- 91a3f26 Add an SSL_CREDENTIAL API for ECDSA/RSA and delegated credentials by David Benjamin · 1 year, 2 months ago
- 88a537f Fold ssl_add_cert_chain into its caller by David Benjamin · 1 year, 1 month ago
- c06c4d5 Remove redundant piece of DC state by David Benjamin · 1 year, 1 month ago
- 50e7ea5 LSC: Apply clang-tidy's modernize-use-bool-literals to boringssl by Anton Bikineev · 3 years, 2 months ago
- 18b6836 Update to draft-ietf-tls-esni-13. by David Benjamin · 3 years, 9 months ago
- a75027b Make ssl_parse_extensions a little easier to use. by David Benjamin · 3 years, 8 months ago
- ba423c9 Implement ClientHelloOuter handshakes. by David Benjamin · 3 years, 10 months ago
- fb4d257 Shift some complexity out of ssl_add_clienthello_tlsext. by David Benjamin · 3 years, 10 months ago
- 5acf9f4 Replace hs->needs_psk_binder with an output parameter. by David Benjamin · 3 years, 10 months ago
- 33e8c78 Initialize grease_seed on construction. by David Benjamin · 3 years, 10 months ago
- 3a036c7 Add SSL_ech_accepted API and ech_is_required alerts. by David Benjamin · 3 years, 10 months ago
- b587911 Remove the Channel ID callback. by David Benjamin · 3 years, 11 months ago
- 8acec00 Manage Channel ID handshake state better. by David Benjamin · 3 years, 10 months ago
- 9b2cdb7 Add SSL_can_release_private_key. by David Benjamin · 4 years ago
- b571e77 Add experimental handshake hints API. by David Benjamin · 4 years ago
- 00e434d Add ECH server (draft-ietf-tls-esni-09). by Daniel McArdle · 4 years, 1 month ago
- 9bcf307 Fix some unreachable code in the QUIC handshaker driver. by David Benjamin · 4 years ago
- c295935 Send ECH acceptance signal from backend server. by Dan McArdle · 4 years, 5 months ago
- 5351c8b Rename the master_key field in SSL_SESSION to secret. by David Benjamin · 4 years, 4 months ago
- c4ec14c Switch ssl_parse_extensions to bool and Span. by David Benjamin · 4 years, 6 months ago
- 5fa22ed Avoid relying on SSL_get_session's behavior during the handshake. by David Benjamin · 4 years, 9 months ago
- 44099d5 Tidy up transitions out of 0-RTT keys on the client. by David Benjamin · 5 years ago
- f9cc26f Require handshake flights end at record boundaries. by David Benjamin · 5 years ago
- f3c98ce Make TLS 1.3 split handshakes work with early data. by Matthew Braithwaite · 5 years ago
- ee0716f Defer early keys to QUIC clients to after certificate reverification. by David Benjamin · 5 years ago
- b11902a HelloRetryRequest getter by Kris Kwiatkowski · 6 years ago
- f492830 Fold SSL_want constants into SSL_get_error constants. by David Benjamin · 6 years ago
- e530ea3 Use spans for the various TLS 1.3 secrets. by David Benjamin · 6 years ago
- b244e3a Switch another low-level function to spans. by David Benjamin · 6 years ago
- 6477012 Add SSL_get_early_data_reason. by David Benjamin · 6 years ago
- 6c1b376 Implement server support for delegated credentials. by Christopher Patton · 7 years ago
- 3cbb029 Allow configuring QUIC method per-connection by Alessandro Ghedini · 6 years ago
- 6965d25 Work around a JDK 11 TLS 1.3 bug. by David Benjamin · 6 years ago
- c8e0f90 Add an interface for QUIC integration. by Steven Valdez · 7 years ago
- 8c7c635 Support symbol prefixes by Joshua Liebow-Feeser · 7 years ago
- 1c337e5 Option to reverify certs on resumption. by Jesse Selover · 7 years ago
- 0a3e07a Remove custom extensions support. by David Benjamin · 7 years ago
- 50596f8 Switch some easy SSL fields to UniquePtr. by David Benjamin · 7 years ago
- bfdd1a9 Give SSL_SESSION a destructor. by David Benjamin · 7 years ago
- 9bb15f5 Remove SSL 3.0 implementation. by David Benjamin · 7 years ago
- a307cb7 Preliminary support for compressed certificates. by Adam Langley · 7 years ago
- 911cc0a The legacy client OCSP callback should run without server OCSP. by David Benjamin · 7 years ago
- 103ed08 Implement legacy OCSP APIs for libssl. by David Benjamin · 7 years ago
- b7bc80a SSL_CONFIG: new struct for sheddable handshake configuration. by Matthew Braithwaite · 7 years ago
- 56986f9 Hand back ECDHE split handshakes after the first server message. by Matthew Braithwaite · 7 years ago
- 3fe8fa7 Add initial, experimental support for split handshakes. by Adam Langley · 7 years ago
- 5301c10 ssl_verify_peer_cert: implement |SSL_VERIFY_NONE| as advertised. by Matthew Braithwaite · 7 years ago
- a7bc944 Don't use the client_random entropy for GREASE. by David Benjamin · 7 years ago
- 964b237 Implement PR 1091 (TLS 1.3 draft '22'). by Steven Valdez · 7 years ago
- 32ce0ac Move init_buf and rwstate into SSL3_STATE. by David Benjamin · 7 years ago
- 8e7bbba Use more scopers. by David Benjamin · 7 years ago
- ea712e3 Make SSL3_BUFFER a proper C++ class. by David Benjamin · 7 years ago
- f6632da Make all read errors idempotent. by David Benjamin · 7 years ago
- d9229f9 Lift BIO above SSL_PROTOCOL_METHOD. by David Benjamin · 7 years ago
- 97250f4 Switch a bunch of things from int to bool. by David Benjamin · 7 years ago
- 75a1f23 Have a bit more fun with Span. by David Benjamin · 7 years ago
- 00f48c8 Rename and move a few more ssl3_ functions around. by David Benjamin · 7 years ago
- d1e3ce1 Rename ssl3_send_alert and ssl3_protocol_version. by David Benjamin · 7 years ago
- a84b6f2 Fix comment. by David Benjamin · 7 years ago
- e52f4c4 Replay the entire error queue on ssl_hs_error. by David Benjamin · 7 years ago
- b949355 Add bssl::Span<T>::subspan and use it. by David Benjamin · 8 years ago
- b1cf48e Store the peer_sigalgs as an Array. by David Benjamin · 8 years ago
- 879efc3 Switch more things to Array. by David Benjamin · 8 years ago
- 08f5c76 Convert more things to Array. by David Benjamin · 8 years ago
- cf0ce67 Use Span and Array for the curve list. by David Benjamin · 8 years ago
- 499742c Introduce bssl::Array<T> and use it in SSLKeyShare. by David Benjamin · 8 years ago
- b7e5b08 Remove some redundant OPENSSL_cleanses. by David Benjamin · 8 years ago
- 6dc892f Remove redundant calls to |OPENSSL_cleanse| and |OPENSSL_realloc_clean|. by Martin Kreichgauer · 8 years ago
- 74795b3 More miscellaneous bools. by David Benjamin · 8 years ago
- fd45ee7 Replace bits in SSL_HANDSHAKE with bool. by David Benjamin · 8 years ago
- d816874 Set SSL_in_init to false before new_session_cb. by Steven Valdez · 8 years ago
- 6abaa31 Remove unnecessary parameter. by David Benjamin · 8 years ago
- c11ea942 Convert comments in ssl. by David Benjamin · 8 years ago
- 4d71a9a Migrate TLS 1.2 and below state machines to the new style. by Steven Valdez · 8 years ago
