1. da863608 Expose SSL_max_seal_overhead. by David Benjamin · 8 years ago
  2. c6722cd Check SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER before touching wpend_buf. by David Benjamin · 8 years ago
  3. c027999 Take the version parameter out of ssl_do_msg_callback. by David Benjamin · 9 years ago
  4. 33dad1b Stop pretending to ssl_clear_bad_session. by David Benjamin · 9 years ago
  5. 163f29a Move post-handshake message handling out of read_app_data. by David Benjamin · 9 years ago
  6. 4792110 Forbid interleaving app data in a HelloRequest. by David Benjamin · 9 years ago
  7. 143e8b3 Add TLS 1.3 1-RTT. by Steven Valdez · 9 years ago
  8. 397c8e6 Forbid renegotiation in TLS 1.3. by David Benjamin · 9 years ago
  9. f0ee907 Remove the 'ssl_' prefix on most SSL_PROTOCOL_METHOD hooks. by David Benjamin · 9 years ago
  10. 585320c Don't call read_bytes in read_change_cipher_spec. by David Benjamin · 9 years ago
  11. 4aa4081 Don't use ssl3_read_bytes in ssl3_read_close_notify. by David Benjamin · 9 years ago
  12. a7810c1 Make tls_open_record always in-place. by David Benjamin · 9 years ago
  13. 728f354 Push alert handling down into the record functions. by David Benjamin · 9 years ago
  14. 4e9cc71 Add helper functions for info_callback and msg_callback. by David Benjamin · 9 years ago
  15. 4bea850 Lift an impossible check to an assert. by David Benjamin · 9 years ago
  16. 1cb405d Revert "Forbid calling SSL_read, SSL_peek, and SSL_do_handshake post-shutdown." by Adam Langley · 9 years ago
  17. 54092ff Remove dead checks. by David Benjamin · 9 years ago
  18. c7eae5a Forbid calling SSL_read, SSL_peek, and SSL_do_handshake post-shutdown. by David Benjamin · 9 years ago
  19. ea65e10 Condition the read_close_notify check on type, not shutdown state. by David Benjamin · 9 years ago
  20. fa214e4 Tidy up shutdown state. by David Benjamin · 9 years ago
  21. 8f73135 Consolidate SSL_RECEIVED_SHUTDOWN checks. by David Benjamin · 9 years ago
  22. 4c5ddb8 Set rwstate consistently. by David Benjamin · 9 years ago
  23. c6972eb Remove the no_renegotiation special case. by David Benjamin · 9 years ago
  24. 0d3a8c6 Don't allow alert records with multiple alerts. by David Benjamin · 9 years ago
  25. c79845c Move implicit handshake driving out of read_bytes. by David Benjamin · 9 years ago
  26. d7ac143 Lift the handshake driving in write_bytes up to SSL_write. by David Benjamin · 9 years ago
  27. 282511d Consolidate shutdown state. by David Benjamin · 9 years ago
  28. 51545ce Remove a number of unnecessary stdio.h includes. by David Benjamin · 9 years ago
  29. a857159 Clean up some silly variable names. by David Benjamin · 9 years ago
  30. a565d29 Remove alert mapping machinery. by David Benjamin · 9 years ago
  31. 79978df Move aead_{read,write}_ctx and next_proto_negotiated into ssl->s3. by David Benjamin · 9 years ago
  32. 57997da Simplify the ChangeCipherSpec logic. by David Benjamin · 9 years ago
  33. 0623bce Fill in ssl->session->cipher when resumption is resolved. by David Benjamin · 9 years ago
  34. 0d56f88 Switch s to ssl everywhere. by David Benjamin · 9 years ago
  35. 7fc0100 Slightly simplify SSL3_RECORD. by David Benjamin · 9 years ago
  36. a41280d Pull ChangeCipherSpec into the handshake state machine. by David Benjamin · 9 years ago
  37. 8fd5c23 Simplify fragmented HelloRequest state. by David Benjamin · 9 years ago
  38. 27a0d08 Add ssl_renegotiate_ignore. by Adam Langley · 9 years ago
  39. 2e0901b Don't use ssl3_write_pending in DTLS. by David Benjamin · 9 years ago
  40. 8217024 Document the info callback. by David Benjamin · 9 years ago
  41. 1d5ef3b Add SSL_set_renegotiate_mode. by David Benjamin · 9 years ago
  42. 324dce4 Unbreak SSL_total_renegotiations. by David Benjamin · 9 years ago
  43. 9e4e01e Align the SSL stack on #include style. by David Benjamin · 10 years ago
  44. ee0b02a Don't confuse TLS bidirectional shutdown on record type zero. by David Benjamin · 10 years ago
  45. aa9361b Fix discarding records in bidirectional shutdown. by David Benjamin · 10 years ago
  46. 4cf369b Reject empty records of unexpected type. by David Benjamin · 10 years ago
  47. b8d28cf Factor out the buffering and low-level record code. by David Benjamin · 10 years ago
  48. 3570d73 Remove the func parameter to OPENSSL_PUT_ERROR. by David Benjamin · 10 years ago
  49. 24f346d Limit the number of warning alerts silently consumed. by David Benjamin · 10 years ago
  50. a8ebe22 Add tests for empty record limit and make it work in the async case. by David Benjamin · 10 years ago
  51. a602277 Split ssl_read_bytes hook into app_data and close_notify hooks. by David Benjamin · 10 years ago
  52. c933a47 Switch the ssl_write_bytes hook to ssl_write_app_data. by David Benjamin · 10 years ago
  53. bd15a8e Fix DTLS handling of multiple records in a packet. by David Benjamin · 10 years ago
  54. cd90f3a Remove renegotiation deferral logic. by David Benjamin · 10 years ago
  55. 44d3eed Forbid caller-initiated renegotiations and all renego as a servers. by David Benjamin · 10 years ago
  56. 9a41d1b Deprecate SSL_*_read_ahead and enforce DTLS packet boundaries. by David Benjamin · 10 years ago
  57. 31a0779 Factor SSL_AEAD_CTX into a dedicated type. by David Benjamin · 10 years ago
  58. 4b27d9f Never resume sessions on renegotiations. by David Benjamin · 10 years ago
  59. 897e5e0 Default renegotiations to off. by David Benjamin · 10 years ago
  60. 6a08da2 Remove redundant setup buffer calls. by David Benjamin · 10 years ago
  61. b1f5bca Remove max parameter to ssl3_read_n. by David Benjamin · 10 years ago
  62. 9417b76 Remove DTLS special-cases in buffer releasing. by David Benjamin · 10 years ago
  63. aebefed Always enable SSL_MODE_RELEASE_BUFFERS. by David Benjamin · 10 years ago
  64. b16346b Add SSL_set_reject_peer_renegotiations. by David Benjamin · 10 years ago
  65. f0ae170 Include-what-you-use ssl/internal.h. by David Benjamin · 10 years ago
  66. 2ee94aa Rename ssl_locl.h to internal.h by David Benjamin · 10 years ago
  67. ef4962f Shush warning in alignment code. by David Benjamin · 10 years ago
  68. 883e49f Remove dead code in do_dtls1_write and document another bug. by David Benjamin · 10 years ago
  69. bc746e3 Don't switch s->version on record-layer version mismatch. by David Benjamin · 10 years ago
  70. 4a3f073 Tidy record length check. by David Benjamin · 10 years ago
  71. 9faafda Clean up do_ssl3_write fragment handling. by David Benjamin · 10 years ago
  72. a58c578 Simplify the pointer management around do_ssl3_write. by David Benjamin · 10 years ago
  73. dc3da93 Process alerts between ChangeCipherSpec and Finished. by David Benjamin · 10 years ago
  74. c4482d6 Switch an assert back to a check. by Adam Langley · 10 years ago
  75. 86058a2 Tidy up the alert-parsing code. by David Benjamin · 10 years ago
  76. ed7c475 Rename cutthrough to False Start. by David Benjamin · 10 years ago
  77. ccf74f8 Revise SSL_cutthrough_complete and SSL_in_init. by David Benjamin · 10 years ago
  78. 931ab34 Fix handshake check when False Start is used with implicit read. by David Benjamin · 10 years ago
  79. e0e7d0d Initialize the record buffers after the handshake check. by David Benjamin · 10 years ago
  80. e820df9 Forbid interleaving between application data and handshake protocols. by David Benjamin · 10 years ago
  81. ddb9f15 Reject all invalid records. by David Benjamin · 10 years ago
  82. 1e52eca Normalize tls1_enc return values. by David Benjamin · 10 years ago
  83. b8a56f1 Remove dead code from EVP_CIPHER codepaths. by David Benjamin · 10 years ago
  84. fcf2583 Reformat the rest of ssl/. by Adam Langley · 10 years ago
  85. a6d8101 Consistently use RAND_bytes and check for failure. by David Benjamin · 10 years ago
  86. 1f48fba Use have_version in clamping TLS record-layer version to 1.0. by David Benjamin · 10 years ago
  87. e99e912 Pull SSL3_ENC_METHOD out of SSL_METHOD. by David Benjamin · 10 years ago
  88. af7e74b Remove variable shadowing. by Adam Langley · 10 years ago
  89. 1299923 Check EVP_Cipher return values. by David Benjamin · 10 years ago
  90. 8c6fe45 Replace s->first_packet with a s->s3->have_version bit. by David Benjamin · 10 years ago
  91. e319a2f Remove SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS. by David Benjamin · 10 years ago
  92. 4cd8c43 Remove support for processing fragmented alerts by Alex Chernyakhovsky · 10 years ago
  93. b4188f0 Don't be lenient if the client attempts unsafe renego. by David Benjamin · 10 years ago
  94. 6867f48 Remove #if 0'd code documenting an old bug. by David Benjamin · 10 years ago
  95. ec48af4 Make SSL_MODE_AUTO_RETRY the default. by Adam Langley · 10 years ago
  96. e92fc18 Remove remnant of SRP. by David Benjamin · 10 years ago
  97. fb3ff2c Don't compare signed vs. unsigned. by David Benjamin · 10 years ago
  98. c92c2d7 Prune some dead quirks and document the SSL_OP_ALL ones. by David Benjamin · 11 years ago
  99. f0fd373 Remove remnants of EVP_CIPHER-based AES_GCM cipher. by David Benjamin · 11 years ago
  100. 5b8f104 Revise hash management for reading the Finished message. by David Benjamin · 11 years ago