1. de254b4 Enforce max_early_data_size on the server. by Alessandro Ghedini · 8 years ago
  2. bbba939 Acknowledge KeyUpdate messages. by David Benjamin · 8 years ago
  3. a0ba400 Add cipher asserts for read/write app data. by Steven Valdez · 8 years ago
  4. bbfe603 Clean up end_of_early_data processing. by David Benjamin · 8 years ago
  5. 681eb6a Adding support for receiving early data on the server. by Steven Valdez · 8 years ago
  6. 2d85062 Add Data-less Zero-RTT support. by Steven Valdez · 8 years ago
  7. c68e5b9 Establish that the default value of an out-arg for alerts is SSL_AD_DECODE_ERROR. by Adam Langley · 8 years ago
  8. 8671c47 Fold ssl3_write_bytes into ssl3_write_app_data. by David Benjamin · 8 years ago
  9. 0efa759 dispatch_alert is not an incidental write. by David Benjamin · 8 years ago
  10. f71036e Remove ssl_hash_message_t from ssl_get_message. by David Benjamin · 8 years ago
  11. 276b7e8 Move optional message type checks out of ssl_get_message. by David Benjamin · 8 years ago
  12. daf207a Don't use the buffer BIO in TLS. by David Benjamin · 8 years ago
  13. 17cf2cb Work around language and compiler bug in memcpy, etc. by David Benjamin · 8 years ago
  14. da863608 Expose SSL_max_seal_overhead. by David Benjamin · 8 years ago
  15. c6722cd Check SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER before touching wpend_buf. by David Benjamin · 8 years ago
  16. c027999 Take the version parameter out of ssl_do_msg_callback. by David Benjamin · 9 years ago
  17. 33dad1b Stop pretending to ssl_clear_bad_session. by David Benjamin · 9 years ago
  18. 163f29a Move post-handshake message handling out of read_app_data. by David Benjamin · 9 years ago
  19. 4792110 Forbid interleaving app data in a HelloRequest. by David Benjamin · 9 years ago
  20. 143e8b3 Add TLS 1.3 1-RTT. by Steven Valdez · 9 years ago
  21. 397c8e6 Forbid renegotiation in TLS 1.3. by David Benjamin · 9 years ago
  22. f0ee907 Remove the 'ssl_' prefix on most SSL_PROTOCOL_METHOD hooks. by David Benjamin · 9 years ago
  23. 585320c Don't call read_bytes in read_change_cipher_spec. by David Benjamin · 9 years ago
  24. 4aa4081 Don't use ssl3_read_bytes in ssl3_read_close_notify. by David Benjamin · 9 years ago
  25. a7810c1 Make tls_open_record always in-place. by David Benjamin · 9 years ago
  26. 728f354 Push alert handling down into the record functions. by David Benjamin · 9 years ago
  27. 4e9cc71 Add helper functions for info_callback and msg_callback. by David Benjamin · 9 years ago
  28. 4bea850 Lift an impossible check to an assert. by David Benjamin · 9 years ago
  29. 1cb405d Revert "Forbid calling SSL_read, SSL_peek, and SSL_do_handshake post-shutdown." by Adam Langley · 9 years ago
  30. 54092ff Remove dead checks. by David Benjamin · 9 years ago
  31. c7eae5a Forbid calling SSL_read, SSL_peek, and SSL_do_handshake post-shutdown. by David Benjamin · 9 years ago
  32. ea65e10 Condition the read_close_notify check on type, not shutdown state. by David Benjamin · 9 years ago
  33. fa214e4 Tidy up shutdown state. by David Benjamin · 9 years ago
  34. 8f73135 Consolidate SSL_RECEIVED_SHUTDOWN checks. by David Benjamin · 9 years ago
  35. 4c5ddb8 Set rwstate consistently. by David Benjamin · 9 years ago
  36. c6972eb Remove the no_renegotiation special case. by David Benjamin · 9 years ago
  37. 0d3a8c6 Don't allow alert records with multiple alerts. by David Benjamin · 9 years ago
  38. c79845c Move implicit handshake driving out of read_bytes. by David Benjamin · 9 years ago
  39. d7ac143 Lift the handshake driving in write_bytes up to SSL_write. by David Benjamin · 9 years ago
  40. 282511d Consolidate shutdown state. by David Benjamin · 9 years ago
  41. 51545ce Remove a number of unnecessary stdio.h includes. by David Benjamin · 9 years ago
  42. a857159 Clean up some silly variable names. by David Benjamin · 9 years ago
  43. a565d29 Remove alert mapping machinery. by David Benjamin · 9 years ago
  44. 79978df Move aead_{read,write}_ctx and next_proto_negotiated into ssl->s3. by David Benjamin · 9 years ago
  45. 57997da Simplify the ChangeCipherSpec logic. by David Benjamin · 9 years ago
  46. 0623bce Fill in ssl->session->cipher when resumption is resolved. by David Benjamin · 9 years ago
  47. 0d56f88 Switch s to ssl everywhere. by David Benjamin · 9 years ago
  48. 7fc0100 Slightly simplify SSL3_RECORD. by David Benjamin · 9 years ago
  49. a41280d Pull ChangeCipherSpec into the handshake state machine. by David Benjamin · 9 years ago
  50. 8fd5c23 Simplify fragmented HelloRequest state. by David Benjamin · 9 years ago
  51. 27a0d08 Add ssl_renegotiate_ignore. by Adam Langley · 9 years ago
  52. 2e0901b Don't use ssl3_write_pending in DTLS. by David Benjamin · 9 years ago
  53. 8217024 Document the info callback. by David Benjamin · 9 years ago
  54. 1d5ef3b Add SSL_set_renegotiate_mode. by David Benjamin · 9 years ago
  55. 324dce4 Unbreak SSL_total_renegotiations. by David Benjamin · 9 years ago
  56. 9e4e01e Align the SSL stack on #include style. by David Benjamin · 10 years ago
  57. ee0b02a Don't confuse TLS bidirectional shutdown on record type zero. by David Benjamin · 10 years ago
  58. aa9361b Fix discarding records in bidirectional shutdown. by David Benjamin · 10 years ago
  59. 4cf369b Reject empty records of unexpected type. by David Benjamin · 10 years ago
  60. b8d28cf Factor out the buffering and low-level record code. by David Benjamin · 10 years ago
  61. 3570d73 Remove the func parameter to OPENSSL_PUT_ERROR. by David Benjamin · 10 years ago
  62. 24f346d Limit the number of warning alerts silently consumed. by David Benjamin · 10 years ago
  63. a8ebe22 Add tests for empty record limit and make it work in the async case. by David Benjamin · 10 years ago
  64. a602277 Split ssl_read_bytes hook into app_data and close_notify hooks. by David Benjamin · 10 years ago
  65. c933a47 Switch the ssl_write_bytes hook to ssl_write_app_data. by David Benjamin · 10 years ago
  66. bd15a8e Fix DTLS handling of multiple records in a packet. by David Benjamin · 10 years ago
  67. cd90f3a Remove renegotiation deferral logic. by David Benjamin · 10 years ago
  68. 44d3eed Forbid caller-initiated renegotiations and all renego as a servers. by David Benjamin · 10 years ago
  69. 9a41d1b Deprecate SSL_*_read_ahead and enforce DTLS packet boundaries. by David Benjamin · 10 years ago
  70. 31a0779 Factor SSL_AEAD_CTX into a dedicated type. by David Benjamin · 10 years ago
  71. 4b27d9f Never resume sessions on renegotiations. by David Benjamin · 10 years ago
  72. 897e5e0 Default renegotiations to off. by David Benjamin · 10 years ago
  73. 6a08da2 Remove redundant setup buffer calls. by David Benjamin · 10 years ago
  74. b1f5bca Remove max parameter to ssl3_read_n. by David Benjamin · 10 years ago
  75. 9417b76 Remove DTLS special-cases in buffer releasing. by David Benjamin · 10 years ago
  76. aebefed Always enable SSL_MODE_RELEASE_BUFFERS. by David Benjamin · 10 years ago
  77. b16346b Add SSL_set_reject_peer_renegotiations. by David Benjamin · 10 years ago
  78. f0ae170 Include-what-you-use ssl/internal.h. by David Benjamin · 10 years ago
  79. 2ee94aa Rename ssl_locl.h to internal.h by David Benjamin · 10 years ago
  80. ef4962f Shush warning in alignment code. by David Benjamin · 10 years ago
  81. 883e49f Remove dead code in do_dtls1_write and document another bug. by David Benjamin · 10 years ago
  82. bc746e3 Don't switch s->version on record-layer version mismatch. by David Benjamin · 10 years ago
  83. 4a3f073 Tidy record length check. by David Benjamin · 10 years ago
  84. 9faafda Clean up do_ssl3_write fragment handling. by David Benjamin · 10 years ago
  85. a58c578 Simplify the pointer management around do_ssl3_write. by David Benjamin · 10 years ago
  86. dc3da93 Process alerts between ChangeCipherSpec and Finished. by David Benjamin · 10 years ago
  87. c4482d6 Switch an assert back to a check. by Adam Langley · 10 years ago
  88. 86058a2 Tidy up the alert-parsing code. by David Benjamin · 10 years ago
  89. ed7c475 Rename cutthrough to False Start. by David Benjamin · 10 years ago
  90. ccf74f8 Revise SSL_cutthrough_complete and SSL_in_init. by David Benjamin · 10 years ago
  91. 931ab34 Fix handshake check when False Start is used with implicit read. by David Benjamin · 10 years ago
  92. e0e7d0d Initialize the record buffers after the handshake check. by David Benjamin · 10 years ago
  93. e820df9 Forbid interleaving between application data and handshake protocols. by David Benjamin · 10 years ago
  94. ddb9f15 Reject all invalid records. by David Benjamin · 10 years ago
  95. 1e52eca Normalize tls1_enc return values. by David Benjamin · 10 years ago
  96. b8a56f1 Remove dead code from EVP_CIPHER codepaths. by David Benjamin · 10 years ago
  97. fcf2583 Reformat the rest of ssl/. by Adam Langley · 10 years ago
  98. a6d8101 Consistently use RAND_bytes and check for failure. by David Benjamin · 10 years ago
  99. 1f48fba Use have_version in clamping TLS record-layer version to 1.0. by David Benjamin · 10 years ago
  100. e99e912 Pull SSL3_ENC_METHOD out of SSL_METHOD. by David Benjamin · 10 years ago