1. 4631ccc Remove SSL_CIPHER_get_value by David Benjamin · 1 year, 10 months ago
  2. 2f6409e Support WPA 3.1 "enterprise" mode. by Adam Langley · 2 years ago
  3. dcabfe2 Make OPENSSL_malloc push ERR_R_MALLOC_FAILURE on failure. by Bob Beck · 2 years, 2 months ago
  4. 451ea3c Add SSL_[CTX_]_set_compliance_policy. by Adam Langley · 2 years, 11 months ago
  5. 18b6836 Update to draft-ietf-tls-esni-13. by David Benjamin · 3 years, 9 months ago
  6. a75027b Make ssl_parse_extensions a little easier to use. by David Benjamin · 3 years, 8 months ago
  7. e2cb423 Deduplicate our three ServerHello parsers. by David Benjamin · 3 years, 9 months ago
  8. 05ce773 Process the TLS 1.3 cipher suite in one place. by David Benjamin · 3 years, 9 months ago
  9. ba423c9 Implement ClientHelloOuter handshakes. by David Benjamin · 3 years, 10 months ago
  10. 83a4993 Add most of an ECH client implementation. by David Benjamin · 3 years, 10 months ago
  11. 97ede40 Move key_share computation out of ClientHello callbacks. by David Benjamin · 3 years, 11 months ago
  12. 6c9758f Release some temporaries outside of ClientHello callbacks. by David Benjamin · 3 years, 11 months ago
  13. b587911 Remove the Channel ID callback. by David Benjamin · 3 years, 11 months ago
  14. 8acec00 Manage Channel ID handshake state better. by David Benjamin · 3 years, 11 months ago
  15. a1d3bfb Cite an RFC over 9000 (draft-ietf-quic-tls is now RFC 9001). by David Benjamin · 3 years, 10 months ago
  16. 47cefed Don't copy client's session ID into server's session. by Adam Langley · 3 years, 10 months ago
  17. d89ec68 Remove draft tokbind implementation. by David Benjamin · 3 years, 11 months ago
  18. 71a3b82 Check for resumption identifiers in SSL_SESSION_is_resumable. by David Benjamin · 3 years, 11 months ago
  19. 962b375 Move session ID assignment out of ssl_get_new_session. by David Benjamin · 3 years, 11 months ago
  20. 9b2cdb7 Add SSL_can_release_private_key. by David Benjamin · 4 years ago
  21. 5351c8b Rename the master_key field in SSL_SESSION to secret. by David Benjamin · 4 years, 4 months ago
  22. 51607f1 Implement draft-vvv-tls-alps-01. by Steven Valdez · 4 years, 8 months ago
  23. c4ec14c Switch ssl_parse_extensions to bool and Span. by David Benjamin · 4 years, 6 months ago
  24. 53a17f5 Add a |SSL_process_tls13_new_session_ticket|. by Adam Langley · 4 years, 10 months ago
  25. 5298ef9 Configure QUIC secrets inside set_{read,write}_state. by David Benjamin · 5 years ago
  26. 1e85905 Revise QUIC encryption secret APIs. by David Benjamin · 5 years ago
  27. 44099d5 Tidy up transitions out of 0-RTT keys on the client. by David Benjamin · 5 years ago
  28. b092192 Keep the encryption state and encryption level in sync. by David Benjamin · 5 years ago
  29. 754d4c9 Fix client handling of 0-RTT rejects with cipher mismatch. by David Benjamin · 5 years ago
  30. f9cc26f Require handshake flights end at record boundaries. by David Benjamin · 5 years ago
  31. ee0716f Defer early keys to QUIC clients to after certificate reverification. by David Benjamin · 5 years ago
  32. b11902a HelloRetryRequest getter by Kris Kwiatkowski · 6 years ago
  33. a93beba Rename the last remnants of the early_data_info extension. by David Benjamin · 5 years ago
  34. d634357 Add initial support for 0-RTT with QUIC. by David Benjamin · 6 years ago
  35. e530ea3 Use spans for the various TLS 1.3 secrets. by David Benjamin · 6 years ago
  36. 79b8b3a Switch tls13_enc.cc to spans. by David Benjamin · 6 years ago
  37. 5274cea Always store early data tickets. by Steven Valdez · 6 years ago
  38. 6477012 Add SSL_get_early_data_reason. by David Benjamin · 6 years ago
  39. b84674b Delete the variants/draft code. by Steven Valdez · 7 years ago
  40. 9cde848 Use handshake parameters to decide if cert/key are available by Christopher Patton · 7 years ago
  41. 2cc6f44 Use same HKDF label as TLS 1.3 for QUIC as per draft-ietf-quic-tls-17 by Alessandro Ghedini · 6 years ago
  42. 7b93593 Add initial HRSS support. by Adam Langley · 6 years ago
  43. 602f466 Forbid empty CertificateRequestsupported_signature_algorithms in TLS 1.2. by David Benjamin · 6 years ago
  44. f241a59 In 0RTT mode, reverify the server certificate before sending early data. by Jesse Selover · 6 years ago
  45. c8e0f90 Add an interface for QUIC integration. by Steven Valdez · 7 years ago
  46. 8c7c635 Support symbol prefixes by Joshua Liebow-Feeser · 7 years ago
  47. 492c9aa Fill in a fake session ID for TLS 1.3. by David Benjamin · 7 years ago
  48. 12f5878 Some more bools. by David Benjamin · 7 years ago
  49. 1c337e5 Option to reverify certs on resumption. by Jesse Selover · 7 years ago
  50. 0a3e07a Remove custom extensions support. by David Benjamin · 7 years ago
  51. 4685376 Remove other unnecessary tlsext_ prefixes. by David Benjamin · 7 years ago
  52. 50596f8 Switch some easy SSL fields to UniquePtr. by David Benjamin · 7 years ago
  53. bfdd1a9 Give SSL_SESSION a destructor. by David Benjamin · 7 years ago
  54. a3a71e9 Flip SSL_SESSION fields to bool. by David Benjamin · 7 years ago
  55. 0080d83 Implement the client side of certificate compression. by Adam Langley · 7 years ago
  56. ed188fd Enforce supported_versions in the second ServerHello. by David Benjamin · 7 years ago
  57. 98472cb Consistently use session_ctx for session caching. by David Benjamin · 7 years ago
  58. b7bc80a SSL_CONFIG: new struct for sheddable handshake configuration. by Matthew Braithwaite · 7 years ago
  59. 9f0e7cb Move TB state to ssl->s3. by David Benjamin · 7 years ago
  60. 7e5dd25 Remove draft22 and experiment2. by Steven Valdez · 7 years ago
  61. 36fcc4c Implement Token Binding by Nick Harper · 8 years ago
  62. 74666da Update key share extension number for draft23. by Steven Valdez · 7 years ago
  63. 02e6256 Move early_data_accepted to ssl->s3. by David Benjamin · 7 years ago
  64. 64cc121 Remove deprecated TLS 1.3 variants. by Steven Valdez · 7 years ago
  65. c5c31ab Enforce compression_method in TLS 1.3 draft 22. by Steven Valdez · 7 years ago
  66. e7c95d9 Run TLS 1.3 tests at all variants and fix bugs. by David Benjamin · 7 years ago
  67. 964b237 Implement PR 1091 (TLS 1.3 draft '22'). by Steven Valdez · 7 years ago
  68. cd8470f Adding support for draft 21 as a TLS 1.3 variant. by Steven Valdez · 7 years ago
  69. 8e7bbba Use more scopers. by David Benjamin · 7 years ago
  70. a031b61 Replace open_close_notify with open_app_data. by David Benjamin · 7 years ago
  71. d1e3ce1 Rename ssl3_send_alert and ssl3_protocol_version. by David Benjamin · 7 years ago
  72. 666d16e Go through SSL_PROTOCOL_METHOD in the handshake. by David Benjamin · 7 years ago
  73. 73d42e6 Inline ssl_clear_tls13_state. by David Benjamin · 8 years ago
  74. 08f5c76 Convert more things to Array. by David Benjamin · 8 years ago
  75. cf0ce67 Use Span and Array for the curve list. by David Benjamin · 8 years ago
  76. 499742c Introduce bssl::Array<T> and use it in SSLKeyShare. by David Benjamin · 8 years ago
  77. c7d4d21 Add experiment without client CCS and fix session ID bug. by Steven Valdez · 8 years ago
  78. 1682126 Add Experiment 2 by Steven Valdez · 8 years ago
  79. 3d8f080 Honor SSL_SESS_CACHE_CLIENT in TLS 1.3. by David Benjamin · 8 years ago
  80. 74795b3 More miscellaneous bools. by David Benjamin · 8 years ago
  81. 046bc1f SSL3_STATE ints to bools. by David Benjamin · 8 years ago
  82. fd45ee7 Replace bits in SSL_HANDSHAKE with bool. by David Benjamin · 8 years ago
  83. c11ea942 Convert comments in ssl. by David Benjamin · 8 years ago
  84. 4d71a9a Migrate TLS 1.2 and below state machines to the new style. by Steven Valdez · 8 years ago
  85. f60bcfb Make SSL_state_string_long work for TLS 1.3. by David Benjamin · 8 years ago
  86. f4ecc84 Prevent both early data and custom extensions from being accepted. by Steven Valdez · 8 years ago
  87. 7934f08 Replace init_msg/init_num with a get_message hook. by David Benjamin · 8 years ago
  88. 8f94c31 Replace reuse_message with an explicit next_message call. by David Benjamin · 8 years ago
  89. 9bbdf58 Remove expect and received flight hooks. by David Benjamin · 8 years ago
  90. c642aca Convert SSL_ECDH_CTX to C++. by David Benjamin · 8 years ago
  91. 31b0c9b Add a bunch of scopers. by David Benjamin · 8 years ago
  92. e39ac8f Switch BORINGSSL_INTERNAL_CXX_TYPES in favor of subclassing games. by David Benjamin · 8 years ago
  93. 1386aad Switch various things to scopers. by David Benjamin · 8 years ago
  94. cfc11c2 C++-ify SSL_AEAD_CTX. by David Benjamin · 8 years ago
  95. 86e95b8 Move libssl's internals into the bssl namespace. by David Benjamin · 8 years ago
  96. 3a1dd46 Add async certificate verification callback. by David Benjamin · 8 years ago
  97. d304a2f Switch tls13_client and tls13_server to C++. by David Benjamin · 8 years ago[Renamed (97%) from ssl/tls13_client.c]
  98. 038da9b Move the version to an extension in the experimental TLS 1.3 encoding. by Steven Valdez · 8 years ago
  99. 520e122 Implement experimental alternate encoding of TLS 1.3. by Steven Valdez · 8 years ago
  100. 4414874 Simplify ssl_private_key_* state machine points. by David Benjamin · 8 years ago