1. ebad508 Switch verify sigalg pref functions to SSL_HANDSHAKE. by David Benjamin · 5 years ago
  2. ee0716f Defer early keys to QUIC clients to after certificate reverification. by David Benjamin · 5 years ago
  3. 3ba9586 Rename a number of BUF_* functions to OPENSSL_*. by David Benjamin · 5 years ago
  4. d634357 Add initial support for 0-RTT with QUIC. by David Benjamin · 6 years ago
  5. e530ea3 Use spans for the various TLS 1.3 secrets. by David Benjamin · 6 years ago
  6. 79b8b3a Switch tls13_enc.cc to spans. by David Benjamin · 6 years ago
  7. 9806ae0 Check the second ClientHello's PSK binder on resumption. by David Benjamin · 6 years ago
  8. 4dfd5af Only bypass the signature verification itself in fuzzer mode. by David Benjamin · 6 years ago
  9. d7266ec Enforce key usage for RSA keys in TLS 1.2. by Jesse Selover · 6 years ago
  10. b84674b Delete the variants/draft code. by Steven Valdez · 7 years ago
  11. 9cde848 Use handshake parameters to decide if cert/key are available by Christopher Patton · 7 years ago
  12. 7b93593 Add initial HRSS support. by Adam Langley · 6 years ago
  13. 6965d25 Work around a JDK 11 TLS 1.3 bug. by David Benjamin · 6 years ago
  14. f241a59 In 0RTT mode, reverify the server certificate before sending early data. by Jesse Selover · 6 years ago
  15. c8e0f90 Add an interface for QUIC integration. by Steven Valdez · 7 years ago
  16. 2d98d49 Add a per-SSL TLS 1.3 downgrade enforcement option and improve tests. by David Benjamin · 6 years ago
  17. 8c7c635 Support symbol prefixes by Joshua Liebow-Feeser · 7 years ago
  18. 492c9aa Fill in a fake session ID for TLS 1.3. by David Benjamin · 7 years ago
  19. 12f5878 Some more bools. by David Benjamin · 7 years ago
  20. a130ce0 Update TLS 1.3 citations for the final RFC. by David Benjamin · 7 years ago
  21. f1af129 Implement TLS 1.3 anti-downgrade signal. by Steven Valdez · 7 years ago
  22. 1c337e5 Option to reverify certs on resumption. by Jesse Selover · 7 years ago
  23. e0afc85 Send an alert if we fail to pick a signature algorithm. by Adam Langley · 7 years ago
  24. 4685376 Remove other unnecessary tlsext_ prefixes. by David Benjamin · 7 years ago
  25. 50596f8 Switch some easy SSL fields to UniquePtr. by David Benjamin · 7 years ago
  26. bfdd1a9 Give SSL_SESSION a destructor. by David Benjamin · 7 years ago
  27. 2908dd1 Add bssl::UpRef. by David Benjamin · 7 years ago
  28. a3a71e9 Flip SSL_SESSION fields to bool. by David Benjamin · 7 years ago
  29. 9bb15f5 Remove SSL 3.0 implementation. by David Benjamin · 7 years ago
  30. b7bc80a SSL_CONFIG: new struct for sheddable handshake configuration. by Matthew Braithwaite · 7 years ago
  31. e325c3f Give CERT a destructor. by David Benjamin · 7 years ago
  32. 9f0e7cb Move TB state to ssl->s3. by David Benjamin · 7 years ago
  33. a0bc29a Remove remnants of the HRR message. by David Benjamin · 7 years ago
  34. 7e5dd25 Remove draft22 and experiment2. by Steven Valdez · 7 years ago
  35. 0ab3f0c Notice earlier if a server echoes the TLS 1.3 compatibility session ID. by David Benjamin · 7 years ago
  36. a7bc944 Don't use the client_random entropy for GREASE. by David Benjamin · 7 years ago
  37. 36fcc4c Implement Token Binding by Nick Harper · 8 years ago
  38. 6df6540 Add a draft TLS 1.3 anti-downgrade signal. by David Benjamin · 7 years ago
  39. 64cc121 Remove deprecated TLS 1.3 variants. by Steven Valdez · 7 years ago
  40. f98b582 Fix tls13_variant check to check max_version. by Steven Valdez · 7 years ago
  41. 494e4d0 Add an option for False Start without ALPN. by David Benjamin · 7 years ago
  42. 9986f6b Fix renegotiation with TLS 1.3 draft 22. by Steven Valdez · 7 years ago
  43. c5c31ab Enforce compression_method in TLS 1.3 draft 22. by Steven Valdez · 7 years ago
  44. 964b237 Implement PR 1091 (TLS 1.3 draft '22'). by Steven Valdez · 7 years ago
  45. cd8470f Adding support for draft 21 as a TLS 1.3 variant. by Steven Valdez · 7 years ago
  46. 2637f3c Even more fun with Span. by David Benjamin · 7 years ago
  47. 8e7bbba Use more scopers. by David Benjamin · 7 years ago
  48. 75a1f23 Have a bit more fun with Span. by David Benjamin · 7 years ago
  49. 00f48c8 Rename and move a few more ssl3_ functions around. by David Benjamin · 7 years ago
  50. d1e3ce1 Rename ssl3_send_alert and ssl3_protocol_version. by David Benjamin · 7 years ago
  51. 73d42e6 Inline ssl_clear_tls13_state. by David Benjamin · 8 years ago
  52. 879efc3 Switch more things to Array. by David Benjamin · 8 years ago
  53. 08f5c76 Convert more things to Array. by David Benjamin · 8 years ago
  54. 499742c Introduce bssl::Array<T> and use it in SSLKeyShare. by David Benjamin · 8 years ago
  55. e58f8a6 Simplify tls1_change_cipher_spec. by David Benjamin · 8 years ago
  56. 6dc892f Remove redundant calls to |OPENSSL_cleanse| and |OPENSSL_realloc_clean|. by Martin Kreichgauer · 8 years ago
  57. c7d4d21 Add experiment without client CCS and fix session ID bug. by Steven Valdez · 8 years ago
  58. d0beda0 Properly report SSL_session_reused after a renegotiation. by David Benjamin · 8 years ago
  59. 74795b3 More miscellaneous bools. by David Benjamin · 8 years ago
  60. 046bc1f SSL3_STATE ints to bools. by David Benjamin · 8 years ago
  61. 4cbb931 Collapse client Finished states together. by David Benjamin · 8 years ago
  62. fd45ee7 Replace bits in SSL_HANDSHAKE with bool. by David Benjamin · 8 years ago
  63. d816874 Set SSL_in_init to false before new_session_cb. by Steven Valdez · 8 years ago
  64. c11ea942 Convert comments in ssl. by David Benjamin · 8 years ago
  65. 398085b Simplify states with hs_wait_t returns. by Steven Valdez · 8 years ago
  66. 4d71a9a Migrate TLS 1.2 and below state machines to the new style. by Steven Valdez · 8 years ago
  67. 5c4271f Don't reauthenticate on renegotiation. by David Benjamin · 8 years ago
  68. 5ef40c6 Mark renego-established sessions not resumable. by David Benjamin · 8 years ago
  69. 8fc2dc0 Put SCTs and OCSP responses in CRYPTO_BUFFERs. by David Benjamin · 8 years ago
  70. ca9e8f5 Tidy up handshake digest logic. by David Benjamin · 8 years ago
  71. 7934f08 Replace init_msg/init_num with a get_message hook. by David Benjamin · 8 years ago
  72. 8f94c31 Replace reuse_message with an explicit next_message call. by David Benjamin · 8 years ago
  73. e3dee27 Remove the free_buffer parameter to release_current_message. by David Benjamin · 8 years ago
  74. 9bbdf58 Remove expect and received flight hooks. by David Benjamin · 8 years ago
  75. b0c761e Tolerate early ChangeCipherSpec in DTLS. by David Benjamin · 8 years ago
  76. ee910bf Use new STACK_OF helpers. by David Benjamin · 8 years ago
  77. e664a53 Return null from SSL_get0_peer_certificates if unauthenticated. by David Benjamin · 8 years ago
  78. c642aca Convert SSL_ECDH_CTX to C++. by David Benjamin · 8 years ago
  79. 6dc8bf6 Convert SSL_TRANSCRIPT to C++. by David Benjamin · 8 years ago
  80. bf1117d Sample server GREASE from the server_random. by David Benjamin · 8 years ago
  81. 31b0c9b Add a bunch of scopers. by David Benjamin · 8 years ago
  82. e39ac8f Switch BORINGSSL_INTERNAL_CXX_TYPES in favor of subclassing games. by David Benjamin · 8 years ago
  83. 1386aad Switch various things to scopers. by David Benjamin · 8 years ago
  84. 86e95b8 Move libssl's internals into the bssl namespace. by David Benjamin · 8 years ago
  85. 0e4a448 Add ClientHello no_session_id variant. by Steven Valdez · 8 years ago
  86. 3a1dd46 Add async certificate verification callback. by David Benjamin · 8 years ago
  87. a3d76d0 Switch OPENSSL_COMPILE_ASSERT to static_assert in C++ code. by David Benjamin · 8 years ago
  88. b853f31 Fix handling of ServerHellos with omitted extensions. by David Benjamin · 8 years ago
  89. dbe0158 Implement ContentType TLS 1.3 variant. by Steven Valdez · 8 years ago
  90. d781fc4 Switch handshake_client and handshake_server to C++. by David Benjamin · 8 years ago[Renamed (98%) from ssl/handshake_client.c]
  91. 52586f9 Adding TLS 1.3 variant to SSL*. by Steven Valdez · 8 years ago
  92. 038da9b Move the version to an extension in the experimental TLS 1.3 encoding. by Steven Valdez · 8 years ago
  93. 520e122 Implement experimental alternate encoding of TLS 1.3. by Steven Valdez · 8 years ago
  94. 8f36c51 Revise version negotiation logic on the C side. by Steven Valdez · 8 years ago
  95. 68161cb Stash the computed version range in SSL_HANDSHAKE. by David Benjamin · 8 years ago
  96. 4414874 Simplify ssl_private_key_* state machine points. by David Benjamin · 8 years ago
  97. 8d606e3 Clear out f_err pattern from handshake_client.c. by David Benjamin · 8 years ago
  98. e831a81 Adding support for sending early data on the client. by Steven Valdez · 8 years ago
  99. a365138 Factor out the default signature algorithm logic. by David Benjamin · 8 years ago
  100. 7e06de5 Really remove DHE ciphersuites from TLS. by Matthew Braithwaite · 8 years ago