Sign in
boringssl
/
boringssl.git
/
a1bbacac51a550fbc4231a88380b8ebf586da6dd
/
ssl
c6722cd
Check SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER before touching wpend_buf.
by David Benjamin
· 8 years ago
079b394
Always enable GREASE for TLS 1.3 NewSessionTicket.
by David Benjamin
· 8 years ago
7784c4c
Fix fuzzer mode suppressions.
by David Benjamin
· 8 years ago
9559401
Use SHA256_CTX instead of EVP_MD_CTX when computing Channel ID.
by Nick Harper
· 8 years ago
c984611
Fix bogo implementation of Channel ID for TLS < 1.2.
by Nick Harper
· 8 years ago
60a85cb
Implement ChannelID for TLS 1.3.
by Nick Harper
· 9 years ago
3ef7697
Don't accept {sha1, ecdsa} and {sha512, ecdsa}.
by David Benjamin
· 8 years ago
89917a5
Fix memory leak in set_signing_algorithm_prefs.
by Daniel Bathgate
· 8 years ago
e228bd2
Hide SSL3_STATE.
by David Benjamin
· 8 years ago
2c62fe9
Run TestSequenceNumber at all versions.
by Steven Valdez
· 8 years ago
ab6306b
Fix fuzzer mode suppressions.
by David Benjamin
· 8 years ago
a128a55
Update the TLS 1.3 draft version to draft 16.
by David Benjamin
· 8 years ago
3baa6e1
Implement draft 16 HelloRetryRequest and cookie.
by David Benjamin
· 9 years ago
c4aa727
Updating Key Schedule and KeyUpdate to draft 16.
by Steven Valdez
· 9 years ago
490469f
Test unknown TLS 1.3 ServerHello extensions.
by David Benjamin
· 9 years ago
4fec04b
Place comment(lib, *) pragmas under OPENSSL_MSVC_PRAGMA.
by David Benjamin
· 8 years ago
version_for_cocoapods_7.0
53a2dfc
Remove incorrect ciphers check.
by David Benjamin
· 9 years ago
1db9e1b
Add the certificate_required alert.
by David Benjamin
· 9 years ago
5d9ba81
Enable more TLS 1.3 resumption tests.
by David Benjamin
· 9 years ago
52bf690
Saved Finished messages are twelve bytes.
by David Benjamin
· 9 years ago
34941c0
Forbid renego in SSL 3.0.
by David Benjamin
· 9 years ago
49ddf41
Remove redundant copies of the Finished messages.
by David Benjamin
· 9 years ago
ced00b4
Turn off Finished-based APIs at TLS 1.3 and SSL 3.0.
by David Benjamin
· 9 years ago
a4c8ff0
Move TLS 1.2 key exchange fields to SSL_HANDSHAKE.
by David Benjamin
· 9 years ago
43612b6
Move peer_supported_group_list to SSL_HANDSHAKE.
by David Benjamin
· 9 years ago
f04976b
Remove the get_peer_groups parameter to tls1_get_grouplist.
by David Benjamin
· 9 years ago
9d0b4bc
Trim tls1_check_group_id.
by David Benjamin
· 9 years ago
938fa7c
Inline tls1_check_ec_cert.
by David Benjamin
· 9 years ago
34de91e
Revise server-side ECDSA certificate checks.
by David Benjamin
· 9 years ago
b74b081
Move next_proto_neg_seen into SSL_HANDSHAKE.
by David Benjamin
· 9 years ago
f5d2cd0
Move extensions bitmasks into SSL_HANDSHAKE.
by David Benjamin
· 9 years ago
a048678
Move some fields from tmp to hs.
by David Benjamin
· 9 years ago
1286bee
Test that unknown TLS 1.3 ticket extensions are tolerated.
by David Benjamin
· 9 years ago
1a5e8ec
Apply GREASE to TLS 1.3 tickets.
by David Benjamin
· 9 years ago
3cbdc34
Add GENERIC selector for TLS 1.3 AEAD-only cipher suites.
by Steven Valdez
· 9 years ago
7f78df4
Add a few more tests around processing the server PSK extension.
by David Benjamin
· 9 years ago
803c77a
Update crypto negotation to draft 15.
by Steven Valdez
· 9 years ago
5b98608
Updating NewSessionTicket message and updating PSK to Draft 15.
by Steven Valdez
· 9 years ago
5ecb88b
Make EnableAllCiphers client-only and rename.
by David Benjamin
· 9 years ago
daa8850
Add tests for OCSP's interaction with resumption.
by David Benjamin
· 9 years ago
6dbde98
Fix TLS 1.3 minimum version tests.
by David Benjamin
· 9 years ago
3e9e043
Add dummy |SSL_COMP_free_compression_methods|.
by Adam Langley
· 9 years ago
ad75a66
Improve version extension tests.
by David Benjamin
· 9 years ago
592b532
Fix TLS 1.3 downgrade detection tests.
by David Benjamin
· 9 years ago
7f0965a
Check versions before trying to send KeyUpdate.
by David Benjamin
· 9 years ago
f139c99
Return immediately when cipher-string processing fails.
by Adam Langley
· 9 years ago
f99f244
Return immediately if a cipher command is invalid.
by Adam Langley
· 9 years ago
31f5b3c
Document that malloc tests require a longer timeout.
by David Benjamin
· 9 years ago
5fd1807
Implement SSL_CTX_set1_curves_list()
by Alessandro Ghedini
· 9 years ago
a252b34
Add tests for very large handshake messages.
by David Benjamin
· 9 years ago
d9791bf
Apply GREASE to the version extension.
by David Benjamin
· 9 years ago
fdd1099
Moving TLS 1.3 version negotiation into extension.
by Steven Valdez
· 9 years ago
cb18ac2
Add a test for SSL_version.
by David Benjamin
· 9 years ago
b1dd8cd
Prepare runner's wire/version conversions for the version extension.
by David Benjamin
· 9 years ago
3c6a1ea
Apply version/wire mapping at a higher layer in runner.
by David Benjamin
· 9 years ago
5ab4596
Fix ssl_ctx_make_profiles error handling.
by David Benjamin
· 9 years ago
1eeb0b0
Check for sk_X509_NAME_push failures.
by David Benjamin
· 9 years ago
04fe901
Require custom private keys to specify curve in 1.3.
by David Benjamin
· 9 years ago
65ac997
Implement draft-davidben-tls-grease-01.
by David Benjamin
· 9 years ago
1032df5
Disable Channel ID signature checking in fuzzer mode.
by David Benjamin
· 9 years ago
7364719
Rename NPN-Server test.
by David Benjamin
· 9 years ago
c07afb7
Record resumption and renewal transcripts separately.
by David Benjamin
· 9 years ago
fbc45d7
No-op ticket encryption in fuzzer mode.
by David Benjamin
· 9 years ago
01a9057
Fix remaining non-determinism in fuzzer transcripts.
by David Benjamin
· 9 years ago
ac5e47f
Add a fuzzer mode suppressions file.
by David Benjamin
· 9 years ago
196df5b
Add a InvalidChannelIDSignature test.
by David Benjamin
· 9 years ago
f3fbade
Add tests for SSL_peek.
by David Benjamin
· 9 years ago
e34bcc9
Support default versions with set_{min,max}_proto_version.
by David Benjamin
· 9 years ago
c8b6b4f
Only predict X25519 in TLS 1.3.
by David Benjamin
· 9 years ago
af56fbd
Renumber TLS 1.3 signature algorithms.
by David Benjamin
· 9 years ago
7e1f984
Fix some bugs in TLS 1.3 server key_share code.
by David Benjamin
· 9 years ago
e470690
Align SSL_set_{min,max}_version with upstream.
by David Benjamin
· 9 years ago
2dc0204
Don't return invalid versions in version_from_wire.
by David Benjamin
· 9 years ago
c027999
Take the version parameter out of ssl_do_msg_callback.
by David Benjamin
· 9 years ago
d2ba889
Improve -valgrind error-handling.
by David Benjamin
· 9 years ago
9aafb64
Don't swallow tool output on failure.
by David Benjamin
· 9 years ago
7a4aaa4
Fix TLS 1.3 fuzzer mode in Go.
by David Benjamin
· 9 years ago
e0ff767
Remove SSL_set_fallback_version.
by David Benjamin
· 9 years ago
e63d9d7
Test interaction of RSA key exchange and ClientHello.version.
by David Benjamin
· 9 years ago
7867934
Do not distinguish NULL and empty PSK identity hints.
by David Benjamin
· 9 years ago
bac75b8
Move peer_psk_identity_hint to SSL_HANDSHAKE.
by David Benjamin
· 9 years ago
4fe3c90
Release TLS 1.3 key shares earlier in TLS 1.2.
by David Benjamin
· 9 years ago
2c66e07
Don't send the access_denied alert innappropriately.
by David Benjamin
· 9 years ago
9a5f49e
Remove a few more remnants of RC4/TLS.
by David Benjamin
· 9 years ago
8aaa9e1
Remove RC4 from TLS for real.
by Matthew Braithwaite
· 9 years ago
6e3f5cc
Add SSL_CTX_get_keylog_callback.
by David Benjamin
· 9 years ago
45bdb2e
Remove identical tests.
by David Benjamin
· 9 years ago
3d458dc
Revert of Determining certificate_auth and key_exchange based on SSL.
by David Benjamin
· 9 years ago
639846e
Add tests for trailing data in handshake messages.
by David Benjamin
· 9 years ago
cd2c806
Factor per-message test machinery out.
by David Benjamin
· 9 years ago
5409123
Use C99 for size_t loops.
by David Benjamin
· 9 years ago
84b5c00
Serialize unresumable sessions to a placeholder value.
by Steven Valdez
· 9 years ago
bd09ecc
Determining certificate_auth and key_exchange based on SSL.
by Steven Valdez
· 9 years ago
4d0be24
Only allow SSL_set_session before the handshake.
by David Benjamin
· 9 years ago
fc0c9d9
Use a common state to begin the handshake.
by David Benjamin
· 9 years ago
5510863
Temporary remove the TLS 1.3 anti-downgrade mechanism.
by David Benjamin
· 9 years ago
c241d79
Add tests around compression methods.
by David Benjamin
· 9 years ago
abe94e3
Test that SNI warning alerts are ignored.
by David Benjamin
· 9 years ago
f0e935d
Fold stack-allocated types into headers.
by David Benjamin
· 9 years ago
0fb46d4
const-correct a variable.
by David Benjamin
· 9 years ago
Next »