Sign in
boringssl
/
boringssl.git
/
f64a6eeaf0660dcd9a8828912b1b05f7512453ab
/
ssl
/
tls13_server.c
de254b4
Enforce max_early_data_size on the server.
by Alessandro Ghedini
· 8 years ago
6952211
Support Ed25519 in TLS.
by David Benjamin
· 8 years ago
67bb45f
Support enabling early data on SSL
by Alessandro Ghedini
· 8 years ago
681eb6a
Adding support for receiving early data on the server.
by Steven Valdez
· 8 years ago
2a07072
Prevent Channel ID and Custom Extensions on 0-RTT.
by Steven Valdez
· 8 years ago
794cc59
Send half-RTT tickets when negotiating 0-RTT.
by David Benjamin
· 8 years ago
3cb1246
Remove session_tickets_sent.
by David Benjamin
· 8 years ago
2d85062
Add Data-less Zero-RTT support.
by Steven Valdez
· 8 years ago
707af29
Support asynchronous ticket decryption with TLS 1.3.
by David Benjamin
· 8 years ago
be49706
Rename initial_ctx to session_ctx.
by David Benjamin
· 8 years ago
35ac5b7
Export server-side ticket_age skew.
by David Benjamin
· 8 years ago
924a352
Remove experimental TLS 1.3 short record header extension.
by Steven Valdez
· 8 years ago
45738dd
Move new_cipher and new_session to SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
27a9e6a
Adding ALPN to session.
by Steven Valdez
· 8 years ago
46db7af
Remove |X509| things from SSL_SESSION.
by Adam Langley
· 8 years ago
908ac19
Moving transcript and PRF functions to SSL_TRANSCRIPT.
by Steven Valdez
· 8 years ago
c68e5b9
Establish that the default value of an out-arg for alerts is SSL_AD_DECODE_ERROR.
by Adam Langley
· 8 years ago
33fe4a0
Remove support for setting per-connection default session timeout
by Alessandro Ghedini
· 8 years ago
2f82a0e
Don't stash tlsext_hostname in ssl_get_new_session.
by Steven Valdez
· 8 years ago
daa0539
Remove an unnecessary TLS 1.3 ClientHello state.
by David Benjamin
· 8 years ago
17b3083
Use a separate timeout scheme for TLS 1.3.
by David Benjamin
· 8 years ago
f71036e
Remove ssl_hash_message_t from ssl_get_message.
by David Benjamin
· 8 years ago
276b7e8
Move optional message type checks out of ssl_get_message.
by David Benjamin
· 8 years ago
0f24bed
Rename tls13_prepare_* to tls13_add_*.
by David Benjamin
· 8 years ago
81b7bc3
Trim unnecessary TLS 1.3 states.
by David Benjamin
· 8 years ago
25ac251
Remove write_message from TLS 1.3 handshakes.
by David Benjamin
· 8 years ago
daf207a
Don't use the buffer BIO in TLS.
by David Benjamin
· 8 years ago
08b65f4
Enabling 0-RTT on new Session Tickets.
by Steven Valdez
· 8 years ago
650aa1c
Clean up certificate auto-chaining.
by David Benjamin
· 8 years ago
6f600d6
Add experimental TLS 1.3 short record header extension.
by David Benjamin
· 8 years ago
17cf2cb
Work around language and compiler bug in memcpy, etc.
by David Benjamin
· 8 years ago
4cb8494
Splitting handshake traffic derivation from key change.
by Steven Valdez
· 8 years ago
0c29425
Don't use |X509_get_pubkey| in TLS 1.3 code either.
by Adam Langley
· 8 years ago
364f7a6
Push the difference in chain semantics to the edge.
by Adam Langley
· 8 years ago
3977f30
Rename hs->state to hs->tls13_state.
by David Benjamin
· 8 years ago
c0fc7a1
Revert "Add |SSL_CTX_set0_buffer_pool|." and "Hold certificates in an SSL_SESSION as CRYPTO_BUFFERSs as well."
by Adam Langley
· 8 years ago
e850909
Hold certificates in an SSL_SESSION as CRYPTO_BUFFERSs as well.
by Adam Langley
· 8 years ago
731058e
Typedef ssl_early_callback_ctx to SSL_CLIENT_HELLO.
by David Benjamin
· 8 years ago
f3c8f8d
Pass explicit parameters elsewhere.
by David Benjamin
· 8 years ago
8baf963
Pass explicit hs parameters to ssl_ext_*.
by David Benjamin
· 8 years ago
6e4fc33
Pass explicit hs parameters to tls13_*.c.
by David Benjamin
· 8 years ago
8c880a2
Pass explicit hs parameters to kExtensions callbacks.
by David Benjamin
· 8 years ago
c3c8882
Match state machine functions with new calling convention.
by David Benjamin
· 8 years ago
8f820b4
Clean up resumption secret "derivation" step.
by David Benjamin
· 8 years ago
f01f42a
Negotiate ciphers before resumption.
by David Benjamin
· 8 years ago
34202b9
Call cert_cb before resolving resumption.
by David Benjamin
· 8 years ago
4eb95cc
Parse ClientHello extensions before deciding on resumption.
by David Benjamin
· 8 years ago
6929f27
Fix return values for TLS 1.3 state machine code.
by David Benjamin
· 8 years ago
75f9914
Align TLS 1.2 and 1.3 server session validity checks.
by David Benjamin
· 8 years ago
a833c35
Update to TLS 1.3 draft 18.
by Steven Valdez
· 8 years ago
ced9479
Replace hash_current_message with get_current_message.
by David Benjamin
· 8 years ago
5eead16
Splitting finish_message to finish_message/queue_message.
by Steven Valdez
· 8 years ago
c5ac2b6
Rename X.509 members in |SSL_SESSION| and |CERT|.
by Adam Langley
· 8 years ago
123db57
Measure session->timeout from ticket issuance.
by David Benjamin
· 8 years ago
0a011fc
Flush TLS 1.3 NewSessionTicket messages together.
by David Benjamin
· 8 years ago
abbbee1
Detach TLS 1.3 cipher configuration from the cipher language.
by David Benjamin
· 8 years ago
9ef31f0
Negotiate the cipher suite before ALPN.
by David Benjamin
· 8 years ago
b6b6ff3
Verifying resumption cipher validity with current configuration.
by Steven Valdez
· 8 years ago
079b394
Always enable GREASE for TLS 1.3 NewSessionTicket.
by David Benjamin
· 8 years ago
60a85cb
Implement ChannelID for TLS 1.3.
by Nick Harper
· 9 years ago
3ef7697
Don't accept {sha1, ecdsa} and {sha512, ecdsa}.
by David Benjamin
· 8 years ago
3baa6e1
Implement draft 16 HelloRetryRequest and cookie.
by David Benjamin
· 8 years ago
c4aa727
Updating Key Schedule and KeyUpdate to draft 16.
by Steven Valdez
· 8 years ago
a048678
Move some fields from tmp to hs.
by David Benjamin
· 8 years ago
1a5e8ec
Apply GREASE to TLS 1.3 tickets.
by David Benjamin
· 8 years ago
803c77a
Update crypto negotation to draft 15.
by Steven Valdez
· 9 years ago
5b98608
Updating NewSessionTicket message and updating PSK to Draft 15.
by Steven Valdez
· 9 years ago
7e1f984
Fix some bugs in TLS 1.3 server key_share code.
by David Benjamin
· 9 years ago
2c66e07
Don't send the access_denied alert innappropriately.
by David Benjamin
· 9 years ago
3d458dc
Revert of Determining certificate_auth and key_exchange based on SSL.
by David Benjamin
· 9 years ago
bd09ecc
Determining certificate_auth and key_exchange based on SSL.
by Steven Valdez
· 9 years ago
0fc37ef
Fix a number of sigalg scope issues.
by David Benjamin
· 9 years ago
7aa31d6
Remove ssl->verify_result.
by David Benjamin
· 9 years ago
dd634eb
s/nginx/NGINX/
by David Benjamin
· 9 years ago
3764683
Have |SSL_get_verify_result| return |X509_V_OK| when no client certificate is given.
by Adam Langley
· 9 years ago
4aa154e
Adding code to send session as PSK Identity.
by Steven Valdez
· 9 years ago
25fe85b
Insert a state before cert_cb.
by David Benjamin
· 9 years ago
fddbadc
Pass a ClientHello into ssl3_choose_cipher.
by David Benjamin
· 9 years ago
1deb41b
Move SCSV handling out of cipher list parsing.
by David Benjamin
· 9 years ago
e14ff06
Only have one ClientHello parser, not three.
by David Benjamin
· 9 years ago
baafa4a
Undo rename of tlsext_tick_lifetime_hint.
by Martin Kreichgauer
· 9 years ago
4087df9
Move more side-specific code out of tls13_process_certificate.
by David Benjamin
· 9 years ago
cec7344
Add a CBS version of SSL_early_callback_ctx_extension_get.
by David Benjamin
· 9 years ago
1e6f11a
Adding NewSessionTicket.
by Steven Valdez
· 9 years ago
7259f2f
Prefix ext_key_share methods.
by Steven Valdez
· 9 years ago
3ce4389
Move some client/server special-cases out of tls13_process_certificate.
by David Benjamin
· 9 years ago
87eab49
Splitting SSL session state.
by Steven Valdez
· 9 years ago
613fe3b
Call expect_flight and received_flight in the 1.3 logic.
by David Benjamin
· 9 years ago
d7573dc
Tweak ssl_early_callback_init.
by David Benjamin
· 9 years ago
5440fe0
Adding HelloRetryRequest.
by Steven Valdez
· 9 years ago
f2401eb
Add a ssl_hs_flush_and_read_message wait mode.
by David Benjamin
· 9 years ago
143e8b3
Add TLS 1.3 1-RTT.
by Steven Valdez
· 9 years ago