1. a365138 Factor out the default signature algorithm logic. by David Benjamin · 8 years ago
  2. 71c21b4 Add SSL_CTX_set_verify_algorithm_prefs. by David Benjamin · 8 years ago
  3. 6952211 Support Ed25519 in TLS. by David Benjamin · 8 years ago
  4. a232a71 Deprecate SSL_PRIVATE_KEY_METHOD type and max_signature_len. by David Benjamin · 8 years ago
  5. bf833c3 Rename hs->public_key. by David Benjamin · 8 years ago
  6. c8ff30c Add an option to allow unknown ALPN protocols. by David Benjamin · 8 years ago chromium-3071
  7. 67bb45f Support enabling early data on SSL by Alessandro Ghedini · 8 years ago
  8. 246eeee Make RI on TLS 1.3 alert with ILLEGAL_PARAMETER. by Steven Valdez · 8 years ago
  9. 2d85062 Add Data-less Zero-RTT support. by Steven Valdez · 8 years ago
  10. 707af29 Support asynchronous ticket decryption with TLS 1.3. by David Benjamin · 8 years ago
  11. 4c341d0 Support asynchronous ticket decryption with TLS 1.0–1.2. by Adam Langley · 8 years ago
  12. be49706 Rename initial_ctx to session_ctx. by David Benjamin · 8 years ago
  13. 35ac5b7 Export server-side ticket_age skew. by David Benjamin · 8 years ago
  14. 924a352 Remove experimental TLS 1.3 short record header extension. by Steven Valdez · 8 years ago
  15. ad8f5e1 Don't use long for timestamps. by David Benjamin · 8 years ago
  16. fc02b59 Move tmp.extended_master_secret to SSL_HANDSHAKE. by David Benjamin · 8 years ago
  17. 45738dd Move new_cipher and new_session to SSL_HANDSHAKE. by David Benjamin · 8 years ago
  18. 83a3212 Move SCT lists and OCSP responses to CERT. by David Benjamin · 8 years ago
  19. 46db7af Remove |X509| things from SSL_SESSION. by Adam Langley · 8 years ago
  20. 908ac19 Moving transcript and PRF functions to SSL_TRANSCRIPT. by Steven Valdez · 8 years ago
  21. c68e5b9 Establish that the default value of an out-arg for alerts is SSL_AD_DECODE_ERROR. by Adam Langley · 8 years ago
  22. 8df6766 Support setting per-connection SCT list by Alessandro Ghedini · 8 years ago
  23. 2f82a0e Don't stash tlsext_hostname in ssl_get_new_session. by Steven Valdez · 8 years ago
  24. 2fe6e22 Remove mask_a and mask_k from CERT. by David Benjamin · 8 years ago
  25. 5db7c9b Get OPENSSL_COMPILE_ASSERT working in function bodies. by David Benjamin · 8 years ago
  26. 6752efd Never send SNI warning alerts. by David Benjamin · 8 years ago
  27. a8c8b38 Don't call the SNI callback as a client. by David Benjamin · 8 years ago
  28. c253864 Remove some node.js hacks. by David Benjamin · 8 years ago
  29. 6f600d6 Add experimental TLS 1.3 short record header extension. by David Benjamin · 8 years ago
  30. 17cf2cb Work around language and compiler bug in memcpy, etc. by David Benjamin · 8 years ago
  31. 76bb141 Remove the BORINGSSL_ANDROID_SYSTEM P-521 special-case. by David Benjamin · 9 years ago
  32. 4882a6c Replace key_exchange_info with group_id. by David Benjamin · 8 years ago
  33. 559f064 Support setting per-connection OCSP staple by Alessandro Ghedini · 8 years ago
  34. 30c4c30 Revise some integer sizes. by David Benjamin · 8 years ago
  35. f04c2e9 Move client_version into SSL_HANDSHAKE. by David Benjamin · 8 years ago
  36. 9d125dc Remove SSL_OP_DISABLE_NPN. by David Benjamin · 8 years ago
  37. 731058e Typedef ssl_early_callback_ctx to SSL_CLIENT_HELLO. by David Benjamin · 8 years ago
  38. f3c8f8d Pass explicit parameters elsewhere. by David Benjamin · 8 years ago
  39. 8baf963 Pass explicit hs parameters to ssl_ext_*. by David Benjamin · 8 years ago
  40. 2bd1917 Pass explicit hs parameters into custom_extensions.c. by David Benjamin · 8 years ago
  41. 8c880a2 Pass explicit hs parameters to kExtensions callbacks. by David Benjamin · 8 years ago
  42. aedf303 Parse the entire PSK extension. by David Benjamin · 8 years ago
  43. a4ee74d Skipping early data on 0RTT rejection. by Steven Valdez · 8 years ago
  44. cfa08c3 Enforce basic sanity of SCT lists. by Adam Langley · 8 years ago
  45. fbbef12 Don't put a colon in the extra error message. by Adam Langley · 8 years ago
  46. 35598ae Remove ext_alpn_init. by David Benjamin · 8 years ago
  47. e7f60a2 Fix alert on tls1_process_alert failure. by David Benjamin · 8 years ago
  48. 12d6baf Make ssl_ext_pre_shared_key_add_clienthello static. by David Benjamin · 8 years ago
  49. 4eb95cc Parse ClientHello extensions before deciding on resumption. by David Benjamin · 8 years ago
  50. 53210cb Do not send unsolicited SCTs in TLS 1.3. by David Benjamin · 8 years ago
  51. 75f9914 Align TLS 1.2 and 1.3 server session validity checks. by David Benjamin · 8 years ago
  52. a833c35 Update to TLS 1.3 draft 18. by Steven Valdez · 8 years ago
  53. eab773a Add missing PSK identity comment. by David Benjamin · 8 years ago
  54. 78476f6 Move tlsext_ticket_expected to SSL_HANDSHAKE. by David Benjamin · 8 years ago
  55. 9ef31f0 Negotiate the cipher suite before ALPN. by David Benjamin · 8 years ago
  56. af3b8a9 Fix multiple PSK identity parsing. by Steven Valdez · 8 years ago
  57. 70aba26 Skip ec_point_format if min_version >= TLS 1.3. by David Benjamin · 8 years ago
  58. 74df74b Remove ssl_any_ec_cipher_suites_enabled check. by David Benjamin · 8 years ago
  59. 3a322f5 Revise signing preferences. by David Benjamin · 8 years ago
  60. 9559401 Use SHA256_CTX instead of EVP_MD_CTX when computing Channel ID. by Nick Harper · 8 years ago
  61. 60a85cb Implement ChannelID for TLS 1.3. by Nick Harper · 9 years ago
  62. 3ef7697 Don't accept {sha1, ecdsa} and {sha512, ecdsa}. by David Benjamin · 8 years ago
  63. a128a55 Update the TLS 1.3 draft version to draft 16. by David Benjamin · 8 years ago
  64. 3baa6e1 Implement draft 16 HelloRetryRequest and cookie. by David Benjamin · 8 years ago
  65. 53a2dfc Remove incorrect ciphers check. by David Benjamin · 8 years ago
  66. 52bf690 Saved Finished messages are twelve bytes. by David Benjamin · 8 years ago
  67. 43612b6 Move peer_supported_group_list to SSL_HANDSHAKE. by David Benjamin · 8 years ago
  68. f04976b Remove the get_peer_groups parameter to tls1_get_grouplist. by David Benjamin · 8 years ago
  69. 9d0b4bc Trim tls1_check_group_id. by David Benjamin · 8 years ago
  70. 938fa7c Inline tls1_check_ec_cert. by David Benjamin · 8 years ago
  71. b74b081 Move next_proto_neg_seen into SSL_HANDSHAKE. by David Benjamin · 8 years ago
  72. f5d2cd0 Move extensions bitmasks into SSL_HANDSHAKE. by David Benjamin · 8 years ago
  73. a048678 Move some fields from tmp to hs. by David Benjamin · 8 years ago
  74. 7f78df4 Add a few more tests around processing the server PSK extension. by David Benjamin · 8 years ago
  75. 803c77a Update crypto negotation to draft 15. by Steven Valdez · 9 years ago
  76. 5b98608 Updating NewSessionTicket message and updating PSK to Draft 15. by Steven Valdez · 9 years ago
  77. daa8850 Add tests for OCSP's interaction with resumption. by David Benjamin · 8 years ago
  78. 5fd1807 Implement SSL_CTX_set1_curves_list() by Alessandro Ghedini · 8 years ago
  79. d9791bf Apply GREASE to the version extension. by David Benjamin · 8 years ago
  80. fdd1099 Moving TLS 1.3 version negotiation into extension. by Steven Valdez · 9 years ago
  81. 65ac997 Implement draft-davidben-tls-grease-01. by David Benjamin · 9 years ago
  82. fbc45d7 No-op ticket encryption in fuzzer mode. by David Benjamin · 9 years ago
  83. c8b6b4f Only predict X25519 in TLS 1.3. by David Benjamin · 9 years ago
  84. 7e1f984 Fix some bugs in TLS 1.3 server key_share code. by David Benjamin · 9 years ago
  85. 2dc0204 Don't return invalid versions in version_from_wire. by David Benjamin · 9 years ago
  86. 4fe3c90 Release TLS 1.3 key shares earlier in TLS 1.2. by David Benjamin · 9 years ago
  87. 3d458dc Revert of Determining certificate_auth and key_exchange based on SSL. by David Benjamin · 9 years ago
  88. 5409123 Use C99 for size_t loops. by David Benjamin · 9 years ago
  89. bd09ecc Determining certificate_auth and key_exchange based on SSL. by Steven Valdez · 9 years ago
  90. 57e929f Enable RSA-PSS in TLS 1.2 by default. by David Benjamin · 9 years ago
  91. 163c956 Forbid EMS from changing during renegotation. by David Benjamin · 9 years ago
  92. 0fc37ef Fix a number of sigalg scope issues. by David Benjamin · 9 years ago
  93. 7c7d831 Trim a few extensions when min_version is TLS 1.3. by David Benjamin · 9 years ago
  94. 5c4e857 Fill in the curve ID for TLS 1.3. by David Benjamin · 9 years ago
  95. cb96654 Adding ARRAY_SIZE macro for getting the size of constant arrays. by Steven Valdez · 9 years ago
  96. 0e95015 RSA-PSS should work in TLS 1.2. by David Benjamin · 9 years ago
  97. ee32bea Fix TLS 1.2 sigalgs fallback logic for ECDSA. by David Benjamin · 9 years ago
  98. 4aa154e Adding code to send session as PSK Identity. by Steven Valdez · 9 years ago
  99. 4ac2dc4 Add a comment about ServerHello.supported_groups. by David Benjamin · 9 years ago version_for_cocoapods_6.0
  100. 3e51757d Enforce the server ALPN protocol was advertised. by David Benjamin · 9 years ago