1. de254b4 Enforce max_early_data_size on the server. by Alessandro Ghedini · 8 years ago
  2. 6952211 Support Ed25519 in TLS. by David Benjamin · 8 years ago
  3. 67bb45f Support enabling early data on SSL by Alessandro Ghedini · 8 years ago
  4. 681eb6a Adding support for receiving early data on the server. by Steven Valdez · 8 years ago
  5. 2a07072 Prevent Channel ID and Custom Extensions on 0-RTT. by Steven Valdez · 8 years ago
  6. 794cc59 Send half-RTT tickets when negotiating 0-RTT. by David Benjamin · 8 years ago
  7. 3cb1246 Remove session_tickets_sent. by David Benjamin · 8 years ago
  8. 2d85062 Add Data-less Zero-RTT support. by Steven Valdez · 8 years ago
  9. 707af29 Support asynchronous ticket decryption with TLS 1.3. by David Benjamin · 8 years ago
  10. be49706 Rename initial_ctx to session_ctx. by David Benjamin · 8 years ago
  11. 35ac5b7 Export server-side ticket_age skew. by David Benjamin · 8 years ago
  12. 924a352 Remove experimental TLS 1.3 short record header extension. by Steven Valdez · 8 years ago
  13. 45738dd Move new_cipher and new_session to SSL_HANDSHAKE. by David Benjamin · 8 years ago
  14. 27a9e6a Adding ALPN to session. by Steven Valdez · 8 years ago
  15. 46db7af Remove |X509| things from SSL_SESSION. by Adam Langley · 8 years ago
  16. 908ac19 Moving transcript and PRF functions to SSL_TRANSCRIPT. by Steven Valdez · 8 years ago
  17. c68e5b9 Establish that the default value of an out-arg for alerts is SSL_AD_DECODE_ERROR. by Adam Langley · 8 years ago
  18. 33fe4a0 Remove support for setting per-connection default session timeout by Alessandro Ghedini · 8 years ago
  19. 2f82a0e Don't stash tlsext_hostname in ssl_get_new_session. by Steven Valdez · 8 years ago
  20. daa0539 Remove an unnecessary TLS 1.3 ClientHello state. by David Benjamin · 8 years ago
  21. 17b3083 Use a separate timeout scheme for TLS 1.3. by David Benjamin · 8 years ago
  22. f71036e Remove ssl_hash_message_t from ssl_get_message. by David Benjamin · 8 years ago
  23. 276b7e8 Move optional message type checks out of ssl_get_message. by David Benjamin · 8 years ago
  24. 0f24bed Rename tls13_prepare_* to tls13_add_*. by David Benjamin · 8 years ago
  25. 81b7bc3 Trim unnecessary TLS 1.3 states. by David Benjamin · 8 years ago
  26. 25ac251 Remove write_message from TLS 1.3 handshakes. by David Benjamin · 8 years ago
  27. daf207a Don't use the buffer BIO in TLS. by David Benjamin · 8 years ago
  28. 08b65f4 Enabling 0-RTT on new Session Tickets. by Steven Valdez · 8 years ago
  29. 650aa1c Clean up certificate auto-chaining. by David Benjamin · 8 years ago
  30. 6f600d6 Add experimental TLS 1.3 short record header extension. by David Benjamin · 8 years ago
  31. 17cf2cb Work around language and compiler bug in memcpy, etc. by David Benjamin · 8 years ago
  32. 4cb8494 Splitting handshake traffic derivation from key change. by Steven Valdez · 8 years ago
  33. 0c29425 Don't use |X509_get_pubkey| in TLS 1.3 code either. by Adam Langley · 8 years ago
  34. 364f7a6 Push the difference in chain semantics to the edge. by Adam Langley · 8 years ago
  35. 3977f30 Rename hs->state to hs->tls13_state. by David Benjamin · 8 years ago
  36. c0fc7a1 Revert "Add |SSL_CTX_set0_buffer_pool|." and "Hold certificates in an SSL_SESSION as CRYPTO_BUFFERSs as well." by Adam Langley · 8 years ago
  37. e850909 Hold certificates in an SSL_SESSION as CRYPTO_BUFFERSs as well. by Adam Langley · 8 years ago
  38. 731058e Typedef ssl_early_callback_ctx to SSL_CLIENT_HELLO. by David Benjamin · 8 years ago
  39. f3c8f8d Pass explicit parameters elsewhere. by David Benjamin · 8 years ago
  40. 8baf963 Pass explicit hs parameters to ssl_ext_*. by David Benjamin · 8 years ago
  41. 6e4fc33 Pass explicit hs parameters to tls13_*.c. by David Benjamin · 8 years ago
  42. 8c880a2 Pass explicit hs parameters to kExtensions callbacks. by David Benjamin · 8 years ago
  43. c3c8882 Match state machine functions with new calling convention. by David Benjamin · 8 years ago
  44. 8f820b4 Clean up resumption secret "derivation" step. by David Benjamin · 8 years ago
  45. f01f42a Negotiate ciphers before resumption. by David Benjamin · 8 years ago
  46. 34202b9 Call cert_cb before resolving resumption. by David Benjamin · 8 years ago
  47. 4eb95cc Parse ClientHello extensions before deciding on resumption. by David Benjamin · 8 years ago
  48. 6929f27 Fix return values for TLS 1.3 state machine code. by David Benjamin · 8 years ago
  49. 75f9914 Align TLS 1.2 and 1.3 server session validity checks. by David Benjamin · 8 years ago
  50. a833c35 Update to TLS 1.3 draft 18. by Steven Valdez · 8 years ago
  51. ced9479 Replace hash_current_message with get_current_message. by David Benjamin · 8 years ago
  52. 5eead16 Splitting finish_message to finish_message/queue_message. by Steven Valdez · 8 years ago
  53. c5ac2b6 Rename X.509 members in |SSL_SESSION| and |CERT|. by Adam Langley · 8 years ago
  54. 123db57 Measure session->timeout from ticket issuance. by David Benjamin · 8 years ago
  55. 0a011fc Flush TLS 1.3 NewSessionTicket messages together. by David Benjamin · 8 years ago
  56. abbbee1 Detach TLS 1.3 cipher configuration from the cipher language. by David Benjamin · 8 years ago
  57. 9ef31f0 Negotiate the cipher suite before ALPN. by David Benjamin · 8 years ago
  58. b6b6ff3 Verifying resumption cipher validity with current configuration. by Steven Valdez · 8 years ago
  59. 079b394 Always enable GREASE for TLS 1.3 NewSessionTicket. by David Benjamin · 8 years ago
  60. 60a85cb Implement ChannelID for TLS 1.3. by Nick Harper · 9 years ago
  61. 3ef7697 Don't accept {sha1, ecdsa} and {sha512, ecdsa}. by David Benjamin · 8 years ago
  62. 3baa6e1 Implement draft 16 HelloRetryRequest and cookie. by David Benjamin · 8 years ago
  63. c4aa727 Updating Key Schedule and KeyUpdate to draft 16. by Steven Valdez · 8 years ago
  64. a048678 Move some fields from tmp to hs. by David Benjamin · 8 years ago
  65. 1a5e8ec Apply GREASE to TLS 1.3 tickets. by David Benjamin · 8 years ago
  66. 803c77a Update crypto negotation to draft 15. by Steven Valdez · 9 years ago
  67. 5b98608 Updating NewSessionTicket message and updating PSK to Draft 15. by Steven Valdez · 9 years ago
  68. 7e1f984 Fix some bugs in TLS 1.3 server key_share code. by David Benjamin · 9 years ago
  69. 2c66e07 Don't send the access_denied alert innappropriately. by David Benjamin · 9 years ago
  70. 3d458dc Revert of Determining certificate_auth and key_exchange based on SSL. by David Benjamin · 9 years ago
  71. bd09ecc Determining certificate_auth and key_exchange based on SSL. by Steven Valdez · 9 years ago
  72. 0fc37ef Fix a number of sigalg scope issues. by David Benjamin · 9 years ago
  73. 7aa31d6 Remove ssl->verify_result. by David Benjamin · 9 years ago
  74. dd634eb s/nginx/NGINX/ by David Benjamin · 9 years ago
  75. 3764683 Have |SSL_get_verify_result| return |X509_V_OK| when no client certificate is given. by Adam Langley · 9 years ago
  76. 4aa154e Adding code to send session as PSK Identity. by Steven Valdez · 9 years ago
  77. 25fe85b Insert a state before cert_cb. by David Benjamin · 9 years ago
  78. fddbadc Pass a ClientHello into ssl3_choose_cipher. by David Benjamin · 9 years ago
  79. 1deb41b Move SCSV handling out of cipher list parsing. by David Benjamin · 9 years ago
  80. e14ff06 Only have one ClientHello parser, not three. by David Benjamin · 9 years ago
  81. baafa4a Undo rename of tlsext_tick_lifetime_hint. by Martin Kreichgauer · 9 years ago
  82. 4087df9 Move more side-specific code out of tls13_process_certificate. by David Benjamin · 9 years ago
  83. cec7344 Add a CBS version of SSL_early_callback_ctx_extension_get. by David Benjamin · 9 years ago
  84. 1e6f11a Adding NewSessionTicket. by Steven Valdez · 9 years ago
  85. 7259f2f Prefix ext_key_share methods. by Steven Valdez · 9 years ago
  86. 3ce4389 Move some client/server special-cases out of tls13_process_certificate. by David Benjamin · 9 years ago
  87. 87eab49 Splitting SSL session state. by Steven Valdez · 9 years ago
  88. 613fe3b Call expect_flight and received_flight in the 1.3 logic. by David Benjamin · 9 years ago
  89. d7573dc Tweak ssl_early_callback_init. by David Benjamin · 9 years ago
  90. 5440fe0 Adding HelloRetryRequest. by Steven Valdez · 9 years ago
  91. f2401eb Add a ssl_hs_flush_and_read_message wait mode. by David Benjamin · 9 years ago
  92. 143e8b3 Add TLS 1.3 1-RTT. by Steven Valdez · 9 years ago