- 91a3f26 Add an SSL_CREDENTIAL API for ECDSA/RSA and delegated credentials by David Benjamin · 1 year, 2 months ago
- a614d46 Add SSL_was_key_usage_invalid. by David Benjamin · 2 years, 4 months ago
- b95c7e5 Fix up book-keeping between the write buffer and pending writes. by David Benjamin · 2 years, 8 months ago
- ba423c9 Implement ClientHelloOuter handshakes. by David Benjamin · 3 years, 10 months ago
- 3a036c7 Add SSL_ech_accepted API and ech_is_required alerts. by David Benjamin · 3 years, 10 months ago
- d89ec68 Remove draft tokbind implementation. by David Benjamin · 3 years, 10 months ago
- 0a6bfa3 Always check the TLS 1.3 downgrade signal. by David Benjamin · 4 years, 4 months ago
- 82a4b22 Rename TLS-specific functions to tls_foo from ssl3_foo. by David Benjamin · 5 years ago
- e0d95ad Remove post-quantum experiment signal extension. by David Benjamin · 5 years ago
- b11902a HelloRetryRequest getter by Kris Kwiatkowski · 6 years ago
- 3ba9586 Rename a number of BUF_* functions to OPENSSL_*. by David Benjamin · 5 years ago
- 0e7dbd5 Add an option for explicit renegotiations. by David Benjamin · 6 years ago
- ee4888c Make alert_dispatch into a bool. by David Benjamin · 6 years ago
- a86c698 Add post-quantum experiment signal extension. by Adam Langley · 6 years ago
- 629f321 Add an API to record use of delegated credential by Watson Ladd · 6 years ago
- 8c7c635 Support symbol prefixes by Joshua Liebow-Feeser · 7 years ago
- f1af129 Implement TLS 1.3 anti-downgrade signal. by Steven Valdez · 7 years ago
- 4685376 Remove other unnecessary tlsext_ prefixes. by David Benjamin · 7 years ago
- b7bc80a SSL_CONFIG: new struct for sheddable handshake configuration. by Matthew Braithwaite · 7 years ago
- 48b276d Give ssl_cipher_preference_list_st a destructor. by David Benjamin · 7 years ago
- 9f0e7cb Move TB state to ssl->s3. by David Benjamin · 7 years ago
- 6df6540 Add a draft TLS 1.3 anti-downgrade signal. by David Benjamin · 7 years ago
- 02e6256 Move early_data_accepted to ssl->s3. by David Benjamin · 7 years ago
- 8e7bbba Use more scopers. by David Benjamin · 7 years ago
- 9417257 Give SSL3_STATE a constructor and destructor. by David Benjamin · 7 years ago
- ea712e3 Make SSL3_BUFFER a proper C++ class. by David Benjamin · 7 years ago
- 97250f4 Switch a bunch of things from int to bool. by David Benjamin · 7 years ago
- 31aad2d Make low-level record errors idempotent. by David Benjamin · 7 years ago
- c7d4d21 Add experiment without client CCS and fix session ID bug. by Steven Valdez · 8 years ago
- a861460 Make SNI per-connection, not per-session. by David Benjamin · 8 years ago
- c11ea942 Convert comments in ssl. by David Benjamin · 8 years ago
- e39ac8f Switch BORINGSSL_INTERNAL_CXX_TYPES in favor of subclassing games. by David Benjamin · 8 years ago
- cfc11c2 C++-ify SSL_AEAD_CTX. by David Benjamin · 8 years ago
- 86e95b8 Move libssl's internals into the bssl namespace. by David Benjamin · 8 years ago
- e8703a3 Switch a number of files to C++. by David Benjamin · 8 years ago[Renamed (98%) from ssl/s3_lib.c]
- 7e06de5 Really remove DHE ciphersuites from TLS. by Matthew Braithwaite · 8 years ago
- 45738dd Move new_cipher and new_session to SSL_HANDSHAKE. by David Benjamin · 8 years ago
- 908ac19 Moving transcript and PRF functions to SSL_TRANSCRIPT. by Steven Valdez · 8 years ago
- daf207a Don't use the buffer BIO in TLS. by David Benjamin · 8 years ago
- 17cf2cb Work around language and compiler bug in memcpy, etc. by David Benjamin · 8 years ago
- 65fb425 Remove version-specific cipher lists. by David Benjamin · 8 years ago
- 2644a13 Set up the SSL_HANDSHAKE object earlier. by David Benjamin · 8 years ago
- 0be6fc4 Move a few more functions into *_method.c. by David Benjamin · 8 years ago
- 2578b29 Make ssl3_choose_cipher and dependencies static. by David Benjamin · 8 years ago
- 731058e Typedef ssl_early_callback_ctx to SSL_CLIENT_HELLO. by David Benjamin · 8 years ago
- f3c8f8d Pass explicit parameters elsewhere. by David Benjamin · 8 years ago
- f01f42a Negotiate ciphers before resumption. by David Benjamin · 8 years ago
- 4e41926 Move key_block into SSL_HANDSHAKE. by David Benjamin · 8 years ago
- abbbee1 Detach TLS 1.3 cipher configuration from the cipher language. by David Benjamin · 8 years ago
- af3b3d3 Only resolve which cipher list to use once. by David Benjamin · 8 years ago
- b6b6ff3 Verifying resumption cipher validity with current configuration. by Steven Valdez · 8 years ago
- a4c8ff0 Move TLS 1.2 key exchange fields to SSL_HANDSHAKE. by David Benjamin · 8 years ago
- 43612b6 Move peer_supported_group_list to SSL_HANDSHAKE. by David Benjamin · 8 years ago
- a048678 Move some fields from tmp to hs. by David Benjamin · 8 years ago
- bac75b8 Move peer_psk_identity_hint to SSL_HANDSHAKE. by David Benjamin · 9 years ago
- 5409123 Use C99 for size_t loops. by David Benjamin · 9 years ago
- fddbadc Pass a ClientHello into ssl3_choose_cipher. by David Benjamin · 9 years ago
- 87eab49 Splitting SSL session state. by Steven Valdez · 9 years ago
- 143e8b3 Add TLS 1.3 1-RTT. by Steven Valdez · 9 years ago
- 7583643 Disconnect handshake message creation from init_buf. by David Benjamin · 9 years ago
- c42acee Stash a copy of the SKX params rather mess with init_buf. by David Benjamin · 9 years ago
- 1fd39d8 Add TLS 1.3 record layer to go implementation. by Nick Harper · 9 years ago
- 936aada Move a bunch of public APIs from s3_lib.c to ssl_lib.c. by David Benjamin · 9 years ago
- aa7734b Fold the DTLS client handshake into the TLS one. by David Benjamin · 9 years ago
- 2a08c8d Remove ssl3_do_write's 0 case. by David Benjamin · 9 years ago
- ce902a9 Generalizing curves to groups in preparation for TLS 1.3. by Steven Valdez · 9 years ago
- 9819367 Remove some easy obj.h dependencies. by David Benjamin · 9 years ago
- 78f8aab ssl->ctx cannot be NULL. by David Benjamin · 9 years ago
- f188f9d Fix typo in function name. by Piotr Sikora · 9 years ago
- 51545ce Remove a number of unnecessary stdio.h includes. by David Benjamin · 9 years ago
- e52d22d Empty SNI names are not valid by Steven Valdez · 9 years ago
- 4b9205b Align SSL_CTX_set1_tls_channel_id with SSL_set1_tls_channel_id. by David Benjamin · 9 years ago
- b83003e Don't initialize enc_method before version negotiation. by David Benjamin · 9 years ago
- a1e9cab Replace enc_flags with normalized version checks. by David Benjamin · 9 years ago
- b9e4fa5 Add a helper function to normalize the current version. by David Benjamin · 9 years ago
- 23b0a65 Move some functions to file scope. by David Benjamin · 9 years ago
- 928f32a Add APIs to extract the SSL key block. by David Benjamin · 9 years ago
- baa1216 Prune finished labels from SSL3_ENC_METHOD. by David Benjamin · 9 years ago
- f8d8071 Remove a few unnecessary SSL3_ENC_METHOD hooks. by David Benjamin · 9 years ago
- 79978df Move aead_{read,write}_ctx and next_proto_negotiated into ssl->s3. by David Benjamin · 9 years ago
- 57997da Simplify the ChangeCipherSpec logic. by David Benjamin · 9 years ago
- 0d56f88 Switch s to ssl everywhere. by David Benjamin · 9 years ago
- 974c7ba Route DHE through the SSL_ECDH abstraction as well. by David Benjamin · 9 years ago
- 4298d77 Implement draft-ietf-tls-curve25519-01 in C. by David Benjamin · 9 years ago
- 5ddffbb Make SSL_(CTX_)?set_tmp_ecdh call SSL_(CTX_)?set1_curves. by David Benjamin · 9 years ago
- 758d127 Add get0 getters for EVP_PKEY. by David Benjamin · 9 years ago
- c7817d8 Add SSL_CIPHER_get_min_version and tidy up SSL_TLSV1_2 logic. by David Benjamin · 9 years ago
- 96e97b1 Convert ssl3_send_channel_id to CBB. by David Benjamin · 9 years ago
- 9e4e01e Align the SSL stack on #include style. by David Benjamin · 10 years ago
- cef7583 Add cipher suite settings for TLS ≥ 1.0. by Adam Langley · 10 years ago
- 6505567 Move peer_dh_tmp and peer_ecdh_tmp out of SESS_CERT. by David Benjamin · 10 years ago
- b8d28cf Factor out the buffering and low-level record code. by David Benjamin · 10 years ago
- 3dd9016 Remove signature algorithm configuration hooks and SSL_ctrl. by David Benjamin · 10 years ago
- fdb4cdd Remove SSL_get1_curves and promote SSL_(CTX_)?set1_curves. by David Benjamin · 10 years ago
- 45c6c3e Use the record-layer buffer for sniffing V2ClientHellos. by David Benjamin · 10 years ago
- 2b9ec70 Remove SSL_CTRL_SET_CLIENT_CERT_TYPES. by David Benjamin · 10 years ago
- d27441a Remove separate APIs for configuring chain and verify stores. by David Benjamin · 10 years ago
- 7591064 Promote SSL_get0_certificate_types to a proper function. by David Benjamin · 10 years ago
- b088331 Simplify handshake hash handling. by David Benjamin · 10 years ago
- 9550c3a Decouple the handshake buffer and digest. by David Benjamin · 10 years ago
