1. 75a1f23 Have a bit more fun with Span. by David Benjamin · 7 years ago
  2. d1e3ce1 Rename ssl3_send_alert and ssl3_protocol_version. by David Benjamin · 7 years ago
  3. 3164093 Switch all the extension callbacks to bools. by David Benjamin · 7 years ago
  4. 7e58c5e Switch more things to bools. by David Benjamin · 7 years ago
  5. a4bafd3 Add SSL_SESSION_{get,set}_protocol_version. by David Benjamin · 7 years ago
  6. b949355 Add bssl::Span<T>::subspan and use it. by David Benjamin · 7 years ago
  7. b1cf48e Store the peer_sigalgs as an Array. by David Benjamin · 8 years ago
  8. 879efc3 Switch more things to Array. by David Benjamin · 8 years ago
  9. 08f5c76 Convert more things to Array. by David Benjamin · 8 years ago
  10. 6b3ab72 Add an implicit CBS to Span<const uint8_t> conversion. by David Benjamin · 8 years ago
  11. cf0ce67 Use Span and Array for the curve list. by David Benjamin · 8 years ago
  12. 499742c Introduce bssl::Array<T> and use it in SSLKeyShare. by David Benjamin · 8 years ago
  13. a861460 Make SNI per-connection, not per-session. by David Benjamin · 8 years ago
  14. 74795b3 More miscellaneous bools. by David Benjamin · 8 years ago
  15. 046bc1f SSL3_STATE ints to bools. by David Benjamin · 8 years ago
  16. fd45ee7 Replace bits in SSL_HANDSHAKE with bool. by David Benjamin · 8 years ago
  17. c11ea942 Convert comments in ssl. by David Benjamin · 8 years ago
  18. 4d71a9a Migrate TLS 1.2 and below state machines to the new style. by Steven Valdez · 8 years ago
  19. 8fc2dc0 Put SCTs and OCSP responses in CRYPTO_BUFFERs. by David Benjamin · 8 years ago
  20. 72912d2 Rotate the default ticket encryption key. by Martin Kreichgauer · 8 years ago
  21. f4ecc84 Prevent both early data and custom extensions from being accepted. by Steven Valdez · 8 years ago
  22. 7934f08 Replace init_msg/init_num with a get_message hook. by David Benjamin · 8 years ago
  23. 37af90f Convert a few more scopers. by David Benjamin · 8 years ago
  24. ee910bf Use new STACK_OF helpers. by David Benjamin · 8 years ago
  25. 10e1060 Send correct fatal alert the renegotation extension fails to match. by Adam Langley · 8 years ago
  26. c642aca Convert SSL_ECDH_CTX to C++. by David Benjamin · 8 years ago
  27. 6dc8bf6 Convert SSL_TRANSCRIPT to C++. by David Benjamin · 8 years ago
  28. 31b0c9b Add a bunch of scopers. by David Benjamin · 8 years ago
  29. e39ac8f Switch BORINGSSL_INTERNAL_CXX_TYPES in favor of subclassing games. by David Benjamin · 8 years ago
  30. 1386aad Switch various things to scopers. by David Benjamin · 8 years ago
  31. 86e95b8 Move libssl's internals into the bssl namespace. by David Benjamin · 8 years ago
  32. a3d76d0 Switch OPENSSL_COMPILE_ASSERT to static_assert in C++ code. by David Benjamin · 8 years ago
  33. 81678aa Switch t1_lib, tls_record, and tls13_both to C++. by David Benjamin · 8 years ago[Renamed (96%) from ssl/t1_lib.c]
  34. 9343b0b Don't check renegotiation_info in fuzzer mode. by David Benjamin · 8 years ago
  35. 8f36c51 Revise version negotiation logic on the C side. by Steven Valdez · 8 years ago
  36. 68161cb Stash the computed version range in SSL_HANDSHAKE. by David Benjamin · 8 years ago
  37. 8d606e3 Clear out f_err pattern from handshake_client.c. by David Benjamin · 8 years ago
  38. a365138 Factor out the default signature algorithm logic. by David Benjamin · 8 years ago
  39. 71c21b4 Add SSL_CTX_set_verify_algorithm_prefs. by David Benjamin · 8 years ago
  40. 6952211 Support Ed25519 in TLS. by David Benjamin · 8 years ago
  41. a232a71 Deprecate SSL_PRIVATE_KEY_METHOD type and max_signature_len. by David Benjamin · 8 years ago
  42. bf833c3 Rename hs->public_key. by David Benjamin · 8 years ago
  43. c8ff30c Add an option to allow unknown ALPN protocols. by David Benjamin · 8 years ago chromium-3071
  44. 67bb45f Support enabling early data on SSL by Alessandro Ghedini · 8 years ago
  45. 246eeee Make RI on TLS 1.3 alert with ILLEGAL_PARAMETER. by Steven Valdez · 8 years ago
  46. 2d85062 Add Data-less Zero-RTT support. by Steven Valdez · 8 years ago
  47. 707af29 Support asynchronous ticket decryption with TLS 1.3. by David Benjamin · 8 years ago
  48. 4c341d0 Support asynchronous ticket decryption with TLS 1.0–1.2. by Adam Langley · 8 years ago
  49. be49706 Rename initial_ctx to session_ctx. by David Benjamin · 8 years ago
  50. 35ac5b7 Export server-side ticket_age skew. by David Benjamin · 8 years ago
  51. 924a352 Remove experimental TLS 1.3 short record header extension. by Steven Valdez · 8 years ago
  52. ad8f5e1 Don't use long for timestamps. by David Benjamin · 8 years ago
  53. fc02b59 Move tmp.extended_master_secret to SSL_HANDSHAKE. by David Benjamin · 8 years ago
  54. 45738dd Move new_cipher and new_session to SSL_HANDSHAKE. by David Benjamin · 8 years ago
  55. 83a3212 Move SCT lists and OCSP responses to CERT. by David Benjamin · 8 years ago
  56. 46db7af Remove |X509| things from SSL_SESSION. by Adam Langley · 8 years ago
  57. 908ac19 Moving transcript and PRF functions to SSL_TRANSCRIPT. by Steven Valdez · 8 years ago
  58. c68e5b9 Establish that the default value of an out-arg for alerts is SSL_AD_DECODE_ERROR. by Adam Langley · 8 years ago
  59. 8df6766 Support setting per-connection SCT list by Alessandro Ghedini · 8 years ago
  60. 2f82a0e Don't stash tlsext_hostname in ssl_get_new_session. by Steven Valdez · 8 years ago
  61. 2fe6e22 Remove mask_a and mask_k from CERT. by David Benjamin · 8 years ago
  62. 5db7c9b Get OPENSSL_COMPILE_ASSERT working in function bodies. by David Benjamin · 8 years ago
  63. 6752efd Never send SNI warning alerts. by David Benjamin · 8 years ago
  64. a8c8b38 Don't call the SNI callback as a client. by David Benjamin · 8 years ago
  65. c253864 Remove some node.js hacks. by David Benjamin · 8 years ago
  66. 6f600d6 Add experimental TLS 1.3 short record header extension. by David Benjamin · 8 years ago
  67. 17cf2cb Work around language and compiler bug in memcpy, etc. by David Benjamin · 8 years ago
  68. 76bb141 Remove the BORINGSSL_ANDROID_SYSTEM P-521 special-case. by David Benjamin · 9 years ago
  69. 4882a6c Replace key_exchange_info with group_id. by David Benjamin · 8 years ago
  70. 559f064 Support setting per-connection OCSP staple by Alessandro Ghedini · 8 years ago
  71. 30c4c30 Revise some integer sizes. by David Benjamin · 8 years ago
  72. f04c2e9 Move client_version into SSL_HANDSHAKE. by David Benjamin · 8 years ago
  73. 9d125dc Remove SSL_OP_DISABLE_NPN. by David Benjamin · 8 years ago
  74. 731058e Typedef ssl_early_callback_ctx to SSL_CLIENT_HELLO. by David Benjamin · 8 years ago
  75. f3c8f8d Pass explicit parameters elsewhere. by David Benjamin · 8 years ago
  76. 8baf963 Pass explicit hs parameters to ssl_ext_*. by David Benjamin · 8 years ago
  77. 2bd1917 Pass explicit hs parameters into custom_extensions.c. by David Benjamin · 8 years ago
  78. 8c880a2 Pass explicit hs parameters to kExtensions callbacks. by David Benjamin · 8 years ago
  79. aedf303 Parse the entire PSK extension. by David Benjamin · 8 years ago
  80. a4ee74d Skipping early data on 0RTT rejection. by Steven Valdez · 8 years ago
  81. cfa08c3 Enforce basic sanity of SCT lists. by Adam Langley · 8 years ago
  82. fbbef12 Don't put a colon in the extra error message. by Adam Langley · 8 years ago
  83. 35598ae Remove ext_alpn_init. by David Benjamin · 8 years ago
  84. e7f60a2 Fix alert on tls1_process_alert failure. by David Benjamin · 8 years ago
  85. 12d6baf Make ssl_ext_pre_shared_key_add_clienthello static. by David Benjamin · 8 years ago
  86. 4eb95cc Parse ClientHello extensions before deciding on resumption. by David Benjamin · 8 years ago
  87. 53210cb Do not send unsolicited SCTs in TLS 1.3. by David Benjamin · 8 years ago
  88. 75f9914 Align TLS 1.2 and 1.3 server session validity checks. by David Benjamin · 8 years ago
  89. a833c35 Update to TLS 1.3 draft 18. by Steven Valdez · 8 years ago
  90. eab773a Add missing PSK identity comment. by David Benjamin · 8 years ago
  91. 78476f6 Move tlsext_ticket_expected to SSL_HANDSHAKE. by David Benjamin · 8 years ago
  92. 9ef31f0 Negotiate the cipher suite before ALPN. by David Benjamin · 8 years ago
  93. af3b8a9 Fix multiple PSK identity parsing. by Steven Valdez · 8 years ago
  94. 70aba26 Skip ec_point_format if min_version >= TLS 1.3. by David Benjamin · 8 years ago
  95. 74df74b Remove ssl_any_ec_cipher_suites_enabled check. by David Benjamin · 8 years ago
  96. 3a322f5 Revise signing preferences. by David Benjamin · 8 years ago
  97. 9559401 Use SHA256_CTX instead of EVP_MD_CTX when computing Channel ID. by Nick Harper · 8 years ago
  98. 60a85cb Implement ChannelID for TLS 1.3. by Nick Harper · 8 years ago
  99. 3ef7697 Don't accept {sha1, ecdsa} and {sha512, ecdsa}. by David Benjamin · 8 years ago
  100. a128a55 Update the TLS 1.3 draft version to draft 16. by David Benjamin · 8 years ago