1. 8ebc9ea Update BN_enhanced_miller_rabin_primality_test to enforce preconditions and accept BN_prime_checks. by Steven Valdez · 8 years ago
  2. 6fdea2a Move PKCS#7 functions into their own directory. by David Benjamin · 8 years ago
  3. de254b4 Enforce max_early_data_size on the server. by Alessandro Ghedini · 8 years ago
  4. b15143f Fix check_fips for public keys and synchronize the EC and RSA versions. by Steven Valdez · 8 years ago
  5. d0b9882 Add RSA_check_fips to support public key validation checks. by Steven Valdez · 8 years ago
  6. 3cfeb95 Disable SSLv3 by default. by David Benjamin · 8 years ago
  7. d69d94e Teach crypto/x509 how to verify an Ed25519 signature. by David Benjamin · 8 years ago
  8. 417830d Support EVP_PKEY_{sign,verify}_message with Ed25519. by David Benjamin · 8 years ago
  9. 05bb1c5 Implement draft-ietf-curdle-pkix-04's serialization. by David Benjamin · 8 years ago
  10. 2a07072 Prevent Channel ID and Custom Extensions on 0-RTT. by Steven Valdez · 8 years ago
  11. 3cb047e Decouple PKCS#12 hash lookup from the OID table. by David Benjamin · 8 years ago
  12. 2d85062 Add Data-less Zero-RTT support. by Steven Valdez · 8 years ago
  13. cfb9d14 Update pkcs8 error data. by David Benjamin · 8 years ago
  14. 2d05568 Fix out-of-memory condition in conf. by David Benjamin · 8 years ago
  15. 4c341d0 Support asynchronous ticket decryption with TLS 1.0–1.2. by Adam Langley · 8 years ago
  16. 6ad20dc Move error-on-empty-cipherlist into ssl_create_cipher_list(). by Matthew Braithwaite · 8 years ago
  17. d04ca95 Add |SSL[_CTX]_set_chain_and_key|. by Adam Langley · 8 years ago
  18. a58baaf Forbid the server certificate from changing on renego. by David Benjamin · 8 years ago
  19. bc6ef7a Convert err_test to GTest. by David Benjamin · 8 years ago
  20. 17cf2cb Work around language and compiler bug in memcpy, etc. by David Benjamin · 8 years ago
  21. d515722 Don't depend on the X509 code for getting public keys. by Adam Langley · 8 years ago
  22. aedf303 Parse the entire PSK extension. by David Benjamin · 8 years ago
  23. a4ee74d Skipping early data on 0RTT rejection. by Steven Valdez · 8 years ago
  24. 9b885c5 Don't allow invalid SCT lists to be set. by Adam Langley · 8 years ago
  25. e1cc35e Tolerate cipher changes on TLS 1.3 resumption as a client. by David Benjamin · 8 years ago
  26. a833c35 Update to TLS 1.3 draft 18. by Steven Valdez · 8 years ago
  27. 1db9e1b Add the certificate_required alert. by David Benjamin · 9 years ago
  28. 803c77a Update crypto negotation to draft 15. by Steven Valdez · 9 years ago
  29. c8b6b4f Only predict X25519 in TLS 1.3. by David Benjamin · 9 years ago
  30. 7e1f984 Fix some bugs in TLS 1.3 server key_share code. by David Benjamin · 9 years ago
  31. 163c956 Forbid EMS from changing during renegotation. by David Benjamin · 9 years ago
  32. 311c257 Declare SSL_R_BLOCK_CIPHER_PAD_IS_WRONG and SSL_R_NO_CIPHERS_SPECIFIED. by David Benjamin · 9 years ago
  33. 32635b8 Add limit for consecutive KeyUpdate messages. by Steven Valdez · 9 years ago
  34. 3e51757d Enforce the server ALPN protocol was advertised. by David Benjamin · 9 years ago
  35. 143e8b3 Add TLS 1.3 1-RTT. by Steven Valdez · 9 years ago
  36. 6167281 Check for buffered handshake messages on cipher change in DTLS. by David Benjamin · 9 years ago
  37. 1f61f0d Implement TLS 1.3's downgrade signal. by David Benjamin · 9 years ago
  38. ea9a0d5 Refine SHA-1 default in signature algorithm negotiation. by David Benjamin · 9 years ago
  39. 2b8415e Move the Digest/Sign split for SignatureAlgorithms to a lower level. by Steven Valdez · 9 years ago
  40. c9ae27c Build up TLS 1.3 record-layer tests. by David Benjamin · 9 years ago
  41. 8cf79af Always use Fermat's Little Theorem in ecdsa_sign_setup. by David Benjamin · 9 years ago
  42. a353cdb Wrap MSVC-only warning pragmas in a macro. by David Benjamin · 9 years ago
  43. 29270de Split unlock functions into read/write variants. by David Benjamin · 9 years ago
  44. 3473315 Reimplement PKCS #3 DH parameter parsing with crypto/bytestring. by David Benjamin · 9 years ago
  45. 52a3bf2 Add checks to X509_NAME_oneline() by David Benjamin · 9 years ago
  46. 56703d9 Make err_data_generator.go silent by default. by David Benjamin · 9 years ago
  47. a2f2bc3 Align with upstream's error strings, take two. by David Benjamin · 9 years ago
  48. fb8e678 Match upstream's error codes for the old sigalg code. by David Benjamin · 9 years ago
  49. 63d9246 Reset crypto/evp error codes. by David Benjamin · 9 years ago
  50. 17727c6 Move all signature algorithm code to crypto/x509. by David Benjamin · 9 years ago
  51. b9824e2 Handle SSL_shutdown while in init more appropriately by Steven Valdez · 9 years ago
  52. 68772b3 Implement new SPKI parsers. by David Benjamin · 9 years ago
  53. fda22a7 Reimplement DSA parsing logic with crypto/asn1. by David Benjamin · 9 years ago
  54. 2f6410b Rewrite ECPrivateKey serialization. by David Benjamin · 9 years ago
  55. 70ab223 Remove ASN1_R_MALLOC_FAILURE. by David Benjamin · 9 years ago
  56. ece5ba2 Reset ssl error codes. by David Benjamin · 9 years ago
  57. cd24a39 Limit DHE groups to 4096-bit. by David Benjamin · 9 years ago
  58. 3fc138e Don't bother sampling __func__. by David Benjamin · 10 years ago
  59. 96c2a28 Fix all sign/unsigned warnings with Clang and GCC. by Adam Langley · 10 years ago
  60. 301afaf Add a run_tests target to run all tests. by David Benjamin · 10 years ago
  61. 76c2efc Forbid a server from negotiating both ALPN and NPN. by David Benjamin · 10 years ago
  62. 73415b6 Move arm_arch.h and fix up lots of include paths. by Adam Langley · 10 years ago
  63. 8a36e53 Avoid using |WIN32| and use |OPENSSL_WINDOWS| instead. by Brian Smith · 10 years ago
  64. 0950563 Implement custom extensions. by Adam Langley · 10 years ago
  65. 33ad2b5 Tidy up extensions stuff and drop fastradio support. by Adam Langley · 10 years ago
  66. 207bb43 ERR_LIB_USER should be the last error. by David Benjamin · 10 years ago
  67. 3570d73 Remove the func parameter to OPENSSL_PUT_ERROR. by David Benjamin · 10 years ago
  68. 34248d4 Get rid of err function codes. by David Benjamin · 10 years ago
  69. 2e857bd Convert the signature algorithms extension to the new system by Adam Langley · 10 years ago
  70. 74f7110 Parse RSAPrivateKey with CBS. by David Benjamin · 10 years ago
  71. c0e245a Parse RSAPublicKey with CBS. by David Benjamin · 10 years ago
  72. 87897a8 Implement ECDSA_SIG_{parse,marshal} with crypto/bytestring. by David Benjamin · 10 years ago
  73. b9c579d Add crypto/bytestring-based BIGNUM DER functions. by David Benjamin · 10 years ago
  74. 5021b22 Convert the renegotiation extension to the new system. by Adam Langley · 10 years ago
  75. 614c66a Add infrastructure for better extension handling. by Adam Langley · 10 years ago
  76. 6cacac0 Promote SSL_CTX_[gs]et_tlsext_ticket_keys to functions. by David Benjamin · 10 years ago
  77. c0fe12c Restore |X509_REQ_print| and friends, from OpenSSL at ce7e647b. by Matt Braithwaite · 10 years ago
  78. b0acb77 Export pkcs1_prefixed_msg as RSA_add_pkcs1_prefix. by David Benjamin · 10 years ago
  79. fd67aa8 Add SSL_SESSION_from_bytes. by David Benjamin · 10 years ago
  80. 24f346d Limit the number of warning alerts silently consumed. by David Benjamin · 10 years ago
  81. 839b881 Multi-prime RSA support. by Adam Langley · 10 years ago
  82. ba5934b Tighten up EMS resumption behaviour. by Adam Langley · 10 years ago
  83. c933a47 Switch the ssl_write_bytes hook to ssl_write_app_data. by David Benjamin · 10 years ago
  84. 074cc04 Reject negative shifts for BN_rshift and BN_lshift. by David Benjamin · 10 years ago
  85. 3fa65f0 Fix some malloc test crashs. by David Benjamin · 10 years ago
  86. 0b635c5 Add malloc test support to unit tests. by David Benjamin · 10 years ago
  87. 31a0779 Factor SSL_AEAD_CTX into a dedicated type. by David Benjamin · 10 years ago
  88. d72e284 Support arbitrary elliptic curve groups. by Adam Langley · 10 years ago
  89. 9b68e72 Define compatibility function |ERR_remove_state|. by Matt Braithwaite · 10 years ago
  90. d6e95ee Get rid of ssl_undefined_* by David Benjamin · 10 years ago
  91. 605641e Move the NULL case in ssl_add_cert_chain up. by David Benjamin · 10 years ago
  92. 7133d42 Promote SNI macros to functions. by David Benjamin · 10 years ago
  93. c280758 Promote channel ID macros to proper functions. by David Benjamin · 10 years ago
  94. 15a3b00 Promote set_tmp_dh and set_tmp_ecdh to functions. by David Benjamin · 10 years ago
  95. 59015c3 Promote all SSL callback ctrl hooks to proper functions. by David Benjamin · 10 years ago
  96. 9febf19 Add do-nothing compatibility function |ERR_load_ERR_strings|. by Matt Braithwaite · 10 years ago
  97. cca4ba7 Remove unnecessary NULL checks, part 3. by David Benjamin · 10 years ago
  98. ad6b28e Add 64-bit, P-256 implementation. by Adam Langley · 10 years ago
  99. 32cd83f Remove the ability to set custom ex_data implementations. by David Benjamin · 10 years ago
  100. 8bdd542 err: convert over to new-style locking. by Adam Langley · 10 years ago