1. c6722cd Check SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER before touching wpend_buf. by David Benjamin · 8 years ago
  2. 079b394 Always enable GREASE for TLS 1.3 NewSessionTicket. by David Benjamin · 8 years ago
  3. 7784c4c Fix fuzzer mode suppressions. by David Benjamin · 8 years ago
  4. 9559401 Use SHA256_CTX instead of EVP_MD_CTX when computing Channel ID. by Nick Harper · 8 years ago
  5. c984611 Fix bogo implementation of Channel ID for TLS < 1.2. by Nick Harper · 8 years ago
  6. 60a85cb Implement ChannelID for TLS 1.3. by Nick Harper · 9 years ago
  7. 3ef7697 Don't accept {sha1, ecdsa} and {sha512, ecdsa}. by David Benjamin · 8 years ago
  8. 89917a5 Fix memory leak in set_signing_algorithm_prefs. by Daniel Bathgate · 8 years ago
  9. e228bd2 Hide SSL3_STATE. by David Benjamin · 8 years ago
  10. 2c62fe9 Run TestSequenceNumber at all versions. by Steven Valdez · 8 years ago
  11. ab6306b Fix fuzzer mode suppressions. by David Benjamin · 8 years ago
  12. a128a55 Update the TLS 1.3 draft version to draft 16. by David Benjamin · 8 years ago
  13. 3baa6e1 Implement draft 16 HelloRetryRequest and cookie. by David Benjamin · 9 years ago
  14. c4aa727 Updating Key Schedule and KeyUpdate to draft 16. by Steven Valdez · 9 years ago
  15. 490469f Test unknown TLS 1.3 ServerHello extensions. by David Benjamin · 9 years ago
  16. 4fec04b Place comment(lib, *) pragmas under OPENSSL_MSVC_PRAGMA. by David Benjamin · 8 years ago version_for_cocoapods_7.0
  17. 53a2dfc Remove incorrect ciphers check. by David Benjamin · 9 years ago
  18. 1db9e1b Add the certificate_required alert. by David Benjamin · 9 years ago
  19. 5d9ba81 Enable more TLS 1.3 resumption tests. by David Benjamin · 9 years ago
  20. 52bf690 Saved Finished messages are twelve bytes. by David Benjamin · 9 years ago
  21. 34941c0 Forbid renego in SSL 3.0. by David Benjamin · 9 years ago
  22. 49ddf41 Remove redundant copies of the Finished messages. by David Benjamin · 9 years ago
  23. ced00b4 Turn off Finished-based APIs at TLS 1.3 and SSL 3.0. by David Benjamin · 9 years ago
  24. a4c8ff0 Move TLS 1.2 key exchange fields to SSL_HANDSHAKE. by David Benjamin · 9 years ago
  25. 43612b6 Move peer_supported_group_list to SSL_HANDSHAKE. by David Benjamin · 9 years ago
  26. f04976b Remove the get_peer_groups parameter to tls1_get_grouplist. by David Benjamin · 9 years ago
  27. 9d0b4bc Trim tls1_check_group_id. by David Benjamin · 9 years ago
  28. 938fa7c Inline tls1_check_ec_cert. by David Benjamin · 9 years ago
  29. 34de91e Revise server-side ECDSA certificate checks. by David Benjamin · 9 years ago
  30. b74b081 Move next_proto_neg_seen into SSL_HANDSHAKE. by David Benjamin · 9 years ago
  31. f5d2cd0 Move extensions bitmasks into SSL_HANDSHAKE. by David Benjamin · 9 years ago
  32. a048678 Move some fields from tmp to hs. by David Benjamin · 9 years ago
  33. 1286bee Test that unknown TLS 1.3 ticket extensions are tolerated. by David Benjamin · 9 years ago
  34. 1a5e8ec Apply GREASE to TLS 1.3 tickets. by David Benjamin · 9 years ago
  35. 3cbdc34 Add GENERIC selector for TLS 1.3 AEAD-only cipher suites. by Steven Valdez · 9 years ago
  36. 7f78df4 Add a few more tests around processing the server PSK extension. by David Benjamin · 9 years ago
  37. 803c77a Update crypto negotation to draft 15. by Steven Valdez · 9 years ago
  38. 5b98608 Updating NewSessionTicket message and updating PSK to Draft 15. by Steven Valdez · 9 years ago
  39. 5ecb88b Make EnableAllCiphers client-only and rename. by David Benjamin · 9 years ago
  40. daa8850 Add tests for OCSP's interaction with resumption. by David Benjamin · 9 years ago
  41. 6dbde98 Fix TLS 1.3 minimum version tests. by David Benjamin · 9 years ago
  42. 3e9e043 Add dummy |SSL_COMP_free_compression_methods|. by Adam Langley · 9 years ago
  43. ad75a66 Improve version extension tests. by David Benjamin · 9 years ago
  44. 592b532 Fix TLS 1.3 downgrade detection tests. by David Benjamin · 9 years ago
  45. 7f0965a Check versions before trying to send KeyUpdate. by David Benjamin · 9 years ago
  46. f139c99 Return immediately when cipher-string processing fails. by Adam Langley · 9 years ago
  47. f99f244 Return immediately if a cipher command is invalid. by Adam Langley · 9 years ago
  48. 31f5b3c Document that malloc tests require a longer timeout. by David Benjamin · 9 years ago
  49. 5fd1807 Implement SSL_CTX_set1_curves_list() by Alessandro Ghedini · 9 years ago
  50. a252b34 Add tests for very large handshake messages. by David Benjamin · 9 years ago
  51. d9791bf Apply GREASE to the version extension. by David Benjamin · 9 years ago
  52. fdd1099 Moving TLS 1.3 version negotiation into extension. by Steven Valdez · 9 years ago
  53. cb18ac2 Add a test for SSL_version. by David Benjamin · 9 years ago
  54. b1dd8cd Prepare runner's wire/version conversions for the version extension. by David Benjamin · 9 years ago
  55. 3c6a1ea Apply version/wire mapping at a higher layer in runner. by David Benjamin · 9 years ago
  56. 5ab4596 Fix ssl_ctx_make_profiles error handling. by David Benjamin · 9 years ago
  57. 1eeb0b0 Check for sk_X509_NAME_push failures. by David Benjamin · 9 years ago
  58. 04fe901 Require custom private keys to specify curve in 1.3. by David Benjamin · 9 years ago
  59. 65ac997 Implement draft-davidben-tls-grease-01. by David Benjamin · 9 years ago
  60. 1032df5 Disable Channel ID signature checking in fuzzer mode. by David Benjamin · 9 years ago
  61. 7364719 Rename NPN-Server test. by David Benjamin · 9 years ago
  62. c07afb7 Record resumption and renewal transcripts separately. by David Benjamin · 9 years ago
  63. fbc45d7 No-op ticket encryption in fuzzer mode. by David Benjamin · 9 years ago
  64. 01a9057 Fix remaining non-determinism in fuzzer transcripts. by David Benjamin · 9 years ago
  65. ac5e47f Add a fuzzer mode suppressions file. by David Benjamin · 9 years ago
  66. 196df5b Add a InvalidChannelIDSignature test. by David Benjamin · 9 years ago
  67. f3fbade Add tests for SSL_peek. by David Benjamin · 9 years ago
  68. e34bcc9 Support default versions with set_{min,max}_proto_version. by David Benjamin · 9 years ago
  69. c8b6b4f Only predict X25519 in TLS 1.3. by David Benjamin · 9 years ago
  70. af56fbd Renumber TLS 1.3 signature algorithms. by David Benjamin · 9 years ago
  71. 7e1f984 Fix some bugs in TLS 1.3 server key_share code. by David Benjamin · 9 years ago
  72. e470690 Align SSL_set_{min,max}_version with upstream. by David Benjamin · 9 years ago
  73. 2dc0204 Don't return invalid versions in version_from_wire. by David Benjamin · 9 years ago
  74. c027999 Take the version parameter out of ssl_do_msg_callback. by David Benjamin · 9 years ago
  75. d2ba889 Improve -valgrind error-handling. by David Benjamin · 9 years ago
  76. 9aafb64 Don't swallow tool output on failure. by David Benjamin · 9 years ago
  77. 7a4aaa4 Fix TLS 1.3 fuzzer mode in Go. by David Benjamin · 9 years ago
  78. e0ff767 Remove SSL_set_fallback_version. by David Benjamin · 9 years ago
  79. e63d9d7 Test interaction of RSA key exchange and ClientHello.version. by David Benjamin · 9 years ago
  80. 7867934 Do not distinguish NULL and empty PSK identity hints. by David Benjamin · 9 years ago
  81. bac75b8 Move peer_psk_identity_hint to SSL_HANDSHAKE. by David Benjamin · 9 years ago
  82. 4fe3c90 Release TLS 1.3 key shares earlier in TLS 1.2. by David Benjamin · 9 years ago
  83. 2c66e07 Don't send the access_denied alert innappropriately. by David Benjamin · 9 years ago
  84. 9a5f49e Remove a few more remnants of RC4/TLS. by David Benjamin · 9 years ago
  85. 8aaa9e1 Remove RC4 from TLS for real. by Matthew Braithwaite · 9 years ago
  86. 6e3f5cc Add SSL_CTX_get_keylog_callback. by David Benjamin · 9 years ago
  87. 45bdb2e Remove identical tests. by David Benjamin · 9 years ago
  88. 3d458dc Revert of Determining certificate_auth and key_exchange based on SSL. by David Benjamin · 9 years ago
  89. 639846e Add tests for trailing data in handshake messages. by David Benjamin · 9 years ago
  90. cd2c806 Factor per-message test machinery out. by David Benjamin · 9 years ago
  91. 5409123 Use C99 for size_t loops. by David Benjamin · 9 years ago
  92. 84b5c00 Serialize unresumable sessions to a placeholder value. by Steven Valdez · 9 years ago
  93. bd09ecc Determining certificate_auth and key_exchange based on SSL. by Steven Valdez · 9 years ago
  94. 4d0be24 Only allow SSL_set_session before the handshake. by David Benjamin · 9 years ago
  95. fc0c9d9 Use a common state to begin the handshake. by David Benjamin · 9 years ago
  96. 5510863 Temporary remove the TLS 1.3 anti-downgrade mechanism. by David Benjamin · 9 years ago
  97. c241d79 Add tests around compression methods. by David Benjamin · 9 years ago
  98. abe94e3 Test that SNI warning alerts are ignored. by David Benjamin · 9 years ago
  99. f0e935d Fold stack-allocated types into headers. by David Benjamin · 9 years ago
  100. 0fb46d4 const-correct a variable. by David Benjamin · 9 years ago