Sign in
boringssl
/
boringssl
/
0b3625bcfda25b546ca29b26218814855c588b63
/
ssl
0b3625b
Add support for TLS 1.3 PSK resumption in Go.
by Nick Harper
· 9 years ago
afc64de
Add tests to ensure our ClientHello does not change.
by David Benjamin
· 9 years ago
3ce4389
Move some client/server special-cases out of tls13_process_certificate.
by David Benjamin
· 9 years ago
4501bd5
Align with OpenSSL on SSL_set_bio behavior.
by David Benjamin
· 9 years ago
d4aae0f
Minor typo fixes.
by Adam Langley
· 9 years ago
4890165
Empty signature algorithms in TLS 1.3 CertificateRequest is illegal.
by David Benjamin
· 9 years ago
0c40a96
Send unsupported_extension on unexpected ServerHello extensions.
by David Benjamin
· 9 years ago
636ff1c
Convert rsa_1024_key.pem to a PKCS#8 PEM blob.
by David Benjamin
· 9 years ago
9498e74
Don't have the default value of |verify_result| be X509_V_OK.
by Adam Langley
· 9 years ago
0d1b096
Fix mixed comment markers.
by David Benjamin
· 9 years ago
1dc53d2
Adding handling for KeyUpdate post-handshake message.
by Steven Valdez
· 9 years ago
8e1c7be
Adding Post-Handshake message handling.
by Steven Valdez
· 9 years ago
87eab49
Splitting SSL session state.
by Steven Valdez
· 9 years ago
163f29a
Move post-handshake message handling out of read_app_data.
by David Benjamin
· 9 years ago
e97fb48
Test that V2ClientHello must be the first record.
by David Benjamin
· 9 years ago
173bf93
Accept the special token 'UNTRANSLATED_ERROR' instead of the expected error code when -loose-errors argument is used. Usable for non-bssl shims
by EKR
· 9 years ago
4edca0b
Add BN_rand_range_ex and use internally.
by Brian Smith
· 9 years ago
4792110
Forbid interleaving app data in a HelloRequest.
by David Benjamin
· 9 years ago
17e1292
Make runner's -test parameter take glob patterns.
by David Benjamin
· 9 years ago
4497e58
Switch finish_handshake to release_current_message.
by David Benjamin
· 9 years ago
02edcd0
Reject stray post-Finished messages in DTLS.
by David Benjamin
· 9 years ago
9fd9580
Remove ssl->s3->message_complete in favor of ssl->init_msg.
by David Benjamin
· 9 years ago
a950948
Use SSL3_HM_HEADER_LENGTH a bit more.
by David Benjamin
· 9 years ago
481b9d2
Remove begin_handshake and allocate init_buf lazily.
by David Benjamin
· 9 years ago
7baf681
Convert all of our test private keys to PKCS#8 PEM blobs.
by David Benjamin
· 9 years ago
4905454
Clear init_msg/init_num whenever we clear the backing store.
by David Benjamin
· 9 years ago
bd4679d
Tidy up ssl3_get_message slightly.
by David Benjamin
· 9 years ago
21c0028
Implement KeyUpdate in Go.
by David Benjamin
· 9 years ago
d5a4ecb
Support accepting TLS 1.3 tickets on the Go client.
by David Benjamin
· 9 years ago
5810488
Add support for sending TLS 1.3 tickets in Go.
by David Benjamin
· 9 years ago
4528e2b
Take DHE ciphers out of 1.3 in Go.
by David Benjamin
· 9 years ago
842ae6c
Support unimplemented tests in test runner.
by EKR
· 9 years ago
1d4f4c0
Add SSL_send_fatal_alert.
by David Benjamin
· 9 years ago
12d2c48
Add a packed renegotiation test.
by David Benjamin
· 9 years ago
613fe3b
Call expect_flight and received_flight in the 1.3 logic.
by David Benjamin
· 9 years ago
a68c118
Make SSL_get_extms_support a little friendlier.
by David Benjamin
· 9 years ago
5e7e7cc
Add SSL_set_fallback_version.
by David Benjamin
· 9 years ago
d7573dc
Tweak ssl_early_callback_init.
by David Benjamin
· 9 years ago
5440fe0
Adding HelloRetryRequest.
by Steven Valdez
· 9 years ago
4d90c10
Send extension indicating the TLS 1.3 draft version in Go.
by Nick Harper
· 9 years ago
13f1ebe
Factor out the client_cert_cb code.
by David Benjamin
· 9 years ago
14a077c
Revert "Add tests to ensure our ClientHello does not change."
by David Benjamin
· 9 years ago
69f40df
Add tests to ensure our ClientHello does not change.
by David Benjamin
· 9 years ago
dcfbc67
Implement HelloRetryRequest in Go.
by Nick Harper
· 9 years ago
3a28755
Fix sending draft_version.
by Steven Valdez
· 9 years ago
e776cc2
Implement SSLKEYLOGFILE support for TLS 1.3.
by David Benjamin
· 9 years ago
f2401eb
Add a ssl_hs_flush_and_read_message wait mode.
by David Benjamin
· 9 years ago
e470e66
Test if the ServerHello includes an unknown cipher suite.
by David Benjamin
· 9 years ago
b62d287
Add TLS 1.3 versions of the -Enforced versions.
by David Benjamin
· 9 years ago
8d315d7
Remove enableTLS13Handshake.
by David Benjamin
· 9 years ago
4f92157
Add a TLS 1.3 version of UnsupportedCurve.
by David Benjamin
· 9 years ago
942f4ed
Implement OCSP stapling in TLS 1.3.
by David Benjamin
· 9 years ago
143e8b3
Add TLS 1.3 1-RTT.
by Steven Valdez
· 9 years ago
4ee027f
Allow server supported_curves in TLS 1.3 in Go.
by David Benjamin
· 9 years ago
eeef635
Remove dead code.
by David Benjamin
· 9 years ago
0b8d5da
Add much more aggressive WrongMessageType tests.
by David Benjamin
· 9 years ago
7964b18
Add machinery for testing TLS 1.3 cipher change synchronization.
by David Benjamin
· 9 years ago
6167281
Check for buffered handshake messages on cipher change in DTLS.
by David Benjamin
· 9 years ago
cea0ab4
Reject 1.3 ServerHellos with the RI extension in Go.
by David Benjamin
· 9 years ago
9ec1c75
Add TLS 1.3 version of EmptyCertificateList.
by David Benjamin
· 9 years ago
97d17d9
Run extensions tests at all versions.
by David Benjamin
· 9 years ago
46f94bd
Enforce in Go that all ServerHello extensions are known.
by David Benjamin
· 9 years ago
d3440b4
Give SSL_PRIVATE_KEY_METHOD a message-based API.
by David Benjamin
· 9 years ago
0c0b7e1
Widen SSL_PRIVATE_KEY_METHOD types to include the curve name.
by David Benjamin
· 9 years ago
ca3d545
Add SSL_set_signing_algorithm_prefs.
by David Benjamin
· 9 years ago
0ee2e11
Fixing TLS 1.3 Go Handshake Bugs.
by Steven Valdez
· 9 years ago
bf5aa84
Moving ssl_check_leaf_certificate to ssl_cert.
by Steven Valdez
· 9 years ago
2aad406
Switch application traffic keys at the right time in Go TLS 1.3.
by David Benjamin
· 9 years ago
49ec9bb
Fix ssl3_get_cert_verify key type checks.
by David Benjamin
· 9 years ago
5c900c8
Factor out certificate list parsing.
by David Benjamin
· 9 years ago
e0332e8
Factor out CA list parsing.
by David Benjamin
· 9 years ago
5208fd4
Generalize invalid signature tests and run at all versions.
by David Benjamin
· 9 years ago
32a66d5
Tidy up a few certificate-related utility functions.
by David Benjamin
· 9 years ago
add5e52
Test SSL_get_peer_certificate and SSL_get_peer_cert_chain behavior.
by David Benjamin
· 9 years ago
25490f2
Add a unit test for SSL_CTX_set_retain_only_sha256_of_client_certs.
by David Benjamin
· 9 years ago
f74ec79
Fix Go TLS 1.3 sigalg handling.
by David Benjamin
· 9 years ago
bbfff7c
Rename all the signature algorithm tests.
by David Benjamin
· 9 years ago
8ac3571
Use SSL_get_extms_support in bssl_shim.
by David Benjamin
· 9 years ago
e907765
Enforce that EMS is not advertised in TLS 1.3.
by David Benjamin
· 9 years ago
6e6abe1
Temporarily skip resume tests in TLS 1.3.
by David Benjamin
· 9 years ago
2f8935d
Test NULL client CA lists.
by David Benjamin
· 9 years ago
1115330
Always include the CA list in CertificateRequest.
by David Benjamin
· 9 years ago
97a0a08
Implement exporters for TLS 1.3 in Go.
by David Benjamin
· 9 years ago
c87ebde
Fix up TLS 1.3 PSK placeholder logic in the Go code.
by David Benjamin
· 9 years ago
c78aa4a
Don't crash on EnableAllCiphers in deriveTrafficAEAD.
by David Benjamin
· 9 years ago
9deb117
Temporarily skip resumption in 1.3 cipher suite tests.
by David Benjamin
· 9 years ago
1edae6b
Make WrongCertificateMessageType work in both 1.3 and 1.2.
by David Benjamin
· 9 years ago
6f8f4de
Set m.raw in encryptedExtensionsMsg.
by David Benjamin
· 9 years ago
54c217c
Forbid PSK ciphers in TLS 1.3 for now.
by David Benjamin
· 9 years ago
7944a9f
Account for key size when selecting RSA-PSS.
by David Benjamin
· 9 years ago
8d343b4
Implement client certificates for TLS 1.3 in Go.
by David Benjamin
· 9 years ago
version_for_cocoapods_5.0
615119a
Add OCSP stapling and SCT list support to 1.3 servers in Go.
by David Benjamin
· 9 years ago
728eed8
Implement basic TLS 1.3 server handshake in Go.
by Nick Harper
· 9 years ago
1f61f0d
Implement TLS 1.3's downgrade signal.
by David Benjamin
· 9 years ago
0a8deb2
Remove ourSigAlgs parameter to selectSignatureAlgorithm.
by David Benjamin
· 9 years ago
29bb140
Move isSupportedSignatureAlgorithm calls to verifyMessage in Go.
by David Benjamin
· 9 years ago
7a41d37
Configure verify/sign signature algorithms in Go separately.
by David Benjamin
· 9 years ago
eff1e8d
Adding RSA-PSS signature algorithms.
by Steven Valdez
· 9 years ago
fd5c45f
Add support for RSA-PSS to the TLS 1.3 Go code.
by David Benjamin
· 9 years ago
1fb125c
Enforce ECDSA curve matching in TLS 1.3.
by David Benjamin
· 9 years ago
Next »