1. 0b3625b Add support for TLS 1.3 PSK resumption in Go. by Nick Harper · 9 years ago
  2. afc64de Add tests to ensure our ClientHello does not change. by David Benjamin · 9 years ago
  3. 3ce4389 Move some client/server special-cases out of tls13_process_certificate. by David Benjamin · 9 years ago
  4. 4501bd5 Align with OpenSSL on SSL_set_bio behavior. by David Benjamin · 9 years ago
  5. d4aae0f Minor typo fixes. by Adam Langley · 9 years ago
  6. 4890165 Empty signature algorithms in TLS 1.3 CertificateRequest is illegal. by David Benjamin · 9 years ago
  7. 0c40a96 Send unsupported_extension on unexpected ServerHello extensions. by David Benjamin · 9 years ago
  8. 636ff1c Convert rsa_1024_key.pem to a PKCS#8 PEM blob. by David Benjamin · 9 years ago
  9. 9498e74 Don't have the default value of |verify_result| be X509_V_OK. by Adam Langley · 9 years ago
  10. 0d1b096 Fix mixed comment markers. by David Benjamin · 9 years ago
  11. 1dc53d2 Adding handling for KeyUpdate post-handshake message. by Steven Valdez · 9 years ago
  12. 8e1c7be Adding Post-Handshake message handling. by Steven Valdez · 9 years ago
  13. 87eab49 Splitting SSL session state. by Steven Valdez · 9 years ago
  14. 163f29a Move post-handshake message handling out of read_app_data. by David Benjamin · 9 years ago
  15. e97fb48 Test that V2ClientHello must be the first record. by David Benjamin · 9 years ago
  16. 173bf93 Accept the special token 'UNTRANSLATED_ERROR' instead of the expected error code when -loose-errors argument is used. Usable for non-bssl shims by EKR · 9 years ago
  17. 4edca0b Add BN_rand_range_ex and use internally. by Brian Smith · 9 years ago
  18. 4792110 Forbid interleaving app data in a HelloRequest. by David Benjamin · 9 years ago
  19. 17e1292 Make runner's -test parameter take glob patterns. by David Benjamin · 9 years ago
  20. 4497e58 Switch finish_handshake to release_current_message. by David Benjamin · 9 years ago
  21. 02edcd0 Reject stray post-Finished messages in DTLS. by David Benjamin · 9 years ago
  22. 9fd9580 Remove ssl->s3->message_complete in favor of ssl->init_msg. by David Benjamin · 9 years ago
  23. a950948 Use SSL3_HM_HEADER_LENGTH a bit more. by David Benjamin · 9 years ago
  24. 481b9d2 Remove begin_handshake and allocate init_buf lazily. by David Benjamin · 9 years ago
  25. 7baf681 Convert all of our test private keys to PKCS#8 PEM blobs. by David Benjamin · 9 years ago
  26. 4905454 Clear init_msg/init_num whenever we clear the backing store. by David Benjamin · 9 years ago
  27. bd4679d Tidy up ssl3_get_message slightly. by David Benjamin · 9 years ago
  28. 21c0028 Implement KeyUpdate in Go. by David Benjamin · 9 years ago
  29. d5a4ecb Support accepting TLS 1.3 tickets on the Go client. by David Benjamin · 9 years ago
  30. 5810488 Add support for sending TLS 1.3 tickets in Go. by David Benjamin · 9 years ago
  31. 4528e2b Take DHE ciphers out of 1.3 in Go. by David Benjamin · 9 years ago
  32. 842ae6c Support unimplemented tests in test runner. by EKR · 9 years ago
  33. 1d4f4c0 Add SSL_send_fatal_alert. by David Benjamin · 9 years ago
  34. 12d2c48 Add a packed renegotiation test. by David Benjamin · 9 years ago
  35. 613fe3b Call expect_flight and received_flight in the 1.3 logic. by David Benjamin · 9 years ago
  36. a68c118 Make SSL_get_extms_support a little friendlier. by David Benjamin · 9 years ago
  37. 5e7e7cc Add SSL_set_fallback_version. by David Benjamin · 9 years ago
  38. d7573dc Tweak ssl_early_callback_init. by David Benjamin · 9 years ago
  39. 5440fe0 Adding HelloRetryRequest. by Steven Valdez · 9 years ago
  40. 4d90c10 Send extension indicating the TLS 1.3 draft version in Go. by Nick Harper · 9 years ago
  41. 13f1ebe Factor out the client_cert_cb code. by David Benjamin · 9 years ago
  42. 14a077c Revert "Add tests to ensure our ClientHello does not change." by David Benjamin · 9 years ago
  43. 69f40df Add tests to ensure our ClientHello does not change. by David Benjamin · 9 years ago
  44. dcfbc67 Implement HelloRetryRequest in Go. by Nick Harper · 9 years ago
  45. 3a28755 Fix sending draft_version. by Steven Valdez · 9 years ago
  46. e776cc2 Implement SSLKEYLOGFILE support for TLS 1.3. by David Benjamin · 9 years ago
  47. f2401eb Add a ssl_hs_flush_and_read_message wait mode. by David Benjamin · 9 years ago
  48. e470e66 Test if the ServerHello includes an unknown cipher suite. by David Benjamin · 9 years ago
  49. b62d287 Add TLS 1.3 versions of the -Enforced versions. by David Benjamin · 9 years ago
  50. 8d315d7 Remove enableTLS13Handshake. by David Benjamin · 9 years ago
  51. 4f92157 Add a TLS 1.3 version of UnsupportedCurve. by David Benjamin · 9 years ago
  52. 942f4ed Implement OCSP stapling in TLS 1.3. by David Benjamin · 9 years ago
  53. 143e8b3 Add TLS 1.3 1-RTT. by Steven Valdez · 9 years ago
  54. 4ee027f Allow server supported_curves in TLS 1.3 in Go. by David Benjamin · 9 years ago
  55. eeef635 Remove dead code. by David Benjamin · 9 years ago
  56. 0b8d5da Add much more aggressive WrongMessageType tests. by David Benjamin · 9 years ago
  57. 7964b18 Add machinery for testing TLS 1.3 cipher change synchronization. by David Benjamin · 9 years ago
  58. 6167281 Check for buffered handshake messages on cipher change in DTLS. by David Benjamin · 9 years ago
  59. cea0ab4 Reject 1.3 ServerHellos with the RI extension in Go. by David Benjamin · 9 years ago
  60. 9ec1c75 Add TLS 1.3 version of EmptyCertificateList. by David Benjamin · 9 years ago
  61. 97d17d9 Run extensions tests at all versions. by David Benjamin · 9 years ago
  62. 46f94bd Enforce in Go that all ServerHello extensions are known. by David Benjamin · 9 years ago
  63. d3440b4 Give SSL_PRIVATE_KEY_METHOD a message-based API. by David Benjamin · 9 years ago
  64. 0c0b7e1 Widen SSL_PRIVATE_KEY_METHOD types to include the curve name. by David Benjamin · 9 years ago
  65. ca3d545 Add SSL_set_signing_algorithm_prefs. by David Benjamin · 9 years ago
  66. 0ee2e11 Fixing TLS 1.3 Go Handshake Bugs. by Steven Valdez · 9 years ago
  67. bf5aa84 Moving ssl_check_leaf_certificate to ssl_cert. by Steven Valdez · 9 years ago
  68. 2aad406 Switch application traffic keys at the right time in Go TLS 1.3. by David Benjamin · 9 years ago
  69. 49ec9bb Fix ssl3_get_cert_verify key type checks. by David Benjamin · 9 years ago
  70. 5c900c8 Factor out certificate list parsing. by David Benjamin · 9 years ago
  71. e0332e8 Factor out CA list parsing. by David Benjamin · 9 years ago
  72. 5208fd4 Generalize invalid signature tests and run at all versions. by David Benjamin · 9 years ago
  73. 32a66d5 Tidy up a few certificate-related utility functions. by David Benjamin · 9 years ago
  74. add5e52 Test SSL_get_peer_certificate and SSL_get_peer_cert_chain behavior. by David Benjamin · 9 years ago
  75. 25490f2 Add a unit test for SSL_CTX_set_retain_only_sha256_of_client_certs. by David Benjamin · 9 years ago
  76. f74ec79 Fix Go TLS 1.3 sigalg handling. by David Benjamin · 9 years ago
  77. bbfff7c Rename all the signature algorithm tests. by David Benjamin · 9 years ago
  78. 8ac3571 Use SSL_get_extms_support in bssl_shim. by David Benjamin · 9 years ago
  79. e907765 Enforce that EMS is not advertised in TLS 1.3. by David Benjamin · 9 years ago
  80. 6e6abe1 Temporarily skip resume tests in TLS 1.3. by David Benjamin · 9 years ago
  81. 2f8935d Test NULL client CA lists. by David Benjamin · 9 years ago
  82. 1115330 Always include the CA list in CertificateRequest. by David Benjamin · 9 years ago
  83. 97a0a08 Implement exporters for TLS 1.3 in Go. by David Benjamin · 9 years ago
  84. c87ebde Fix up TLS 1.3 PSK placeholder logic in the Go code. by David Benjamin · 9 years ago
  85. c78aa4a Don't crash on EnableAllCiphers in deriveTrafficAEAD. by David Benjamin · 9 years ago
  86. 9deb117 Temporarily skip resumption in 1.3 cipher suite tests. by David Benjamin · 9 years ago
  87. 1edae6b Make WrongCertificateMessageType work in both 1.3 and 1.2. by David Benjamin · 9 years ago
  88. 6f8f4de Set m.raw in encryptedExtensionsMsg. by David Benjamin · 9 years ago
  89. 54c217c Forbid PSK ciphers in TLS 1.3 for now. by David Benjamin · 9 years ago
  90. 7944a9f Account for key size when selecting RSA-PSS. by David Benjamin · 9 years ago
  91. 8d343b4 Implement client certificates for TLS 1.3 in Go. by David Benjamin · 9 years ago version_for_cocoapods_5.0
  92. 615119a Add OCSP stapling and SCT list support to 1.3 servers in Go. by David Benjamin · 9 years ago
  93. 728eed8 Implement basic TLS 1.3 server handshake in Go. by Nick Harper · 9 years ago
  94. 1f61f0d Implement TLS 1.3's downgrade signal. by David Benjamin · 9 years ago
  95. 0a8deb2 Remove ourSigAlgs parameter to selectSignatureAlgorithm. by David Benjamin · 9 years ago
  96. 29bb140 Move isSupportedSignatureAlgorithm calls to verifyMessage in Go. by David Benjamin · 9 years ago
  97. 7a41d37 Configure verify/sign signature algorithms in Go separately. by David Benjamin · 9 years ago
  98. eff1e8d Adding RSA-PSS signature algorithms. by Steven Valdez · 9 years ago
  99. fd5c45f Add support for RSA-PSS to the TLS 1.3 Go code. by David Benjamin · 9 years ago
  100. 1fb125c Enforce ECDSA curve matching in TLS 1.3. by David Benjamin · 9 years ago