1. aad50db Stop using the word 'buffer' everywhere. by David Benjamin · 9 years ago
  2. 7583643 Disconnect handshake message creation from init_buf. by David Benjamin · 9 years ago
  3. a8288dc Remove pqueue. by David Benjamin · 9 years ago
  4. ec847ce Replace the incoming message buffer with a ring buffer. by David Benjamin · 9 years ago
  5. 778f57e Store only one handshake write sequence number. by David Benjamin · 9 years ago
  6. 29a83c5 Rewrite DTLS outgoing message buffering. by David Benjamin · 9 years ago
  7. f182ee1 Always release init_buf after the handshake. by David Benjamin · 9 years ago
  8. b5eb195 Make dtls1_do_handshake_write less stateful. by David Benjamin · 9 years ago
  9. c42acee Stash a copy of the SKX params rather mess with init_buf. by David Benjamin · 9 years ago
  10. 429fdc0 Simplify ssl3_send_cert_verify's async logic. by David Benjamin · 9 years ago
  11. f0ee907 Remove the 'ssl_' prefix on most SSL_PROTOCOL_METHOD hooks. by David Benjamin · 9 years ago
  12. 10e664b Always set min_version / max_version. by David Benjamin · 9 years ago
  13. 9acf0ca Don't use bugs to test normal cipher/version pairs. by David Benjamin · 9 years ago
  14. c9ae27c Build up TLS 1.3 record-layer tests. by David Benjamin · 9 years ago
  15. 8144f99 Add a test for out-of-order ChangeCipherSpec in DTLS. by David Benjamin · 9 years ago
  16. 8e710ca Remove unnecessary check and comments. by David Benjamin · 9 years ago
  17. 5744ca6 Fold cert_req into cert_request. by David Benjamin · 9 years ago
  18. 47749a6 Make the handshake state machines more linear. by David Benjamin · 9 years ago
  19. bde0039 Stop messing with ssl->version before sending protocol_version. by David Benjamin · 9 years ago
  20. 1fd39d8 Add TLS 1.3 record layer to go implementation. by Nick Harper · 9 years ago
  21. c9a4368 Fix the new ECDHE_PSK ciphers. by David Benjamin · 9 years ago
  22. 0407e76 Test both disabled version/cipher combinations too. by David Benjamin · 9 years ago
  23. 34fce88 Fix TLS 1.3 seal logic. by David Benjamin · 9 years ago
  24. 7975056 Fixing iv_length for TLS 1.3. by Steven Valdez · 9 years ago
  25. f8fcdf3 Add tests for both Channel ID and NPN together. by David Benjamin · 9 years ago
  26. f715c42 Make SSL_set_bio's ownership easier to reason about. by David Benjamin · 9 years ago
  27. 5c0fb88 Add tests for SSL_set_fd and friends. by David Benjamin · 9 years ago
  28. 6278e24 shim: fix var unused when asserts compiled out by Matt Braithwaite · 9 years ago
  29. 54217e4 newhope: test corrupt key exchange messages. by Matt Braithwaite · 9 years ago
  30. 171b540 Fix ssl3_do_write error handling. by David Benjamin · 9 years ago
  31. a353cdb Wrap MSVC-only warning pragmas in a macro. by David Benjamin · 9 years ago
  32. 95d7a49 Fix the alias checks in dtls_record.c. by David Benjamin · 9 years ago
  33. 2446db0 Require in == out for in-place encryption. by David Benjamin · 9 years ago
  34. 1a01e1f Remove in-place TLS record assembly for now. by David Benjamin · 9 years ago
  35. 8f1e113 Ensure verify error is set when X509_verify_cert() fails. by David Benjamin · 9 years ago
  36. 82d0ffb Use the new setter for CurrentTimeCallback in bssl_shim. by David Benjamin · 9 years ago
  37. 9edb2c6 Adding function to set the "current time" callback used for DTLS. by Taylor Brandstetter · 9 years ago
  38. 2e045a9 Add a deterministic PRNG for runner. by David Benjamin · 9 years ago
  39. 1c0e1e4 Avoid overflow in newhope.go. by David Benjamin · 9 years ago
  40. 45d45c1 Trim the DTLS write code slightly. by David Benjamin · 9 years ago
  41. 936aada Move a bunch of public APIs from s3_lib.c to ssl_lib.c. by David Benjamin · 9 years ago
  42. 01784b4 Rename -timeout to -idle-timeout. by David Benjamin · 9 years ago
  43. 3dcec45 Rename SERVER_DONE to SERVER_HELLO_DONE. by David Benjamin · 9 years ago
  44. cfec7c6 Rename s3_{clnt,srvr}.c by David Benjamin · 9 years ago
  45. 9f1dc82 A bit of cleanup post state machine merging. by David Benjamin · 9 years ago
  46. df50eec Fold DTLS server state machine into TLS state machine. by David Benjamin · 9 years ago
  47. aa7734b Fold the DTLS client handshake into the TLS one. by David Benjamin · 9 years ago
  48. 24fe448 Consolidate dtls1_start_timer calls. by David Benjamin · 9 years ago
  49. 2a08c8d Remove ssl3_do_write's 0 case. by David Benjamin · 9 years ago
  50. af62d61 Remove dtls1_read_bytes. by David Benjamin · 9 years ago
  51. c660417 Don't use dtls1_read_bytes to read messages. by David Benjamin · 9 years ago
  52. 585320c Don't call read_bytes in read_change_cipher_spec. by David Benjamin · 9 years ago
  53. 4aa4081 Don't use ssl3_read_bytes in ssl3_read_close_notify. by David Benjamin · 9 years ago
  54. a7810c1 Make tls_open_record always in-place. by David Benjamin · 9 years ago
  55. 728f354 Push alert handling down into the record functions. by David Benjamin · 9 years ago
  56. ac29202 Fix typo. by David Benjamin · 9 years ago
  57. 4e9cc71 Add helper functions for info_callback and msg_callback. by David Benjamin · 9 years ago
  58. 15aa895 Tidy up the DTLS code's blocking-mode retransmits. by David Benjamin · 9 years ago
  59. 585d7a4 Test both synchronous and asynchronous DTLS retransmit. by David Benjamin · 9 years ago
  60. 0d275bd Don't call ERR_clear_system_error in so many places. by David Benjamin · 9 years ago
  61. 4bea850 Lift an impossible check to an assert. by David Benjamin · 9 years ago
  62. e90d004 Remove impossible condition. by David Benjamin · 9 years ago
  63. 0fc7df5 Add SSL_CIPHER_is_DHE. by David Benjamin · 9 years ago
  64. 66af3b0 Adding TLS 1.3 Record Layer. by Steven Valdez · 9 years ago
  65. 3084e7b Adding ECDHE-PSK GCM Ciphersuites. by Steven Valdez · 9 years ago
  66. 686bb19 Add a unit test for one-sided shutdown. by David Benjamin · 9 years ago
  67. bbd43b5 Renaming SSL3_MT_NEWSESSION_TICKET to SSL3_MT_NEW_SESSION_TICKET. by Steven Valdez · 9 years ago
  68. 29270de Split unlock functions into read/write variants. by David Benjamin · 9 years ago
  69. 053931e CECPQ1: change from named curve to ciphersuite. by Matt Braithwaite · 9 years ago
  70. 1cb405d Revert "Forbid calling SSL_read, SSL_peek, and SSL_do_handshake post-shutdown." by Adam Langley · 9 years ago
  71. 494650c Adding TLS 1.3 AEAD construction. by Steven Valdez · 9 years ago
  72. 4f94b1c Adding TLS 1.3 constants. by Steven Valdez · 9 years ago
  73. 1eca1d3 Renaming Channel ID Encrypted Extensions. by Steven Valdez · 9 years ago
  74. 2f87112 Never expose ssl->bbio in the public API. by David Benjamin · 9 years ago
  75. 7e7a82d Rename GetConfigPtr to GetTestConfig. by David Benjamin · 9 years ago
  76. 7fcfd3b Add ISC license to Go files that were missing a license. by Adam Langley · 9 years ago
  77. ce902a9 Generalizing curves to groups in preparation for TLS 1.3. by Steven Valdez · 9 years ago
  78. e25775b Elliptic curve + post-quantum key exchange by Matt Braithwaite · 9 years ago
  79. c82b701 Go version of New Hope post-quantum key exchange. by Matt Braithwaite · 9 years ago
  80. 54092ff Remove dead checks. by David Benjamin · 9 years ago
  81. fce37b0 Add a TODO for why init_buf isn't released post-handshake. by David Benjamin · 9 years ago
  82. 1d64afd Stop reseting init_num everywhere in the handshake loop. by David Benjamin · 9 years ago
  83. 1e6d6df Remove state parameters to ssl3_get_message. by David Benjamin · 9 years ago
  84. a6338be Simplify ssl3_get_message. by David Benjamin · 9 years ago
  85. 4d55961 Unflake Unclean-Shutdown-Alert on Windows. by David Benjamin · 9 years ago
  86. f4ce8e5 Refactor ECDH key exchange to make it asymmetrical by Matt Braithwaite · 9 years ago
  87. c7eae5a Forbid calling SSL_read, SSL_peek, and SSL_do_handshake post-shutdown. by David Benjamin · 9 years ago
  88. ea65e10 Condition the read_close_notify check on type, not shutdown state. by David Benjamin · 9 years ago
  89. fa214e4 Tidy up shutdown state. by David Benjamin · 9 years ago
  90. 8f73135 Consolidate SSL_RECEIVED_SHUTDOWN checks. by David Benjamin · 9 years ago
  91. c032dfa Client auth is only legal in certificate-based ciphers. by David Benjamin · 9 years ago
  92. 060cfb0 Simplify handshake message size limits. by David Benjamin · 9 years ago
  93. c6cc6e7 Make kSRTPProfiles static. by David Benjamin · 9 years ago
  94. 80d1b35 Add a test for SCTs sent on resume. by David Benjamin · 9 years ago
  95. 376a0fe Adding a method to change the initial DTLS retransmission timer value. by Taylor Brandstetter · 9 years ago
  96. d229433 Free any existing SRTP connection profile. by David Benjamin · 9 years ago
  97. e72df93 Add a README.md for ssl/test. by David Benjamin · 9 years ago
  98. e9a3642 Don't reset ssl->shutdown in the state machine. by David Benjamin · 9 years ago
  99. b095f0f Remove the push argument to ssl_init_wbio_buffer. by David Benjamin · 9 years ago
  100. 2730955 Check BIO_flush return value. by David Benjamin · 9 years ago