Sign in
boringssl
/
boringssl.git
/
75a1f23684e6f776d6081b1565f0cb1f04b0e288
/
ssl
/
t1_lib.cc
75a1f23
Have a bit more fun with Span.
by David Benjamin
· 7 years ago
d1e3ce1
Rename ssl3_send_alert and ssl3_protocol_version.
by David Benjamin
· 7 years ago
3164093
Switch all the extension callbacks to bools.
by David Benjamin
· 7 years ago
7e58c5e
Switch more things to bools.
by David Benjamin
· 7 years ago
a4bafd3
Add SSL_SESSION_{get,set}_protocol_version.
by David Benjamin
· 7 years ago
b949355
Add bssl::Span<T>::subspan and use it.
by David Benjamin
· 7 years ago
b1cf48e
Store the peer_sigalgs as an Array.
by David Benjamin
· 8 years ago
879efc3
Switch more things to Array.
by David Benjamin
· 8 years ago
08f5c76
Convert more things to Array.
by David Benjamin
· 8 years ago
6b3ab72
Add an implicit CBS to Span<const uint8_t> conversion.
by David Benjamin
· 8 years ago
cf0ce67
Use Span and Array for the curve list.
by David Benjamin
· 8 years ago
499742c
Introduce bssl::Array<T> and use it in SSLKeyShare.
by David Benjamin
· 8 years ago
a861460
Make SNI per-connection, not per-session.
by David Benjamin
· 8 years ago
74795b3
More miscellaneous bools.
by David Benjamin
· 8 years ago
046bc1f
SSL3_STATE ints to bools.
by David Benjamin
· 8 years ago
fd45ee7
Replace bits in SSL_HANDSHAKE with bool.
by David Benjamin
· 8 years ago
c11ea942
Convert comments in ssl.
by David Benjamin
· 8 years ago
4d71a9a
Migrate TLS 1.2 and below state machines to the new style.
by Steven Valdez
· 8 years ago
8fc2dc0
Put SCTs and OCSP responses in CRYPTO_BUFFERs.
by David Benjamin
· 8 years ago
72912d2
Rotate the default ticket encryption key.
by Martin Kreichgauer
· 8 years ago
f4ecc84
Prevent both early data and custom extensions from being accepted.
by Steven Valdez
· 8 years ago
7934f08
Replace init_msg/init_num with a get_message hook.
by David Benjamin
· 8 years ago
37af90f
Convert a few more scopers.
by David Benjamin
· 8 years ago
ee910bf
Use new STACK_OF helpers.
by David Benjamin
· 8 years ago
10e1060
Send correct fatal alert the renegotation extension fails to match.
by Adam Langley
· 8 years ago
c642aca
Convert SSL_ECDH_CTX to C++.
by David Benjamin
· 8 years ago
6dc8bf6
Convert SSL_TRANSCRIPT to C++.
by David Benjamin
· 8 years ago
31b0c9b
Add a bunch of scopers.
by David Benjamin
· 8 years ago
e39ac8f
Switch BORINGSSL_INTERNAL_CXX_TYPES in favor of subclassing games.
by David Benjamin
· 8 years ago
1386aad
Switch various things to scopers.
by David Benjamin
· 8 years ago
86e95b8
Move libssl's internals into the bssl namespace.
by David Benjamin
· 8 years ago
a3d76d0
Switch OPENSSL_COMPILE_ASSERT to static_assert in C++ code.
by David Benjamin
· 8 years ago
81678aa
Switch t1_lib, tls_record, and tls13_both to C++.
by David Benjamin
· 8 years ago
[Renamed (96%) from ssl/t1_lib.c]
9343b0b
Don't check renegotiation_info in fuzzer mode.
by David Benjamin
· 8 years ago
8f36c51
Revise version negotiation logic on the C side.
by Steven Valdez
· 8 years ago
68161cb
Stash the computed version range in SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
8d606e3
Clear out f_err pattern from handshake_client.c.
by David Benjamin
· 8 years ago
a365138
Factor out the default signature algorithm logic.
by David Benjamin
· 8 years ago
71c21b4
Add SSL_CTX_set_verify_algorithm_prefs.
by David Benjamin
· 8 years ago
6952211
Support Ed25519 in TLS.
by David Benjamin
· 8 years ago
a232a71
Deprecate SSL_PRIVATE_KEY_METHOD type and max_signature_len.
by David Benjamin
· 8 years ago
bf833c3
Rename hs->public_key.
by David Benjamin
· 8 years ago
c8ff30c
Add an option to allow unknown ALPN protocols.
by David Benjamin
· 8 years ago
chromium-3071
67bb45f
Support enabling early data on SSL
by Alessandro Ghedini
· 8 years ago
246eeee
Make RI on TLS 1.3 alert with ILLEGAL_PARAMETER.
by Steven Valdez
· 8 years ago
2d85062
Add Data-less Zero-RTT support.
by Steven Valdez
· 8 years ago
707af29
Support asynchronous ticket decryption with TLS 1.3.
by David Benjamin
· 8 years ago
4c341d0
Support asynchronous ticket decryption with TLS 1.0–1.2.
by Adam Langley
· 8 years ago
be49706
Rename initial_ctx to session_ctx.
by David Benjamin
· 8 years ago
35ac5b7
Export server-side ticket_age skew.
by David Benjamin
· 8 years ago
924a352
Remove experimental TLS 1.3 short record header extension.
by Steven Valdez
· 8 years ago
ad8f5e1
Don't use long for timestamps.
by David Benjamin
· 8 years ago
fc02b59
Move tmp.extended_master_secret to SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
45738dd
Move new_cipher and new_session to SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
83a3212
Move SCT lists and OCSP responses to CERT.
by David Benjamin
· 8 years ago
46db7af
Remove |X509| things from SSL_SESSION.
by Adam Langley
· 8 years ago
908ac19
Moving transcript and PRF functions to SSL_TRANSCRIPT.
by Steven Valdez
· 8 years ago
c68e5b9
Establish that the default value of an out-arg for alerts is SSL_AD_DECODE_ERROR.
by Adam Langley
· 8 years ago
8df6766
Support setting per-connection SCT list
by Alessandro Ghedini
· 8 years ago
2f82a0e
Don't stash tlsext_hostname in ssl_get_new_session.
by Steven Valdez
· 8 years ago
2fe6e22
Remove mask_a and mask_k from CERT.
by David Benjamin
· 8 years ago
5db7c9b
Get OPENSSL_COMPILE_ASSERT working in function bodies.
by David Benjamin
· 8 years ago
6752efd
Never send SNI warning alerts.
by David Benjamin
· 8 years ago
a8c8b38
Don't call the SNI callback as a client.
by David Benjamin
· 8 years ago
c253864
Remove some node.js hacks.
by David Benjamin
· 8 years ago
6f600d6
Add experimental TLS 1.3 short record header extension.
by David Benjamin
· 8 years ago
17cf2cb
Work around language and compiler bug in memcpy, etc.
by David Benjamin
· 8 years ago
76bb141
Remove the BORINGSSL_ANDROID_SYSTEM P-521 special-case.
by David Benjamin
· 9 years ago
4882a6c
Replace key_exchange_info with group_id.
by David Benjamin
· 8 years ago
559f064
Support setting per-connection OCSP staple
by Alessandro Ghedini
· 8 years ago
30c4c30
Revise some integer sizes.
by David Benjamin
· 8 years ago
f04c2e9
Move client_version into SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
9d125dc
Remove SSL_OP_DISABLE_NPN.
by David Benjamin
· 8 years ago
731058e
Typedef ssl_early_callback_ctx to SSL_CLIENT_HELLO.
by David Benjamin
· 8 years ago
f3c8f8d
Pass explicit parameters elsewhere.
by David Benjamin
· 8 years ago
8baf963
Pass explicit hs parameters to ssl_ext_*.
by David Benjamin
· 8 years ago
2bd1917
Pass explicit hs parameters into custom_extensions.c.
by David Benjamin
· 8 years ago
8c880a2
Pass explicit hs parameters to kExtensions callbacks.
by David Benjamin
· 8 years ago
aedf303
Parse the entire PSK extension.
by David Benjamin
· 8 years ago
a4ee74d
Skipping early data on 0RTT rejection.
by Steven Valdez
· 8 years ago
cfa08c3
Enforce basic sanity of SCT lists.
by Adam Langley
· 8 years ago
fbbef12
Don't put a colon in the extra error message.
by Adam Langley
· 8 years ago
35598ae
Remove ext_alpn_init.
by David Benjamin
· 8 years ago
e7f60a2
Fix alert on tls1_process_alert failure.
by David Benjamin
· 8 years ago
12d6baf
Make ssl_ext_pre_shared_key_add_clienthello static.
by David Benjamin
· 8 years ago
4eb95cc
Parse ClientHello extensions before deciding on resumption.
by David Benjamin
· 8 years ago
53210cb
Do not send unsolicited SCTs in TLS 1.3.
by David Benjamin
· 8 years ago
75f9914
Align TLS 1.2 and 1.3 server session validity checks.
by David Benjamin
· 8 years ago
a833c35
Update to TLS 1.3 draft 18.
by Steven Valdez
· 8 years ago
eab773a
Add missing PSK identity comment.
by David Benjamin
· 8 years ago
78476f6
Move tlsext_ticket_expected to SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
9ef31f0
Negotiate the cipher suite before ALPN.
by David Benjamin
· 8 years ago
af3b8a9
Fix multiple PSK identity parsing.
by Steven Valdez
· 8 years ago
70aba26
Skip ec_point_format if min_version >= TLS 1.3.
by David Benjamin
· 8 years ago
74df74b
Remove ssl_any_ec_cipher_suites_enabled check.
by David Benjamin
· 8 years ago
3a322f5
Revise signing preferences.
by David Benjamin
· 8 years ago
9559401
Use SHA256_CTX instead of EVP_MD_CTX when computing Channel ID.
by Nick Harper
· 8 years ago
60a85cb
Implement ChannelID for TLS 1.3.
by Nick Harper
· 8 years ago
3ef7697
Don't accept {sha1, ecdsa} and {sha512, ecdsa}.
by David Benjamin
· 8 years ago
a128a55
Update the TLS 1.3 draft version to draft 16.
by David Benjamin
· 8 years ago
Next »