Sign in
boringssl
/
boringssl.git
/
a365138ac60f38b64bfc608b493e0f879845cb88
/
ssl
/
t1_lib.c
a365138
Factor out the default signature algorithm logic.
by David Benjamin
· 8 years ago
71c21b4
Add SSL_CTX_set_verify_algorithm_prefs.
by David Benjamin
· 8 years ago
6952211
Support Ed25519 in TLS.
by David Benjamin
· 8 years ago
a232a71
Deprecate SSL_PRIVATE_KEY_METHOD type and max_signature_len.
by David Benjamin
· 8 years ago
bf833c3
Rename hs->public_key.
by David Benjamin
· 8 years ago
c8ff30c
Add an option to allow unknown ALPN protocols.
by David Benjamin
· 8 years ago
chromium-3071
67bb45f
Support enabling early data on SSL
by Alessandro Ghedini
· 8 years ago
246eeee
Make RI on TLS 1.3 alert with ILLEGAL_PARAMETER.
by Steven Valdez
· 8 years ago
2d85062
Add Data-less Zero-RTT support.
by Steven Valdez
· 8 years ago
707af29
Support asynchronous ticket decryption with TLS 1.3.
by David Benjamin
· 8 years ago
4c341d0
Support asynchronous ticket decryption with TLS 1.0–1.2.
by Adam Langley
· 8 years ago
be49706
Rename initial_ctx to session_ctx.
by David Benjamin
· 8 years ago
35ac5b7
Export server-side ticket_age skew.
by David Benjamin
· 8 years ago
924a352
Remove experimental TLS 1.3 short record header extension.
by Steven Valdez
· 8 years ago
ad8f5e1
Don't use long for timestamps.
by David Benjamin
· 8 years ago
fc02b59
Move tmp.extended_master_secret to SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
45738dd
Move new_cipher and new_session to SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
83a3212
Move SCT lists and OCSP responses to CERT.
by David Benjamin
· 8 years ago
46db7af
Remove |X509| things from SSL_SESSION.
by Adam Langley
· 8 years ago
908ac19
Moving transcript and PRF functions to SSL_TRANSCRIPT.
by Steven Valdez
· 8 years ago
c68e5b9
Establish that the default value of an out-arg for alerts is SSL_AD_DECODE_ERROR.
by Adam Langley
· 8 years ago
8df6766
Support setting per-connection SCT list
by Alessandro Ghedini
· 8 years ago
2f82a0e
Don't stash tlsext_hostname in ssl_get_new_session.
by Steven Valdez
· 8 years ago
2fe6e22
Remove mask_a and mask_k from CERT.
by David Benjamin
· 8 years ago
5db7c9b
Get OPENSSL_COMPILE_ASSERT working in function bodies.
by David Benjamin
· 8 years ago
6752efd
Never send SNI warning alerts.
by David Benjamin
· 8 years ago
a8c8b38
Don't call the SNI callback as a client.
by David Benjamin
· 8 years ago
c253864
Remove some node.js hacks.
by David Benjamin
· 8 years ago
6f600d6
Add experimental TLS 1.3 short record header extension.
by David Benjamin
· 8 years ago
17cf2cb
Work around language and compiler bug in memcpy, etc.
by David Benjamin
· 8 years ago
76bb141
Remove the BORINGSSL_ANDROID_SYSTEM P-521 special-case.
by David Benjamin
· 9 years ago
4882a6c
Replace key_exchange_info with group_id.
by David Benjamin
· 8 years ago
559f064
Support setting per-connection OCSP staple
by Alessandro Ghedini
· 8 years ago
30c4c30
Revise some integer sizes.
by David Benjamin
· 8 years ago
f04c2e9
Move client_version into SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
9d125dc
Remove SSL_OP_DISABLE_NPN.
by David Benjamin
· 8 years ago
731058e
Typedef ssl_early_callback_ctx to SSL_CLIENT_HELLO.
by David Benjamin
· 8 years ago
f3c8f8d
Pass explicit parameters elsewhere.
by David Benjamin
· 8 years ago
8baf963
Pass explicit hs parameters to ssl_ext_*.
by David Benjamin
· 8 years ago
2bd1917
Pass explicit hs parameters into custom_extensions.c.
by David Benjamin
· 8 years ago
8c880a2
Pass explicit hs parameters to kExtensions callbacks.
by David Benjamin
· 8 years ago
aedf303
Parse the entire PSK extension.
by David Benjamin
· 8 years ago
a4ee74d
Skipping early data on 0RTT rejection.
by Steven Valdez
· 8 years ago
cfa08c3
Enforce basic sanity of SCT lists.
by Adam Langley
· 8 years ago
fbbef12
Don't put a colon in the extra error message.
by Adam Langley
· 8 years ago
35598ae
Remove ext_alpn_init.
by David Benjamin
· 8 years ago
e7f60a2
Fix alert on tls1_process_alert failure.
by David Benjamin
· 8 years ago
12d6baf
Make ssl_ext_pre_shared_key_add_clienthello static.
by David Benjamin
· 8 years ago
4eb95cc
Parse ClientHello extensions before deciding on resumption.
by David Benjamin
· 8 years ago
53210cb
Do not send unsolicited SCTs in TLS 1.3.
by David Benjamin
· 8 years ago
75f9914
Align TLS 1.2 and 1.3 server session validity checks.
by David Benjamin
· 8 years ago
a833c35
Update to TLS 1.3 draft 18.
by Steven Valdez
· 8 years ago
eab773a
Add missing PSK identity comment.
by David Benjamin
· 8 years ago
78476f6
Move tlsext_ticket_expected to SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
9ef31f0
Negotiate the cipher suite before ALPN.
by David Benjamin
· 8 years ago
af3b8a9
Fix multiple PSK identity parsing.
by Steven Valdez
· 8 years ago
70aba26
Skip ec_point_format if min_version >= TLS 1.3.
by David Benjamin
· 8 years ago
74df74b
Remove ssl_any_ec_cipher_suites_enabled check.
by David Benjamin
· 8 years ago
3a322f5
Revise signing preferences.
by David Benjamin
· 8 years ago
9559401
Use SHA256_CTX instead of EVP_MD_CTX when computing Channel ID.
by Nick Harper
· 8 years ago
60a85cb
Implement ChannelID for TLS 1.3.
by Nick Harper
· 9 years ago
3ef7697
Don't accept {sha1, ecdsa} and {sha512, ecdsa}.
by David Benjamin
· 8 years ago
a128a55
Update the TLS 1.3 draft version to draft 16.
by David Benjamin
· 8 years ago
3baa6e1
Implement draft 16 HelloRetryRequest and cookie.
by David Benjamin
· 8 years ago
53a2dfc
Remove incorrect ciphers check.
by David Benjamin
· 8 years ago
52bf690
Saved Finished messages are twelve bytes.
by David Benjamin
· 8 years ago
43612b6
Move peer_supported_group_list to SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
f04976b
Remove the get_peer_groups parameter to tls1_get_grouplist.
by David Benjamin
· 8 years ago
9d0b4bc
Trim tls1_check_group_id.
by David Benjamin
· 8 years ago
938fa7c
Inline tls1_check_ec_cert.
by David Benjamin
· 8 years ago
b74b081
Move next_proto_neg_seen into SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
f5d2cd0
Move extensions bitmasks into SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
a048678
Move some fields from tmp to hs.
by David Benjamin
· 8 years ago
7f78df4
Add a few more tests around processing the server PSK extension.
by David Benjamin
· 8 years ago
803c77a
Update crypto negotation to draft 15.
by Steven Valdez
· 9 years ago
5b98608
Updating NewSessionTicket message and updating PSK to Draft 15.
by Steven Valdez
· 9 years ago
daa8850
Add tests for OCSP's interaction with resumption.
by David Benjamin
· 8 years ago
5fd1807
Implement SSL_CTX_set1_curves_list()
by Alessandro Ghedini
· 8 years ago
d9791bf
Apply GREASE to the version extension.
by David Benjamin
· 8 years ago
fdd1099
Moving TLS 1.3 version negotiation into extension.
by Steven Valdez
· 9 years ago
65ac997
Implement draft-davidben-tls-grease-01.
by David Benjamin
· 9 years ago
fbc45d7
No-op ticket encryption in fuzzer mode.
by David Benjamin
· 9 years ago
c8b6b4f
Only predict X25519 in TLS 1.3.
by David Benjamin
· 9 years ago
7e1f984
Fix some bugs in TLS 1.3 server key_share code.
by David Benjamin
· 9 years ago
2dc0204
Don't return invalid versions in version_from_wire.
by David Benjamin
· 9 years ago
4fe3c90
Release TLS 1.3 key shares earlier in TLS 1.2.
by David Benjamin
· 9 years ago
3d458dc
Revert of Determining certificate_auth and key_exchange based on SSL.
by David Benjamin
· 9 years ago
5409123
Use C99 for size_t loops.
by David Benjamin
· 9 years ago
bd09ecc
Determining certificate_auth and key_exchange based on SSL.
by Steven Valdez
· 9 years ago
57e929f
Enable RSA-PSS in TLS 1.2 by default.
by David Benjamin
· 9 years ago
163c956
Forbid EMS from changing during renegotation.
by David Benjamin
· 9 years ago
0fc37ef
Fix a number of sigalg scope issues.
by David Benjamin
· 9 years ago
7c7d831
Trim a few extensions when min_version is TLS 1.3.
by David Benjamin
· 9 years ago
5c4e857
Fill in the curve ID for TLS 1.3.
by David Benjamin
· 9 years ago
cb96654
Adding ARRAY_SIZE macro for getting the size of constant arrays.
by Steven Valdez
· 9 years ago
0e95015
RSA-PSS should work in TLS 1.2.
by David Benjamin
· 9 years ago
ee32bea
Fix TLS 1.2 sigalgs fallback logic for ECDSA.
by David Benjamin
· 9 years ago
4aa154e
Adding code to send session as PSK Identity.
by Steven Valdez
· 9 years ago
4ac2dc4
Add a comment about ServerHello.supported_groups.
by David Benjamin
· 9 years ago
version_for_cocoapods_6.0
3e51757d
Enforce the server ALPN protocol was advertised.
by David Benjamin
· 9 years ago
Next »