1. 5fd1807 Implement SSL_CTX_set1_curves_list() by Alessandro Ghedini · 8 years ago
  2. fdd1099 Moving TLS 1.3 version negotiation into extension. by Steven Valdez · 9 years ago
  3. 65ac997 Implement draft-davidben-tls-grease-01. by David Benjamin · 9 years ago
  4. 01a9057 Fix remaining non-determinism in fuzzer transcripts. by David Benjamin · 9 years ago
  5. e34bcc9 Support default versions with set_{min,max}_proto_version. by David Benjamin · 9 years ago
  6. e470690 Align SSL_set_{min,max}_version with upstream. by David Benjamin · 9 years ago
  7. 2dc0204 Don't return invalid versions in version_from_wire. by David Benjamin · 9 years ago
  8. c027999 Take the version parameter out of ssl_do_msg_callback. by David Benjamin · 9 years ago
  9. e0ff767 Remove SSL_set_fallback_version. by David Benjamin · 9 years ago
  10. 7867934 Do not distinguish NULL and empty PSK identity hints. by David Benjamin · 9 years ago
  11. 8aaa9e1 Remove RC4 from TLS for real. by Matthew Braithwaite · 9 years ago
  12. 6e3f5cc Add SSL_CTX_get_keylog_callback. by David Benjamin · 9 years ago
  13. 5409123 Use C99 for size_t loops. by David Benjamin · 9 years ago
  14. fc0c9d9 Use a common state to begin the handshake. by David Benjamin · 9 years ago
  15. 311c257 Declare SSL_R_BLOCK_CIPHER_PAD_IS_WRONG and SSL_R_NO_CIPHERS_SPECIFIED. by David Benjamin · 9 years ago
  16. cb96654 Adding ARRAY_SIZE macro for getting the size of constant arrays. by Steven Valdez · 9 years ago
  17. 7aa31d6 Remove ssl->verify_result. by David Benjamin · 9 years ago
  18. 93d9743 Deprecate and no-op SSL_set_verify_result. by David Benjamin · 9 years ago
  19. 32635b8 Add limit for consecutive KeyUpdate messages. by Steven Valdez · 9 years ago
  20. 4aa154e Adding code to send session as PSK Identity. by Steven Valdez · 9 years ago
  21. 96a16cd Finish aligning up_ref functions with OpenSSL 1.1.0. by David Benjamin · 9 years ago
  22. 1deb41b Move SCSV handling out of cipher list parsing. by David Benjamin · 9 years ago
  23. e14ff06 Only have one ClientHello parser, not three. by David Benjamin · 9 years ago
  24. b919540 Align SSL_SESSION_up_ref with OpenSSL. by David Benjamin · 9 years ago
  25. 721e8b7 Test that servers enforce session timeouts. by David Benjamin · 9 years ago
  26. 33dad1b Stop pretending to ssl_clear_bad_session. by David Benjamin · 9 years ago
  27. ce079fd Add SSL_is_dtls. by David Benjamin · 9 years ago
  28. 4501bd5 Align with OpenSSL on SSL_set_bio behavior. by David Benjamin · 9 years ago
  29. 9498e74 Don't have the default value of |verify_result| be X509_V_OK. by Adam Langley · 9 years ago
  30. 8e1c7be Adding Post-Handshake message handling. by Steven Valdez · 9 years ago
  31. 87eab49 Splitting SSL session state. by Steven Valdez · 9 years ago
  32. 163f29a Move post-handshake message handling out of read_app_data. by David Benjamin · 9 years ago
  33. 4905454 Clear init_msg/init_num whenever we clear the backing store. by David Benjamin · 9 years ago
  34. 1d4f4c0 Add SSL_send_fatal_alert. by David Benjamin · 9 years ago
  35. a68c118 Make SSL_get_extms_support a little friendlier. by David Benjamin · 9 years ago
  36. 5e7e7cc Add SSL_set_fallback_version. by David Benjamin · 9 years ago
  37. e776cc2 Implement SSLKEYLOGFILE support for TLS 1.3. by David Benjamin · 9 years ago
  38. 143e8b3 Add TLS 1.3 1-RTT. by Steven Valdez · 9 years ago
  39. 0c0b7e1 Widen SSL_PRIVATE_KEY_METHOD types to include the curve name. by David Benjamin · 9 years ago
  40. 310d3f6 Change |EVP_PKEY_up_ref| to return int. by Adam Langley · 9 years ago
  41. df759b5 Allow CECPQ1 cipher suites to do False Start. by Adam Langley · 9 years ago
  42. 7a4b404 Remove SSL_get_server_key_exchange_hash. by David Benjamin · 9 years ago
  43. 84cd159 Add SSL_CTX_up_ref. by Adam Langley · 9 years ago
  44. 9e68f19 Add SSL_get_curve_id and SSL_get_dhe_group_size. by David Benjamin · 9 years ago
  45. b6a0a51 Simplify version configuration. by David Benjamin · 9 years ago
  46. 0256385 Changing representation of signature/hash to use SignatureScheme. by Steven Valdez · 9 years ago
  47. f0ee907 Remove the 'ssl_' prefix on most SSL_PROTOCOL_METHOD hooks. by David Benjamin · 9 years ago
  48. 10e664b Always set min_version / max_version. by David Benjamin · 9 years ago
  49. 5744ca6 Fold cert_req into cert_request. by David Benjamin · 9 years ago
  50. f715c42 Make SSL_set_bio's ownership easier to reason about. by David Benjamin · 9 years ago
  51. 9edb2c6 Adding function to set the "current time" callback used for DTLS. by Taylor Brandstetter · 9 years ago
  52. 936aada Move a bunch of public APIs from s3_lib.c to ssl_lib.c. by David Benjamin · 9 years ago
  53. 9f1dc82 A bit of cleanup post state machine merging. by David Benjamin · 9 years ago
  54. 4e9cc71 Add helper functions for info_callback and msg_callback. by David Benjamin · 9 years ago
  55. 0d275bd Don't call ERR_clear_system_error in so many places. by David Benjamin · 9 years ago
  56. 29270de Split unlock functions into read/write variants. by David Benjamin · 9 years ago
  57. 053931e CECPQ1: change from named curve to ciphersuite. by Matt Braithwaite · 9 years ago
  58. 1cb405d Revert "Forbid calling SSL_read, SSL_peek, and SSL_do_handshake post-shutdown." by Adam Langley · 9 years ago
  59. 4f94b1c Adding TLS 1.3 constants. by Steven Valdez · 9 years ago
  60. 2f87112 Never expose ssl->bbio in the public API. by David Benjamin · 9 years ago
  61. ce902a9 Generalizing curves to groups in preparation for TLS 1.3. by Steven Valdez · 9 years ago
  62. c7eae5a Forbid calling SSL_read, SSL_peek, and SSL_do_handshake post-shutdown. by David Benjamin · 9 years ago
  63. fa214e4 Tidy up shutdown state. by David Benjamin · 9 years ago
  64. 8f73135 Consolidate SSL_RECEIVED_SHUTDOWN checks. by David Benjamin · 9 years ago
  65. 376a0fe Adding a method to change the initial DTLS retransmission timer value. by Taylor Brandstetter · 9 years ago
  66. b095f0f Remove the push argument to ssl_init_wbio_buffer. by David Benjamin · 9 years ago
  67. 30152fd Always buffer DTLS retransmits. by David Benjamin · 9 years ago
  68. 8368050 Clean up ssl_get_compatible_server_ciphers. by David Benjamin · 9 years ago
  69. 4c5ddb8 Set rwstate consistently. by David Benjamin · 9 years ago
  70. 9819367 Remove some easy obj.h dependencies. by David Benjamin · 9 years ago
  71. c79845c Move implicit handshake driving out of read_bytes. by David Benjamin · 9 years ago
  72. b2a7318 Switch some 0s to NULLs. by David Benjamin · 9 years ago
  73. d7ac143 Lift the handshake driving in write_bytes up to SSL_write. by David Benjamin · 9 years ago
  74. 282511d Consolidate shutdown state. by David Benjamin · 9 years ago
  75. 78f8aab ssl->ctx cannot be NULL. by David Benjamin · 9 years ago
  76. 51545ce Remove a number of unnecessary stdio.h includes. by David Benjamin · 9 years ago
  77. 15c1488 Clear the error queue on entry to core SSL operations. by David Benjamin · 9 years ago
  78. 22ce9b2 SSL_set_fd should create socket BIOs, not fd BIOs. by David Benjamin · 9 years ago
  79. 29ec5d1 Add dummy |SSL_get_server_tmp_key|. by Adam Langley · 9 years ago
  80. a14934f Handle shutdown during init/handshake earlier by Steven Valdez · 9 years ago
  81. 95a79ee Add a stub for SSL_get_shared_ciphers(). by Emily Stark · 9 years ago
  82. b9824e2 Handle SSL_shutdown while in init more appropriately by Steven Valdez · 9 years ago
  83. e976e43 Don't read uninitialised data for short session IDs. by Adam Langley · 9 years ago
  84. de94238 Fix SSL_get_{read,write}_sequence. by David Benjamin · 9 years ago
  85. 5ba0689 Don't cast |OPENSSL_malloc|/|OPENSSL_realloc| result. by Brian Smith · 9 years ago
  86. 91b2501 Add functions for accessing read_sequence and write_sequence. by David Benjamin · 9 years ago
  87. cdd0b7e Add SSL_CTX_set_retain_only_sha256_of_client_certs. by David Benjamin · 9 years ago
  88. b83003e Don't initialize enc_method before version negotiation. by David Benjamin · 9 years ago
  89. a1e9cab Replace enc_flags with normalized version checks. by David Benjamin · 9 years ago
  90. ce9d85e Tweaks for node.js by Adam Langley · 9 years ago
  91. f6494f4 Add a SSL_get_pending_cipher API. by David Benjamin · 9 years ago
  92. b9e4fa5 Add a helper function to normalize the current version. by David Benjamin · 9 years ago
  93. f8d8071 Remove a few unnecessary SSL3_ENC_METHOD hooks. by David Benjamin · 9 years ago
  94. 79978df Move aead_{read,write}_ctx and next_proto_negotiated into ssl->s3. by David Benjamin · 9 years ago
  95. 96ba15f Add SSL_get_client_random and SSL_get_server_random. by David Benjamin · 9 years ago
  96. 0d56f88 Switch s to ssl everywhere. by David Benjamin · 9 years ago
  97. 4298d77 Implement draft-ietf-tls-curve25519-01 in C. by David Benjamin · 9 years ago
  98. 13414b3 Implement draft-ietf-tls-chacha20-poly1305-04. by David Benjamin · 9 years ago
  99. 4234885 Remove unused functions. by David Benjamin · 9 years ago
  100. 8a58933 Remove the CRYPTO_EX_new callback. by David Benjamin · 9 years ago