1. 44a389a Tidy up some lengths in SSL_SESSION by David Benjamin · 2 years, 4 months ago
  2. dcabfe2 Make OPENSSL_malloc push ERR_R_MALLOC_FAILURE on failure. by Bob Beck · 2 years, 2 months ago
  3. 4a6c8fd Support handshake hints for TLS 1.2 full handshakes. by David Benjamin · 2 years, 8 months ago
  4. 50e7ea5 LSC: Apply clang-tidy's modernize-use-bool-literals to boringssl by Anton Bikineev · 3 years, 2 months ago
  5. a75027b Make ssl_parse_extensions a little easier to use. by David Benjamin · 3 years, 8 months ago
  6. 26f186b Implement a handshake hint for certificate compression. by David Benjamin · 3 years, 10 months ago
  7. b571e77 Add experimental handshake hints API. by David Benjamin · 4 years ago
  8. c4ec14c Switch ssl_parse_extensions to bool and Span. by David Benjamin · 4 years, 6 months ago
  9. ebad508 Switch verify sigalg pref functions to SSL_HANDSHAKE. by David Benjamin · 5 years ago
  10. 8fe1584 Switch cert_compression_algs to GrowableArray. by David Benjamin · 5 years ago
  11. e530ea3 Use spans for the various TLS 1.3 secrets. by David Benjamin · 6 years ago
  12. 4dfd5af Only bypass the signature verification itself in fuzzer mode. by David Benjamin · 6 years ago
  13. 629f321 Add an API to record use of delegated credential by Watson Ladd · 6 years ago
  14. 85eef29 Compute the delegated credentials length prefix with CBB. by David Benjamin · 6 years ago
  15. d7266ec Enforce key usage for RSA keys in TLS 1.2. by Jesse Selover · 6 years ago
  16. 6c1b376 Implement server support for delegated credentials. by Christopher Patton · 7 years ago
  17. 3cbb029 Allow configuring QUIC method per-connection by Alessandro Ghedini · 6 years ago
  18. 9cde848 Use handshake parameters to decide if cert/key are available by Christopher Patton · 7 years ago
  19. ba9ad66 Add |SSL_key_update|. by Adam Langley · 6 years ago
  20. 6965d25 Work around a JDK 11 TLS 1.3 bug. by David Benjamin · 6 years ago
  21. c8e0f90 Add an interface for QUIC integration. by Steven Valdez · 7 years ago
  22. 8c7c635 Support symbol prefixes by Joshua Liebow-Feeser · 7 years ago
  23. 12f5878 Some more bools. by David Benjamin · 7 years ago
  24. a130ce0 Update TLS 1.3 citations for the final RFC. by David Benjamin · 7 years ago
  25. f1af129 Implement TLS 1.3 anti-downgrade signal. by Steven Valdez · 7 years ago
  26. 35b4a12 Namespace CertCompressionAlg and use more scopers. by David Benjamin · 7 years ago
  27. e0afc85 Send an alert if we fail to pick a signature algorithm. by Adam Langley · 7 years ago
  28. 0ce090a A bunch more scopers. by David Benjamin · 7 years ago
  29. 8596795 Drop C++ from certificate compression API. by Adam Langley · 7 years ago
  30. bfdd1a9 Give SSL_SESSION a destructor. by David Benjamin · 7 years ago
  31. 0080d83 Implement the client side of certificate compression. by Adam Langley · 7 years ago
  32. a307cb7 Preliminary support for compressed certificates. by Adam Langley · 7 years ago
  33. b7bc80a SSL_CONFIG: new struct for sheddable handshake configuration. by Matthew Braithwaite · 7 years ago
  34. e325c3f Give CERT a destructor. by David Benjamin · 7 years ago
  35. 6df6540 Add a draft TLS 1.3 anti-downgrade signal. by David Benjamin · 7 years ago
  36. 964b237 Implement PR 1091 (TLS 1.3 draft '22'). by Steven Valdez · 7 years ago
  37. 75a1f23 Have a bit more fun with Span. by David Benjamin · 7 years ago
  38. d1e3ce1 Rename ssl3_send_alert and ssl3_protocol_version. by David Benjamin · 7 years ago
  39. 74795b3 More miscellaneous bools. by David Benjamin · 8 years ago
  40. 046bc1f SSL3_STATE ints to bools. by David Benjamin · 8 years ago
  41. c11ea942 Convert comments in ssl. by David Benjamin · 8 years ago
  42. 4d71a9a Migrate TLS 1.2 and below state machines to the new style. by Steven Valdez · 8 years ago
  43. 8fc2dc0 Put SCTs and OCSP responses in CRYPTO_BUFFERs. by David Benjamin · 8 years ago
  44. 7934f08 Replace init_msg/init_num with a get_message hook. by David Benjamin · 8 years ago
  45. 9bbdf58 Remove expect and received flight hooks. by David Benjamin · 8 years ago
  46. 6e9321f Add a bssl::PushToStack helper. by David Benjamin · 8 years ago
  47. e664a53 Return null from SSL_get0_peer_certificates if unauthenticated. by David Benjamin · 8 years ago
  48. 6dc8bf6 Convert SSL_TRANSCRIPT to C++. by David Benjamin · 8 years ago
  49. 31b0c9b Add a bunch of scopers. by David Benjamin · 8 years ago
  50. e39ac8f Switch BORINGSSL_INTERNAL_CXX_TYPES in favor of subclassing games. by David Benjamin · 8 years ago
  51. 1386aad Switch various things to scopers. by David Benjamin · 8 years ago
  52. 86e95b8 Move libssl's internals into the bssl namespace. by David Benjamin · 8 years ago
  53. 3a1dd46 Add async certificate verification callback. by David Benjamin · 8 years ago
  54. 11d11d6 Fix and/or annotate all switch fall-throughs. by Adam Langley · 8 years ago
  55. 81678aa Switch t1_lib, tls_record, and tls13_both to C++. by David Benjamin · 8 years ago[Renamed (95%) from ssl/tls13_both.c]
  56. 520e122 Implement experimental alternate encoding of TLS 1.3. by Steven Valdez · 8 years ago
  57. 4414874 Simplify ssl_private_key_* state machine points. by David Benjamin · 8 years ago
  58. 8d606e3 Clear out f_err pattern from handshake_client.c. by David Benjamin · 8 years ago
  59. e831a81 Adding support for sending early data on the client. by Steven Valdez · 8 years ago
  60. bbba939 Acknowledge KeyUpdate messages. by David Benjamin · 8 years ago
  61. a232a71 Deprecate SSL_PRIVATE_KEY_METHOD type and max_signature_len. by David Benjamin · 8 years ago
  62. 681eb6a Adding support for receiving early data on the server. by Steven Valdez · 8 years ago
  63. 794cc59 Send half-RTT tickets when negotiating 0-RTT. by David Benjamin · 8 years ago
  64. 2d85062 Add Data-less Zero-RTT support. by Steven Valdez · 8 years ago
  65. 707af29 Support asynchronous ticket decryption with TLS 1.3. by David Benjamin · 8 years ago
  66. ab1d28e Trim x509.h includes. by David Benjamin · 8 years ago
  67. 2a3b343 Move X509-related verification code into ssl_x509.c. by Adam Langley · 8 years ago
  68. 45738dd Move new_cipher and new_session to SSL_HANDSHAKE. by David Benjamin · 8 years ago
  69. 83a3212 Move SCT lists and OCSP responses to CERT. by David Benjamin · 8 years ago
  70. 46db7af Remove |X509| things from SSL_SESSION. by Adam Langley · 8 years ago
  71. 908ac19 Moving transcript and PRF functions to SSL_TRANSCRIPT. by Steven Valdez · 8 years ago
  72. c68e5b9 Establish that the default value of an out-arg for alerts is SSL_AD_DECODE_ERROR. by Adam Langley · 8 years ago
  73. 8df6766 Support setting per-connection SCT list by Alessandro Ghedini · 8 years ago
  74. f71036e Remove ssl_hash_message_t from ssl_get_message. by David Benjamin · 8 years ago
  75. 276b7e8 Move optional message type checks out of ssl_get_message. by David Benjamin · 8 years ago
  76. 3a2b47a Don't use |X509| objects in |CERT|, by default. by Adam Langley · 8 years ago
  77. 0f24bed Rename tls13_prepare_* to tls13_add_*. by David Benjamin · 8 years ago
  78. 25ac251 Remove write_message from TLS 1.3 handshakes. by David Benjamin · 8 years ago
  79. daf207a Don't use the buffer BIO in TLS. by David Benjamin · 8 years ago
  80. 8d5f9da Abstract away BIO_flush calls in the handshake. by David Benjamin · 8 years ago
  81. 08b65f4 Enabling 0-RTT on new Session Tickets. by Steven Valdez · 8 years ago
  82. a4b9198 Make TLS 1.3 check ECDSA KeyUsage and add test. by Adam Langley · 8 years ago
  83. 0c29425 Don't use |X509_get_pubkey| in TLS 1.3 code either. by Adam Langley · 8 years ago
  84. f1050fd Preserve the peer signature algorithm across resumes. by David Benjamin · 8 years ago
  85. d519bf6 Add |SSL_CTX_set0_buffer_pool|. by Adam Langley · 8 years ago
  86. 68e7124 Hold certificates in an SSL_SESSION as CRYPTO_BUFFERSs as well. by Adam Langley · 8 years ago
  87. 364f7a6 Push the difference in chain semantics to the edge. by Adam Langley · 8 years ago
  88. c0fc7a1 Revert "Add |SSL_CTX_set0_buffer_pool|." and "Hold certificates in an SSL_SESSION as CRYPTO_BUFFERSs as well." by Adam Langley · 8 years ago
  89. 5a6e616 Add |SSL_CTX_set0_buffer_pool|. by Adam Langley · 8 years ago
  90. e850909 Hold certificates in an SSL_SESSION as CRYPTO_BUFFERSs as well. by Adam Langley · 8 years ago
  91. 559f064 Support setting per-connection OCSP staple by Alessandro Ghedini · 8 years ago
  92. f3c8f8d Pass explicit parameters elsewhere. by David Benjamin · 8 years ago
  93. 6e4fc33 Pass explicit hs parameters to tls13_*.c. by David Benjamin · 8 years ago
  94. c3c8882 Match state machine functions with new calling convention. by David Benjamin · 8 years ago
  95. ce8c9d2 Maintain SSL_HANDSHAKE lifetime outside of handshake_func. by David Benjamin · 8 years ago
  96. 6f5f49f Flush TLS 1.3 certificate extensions. by Adam Langley · 8 years ago
  97. cfa08c3 Enforce basic sanity of SCT lists. by Adam Langley · 8 years ago
  98. bbaf367 Add |SSL_set_retain_only_sha256_of_client_certs|. by David Benjamin · 8 years ago
  99. ffb1107 Add a helper function for parsing extensions blocks. by David Benjamin · 8 years ago
  100. a833c35 Update to TLS 1.3 draft 18. by Steven Valdez · 8 years ago