Sign in
boringssl
/
boringssl.git
/
7e43e2e8eecc9114f829e6d75cc3c04d1af57504
/
ssl
/
handshake_client.cc
ebad508
Switch verify sigalg pref functions to SSL_HANDSHAKE.
by David Benjamin
· 5 years ago
ee0716f
Defer early keys to QUIC clients to after certificate reverification.
by David Benjamin
· 5 years ago
3ba9586
Rename a number of BUF_* functions to OPENSSL_*.
by David Benjamin
· 5 years ago
d634357
Add initial support for 0-RTT with QUIC.
by David Benjamin
· 6 years ago
e530ea3
Use spans for the various TLS 1.3 secrets.
by David Benjamin
· 6 years ago
79b8b3a
Switch tls13_enc.cc to spans.
by David Benjamin
· 6 years ago
9806ae0
Check the second ClientHello's PSK binder on resumption.
by David Benjamin
· 6 years ago
4dfd5af
Only bypass the signature verification itself in fuzzer mode.
by David Benjamin
· 6 years ago
d7266ec
Enforce key usage for RSA keys in TLS 1.2.
by Jesse Selover
· 6 years ago
b84674b
Delete the variants/draft code.
by Steven Valdez
· 7 years ago
9cde848
Use handshake parameters to decide if cert/key are available
by Christopher Patton
· 7 years ago
7b93593
Add initial HRSS support.
by Adam Langley
· 6 years ago
6965d25
Work around a JDK 11 TLS 1.3 bug.
by David Benjamin
· 6 years ago
f241a59
In 0RTT mode, reverify the server certificate before sending early data.
by Jesse Selover
· 6 years ago
c8e0f90
Add an interface for QUIC integration.
by Steven Valdez
· 7 years ago
2d98d49
Add a per-SSL TLS 1.3 downgrade enforcement option and improve tests.
by David Benjamin
· 6 years ago
8c7c635
Support symbol prefixes
by Joshua Liebow-Feeser
· 7 years ago
492c9aa
Fill in a fake session ID for TLS 1.3.
by David Benjamin
· 7 years ago
12f5878
Some more bools.
by David Benjamin
· 7 years ago
a130ce0
Update TLS 1.3 citations for the final RFC.
by David Benjamin
· 7 years ago
f1af129
Implement TLS 1.3 anti-downgrade signal.
by Steven Valdez
· 7 years ago
1c337e5
Option to reverify certs on resumption.
by Jesse Selover
· 7 years ago
e0afc85
Send an alert if we fail to pick a signature algorithm.
by Adam Langley
· 7 years ago
4685376
Remove other unnecessary tlsext_ prefixes.
by David Benjamin
· 7 years ago
50596f8
Switch some easy SSL fields to UniquePtr.
by David Benjamin
· 7 years ago
bfdd1a9
Give SSL_SESSION a destructor.
by David Benjamin
· 7 years ago
2908dd1
Add bssl::UpRef.
by David Benjamin
· 7 years ago
a3a71e9
Flip SSL_SESSION fields to bool.
by David Benjamin
· 7 years ago
9bb15f5
Remove SSL 3.0 implementation.
by David Benjamin
· 7 years ago
b7bc80a
SSL_CONFIG: new struct for sheddable handshake configuration.
by Matthew Braithwaite
· 7 years ago
e325c3f
Give CERT a destructor.
by David Benjamin
· 7 years ago
9f0e7cb
Move TB state to ssl->s3.
by David Benjamin
· 7 years ago
a0bc29a
Remove remnants of the HRR message.
by David Benjamin
· 7 years ago
7e5dd25
Remove draft22 and experiment2.
by Steven Valdez
· 7 years ago
0ab3f0c
Notice earlier if a server echoes the TLS 1.3 compatibility session ID.
by David Benjamin
· 7 years ago
a7bc944
Don't use the client_random entropy for GREASE.
by David Benjamin
· 7 years ago
36fcc4c
Implement Token Binding
by Nick Harper
· 8 years ago
6df6540
Add a draft TLS 1.3 anti-downgrade signal.
by David Benjamin
· 7 years ago
64cc121
Remove deprecated TLS 1.3 variants.
by Steven Valdez
· 7 years ago
f98b582
Fix tls13_variant check to check max_version.
by Steven Valdez
· 7 years ago
494e4d0
Add an option for False Start without ALPN.
by David Benjamin
· 7 years ago
9986f6b
Fix renegotiation with TLS 1.3 draft 22.
by Steven Valdez
· 7 years ago
c5c31ab
Enforce compression_method in TLS 1.3 draft 22.
by Steven Valdez
· 7 years ago
964b237
Implement PR 1091 (TLS 1.3 draft '22').
by Steven Valdez
· 7 years ago
cd8470f
Adding support for draft 21 as a TLS 1.3 variant.
by Steven Valdez
· 7 years ago
2637f3c
Even more fun with Span.
by David Benjamin
· 7 years ago
8e7bbba
Use more scopers.
by David Benjamin
· 7 years ago
75a1f23
Have a bit more fun with Span.
by David Benjamin
· 7 years ago
00f48c8
Rename and move a few more ssl3_ functions around.
by David Benjamin
· 7 years ago
d1e3ce1
Rename ssl3_send_alert and ssl3_protocol_version.
by David Benjamin
· 7 years ago
73d42e6
Inline ssl_clear_tls13_state.
by David Benjamin
· 8 years ago
879efc3
Switch more things to Array.
by David Benjamin
· 8 years ago
08f5c76
Convert more things to Array.
by David Benjamin
· 8 years ago
499742c
Introduce bssl::Array<T> and use it in SSLKeyShare.
by David Benjamin
· 8 years ago
e58f8a6
Simplify tls1_change_cipher_spec.
by David Benjamin
· 8 years ago
6dc892f
Remove redundant calls to |OPENSSL_cleanse| and |OPENSSL_realloc_clean|.
by Martin Kreichgauer
· 8 years ago
c7d4d21
Add experiment without client CCS and fix session ID bug.
by Steven Valdez
· 8 years ago
d0beda0
Properly report SSL_session_reused after a renegotiation.
by David Benjamin
· 8 years ago
74795b3
More miscellaneous bools.
by David Benjamin
· 8 years ago
046bc1f
SSL3_STATE ints to bools.
by David Benjamin
· 8 years ago
4cbb931
Collapse client Finished states together.
by David Benjamin
· 8 years ago
fd45ee7
Replace bits in SSL_HANDSHAKE with bool.
by David Benjamin
· 8 years ago
d816874
Set SSL_in_init to false before new_session_cb.
by Steven Valdez
· 8 years ago
c11ea942
Convert comments in ssl.
by David Benjamin
· 8 years ago
398085b
Simplify states with hs_wait_t returns.
by Steven Valdez
· 8 years ago
4d71a9a
Migrate TLS 1.2 and below state machines to the new style.
by Steven Valdez
· 8 years ago
5c4271f
Don't reauthenticate on renegotiation.
by David Benjamin
· 8 years ago
5ef40c6
Mark renego-established sessions not resumable.
by David Benjamin
· 8 years ago
8fc2dc0
Put SCTs and OCSP responses in CRYPTO_BUFFERs.
by David Benjamin
· 8 years ago
ca9e8f5
Tidy up handshake digest logic.
by David Benjamin
· 8 years ago
7934f08
Replace init_msg/init_num with a get_message hook.
by David Benjamin
· 8 years ago
8f94c31
Replace reuse_message with an explicit next_message call.
by David Benjamin
· 8 years ago
e3dee27
Remove the free_buffer parameter to release_current_message.
by David Benjamin
· 8 years ago
9bbdf58
Remove expect and received flight hooks.
by David Benjamin
· 8 years ago
b0c761e
Tolerate early ChangeCipherSpec in DTLS.
by David Benjamin
· 8 years ago
ee910bf
Use new STACK_OF helpers.
by David Benjamin
· 8 years ago
e664a53
Return null from SSL_get0_peer_certificates if unauthenticated.
by David Benjamin
· 8 years ago
c642aca
Convert SSL_ECDH_CTX to C++.
by David Benjamin
· 8 years ago
6dc8bf6
Convert SSL_TRANSCRIPT to C++.
by David Benjamin
· 8 years ago
bf1117d
Sample server GREASE from the server_random.
by David Benjamin
· 8 years ago
31b0c9b
Add a bunch of scopers.
by David Benjamin
· 8 years ago
e39ac8f
Switch BORINGSSL_INTERNAL_CXX_TYPES in favor of subclassing games.
by David Benjamin
· 8 years ago
1386aad
Switch various things to scopers.
by David Benjamin
· 8 years ago
86e95b8
Move libssl's internals into the bssl namespace.
by David Benjamin
· 8 years ago
0e4a448
Add ClientHello no_session_id variant.
by Steven Valdez
· 8 years ago
3a1dd46
Add async certificate verification callback.
by David Benjamin
· 8 years ago
a3d76d0
Switch OPENSSL_COMPILE_ASSERT to static_assert in C++ code.
by David Benjamin
· 8 years ago
b853f31
Fix handling of ServerHellos with omitted extensions.
by David Benjamin
· 8 years ago
dbe0158
Implement ContentType TLS 1.3 variant.
by Steven Valdez
· 8 years ago
d781fc4
Switch handshake_client and handshake_server to C++.
by David Benjamin
· 8 years ago
[Renamed (98%) from ssl/handshake_client.c]
52586f9
Adding TLS 1.3 variant to SSL*.
by Steven Valdez
· 8 years ago
038da9b
Move the version to an extension in the experimental TLS 1.3 encoding.
by Steven Valdez
· 8 years ago
520e122
Implement experimental alternate encoding of TLS 1.3.
by Steven Valdez
· 8 years ago
8f36c51
Revise version negotiation logic on the C side.
by Steven Valdez
· 8 years ago
68161cb
Stash the computed version range in SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
4414874
Simplify ssl_private_key_* state machine points.
by David Benjamin
· 8 years ago
8d606e3
Clear out f_err pattern from handshake_client.c.
by David Benjamin
· 8 years ago
e831a81
Adding support for sending early data on the client.
by Steven Valdez
· 8 years ago
a365138
Factor out the default signature algorithm logic.
by David Benjamin
· 8 years ago
7e06de5
Really remove DHE ciphersuites from TLS.
by Matthew Braithwaite
· 8 years ago
Next »