1. df3b58e Generate certs on the fly in runner, pass trusted cert to shim by Roland Shoemaker · 1 year, 7 months ago
  2. 90f0f05 Integrate TLS 1.2 sigalg and cipher suite selection by David Benjamin · 1 year, 1 month ago
  3. 48b0edf Update delegated credentials to the final RFC by David Benjamin · 1 year, 1 month ago
  4. 558960d Add support for the new ALPS codepoint by Victor Tan · 1 year, 9 months ago
  5. 286ea21 Replace byteBuilder and byteReader with cryptobyte by David Benjamin · 1 year, 9 months ago
  6. 50ee095 Use a single TCP server port in runner by David Benjamin · 1 year, 10 months ago
  7. f4d1d79 Simplify shimProcess accept and wait by David Benjamin · 1 year, 10 months ago
  8. e33257f Pass IPv6 vs IPv4 down to the shim by David Benjamin · 1 year, 10 months ago
  9. b0251b1 Disable TLS_RSA_WITH_3DES_EDE_CBC_SHA by default by David Benjamin · 2 years ago
  10. b1c6f45 Add back support for TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 by Adam Langley · 1 year, 11 months ago
  11. b811a6c Add Kyber to runner tests by Adam Langley · 1 year, 11 months ago
  12. 2f6409e Support WPA 3.1 "enterprise" mode. by Adam Langley · 2 years ago
  13. a02b743 runner: Remove an unnecessary use of AllCurves by David Benjamin · 1 year, 11 months ago
  14. edf7662 Allow passing extra flags to BoGo shim by Roland Shoemaker · 1 year, 11 months ago
  15. de2d610 Remove TLS_RSA_WITH_NULL_SHA by David Benjamin · 2 years ago
  16. cee2dbb Default SSL_set_enforce_rsa_key_usage to enabled. by David Benjamin · 2 years ago
  17. 4ae4fb7 Drop CECPQ2 support. by Adam Langley · 2 years ago
  18. fe7a067 Run `go fmt` in `ssl/test/runner`. by Adam Langley · 2 years ago
  19. 1e97ce3 Don't send two post-quantum initial key shares. by Adam Langley · 2 years, 2 months ago
  20. ec6425ca Drop the preference for 256-bit ciphers with CECPQ2. by Adam Langley · 2 years, 3 months ago
  21. a614d46 Add SSL_was_key_usage_invalid. by David Benjamin · 2 years, 4 months ago
  22. 3a1b730 Don't allow the caller to configure invalid signature algorithms. by David Benjamin · 2 years, 4 months ago
  23. e8f57ca Never accidentally use SSL_SIGN_RSA_PKCS1_MD5_SHA1 at TLS 1.2. by David Benjamin · 2 years, 4 months ago
  24. 5511fa8 Migrate io/ioutil uses to new APIs. by David Benjamin · 2 years, 5 months ago
  25. 4b35543 Revert "Default SSL_set_enforce_rsa_key_usage to enabled." by David Benjamin · 2 years, 5 months ago
  26. 64393b5 Default SSL_set_enforce_rsa_key_usage to enabled. by David Benjamin · 2 years, 6 months ago
  27. 361e3e0 Move the DTLS cookie to SSL_HANDSHAKE. by David Benjamin · 2 years, 7 months ago
  28. adaa322 Add handshake hints for TLS 1.2 session tickets. by David Benjamin · 2 years, 8 months ago
  29. 4a6c8fd Support handshake hints for TLS 1.2 full handshakes. by David Benjamin · 2 years, 8 months ago
  30. 451ea3c Add SSL_[CTX_]_set_compliance_policy. by Adam Langley · 2 years, 10 months ago
  31. 5112b45 Support Bazel's test-sharding protocol. by Adam Langley · 3 years, 2 months ago
  32. 123eaae Record ClientHelloInner values in msg_callback. by David Benjamin · 3 years, 2 months ago
  33. 7198d11 Explicitly reject self-referential ech_outer_extensions. by David Benjamin · 3 years, 2 months ago
  34. 18b6836 Update to draft-ietf-tls-esni-13. by David Benjamin · 3 years, 9 months ago
  35. e2cb423 Deduplicate our three ServerHello parsers. by David Benjamin · 3 years, 9 months ago
  36. 16c3e3a runner: Test session IDs over 32 bytes. by David Benjamin · 3 years, 9 months ago
  37. ad5db96 Handle the server case in SSL_get0_ech_name_override. by David Benjamin · 3 years, 9 months ago
  38. ba423c9 Implement ClientHelloOuter handshakes. by David Benjamin · 3 years, 10 months ago
  39. ca7ef8c runner: Add a convenience function for base64 flags. by David Benjamin · 3 years, 9 months ago
  40. afa867b runner: Test that clients actually use renewed tickets. by David Benjamin · 3 years, 9 months ago
  41. 5d224a5 runner: Clean up test logic. by David Benjamin · 3 years, 9 months ago
  42. c41a3a9 runner: Fix process exit timeout. by David Benjamin · 3 years, 9 months ago
  43. 9cbe737 Validate ECH public names. by David Benjamin · 3 years, 10 months ago
  44. e9c5d72 Add an option to permute ClientHello extension order. by David Benjamin · 3 years, 10 months ago
  45. 5358cb5 runner: Check the test name against the protocol being tested. by David Benjamin · 3 years, 10 months ago
  46. 83a4993 Add most of an ECH client implementation. by David Benjamin · 3 years, 10 months ago
  47. 0724e3d runner: Self-check tests more accurately and earlier. by David Benjamin · 3 years, 10 months ago
  48. 26f186b Implement a handshake hint for certificate compression. by David Benjamin · 3 years, 10 months ago
  49. 7fffa46 runner: Implement ECH server for testing. by David Benjamin · 3 years, 10 months ago
  50. 1241228 runner: Revise ECHConfig type in preparation for client implementation by David Benjamin · 3 years, 10 months ago
  51. 88df13d Fix ECH-Server-RepeatedConfigID test. by David Benjamin · 3 years, 10 months ago
  52. 3a036c7 Add SSL_ech_accepted API and ech_is_required alerts. by David Benjamin · 3 years, 10 months ago
  53. 5b7ec83 Reject the ECH extension in TLS 1.2 ServerHello. by David Benjamin · 3 years, 10 months ago
  54. bc4c91a DTLS-SRTP is only defined for DTLS. by David Benjamin · 3 years, 10 months ago
  55. 3dd9864 Test ECH server with unique and repeated config IDs. by Dan McArdle · 3 years, 10 months ago
  56. d89ec68 Remove draft tokbind implementation. by David Benjamin · 3 years, 10 months ago
  57. ddecaab Check hs->early_session, not ssl->session, for the early data limit. by David Benjamin · 3 years, 11 months ago
  58. 94a63a5 Implement ECH draft 10 and update HPKE to draft 08. by Steven Valdez · 4 years ago
  59. b571e77 Add experimental handshake hints API. by David Benjamin · 4 years ago
  60. 94b477c Record a fuzzing corpus for the ClientHelloInner decoder. by David Benjamin · 4 years ago
  61. e2b7bb7 Only skip early data with HRR when offered. by David Benjamin · 4 years ago
  62. 00e434d Add ECH server (draft-ietf-tls-esni-09). by Daniel McArdle · 4 years, 1 month ago
  63. bff8834 runner: Test different V2ClientHello challenge lengths. by David Benjamin · 4 years ago
  64. fa2d3d5 runner: Fix ECH confirmation calculation with PSKs in tests. by David Benjamin · 4 years ago
  65. f225516 runner: Remove remnants of the separate HelloRetryRequest message. by David Benjamin · 4 years ago
  66. b62a48f Remove some now unnecessary test exclusions from split handshakes. by David Benjamin · 4 years ago
  67. 60a78dc Remove tls13-split-handshakes flag. by David Benjamin · 4 years ago
  68. 3af6226 Enforce that pre_shared_key must come with psk_key_exchange_modes. by David Benjamin · 4 years ago
  69. e5fe31c Revert "Implement rsa_pkcs1_sha256_legacy." by David Benjamin · 4 years ago
  70. b214741 Only pass -handshaker-path in split handshakes tests. by David Benjamin · 4 years ago
  71. a3437c0 Implement rsa_pkcs1_sha256_legacy. by David Benjamin · 4 years, 1 month ago
  72. 1eae297 runner: Remove redundant -enable-all-curves shim flag. by David Benjamin · 4 years ago
  73. 6b48efa Add -rr-record flag to runner.go. by Dan McArdle · 4 years, 1 month ago
  74. c02c19e Honor SSL_TLSEXT_ERR_ALERT_FATAL in the ALPN callback. by David Benjamin · 4 years, 2 months ago
  75. c5e4538 Fix TLS13SessionID-TLS13 test. by David Benjamin · 4 years, 2 months ago
  76. ae2bb64 Use ID instead of Id in Go. by David Benjamin · 4 years, 2 months ago
  77. a9319d9 Fix client 0-RTT handling with ALPS. by David Benjamin · 4 years, 2 months ago
  78. 3d8b8c3 Add support for the new QUIC TLS extension codepoint by David Schinazi · 4 years, 2 months ago
  79. e606f79 Run extension tests at all protocols. by David Benjamin · 4 years, 2 months ago
  80. 47d1274 Make QUIC tests work with early data. by David Benjamin · 4 years, 2 months ago
  81. 7a55c80 Make QUIC work with -async tests. by David Benjamin · 4 years, 2 months ago
  82. 71ed9d7 Fix ALPS state machine in QUIC servers. by David Benjamin · 4 years, 2 months ago
  83. 41676bf Test that ALPS can be deferred to the ALPN callback. by David Benjamin · 4 years, 2 months ago
  84. c295935 Send ECH acceptance signal from backend server. by Dan McArdle · 4 years, 5 months ago
  85. 1920c6f Implement GREASE for ECH (draft-ietf-tls-esni-08). by Dan McArdle · 5 years ago
  86. 0a6bfa3 Always check the TLS 1.3 downgrade signal. by David Benjamin · 4 years, 4 months ago
  87. aec1b62 runner: add -skip by Adam Langley · 4 years, 5 months ago
  88. 51607f1 Implement draft-vvv-tls-alps-01. by Steven Valdez · 4 years, 8 months ago
  89. e580e9d Simplify 0-RTT tests. by David Benjamin · 4 years, 6 months ago
  90. bb72a8d Allow specifying different initial and resumption expectations. by David Benjamin · 4 years, 6 months ago
  91. a6386ea runner: Rewrite sessionState parsing with byteReader. by David Benjamin · 4 years, 6 months ago
  92. dcd6e44 Support delegated credentials verison 06 by Watson Ladd · 4 years, 8 months ago
  93. 74161f4 Enforce presence of ALPN when QUIC is in use. by Nick Harper · 4 years, 8 months ago
  94. cac9392 Disallow TLS 1.3 compatibility mode in QUIC. by Nick Harper · 4 years, 11 months ago
  95. b3c5ac5 Add a -wait-for-debugger flag to runner. by David Benjamin · 4 years, 9 months ago
  96. cd8f3d3 Enforce the keyUsage extension in TLS 1.2 client certs. by David Benjamin · 4 years, 10 months ago
  97. 47a6f5b runner: Replace supportsVersions calls with allVersions. by David Benjamin · 5 years ago
  98. e8434d3 Enable QUIC for some perMessageTest runner tests by Nick Harper · 5 years ago
  99. af6bfbe Enable more runner tests for QUIC by Nick Harper · 5 years ago
  100. 72cff81 Require QUIC method with Transport Parameters and vice versa by Nick Harper · 5 years ago