1. 855d504 Unwind legacy SSL_PRIVATE_KEY_METHOD hooks. by David Benjamin · 7 years ago
  2. e7c95d9 Run TLS 1.3 tests at all variants and fix bugs. by David Benjamin · 7 years ago
  3. 964b237 Implement PR 1091 (TLS 1.3 draft '22'). by Steven Valdez · 7 years ago
  4. 6cc352e Add helper functions for SSL_SIGN_*. by David Benjamin · 7 years ago
  5. cd8470f Adding support for draft 21 as a TLS 1.3 variant. by Steven Valdez · 7 years ago
  6. f66e882 Fix documentation for |ssl_ticket_aead_method_st|. by Daniel Hirche · 7 years ago
  7. 64950cb Don't rely on x509.h for SSL_FILETYPE_*. by David Benjamin · 7 years ago
  8. 4e84035 Fully hide LHASH_OF(SSL_SESSION). by David Benjamin · 7 years ago
  9. 01f26f3 Re-add hmac.h include to ssl.h. by Alessandro Ghedini · 7 years ago
  10. 1f1ac63 Fix typo in TODO comment. by David Benjamin · 7 years ago
  11. 664e99a Make SSL_CTX opaque. by David Benjamin · 7 years ago
  12. 751d1a1 Fold ssl_open_record_fatal_alert into ssl_open_record_error. by David Benjamin · 8 years ago
  13. a4bafd3 Add SSL_SESSION_{get,set}_protocol_version. by David Benjamin · 7 years ago
  14. 4c7f5fa Remove old TLS 1.3 variants (NoSessionID and RecordType). by Steven Valdez · 7 years ago
  15. 81f030b Switch OPENSSL_VERSION_NUMBER to 1.1.0. by David Benjamin · 9 years ago
  16. e9c7b1c Add SSL_SESSION_is_single_use. by David Benjamin · 7 years ago
  17. 9eaa3bd Remove SSL_CTX_sessions and properly lock SSL_CTX_sess_number. by David Benjamin · 8 years ago
  18. b1b76ae Add SSL_CIPHER_get_prf_nid. by David Benjamin · 8 years ago
  19. 9a4876e Remove hmac.h include from ssl.h. by David Benjamin · 8 years ago
  20. 33fc2ba Opaquify SSL_CIPHER. by David Benjamin · 8 years ago
  21. c7d4d21 Add experiment without client CCS and fix session ID bug. by Steven Valdez · 8 years ago
  22. 1682126 Add Experiment 2 by Steven Valdez · 8 years ago
  23. a861460 Make SNI per-connection, not per-session. by David Benjamin · 8 years ago
  24. 4d71a9a Migrate TLS 1.2 and below state machines to the new style. by Steven Valdez · 8 years ago
  25. e3bb51c Remove deprecated cipher property APIs. by David Benjamin · 8 years ago chromium-3202
  26. 8fc2dc0 Put SCTs and OCSP responses in CRYPTO_BUFFERs. by David Benjamin · 8 years ago
  27. 4512b79 Run comment conversion script on include/ by David Benjamin · 8 years ago
  28. 72912d2 Rotate the default ticket encryption key. by Martin Kreichgauer · 8 years ago
  29. f4ecc84 Prevent both early data and custom extensions from being accepted. by Steven Valdez · 8 years ago
  30. 348f0d8 Add OpenSSL 1.1.0's cipher property functions. by David Benjamin · 8 years ago
  31. 70dbf04 Add SSL_CTX_cipher_in_group. by David Benjamin · 8 years ago
  32. ba2d3df Add DTLS_with_buffers_method. by David Benjamin · 8 years ago
  33. 211a06a Rephrase documentation on early data reset. by David Benjamin · 8 years ago
  34. 27e377e Fix miscellaneous clang-tidy warnings. by David Benjamin · 8 years ago
  35. abbf365 Make the bssl::SealRecord out_suffix arg fixed length. by Martin Kreichgauer · 8 years ago
  36. 13fafcd Add a warning to |SSL_get_servername|. by Adam Langley · 8 years ago
  37. 22df691 Document the behaviour of non-standard separators in cipher strings. by Adam Langley · 8 years ago
  38. 17c3057 Add bssl::SealRecord and bssl::OpenRecord. by Martin Kreichgauer · 8 years ago
  39. e39ac8f Switch BORINGSSL_INTERNAL_CXX_TYPES in favor of subclassing games. by David Benjamin · 8 years ago
  40. 86e95b8 Move libssl's internals into the bssl namespace. by David Benjamin · 8 years ago
  41. 0e4a448 Add ClientHello no_session_id variant. by Steven Valdez · 8 years ago
  42. 71dfad4 Add new functions for configuring the client CA list. by David Benjamin · 8 years ago
  43. 3a1dd46 Add async certificate verification callback. by David Benjamin · 8 years ago
  44. dbe0158 Implement ContentType TLS 1.3 variant. by Steven Valdez · 8 years ago
  45. a93a68d Fix comment for SSL_ERROR_PENDING_CERTIFICATE. by David Benjamin · 8 years ago
  46. 52586f9 Adding TLS 1.3 variant to SSL*. by Steven Valdez · 8 years ago
  47. 520e122 Implement experimental alternate encoding of TLS 1.3. by Steven Valdez · 8 years ago
  48. be483dbe Revise SSL_CTX_sess_set_new_cb documentation. by David Benjamin · 8 years ago
  49. 04017c1 Overhaul session resumption documentation. by David Benjamin · 8 years ago
  50. 06a6ed0 Clarify use of |SSL_VERIFY_FAIL_IF_NO_PEER_CERT| flag. by Piotr Sikora · 8 years ago
  51. 5aaaa98 Detect WatchGuard's TLS 1.3 interference failure mode. by David Benjamin · 8 years ago
  52. 6fff386 Support standard RFC cipher suite names alongside OpenSSL ones. by David Benjamin · 8 years ago
  53. fc08dfc Rename {ssl,ctx}->{min,max}_version. by David Benjamin · 8 years ago
  54. 9961dff Unwind V2ClientHello counters. by David Benjamin · 8 years ago
  55. ca74358 Test SSL_select_next_proto and SSL_get_fd. by David Benjamin · 8 years ago
  56. e831a81 Adding support for sending early data on the client. by Steven Valdez · 8 years ago
  57. d94682d Remove ex_data's dup hook. by David Benjamin · 8 years ago
  58. 01f8a8c Convert stack.h to use inline functions. by David Benjamin · 8 years ago
  59. d55bd79 Fix SSL_COMP_get_compression_methods type signature. by David Benjamin · 8 years ago
  60. 48b6b8f Add SSL_CIPHER_has_SHA384_HMAC. by Alessandro Ghedini · 8 years ago
  61. 93731d9 Remove old SSL min/max version functions. by David Benjamin · 8 years ago
  62. de254b4 Enforce max_early_data_size on the server. by Alessandro Ghedini · 8 years ago
  63. 71c21b4 Add SSL_CTX_set_verify_algorithm_prefs. by David Benjamin · 8 years ago
  64. 7e06de5 Really remove DHE ciphersuites from TLS. by Matthew Braithwaite · 8 years ago
  65. 3cfeb95 Disable SSLv3 by default. by David Benjamin · 8 years ago
  66. 6952211 Support Ed25519 in TLS. by David Benjamin · 8 years ago
  67. a232a71 Deprecate SSL_PRIVATE_KEY_METHOD type and max_signature_len. by David Benjamin · 8 years ago
  68. c8ff30c Add an option to allow unknown ALPN protocols. by David Benjamin · 8 years ago chromium-3071
  69. 67bb45f Support enabling early data on SSL by Alessandro Ghedini · 8 years ago
  70. 764ab98 Support and test P-224 certificates. by Adam Langley · 8 years ago
  71. fc2d78d Document server 0-RTT behavior. by David Benjamin · 8 years ago
  72. 2a07072 Prevent Channel ID and Custom Extensions on 0-RTT. by Steven Valdez · 8 years ago
  73. 2d85062 Add Data-less Zero-RTT support. by Steven Valdez · 8 years ago
  74. 57e81e6 Name |select_certificate_cb| return values by Alessandro Ghedini · 8 years ago
  75. edb7299 Fix typo in the |ssl_ticket_aead_success| documentation by Alessandro Ghedini · 8 years ago
  76. 48e1d18 Restore SSL_CTX_set_ecdh_auto compatibility hook. by David Benjamin · 8 years ago
  77. 4c341d0 Support asynchronous ticket decryption with TLS 1.0–1.2. by Adam Langley · 8 years ago
  78. be49706 Rename initial_ctx to session_ctx. by David Benjamin · 8 years ago
  79. 6ad20dc Move error-on-empty-cipherlist into ssl_create_cipher_list(). by Matthew Braithwaite · 8 years ago
  80. d04ca95 Add |SSL[_CTX]_set_chain_and_key|. by Adam Langley · 8 years ago
  81. 35ac5b7 Export server-side ticket_age skew. by David Benjamin · 8 years ago
  82. fe36672 Allow users of the |CRYPTO_BUFFER|-based methods to verify certs after the handshake. by Adam Langley · 8 years ago
  83. 8ebeabf Add SSL_CTX_get_ciphers. by David Benjamin · 8 years ago
  84. f29c429 Remove support for old-style SSL_PRIVATE_KEY_METHOD types. by David Benjamin · 8 years ago
  85. f465461 Add SSL_get0_peer_certificates. by David Benjamin · 8 years ago
  86. 924a352 Remove experimental TLS 1.3 short record header extension. by Steven Valdez · 8 years ago
  87. d6c22ee Add |SSL_get0_server_requested_CAs|. by Adam Langley · 8 years ago
  88. a58baaf Forbid the server certificate from changing on renego. by David Benjamin · 8 years ago
  89. ad8f5e1 Don't use long for timestamps. by David Benjamin · 8 years ago
  90. 11c8289 Remove support for blocking DTLS timeout handling. by David Benjamin · 8 years ago
  91. 39425b0 Add |TLS_with_buffers_method|. by Adam Langley · 8 years ago
  92. 34b4c82 Hold CA names as |CRYPTO_BUFFER|s. by Adam Langley · 8 years ago
  93. adec772 Remove SSL_CIPHER_has_MD5_HMAC. by David Benjamin · 8 years ago
  94. de5c325 Fix SSL_write doc comment by Michel Lespinasse · 8 years ago
  95. a57dcfb Add new cipherlist-setting APIs that reject nonsense. by Matthew Braithwaite · 8 years ago
  96. c92f29d Remove freelist_max_len. by David Benjamin · 8 years ago
  97. 5960a90 Move sid_ctx from SSL/SSL_CTX to CERT. by David Benjamin · 8 years ago
  98. 26e1ff3 Remove some unnecessary return values. by David Benjamin · 8 years ago
  99. 27a9e6a Adding ALPN to session. by Steven Valdez · 8 years ago
  100. 83a3212 Move SCT lists and OCSP responses to CERT. by David Benjamin · 8 years ago