_check_cert_and_algorithm. by David Benjamin · 10 years ago
  8. 8923c0b Explicitly check for empty certificate list. by David Benjamin · 10 years ago
  9. f4958e7 Slightly simplify ServerKeyExchange handling. by David Benjamin · 10 years ago
  10. b31040d Get rid of CERT_PKEY slots in SESS_CERT. by David Benjamin · 10 years ago
  11. ba5934b Tighten up EMS resumption behaviour. by Adam Langley · 10 years ago
  12. a1c90a5 Further tidy up cipher logic. by David Benjamin · 10 years ago
  13. e76ccae Release handshake buffer when sending no certificate. by David Benjamin · 10 years ago
  14. 5f04b65 Release the handshake buffer on the client for abbreviated handshakes. by David Benjamin · 10 years ago
  15. 74d8bc2 Don't make SSL_MODE_*HELLO_TIME configurable. by David Benjamin · 10 years ago
  16. be05c63 Remove compatibility s->version checks. by David Benjamin · 10 years ago
  17. 8ec8810 Remove SSL_in_before and SSL_ST_BEFORE. by David Benjamin · 10 years ago
  18. cd90f3a Remove renegotiation deferral logic. by David Benjamin · 10 years ago
  19. 44d3eed Forbid caller-initiated renegotiations and all renego as a servers. by David Benjamin · 10 years ago
  20. a7997f1 Set minimum DH group size to 1024 bits. by Adam Langley · 10 years ago
  21. 4b27d9f Never resume sessions on renegotiations. by David Benjamin · 10 years ago
  22. e6df054 Add s->s3->initial_handshake_complete. by David Benjamin · 10 years ago
  23. 6a08da2 Remove redundant setup buffer calls. by David Benjamin · 10 years ago
  24. 60da0cd Fix STACK_OF pointer style. by David Benjamin · 10 years ago
  25. 1d0a194 Promote max_cert_list and max_send_fragment to functions. by David Benjamin · 10 years ago
  26. 2755a3e Remove unnecessary NULL checks, part 5. by David Benjamin · 10 years ago
  27. dcd979f CertificateStatus is optional. by David Benjamin · 10 years ago
  28. b16346b Add SSL_set_reject_peer_renegotiations. by David Benjamin · 10 years ago
  29. 107db58 Switch cipher masks to uint32_t. by David Benjamin · 10 years ago
  30. f0ae170 Include-what-you-use ssl/internal.h. by David Benjamin · 10 years ago
  31. 2ee94aa Rename ssl_locl.h to internal.h by David Benjamin · 10 years ago
  32. 32fbdf2 Remove anonymous cipher suites. by David Benjamin · 10 years ago
  33. ece3de9 Enforce that sessions are resumed at the version they're created. by David Benjamin · 10 years ago
  34. b6d0c6d Remove the stats block in SSL_CTX. by David Benjamin · 10 years ago
  35. ab2479a Clean up error reporting. by Håvard Molland · 10 years ago
  36. 7061e28 Rename EECDH and EDH to ECDHE and DHE. by David Benjamin · 10 years ago
  37. 8b36841 Minor formatting fixes. by David Benjamin · 10 years ago
  38. 2ddba8c Check for RAND_bytes failures in the ClientHello. by David Benjamin · 10 years ago
  39. 4f7783e Use EC_KEY_new_by_curve_name. by David Benjamin · 10 years ago
  40. 2fa83de Move handshake method hooks to SSL_PROTOCOL_METHOD. by David Benjamin · 10 years ago
  41. 5ca39fb Switch SSL_GET_MESSAGE_HASH_MESSAGE to an enum. by David Benjamin · 10 years ago
  42. fbdfefb Handle failures in ssl3_finish_mac. by David Benjamin · 10 years ago
  43. 9d0847a Add some missing error failure checks. by David Benjamin · 10 years ago
  44. ed7c475 Rename cutthrough to False Start. by David Benjamin · 10 years ago
  45. c35fb01 Fix more memory leaks on malloc failure. by David Benjamin · 10 years ago
  46. 6eb000d Add in missing curly braces part 3. by David Benjamin · 10 years ago
  47. ccf74f8 Revise SSL_cutthrough_complete and SSL_in_init. by David Benjamin · 10 years ago
  48. 6807062 Check for EVP_Digest failure. by David Benjamin · 10 years ago
  49. f3a8b12 Remove SSL_SESSION::cipher_id. by David Benjamin · 10 years ago
  50. 780d6dd Treat handshake_failure in response to ClientHello special. by David Benjamin · 10 years ago
  51. 1bea173 Reformatting of s3_{cbc|clnt}.c by Adam Langley · 10 years ago
  52. a6d8101 Consistently use RAND_bytes and check for failure. by David Benjamin · 10 years ago
  53. 263eac0 Remove X509 parameter from ssl_cert_type. by David Benjamin · 10 years ago
  54. ef5885e Don't change s->version after have_version is set. by David Benjamin · 10 years ago
  55. e4824e8 Add outgoing messages to the handshake hash at set_handshake_header. by David Benjamin · 10 years ago
  56. 07046a0 Consistently use ssl_handshake_start and ssl_set_handshake_header. by David Benjamin · 10 years ago
  57. 87909c0 Add tests for version negotiation failure alerts. by David Benjamin · 10 years ago
  58. 82c9e90 Merge SSLv23_method and DTLS_ANY_VERSION. by David Benjamin · 10 years ago
  59. accb454 Add min_version tests. by David Benjamin · 10 years ago
  60. 9ec6bca Remove method swap in DTLS_ANY_VERSION. by David Benjamin · 10 years ago
  61. e99e912 Pull SSL3_ENC_METHOD out of SSL_METHOD. by David Benjamin · 10 years ago
  62. ceb6f28 Factor out remaining version-related functions. by David Benjamin · 10 years ago
  63. 138c2ac Drop unnecessary version checks. by David Benjamin · 10 years ago
  64. 226a872 Don't set client_version to the ServerHello version. by David Benjamin · 10 years ago
  65. e3594df Shorten certificate parsing code a little. by David Benjamin · 10 years ago
  66. 90eeb11 Remove SSL_set_debug. by David Benjamin · 10 years ago
  67. 00505ec Add EVP_md5_sha1. by David Benjamin · 10 years ago
  68. 128dbc3 Factor out the client max-version logic into a helper function. by David Benjamin · 10 years ago
  69. beb4702 Remove redundant s->server assignments in handshake. by David Benjamin · 10 years ago
  70. 8c6fe45 Replace s->first_packet with a s->s3->have_version bit. by David Benjamin · 10 years ago
  71. cde8aba Merge client/server SSL_METHODs into the generic one. by David Benjamin · 10 years ago
  72. 63246e8 Remove s->type from SSL. by David Benjamin · 10 years ago
  73. 533ef73 Remove SSL_clear calls in handshake functions. by David Benjamin · 10 years ago
  74. e58a71b Trim impossible state combinations. by David Benjamin · 10 years ago
  75. 0b145c2 Don't assign handshake_func in the handshake functions. by David Benjamin · 10 years ago
  76. c44b1df Add test for renego client_version quirk. by David Benjamin · 10 years ago
  77. 81ea0bf Delay creating s->session until resumption is resolved. by David Benjamin · 10 years ago
  78. 8b8c006 Fix DTLS_ANY_VERSION and add tests. by David Benjamin · 10 years ago
  79. 0f1e64b Remove method swap in SSL_set_session. by David Benjamin · 10 years ago
  80. d1681e6 Remove SSL_set_session_secret_cb (EAP-FAST) by David Benjamin · 10 years ago
  81. 69a0160 Add malloc failure tests. by Adam Langley · 10 years ago
  82. ec2f27d Account for EVP_PKEY capabilities in selecting hash functions. by David Benjamin · 10 years ago
  83. 033e5f4 Remove CERT_PKEY::valid_flags. by David Benjamin · 10 years ago
  84. 253b3e7 Remove TLS strict mode. by David Benjamin · 10 years ago
  85. b398d16 Remove SSL_check_chain and unexport CERT_PKEY flags. by David Benjamin · 10 years ago
  86. bdf5e72 Don't resume sessions if the negotiated version doesn't match. by David Benjamin · 10 years ago
  87. 688d8df Remove psk_identity_hint from SSL_SESSION. by David Benjamin · 10 years ago
  88. e1b20a0 Remove SSL3_FLAGS_POP_BUFFER. by David Benjamin · 10 years ago
  89. 1f10d9c Remove redundant PSK length check. by David Benjamin · 10 years ago
  90. 1df1124 Fix memory leak in ssl3_send_client_key_exchange error handling. by David Benjamin · 10 years ago
  91. 525a0fe Remove client-side support for ServerKeyExchange in the RSA key exchange. by David Benjamin · 10 years ago
  92. f2b32a2 Switch ssl3_send_channel_id to BN_bn2bin_padded. by David Benjamin · 10 years ago
  93. fd617a5 Port ssl3_{get,send}_server_key_exchange to EVP_Digest{Verify,Sign}*. by David Benjamin · 10 years ago
  94. 93d67d3 Refactor ssl3_send_client_key_exchange slightly. by David Benjamin · 10 years ago
  95. 491956c Fix ECDHE_PSK key exchange. by David Benjamin · 10 years ago
  96. 7571292 Extended master secret support. by Adam Langley · 10 years ago
  97. 5b33a5e Merge the get_ssl_method hooks between TLS and SSLv3. by David Benjamin · 11 years ago
  98. 00075b8 Merge IMPLEMENT_tls_meth_func and IMPLEMENT_ssl3_meth_func. by David Benjamin · 11 years ago
  99. 5d0c163 Also clean the last byte of the PSK identity. by Adam Langley · 11 years ago
  100. 859ec3c Add SSL_CTX_set_keylog_bio. by David Benjamin · 11 years ago