1. a1c90a5 Further tidy up cipher logic. by David Benjamin · 10 years ago
  2. 0fa4012 Add a test that DTLS does not support RC4. by David Benjamin · 10 years ago
  3. 9a980ab Fold TLS1_PRF_* into SSL_HANDSHAKE_MAC_* by David Benjamin · 10 years ago
  4. 29864b5 Remove SSL_CIPHER_ALGORITHM2_AEAD. by David Benjamin · 10 years ago
  5. 904dc72 Fold away SSL_PROTOCOL_METHOD hooks shared between TLS and DTLS. by David Benjamin · 10 years ago
  6. a602277 Split ssl_read_bytes hook into app_data and close_notify hooks. by David Benjamin · 10 years ago
  7. c933a47 Switch the ssl_write_bytes hook to ssl_write_app_data. by David Benjamin · 10 years ago
  8. 338e067 Reject sessions with the wrong structure version. by David Benjamin · 10 years ago
  9. f297e02 Reject unknown fields in d2i_SSL_SESSION. by David Benjamin · 10 years ago
  10. bd15a8e Fix DTLS handling of multiple records in a packet. by David Benjamin · 10 years ago
  11. e76ccae Release handshake buffer when sending no certificate. by David Benjamin · 10 years ago
  12. 5f04b65 Release the handshake buffer on the client for abbreviated handshakes. by David Benjamin · 10 years ago
  13. 5c1ce29 Decide whether or not to request client certificates early. by David Benjamin · 10 years ago
  14. 4b30b28 Remove server-side renego session resumption check. by David Benjamin · 10 years ago
  15. 5aea93e Deprecate and no-op SSL_VERIFY_CLIENT_ONCE. by David Benjamin · 10 years ago
  16. 74d8bc2 Don't make SSL_MODE_*HELLO_TIME configurable. by David Benjamin · 10 years ago
  17. ece089c Deprecate and no-op SSL_set_state. by David Benjamin · 10 years ago
  18. be05c63 Remove compatibility s->version checks. by David Benjamin · 10 years ago
  19. 8ec8810 Remove SSL_in_before and SSL_ST_BEFORE. by David Benjamin · 10 years ago
  20. cd90f3a Remove renegotiation deferral logic. by David Benjamin · 10 years ago
  21. 44d3eed Forbid caller-initiated renegotiations and all renego as a servers. by David Benjamin · 10 years ago
  22. 5f387e3 Remove s->renegotiate check in SSL_clear. by David Benjamin · 10 years ago
  23. 20f6e97 Switch three more renegotiate checks to initial_handshake_complete. by David Benjamin · 10 years ago
  24. d23d5a5 Remove remnants of DTLS renegotiate. by David Benjamin · 10 years ago
  25. 9a41d1b Deprecate SSL_*_read_ahead and enforce DTLS packet boundaries. by David Benjamin · 10 years ago
  26. 76e48c5 Fix Windows mode. by David Benjamin · 10 years ago
  27. 3fa65f0 Fix some malloc test crashs. by David Benjamin · 10 years ago
  28. 0b635c5 Add malloc test support to unit tests. by David Benjamin · 10 years ago
  29. 3e3090d Pass a dtls1_use_epoch enum down to dtls1_seal_record. by David Benjamin · 10 years ago
  30. 31a0779 Factor SSL_AEAD_CTX into a dedicated type. by David Benjamin · 10 years ago
  31. 7ef9fff Remove ssl_ok. by David Benjamin · 10 years ago
  32. afc9ecd Unexport ssl_get_new_session and ssl_update_cache. by David Benjamin · 10 years ago
  33. 4831c33 Document some core SSL_CTX and SSL methods. by David Benjamin · 10 years ago
  34. 760b1dd Tidy up state machine coverage tests. by David Benjamin · 10 years ago
  35. 3629c7b Add client peer-initiated renego to the state machine tests. by David Benjamin · 10 years ago
  36. cff0b90 Add client-side tests for renegotiation_info enforcement. by David Benjamin · 10 years ago
  37. 4bdb6e4 Remove remaining calls to the old lock functions. by Adam Langley · 10 years ago
  38. 0b5e390 Convert reference counts in ssl/ by Adam Langley · 10 years ago
  39. 0da323a Convert reference counts in crypto/ by Adam Langley · 10 years ago
  40. a7997f1 Set minimum DH group size to 1024 bits. by Adam Langley · 10 years ago
  41. 81091d5 Don't use uninitialized memory in RAND_bytes. by David Benjamin · 10 years ago
  42. a07c0fc Fix SSL_get_current_cipher. by David Benjamin · 10 years ago
  43. 4b27d9f Never resume sessions on renegotiations. by David Benjamin · 10 years ago
  44. e6df054 Add s->s3->initial_handshake_complete. by David Benjamin · 10 years ago
  45. 897e5e0 Default renegotiations to off. by David Benjamin · 10 years ago
  46. 6a08da2 Remove redundant setup buffer calls. by David Benjamin · 10 years ago
  47. b1f5bca Remove max parameter to ssl3_read_n. by David Benjamin · 10 years ago
  48. 9417b76 Remove DTLS special-cases in buffer releasing. by David Benjamin · 10 years ago
  49. ac4de24 Zero s->packet when releasing the read buffer. by David Benjamin · 10 years ago
  50. aebefed Always enable SSL_MODE_RELEASE_BUFFERS. by David Benjamin · 10 years ago
  51. 4d2e7ce Remove OPENSSL_timeval. by David Benjamin · 10 years ago
  52. 593047f Opaquify DTLS structs. by David Benjamin · 10 years ago
  53. a24265c Fix random magic number in ssl3_output_cert_chain. by David Benjamin · 10 years ago
  54. 9a10f8f Switch EVP_PKEY_dup calls to EVP_PKEY_up_ref. by David Benjamin · 10 years ago
  55. 6abb370 Remove ciphers_raw. by David Benjamin · 10 years ago
  56. d6e95ee Get rid of ssl_undefined_* by David Benjamin · 10 years ago
  57. 60da0cd Fix STACK_OF pointer style. by David Benjamin · 10 years ago
  58. 605641e Move the NULL case in ssl_add_cert_chain up. by David Benjamin · 10 years ago
  59. e92d24f Build fix. by Adam Langley · 10 years ago
  60. 8eb65e8 Remove dead field from CIPHER_ORDER. by David Benjamin · 10 years ago
  61. 7133d42 Promote SNI macros to functions. by David Benjamin · 10 years ago
  62. c280758 Promote channel ID macros to proper functions. by David Benjamin · 10 years ago
  63. 15a3b00 Promote set_tmp_dh and set_tmp_ecdh to functions. by David Benjamin · 10 years ago
  64. c045469 Promote a few more macros. by David Benjamin · 10 years ago
  65. 9f226a5 Always set SSL_OP_SINGLE_DH_USE. by David Benjamin · 10 years ago
  66. 7cde0de Fold num_renegotiations into total_renegotiations. by David Benjamin · 10 years ago
  67. 71f7d3d Promote everything directly in SSL_CTX_ctrl. by David Benjamin · 10 years ago
  68. cb9cf79 Promote everything directly in SSL_ctrl. by David Benjamin · 10 years ago
  69. 2844b5e Remove SSL_get0_raw_cipherlist. by David Benjamin · 10 years ago
  70. 1d0a194 Promote max_cert_list and max_send_fragment to functions. by David Benjamin · 10 years ago
  71. da881e9 Promote deprecated statistics macros to functions. by David Benjamin · 10 years ago
  72. 61ecccf Promote read_ahead, mode and option macros to functions. by David Benjamin · 10 years ago
  73. 123a8fd Switch options and mode bits to uint32_t from unsigned long. by David Benjamin · 10 years ago
  74. 8c24980 Promote all dtls1_ctrl hooks to functions. by David Benjamin · 10 years ago
  75. 59015c3 Promote all SSL callback ctrl hooks to proper functions. by David Benjamin · 10 years ago
  76. 3457cd9 Cast to size_t to avoid MSVC warning. by Adam Langley · 10 years ago
  77. 9362b6e Errors are uint32_t, not unsigned long. by David Benjamin · 10 years ago
  78. adcc395 Tidy up ticket length checks. by David Benjamin · 10 years ago
  79. f32d6b2 Remove remnants of old OCSP stapling API. by David Benjamin · 10 years ago
  80. 9a727c2 Remove SSL_set_tlsext_debug_callback. by David Benjamin · 10 years ago
  81. 97e8ba8 Rename ECDHE-PSK-WITH-AES-128-GCM-SHA256 to follow the naming conventions. by Adam Langley · 10 years ago
  82. f868409 Fix SSL_get0_chain_certs. by Adam Langley · 10 years ago
  83. 6879373 Revert "Temporarily break a handful of tests." by David Benjamin · 10 years ago
  84. a921d55 Temporarily break a handful of tests. by David Benjamin · 10 years ago
  85. 2755a3e Remove unnecessary NULL checks, part 5. by David Benjamin · 10 years ago
  86. 5d1ec73 Require that FOO_free functions do nothing on NULL. by David Benjamin · 10 years ago
  87. 4fcc2e2 Make a few variable names saner. by David Benjamin · 10 years ago
  88. ed8fbad Remove SSL cert_flags. by David Benjamin · 10 years ago
  89. 67be048 Convert ec_test to C++ by David Benjamin · 10 years ago
  90. 90da8c8 Test that the server picks a non-ECC cipher when no curves are supported. by David Benjamin · 10 years ago
  91. dd97878 Always enable ecdh_auto. by David Benjamin · 10 years ago
  92. 55a4364 Handle empty curve preferences from the client. by David Benjamin · 10 years ago
  93. 1c722b7 Add DTLS to SSL_get_version by David Benjamin · 10 years ago
  94. dcd979f CertificateStatus is optional. by David Benjamin · 10 years ago
  95. 83f182c Revert "Temporary introduce a memory leak in ssl_test" by David Benjamin · 10 years ago
  96. 88d0f91 Temporary introduce a memory leak in ssl_test by David Benjamin · 10 years ago
  97. c574f41 Test that client curve preferences are enforced. by David Benjamin · 10 years ago
  98. 93de5e5 Reject empty cipher suite lists early. by David Benjamin · 10 years ago
  99. 3fa2777 Fix some unsigned long cipher masks. by David Benjamin · 10 years ago
  100. caf6b09 runner: fix a couple of nits from govet. by Adam Langley · 10 years ago