1. 6952211 Support Ed25519 in TLS. by David Benjamin · 8 years ago
  2. a232a71 Deprecate SSL_PRIVATE_KEY_METHOD type and max_signature_len. by David Benjamin · 8 years ago
  3. bf833c3 Rename hs->public_key. by David Benjamin · 8 years ago
  4. c8ff30c Add an option to allow unknown ALPN protocols. by David Benjamin · 8 years ago chromium-3071
  5. 67bb45f Support enabling early data on SSL by Alessandro Ghedini · 8 years ago
  6. 246eeee Make RI on TLS 1.3 alert with ILLEGAL_PARAMETER. by Steven Valdez · 8 years ago
  7. 2d85062 Add Data-less Zero-RTT support. by Steven Valdez · 8 years ago
  8. 707af29 Support asynchronous ticket decryption with TLS 1.3. by David Benjamin · 8 years ago
  9. 4c341d0 Support asynchronous ticket decryption with TLS 1.0–1.2. by Adam Langley · 8 years ago
  10. be49706 Rename initial_ctx to session_ctx. by David Benjamin · 8 years ago
  11. 35ac5b7 Export server-side ticket_age skew. by David Benjamin · 8 years ago
  12. 924a352 Remove experimental TLS 1.3 short record header extension. by Steven Valdez · 8 years ago
  13. ad8f5e1 Don't use long for timestamps. by David Benjamin · 8 years ago
  14. fc02b59 Move tmp.extended_master_secret to SSL_HANDSHAKE. by David Benjamin · 8 years ago
  15. 45738dd Move new_cipher and new_session to SSL_HANDSHAKE. by David Benjamin · 8 years ago
  16. 83a3212 Move SCT lists and OCSP responses to CERT. by David Benjamin · 8 years ago
  17. 46db7af Remove |X509| things from SSL_SESSION. by Adam Langley · 8 years ago
  18. 908ac19 Moving transcript and PRF functions to SSL_TRANSCRIPT. by Steven Valdez · 8 years ago
  19. c68e5b9 Establish that the default value of an out-arg for alerts is SSL_AD_DECODE_ERROR. by Adam Langley · 8 years ago
  20. 8df6766 Support setting per-connection SCT list by Alessandro Ghedini · 8 years ago
  21. 2f82a0e Don't stash tlsext_hostname in ssl_get_new_session. by Steven Valdez · 8 years ago
  22. 2fe6e22 Remove mask_a and mask_k from CERT. by David Benjamin · 8 years ago
  23. 5db7c9b Get OPENSSL_COMPILE_ASSERT working in function bodies. by David Benjamin · 8 years ago
  24. 6752efd Never send SNI warning alerts. by David Benjamin · 8 years ago
  25. a8c8b38 Don't call the SNI callback as a client. by David Benjamin · 8 years ago
  26. c253864 Remove some node.js hacks. by David Benjamin · 8 years ago
  27. 6f600d6 Add experimental TLS 1.3 short record header extension. by David Benjamin · 8 years ago
  28. 17cf2cb Work around language and compiler bug in memcpy, etc. by David Benjamin · 8 years ago
  29. 76bb141 Remove the BORINGSSL_ANDROID_SYSTEM P-521 special-case. by David Benjamin · 9 years ago
  30. 4882a6c Replace key_exchange_info with group_id. by David Benjamin · 8 years ago
  31. 559f064 Support setting per-connection OCSP staple by Alessandro Ghedini · 8 years ago
  32. 30c4c30 Revise some integer sizes. by David Benjamin · 8 years ago
  33. f04c2e9 Move client_version into SSL_HANDSHAKE. by David Benjamin · 8 years ago
  34. 9d125dc Remove SSL_OP_DISABLE_NPN. by David Benjamin · 8 years ago
  35. 731058e Typedef ssl_early_callback_ctx to SSL_CLIENT_HELLO. by David Benjamin · 8 years ago
  36. f3c8f8d Pass explicit parameters elsewhere. by David Benjamin · 8 years ago
  37. 8baf963 Pass explicit hs parameters to ssl_ext_*. by David Benjamin · 8 years ago
  38. 2bd1917 Pass explicit hs parameters into custom_extensions.c. by David Benjamin · 8 years ago
  39. 8c880a2 Pass explicit hs parameters to kExtensions callbacks. by David Benjamin · 8 years ago
  40. aedf303 Parse the entire PSK extension. by David Benjamin · 8 years ago
  41. a4ee74d Skipping early data on 0RTT rejection. by Steven Valdez · 8 years ago
  42. cfa08c3 Enforce basic sanity of SCT lists. by Adam Langley · 8 years ago
  43. fbbef12 Don't put a colon in the extra error message. by Adam Langley · 8 years ago
  44. 35598ae Remove ext_alpn_init. by David Benjamin · 8 years ago
  45. e7f60a2 Fix alert on tls1_process_alert failure. by David Benjamin · 8 years ago
  46. 12d6baf Make ssl_ext_pre_shared_key_add_clienthello static. by David Benjamin · 8 years ago
  47. 4eb95cc Parse ClientHello extensions before deciding on resumption. by David Benjamin · 8 years ago
  48. 53210cb Do not send unsolicited SCTs in TLS 1.3. by David Benjamin · 8 years ago
  49. 75f9914 Align TLS 1.2 and 1.3 server session validity checks. by David Benjamin · 8 years ago
  50. a833c35 Update to TLS 1.3 draft 18. by Steven Valdez · 8 years ago
  51. eab773a Add missing PSK identity comment. by David Benjamin · 8 years ago
  52. 78476f6 Move tlsext_ticket_expected to SSL_HANDSHAKE. by David Benjamin · 8 years ago
  53. 9ef31f0 Negotiate the cipher suite before ALPN. by David Benjamin · 8 years ago
  54. af3b8a9 Fix multiple PSK identity parsing. by Steven Valdez · 8 years ago
  55. 70aba26 Skip ec_point_format if min_version >= TLS 1.3. by David Benjamin · 8 years ago
  56. 74df74b Remove ssl_any_ec_cipher_suites_enabled check. by David Benjamin · 8 years ago
  57. 3a322f5 Revise signing preferences. by David Benjamin · 8 years ago
  58. 9559401 Use SHA256_CTX instead of EVP_MD_CTX when computing Channel ID. by Nick Harper · 8 years ago
  59. 60a85cb Implement ChannelID for TLS 1.3. by Nick Harper · 9 years ago
  60. 3ef7697 Don't accept {sha1, ecdsa} and {sha512, ecdsa}. by David Benjamin · 8 years ago
  61. a128a55 Update the TLS 1.3 draft version to draft 16. by David Benjamin · 8 years ago
  62. 3baa6e1 Implement draft 16 HelloRetryRequest and cookie. by David Benjamin · 8 years ago
  63. 53a2dfc Remove incorrect ciphers check. by David Benjamin · 8 years ago
  64. 52bf690 Saved Finished messages are twelve bytes. by David Benjamin · 8 years ago
  65. 43612b6 Move peer_supported_group_list to SSL_HANDSHAKE. by David Benjamin · 8 years ago
  66. f04976b Remove the get_peer_groups parameter to tls1_get_grouplist. by David Benjamin · 8 years ago
  67. 9d0b4bc Trim tls1_check_group_id. by David Benjamin · 8 years ago
  68. 938fa7c Inline tls1_check_ec_cert. by David Benjamin · 8 years ago
  69. b74b081 Move next_proto_neg_seen into SSL_HANDSHAKE. by David Benjamin · 8 years ago
  70. f5d2cd0 Move extensions bitmasks into SSL_HANDSHAKE. by David Benjamin · 8 years ago
  71. a048678 Move some fields from tmp to hs. by David Benjamin · 8 years ago
  72. 7f78df4 Add a few more tests around processing the server PSK extension. by David Benjamin · 8 years ago
  73. 803c77a Update crypto negotation to draft 15. by Steven Valdez · 9 years ago
  74. 5b98608 Updating NewSessionTicket message and updating PSK to Draft 15. by Steven Valdez · 9 years ago
  75. daa8850 Add tests for OCSP's interaction with resumption. by David Benjamin · 8 years ago
  76. 5fd1807 Implement SSL_CTX_set1_curves_list() by Alessandro Ghedini · 8 years ago
  77. d9791bf Apply GREASE to the version extension. by David Benjamin · 8 years ago
  78. fdd1099 Moving TLS 1.3 version negotiation into extension. by Steven Valdez · 9 years ago
  79. 65ac997 Implement draft-davidben-tls-grease-01. by David Benjamin · 9 years ago
  80. fbc45d7 No-op ticket encryption in fuzzer mode. by David Benjamin · 9 years ago
  81. c8b6b4f Only predict X25519 in TLS 1.3. by David Benjamin · 9 years ago
  82. 7e1f984 Fix some bugs in TLS 1.3 server key_share code. by David Benjamin · 9 years ago
  83. 2dc0204 Don't return invalid versions in version_from_wire. by David Benjamin · 9 years ago
  84. 4fe3c90 Release TLS 1.3 key shares earlier in TLS 1.2. by David Benjamin · 9 years ago
  85. 3d458dc Revert of Determining certificate_auth and key_exchange based on SSL. by David Benjamin · 9 years ago
  86. 5409123 Use C99 for size_t loops. by David Benjamin · 9 years ago
  87. bd09ecc Determining certificate_auth and key_exchange based on SSL. by Steven Valdez · 9 years ago
  88. 57e929f Enable RSA-PSS in TLS 1.2 by default. by David Benjamin · 9 years ago
  89. 163c956 Forbid EMS from changing during renegotation. by David Benjamin · 9 years ago
  90. 0fc37ef Fix a number of sigalg scope issues. by David Benjamin · 9 years ago
  91. 7c7d831 Trim a few extensions when min_version is TLS 1.3. by David Benjamin · 9 years ago
  92. 5c4e857 Fill in the curve ID for TLS 1.3. by David Benjamin · 9 years ago
  93. cb96654 Adding ARRAY_SIZE macro for getting the size of constant arrays. by Steven Valdez · 9 years ago
  94. 0e95015 RSA-PSS should work in TLS 1.2. by David Benjamin · 9 years ago
  95. ee32bea Fix TLS 1.2 sigalgs fallback logic for ECDSA. by David Benjamin · 9 years ago
  96. 4aa154e Adding code to send session as PSK Identity. by Steven Valdez · 9 years ago
  97. 4ac2dc4 Add a comment about ServerHello.supported_groups. by David Benjamin · 9 years ago version_for_cocoapods_6.0
  98. 3e51757d Enforce the server ALPN protocol was advertised. by David Benjamin · 9 years ago
  99. 1deb41b Move SCSV handling out of cipher list parsing. by David Benjamin · 9 years ago
  100. e14ff06 Only have one ClientHello parser, not three. by David Benjamin · 9 years ago