1. b83003e Don't initialize enc_method before version negotiation. by David Benjamin · 9 years ago
  2. a1e9cab Replace enc_flags with normalized version checks. by David Benjamin · 9 years ago
  3. baa1216 Prune finished labels from SSL3_ENC_METHOD. by David Benjamin · 9 years ago
  4. f8d8071 Remove a few unnecessary SSL3_ENC_METHOD hooks. by David Benjamin · 9 years ago
  5. 79978df Move aead_{read,write}_ctx and next_proto_negotiated into ssl->s3. by David Benjamin · 9 years ago
  6. 57997da Simplify the ChangeCipherSpec logic. by David Benjamin · 9 years ago
  7. 0623bce Fill in ssl->session->cipher when resumption is resolved. by David Benjamin · 9 years ago
  8. 0d56f88 Switch s to ssl everywhere. by David Benjamin · 9 years ago
  9. 974c7ba Route DHE through the SSL_ECDH abstraction as well. by David Benjamin · 9 years ago
  10. 4298d77 Implement draft-ietf-tls-curve25519-01 in C. by David Benjamin · 9 years ago
  11. fc82512 Convert ssl3_send_cert_verify to CBB. by David Benjamin · 9 years ago
  12. 5fb18c6 Make MSVC happy. by Adam Langley · 9 years ago
  13. 2a0b391 Rewrite ssl3_send_server_key_exchange to use CBB. by David Benjamin · 9 years ago
  14. af21bcf Remove other unnecessary BN_CTX allocations. by David Benjamin · 9 years ago
  15. 3f5b43d Simplify RSA key exchange padding check. by David Benjamin · 9 years ago
  16. a41280d Pull ChangeCipherSpec into the handshake state machine. by David Benjamin · 9 years ago
  17. 5ddffbb Make SSL_(CTX_)?set_tmp_ecdh call SSL_(CTX_)?set1_curves. by David Benjamin · 9 years ago
  18. 53e5c2c Remove SSL_(CTX_)?set_ecdh_callback. by David Benjamin · 9 years ago
  19. 0bd71eb Remove weird ret negation logic. by David Benjamin · 9 years ago
  20. ef5e515 Remove SSL_OP_TLS_D5_BUG. by David Benjamin · 9 years ago
  21. c4f25ce Work around yaSSL bug. by Adam Langley · 9 years ago version_for_cocoapods_1.0
  22. b324159 Fix ssl3_send_server_key_exchange error path. by David Benjamin · 9 years ago
  23. af07365 Check for overflow when parsing a CBS with d2i_*. by David Benjamin · 9 years ago
  24. 6e80765 Add SSL_get_server_key_exchange_hash. by David Benjamin · 9 years ago
  25. 274341d Change the type of |EC_GROUP_get_degree| and friends to |unsigned|. by Brian Smith · 9 years ago
  26. 3398dbf Add server-side support for asynchronous RSA decryption. by nagendra modadugu · 10 years ago
  27. dc2aea2 Remove all the logic around custom session IDs and retrying on collisions. by David Benjamin · 9 years ago
  28. 8217024 Document the info callback. by David Benjamin · 9 years ago
  29. cfdee21 Add use counters for SSL_OP_TLS_D5_BUG and SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER. by David Benjamin · 9 years ago
  30. 5638046 Convert ssl3_send_server_hello to CBB. by David Benjamin · 9 years ago
  31. 4d11aff Don't record handshake hashes if no Channel ID by Matt Braithwaite · 10 years ago
  32. 9e4e01e Align the SSL stack on #include style. by David Benjamin · 10 years ago
  33. 1f9f9c4 Tidy up the ssl3_send_server_key_exchange slightly. by David Benjamin · 10 years ago
  34. 26416e9 Remove the last of SESS_CERT. by David Benjamin · 10 years ago
  35. b8d28cf Factor out the buffering and low-level record code. by David Benjamin · 10 years ago
  36. aeeff2c Server-side OCSP stapling support. by Paul Lietar · 10 years ago
  37. 894f48c Only read 5 bytes (record header length) in sniffing for V2ClientHello. by David Benjamin · 10 years ago
  38. 45c6c3e Use the record-layer buffer for sniffing V2ClientHellos. by David Benjamin · 10 years ago
  39. 97760d5 Slightly simplify V2ClientHello sniffing. by David Benjamin · 10 years ago
  40. d6a4ae9 Simplify tls1_channel_id_hash. by David Benjamin · 10 years ago
  41. 9550c3a Decouple the handshake buffer and digest. by David Benjamin · 10 years ago
  42. 601448a Add server-side support for asynchronous signing. by nagendra modadugu · 10 years ago
  43. 821464e Remove old 'prepare' extensions functions. by David Benjamin · 10 years ago
  44. 49c7af1 Convert the Channel ID extension to the new system. by Adam Langley · 10 years ago
  45. 3570d73 Remove the func parameter to OPENSSL_PUT_ERROR. by David Benjamin · 10 years ago
  46. d1d8078 Fold away certificate slots mechanism. by David Benjamin · 10 years ago
  47. bb20f52 Merge the RSA_ENC and RSA_SIGN certificate slots. by David Benjamin · 10 years ago
  48. 396a441 ssl3_cert_verify_hash should take the EVP_PKEY type. by David Benjamin · 10 years ago
  49. a865320 Add CBB_zero to set a CBB to the zero state. by David Benjamin · 10 years ago
  50. e3aa1d9 Cleanup ticket processing and session lookup. by David Benjamin · 10 years ago
  51. b4d65fd Implement asynchronous private key operations for client auth. by David Benjamin · 10 years ago
  52. ba5934b Tighten up EMS resumption behaviour. by Adam Langley · 10 years ago
  53. a1c90a5 Further tidy up cipher logic. by David Benjamin · 10 years ago
  54. 5c1ce29 Decide whether or not to request client certificates early. by David Benjamin · 10 years ago
  55. 4b30b28 Remove server-side renego session resumption check. by David Benjamin · 10 years ago
  56. 5aea93e Deprecate and no-op SSL_VERIFY_CLIENT_ONCE. by David Benjamin · 10 years ago
  57. 74d8bc2 Don't make SSL_MODE_*HELLO_TIME configurable. by David Benjamin · 10 years ago
  58. be05c63 Remove compatibility s->version checks. by David Benjamin · 10 years ago
  59. 8ec8810 Remove SSL_in_before and SSL_ST_BEFORE. by David Benjamin · 10 years ago
  60. 44d3eed Forbid caller-initiated renegotiations and all renego as a servers. by David Benjamin · 10 years ago
  61. 4b27d9f Never resume sessions on renegotiations. by David Benjamin · 10 years ago
  62. e6df054 Add s->s3->initial_handshake_complete. by David Benjamin · 10 years ago
  63. 6a08da2 Remove redundant setup buffer calls. by David Benjamin · 10 years ago
  64. 9f226a5 Always set SSL_OP_SINGLE_DH_USE. by David Benjamin · 10 years ago
  65. 1d0a194 Promote max_cert_list and max_send_fragment to functions. by David Benjamin · 10 years ago
  66. adcc395 Tidy up ticket length checks. by David Benjamin · 10 years ago
  67. 2755a3e Remove unnecessary NULL checks, part 5. by David Benjamin · 10 years ago
  68. dd97878 Always enable ecdh_auto. by David Benjamin · 10 years ago
  69. 93de5e5 Reject empty cipher suite lists early. by David Benjamin · 10 years ago
  70. 3fa2777 Fix some unsigned long cipher masks. by David Benjamin · 10 years ago
  71. b16346b Add SSL_set_reject_peer_renegotiations. by David Benjamin · 10 years ago
  72. f0ae170 Include-what-you-use ssl/internal.h. by David Benjamin · 10 years ago
  73. 2ee94aa Rename ssl_locl.h to internal.h by David Benjamin · 10 years ago
  74. 32fbdf2 Remove anonymous cipher suites. by David Benjamin · 10 years ago
  75. c0f763b Simplify server-side ECDH curve selection. by David Benjamin · 10 years ago
  76. b6d0c6d Remove the stats block in SSL_CTX. by David Benjamin · 10 years ago
  77. 7061e28 Rename EECDH and EDH to ECDHE and DHE. by David Benjamin · 10 years ago
  78. 524e717 Add a callback for DDoS protection. by Adam Langley · 10 years ago
  79. bcd3745 Fix some missing return value checks in ssl3_send_new_session_ticket. by David Benjamin · 10 years ago
  80. 5ca39fb Switch SSL_GET_MESSAGE_HASH_MESSAGE to an enum. by David Benjamin · 10 years ago
  81. fbdfefb Handle failures in ssl3_finish_mac. by David Benjamin · 10 years ago
  82. 9d0847a Add some missing error failure checks. by David Benjamin · 10 years ago
  83. a54e2e8 Remove server-side HelloVerifyRequest support. by David Benjamin · 10 years ago
  84. c35fb01 Fix more memory leaks on malloc failure. by David Benjamin · 10 years ago
  85. 6eb000d Add in missing curly braces part 3. by David Benjamin · 10 years ago
  86. 2fff5bf Set rwstate inside ssl3_get_client_hello. by David Benjamin · 10 years ago
  87. 79ae85e Remove NETSCAPE_HANG_BUG. by David Benjamin · 10 years ago
  88. 70bd80a Remove constraints on curve ID values. by David Benjamin · 10 years ago
  89. fcf2583 Reformat the rest of ssl/. by Adam Langley · 10 years ago
  90. a6d8101 Consistently use RAND_bytes and check for failure. by David Benjamin · 10 years ago
  91. ef5885e Don't change s->version after have_version is set. by David Benjamin · 10 years ago
  92. e4824e8 Add outgoing messages to the handshake hash at set_handshake_header. by David Benjamin · 10 years ago
  93. bf42f82 Add comments explaining what NETSCAPE_HANG_BUG does. by David Benjamin · 10 years ago
  94. 139ed19 Address code-review comments from prev changes. by Adam Langley · 10 years ago
  95. 82c9e90 Merge SSLv23_method and DTLS_ANY_VERSION. by David Benjamin · 10 years ago
  96. 4b755cb Implement the V2ClientHello sniff in version-locked methods. by David Benjamin · 10 years ago
  97. 63c55a8 Fix memory leak on failure. by David Benjamin · 10 years ago
  98. accb454 Add min_version tests. by David Benjamin · 10 years ago
  99. 9ec6bca Remove method swap in DTLS_ANY_VERSION. by David Benjamin · 10 years ago
  100. e99e912 Pull SSL3_ENC_METHOD out of SSL_METHOD. by David Benjamin · 10 years ago