Sign in
boringssl
/
boringssl
/
1032df56e7b5ed36e499dc77a0c6b2e0e8a1fcce
/
ssl
1032df5
Disable Channel ID signature checking in fuzzer mode.
by David Benjamin
· 9 years ago
7364719
Rename NPN-Server test.
by David Benjamin
· 9 years ago
c07afb7
Record resumption and renewal transcripts separately.
by David Benjamin
· 9 years ago
fbc45d7
No-op ticket encryption in fuzzer mode.
by David Benjamin
· 9 years ago
01a9057
Fix remaining non-determinism in fuzzer transcripts.
by David Benjamin
· 9 years ago
ac5e47f
Add a fuzzer mode suppressions file.
by David Benjamin
· 9 years ago
196df5b
Add a InvalidChannelIDSignature test.
by David Benjamin
· 9 years ago
f3fbade
Add tests for SSL_peek.
by David Benjamin
· 9 years ago
e34bcc9
Support default versions with set_{min,max}_proto_version.
by David Benjamin
· 9 years ago
c8b6b4f
Only predict X25519 in TLS 1.3.
by David Benjamin
· 9 years ago
af56fbd
Renumber TLS 1.3 signature algorithms.
by David Benjamin
· 9 years ago
7e1f984
Fix some bugs in TLS 1.3 server key_share code.
by David Benjamin
· 9 years ago
e470690
Align SSL_set_{min,max}_version with upstream.
by David Benjamin
· 9 years ago
2dc0204
Don't return invalid versions in version_from_wire.
by David Benjamin
· 9 years ago
c027999
Take the version parameter out of ssl_do_msg_callback.
by David Benjamin
· 9 years ago
d2ba889
Improve -valgrind error-handling.
by David Benjamin
· 9 years ago
9aafb64
Don't swallow tool output on failure.
by David Benjamin
· 9 years ago
7a4aaa4
Fix TLS 1.3 fuzzer mode in Go.
by David Benjamin
· 9 years ago
e0ff767
Remove SSL_set_fallback_version.
by David Benjamin
· 9 years ago
e63d9d7
Test interaction of RSA key exchange and ClientHello.version.
by David Benjamin
· 9 years ago
7867934
Do not distinguish NULL and empty PSK identity hints.
by David Benjamin
· 9 years ago
bac75b8
Move peer_psk_identity_hint to SSL_HANDSHAKE.
by David Benjamin
· 9 years ago
4fe3c90
Release TLS 1.3 key shares earlier in TLS 1.2.
by David Benjamin
· 9 years ago
2c66e07
Don't send the access_denied alert innappropriately.
by David Benjamin
· 9 years ago
9a5f49e
Remove a few more remnants of RC4/TLS.
by David Benjamin
· 9 years ago
8aaa9e1
Remove RC4 from TLS for real.
by Matthew Braithwaite
· 9 years ago
6e3f5cc
Add SSL_CTX_get_keylog_callback.
by David Benjamin
· 9 years ago
45bdb2e
Remove identical tests.
by David Benjamin
· 9 years ago
3d458dc
Revert of Determining certificate_auth and key_exchange based on SSL.
by David Benjamin
· 9 years ago
639846e
Add tests for trailing data in handshake messages.
by David Benjamin
· 9 years ago
cd2c806
Factor per-message test machinery out.
by David Benjamin
· 9 years ago
5409123
Use C99 for size_t loops.
by David Benjamin
· 9 years ago
84b5c00
Serialize unresumable sessions to a placeholder value.
by Steven Valdez
· 9 years ago
bd09ecc
Determining certificate_auth and key_exchange based on SSL.
by Steven Valdez
· 9 years ago
4d0be24
Only allow SSL_set_session before the handshake.
by David Benjamin
· 9 years ago
fc0c9d9
Use a common state to begin the handshake.
by David Benjamin
· 9 years ago
5510863
Temporary remove the TLS 1.3 anti-downgrade mechanism.
by David Benjamin
· 9 years ago
c241d79
Add tests around compression methods.
by David Benjamin
· 9 years ago
abe94e3
Test that SNI warning alerts are ignored.
by David Benjamin
· 9 years ago
f0e935d
Fold stack-allocated types into headers.
by David Benjamin
· 9 years ago
0fb46d4
const-correct a variable.
by David Benjamin
· 9 years ago
d17d74d
Replace Scoped* heap types with bssl::UniquePtr.
by Matt Braithwaite
· 9 years ago
57e929f
Enable RSA-PSS in TLS 1.2 by default.
by David Benjamin
· 9 years ago
9962057
Test that the early callback can affect max_version.
by David Benjamin
· 9 years ago
163c956
Forbid EMS from changing during renegotation.
by David Benjamin
· 9 years ago
9c8c418
Remove RC4 ciphersuites from TLS.
by Matt Braithwaite
· 9 years ago
a6cd185
Set verify_result, even on failure.
by Adam Langley
· 9 years ago
81f4335
Don't crash when a session callback returns NULL.
by Adam Langley
· 9 years ago
07e7806
runner: use 3DES instead of RC4 where possible.
by Matt Braithwaite
· 9 years ago
311c257
Declare SSL_R_BLOCK_CIPHER_PAD_IS_WRONG and SSL_R_NO_CIPHERS_SPECIFIED.
by David Benjamin
· 9 years ago
0fc37ef
Fix a number of sigalg scope issues.
by David Benjamin
· 9 years ago
7c7d831
Trim a few extensions when min_version is TLS 1.3.
by David Benjamin
· 9 years ago
5c4e857
Fill in the curve ID for TLS 1.3.
by David Benjamin
· 9 years ago
29e5cf7
Remove SSL_SESSION_get_key_exchange_info.
by David Benjamin
· 9 years ago
cb96654
Adding ARRAY_SIZE macro for getting the size of constant arrays.
by Steven Valdez
· 9 years ago
04aa694
Implement BORINGSSL_UNSAFE_FUZZER_MODE for TLS 1.3.
by David Benjamin
· 9 years ago
0e95015
RSA-PSS should work in TLS 1.2.
by David Benjamin
· 9 years ago
7aa31d6
Remove ssl->verify_result.
by David Benjamin
· 9 years ago
93d9743
Deprecate and no-op SSL_set_verify_result.
by David Benjamin
· 9 years ago
4666248
Test resuming renewed sessions.
by David Benjamin
· 9 years ago
32635b8
Add limit for consecutive KeyUpdate messages.
by Steven Valdez
· 9 years ago
dd634eb
s/nginx/NGINX/
by David Benjamin
· 9 years ago
54ed58e
Forbid PKCS1 in TLS 1.3.
by Steven Valdez
· 9 years ago
3764683
Have |SSL_get_verify_result| return |X509_V_OK| when no client certificate is given.
by Adam Langley
· 9 years ago
867bcba
Move ssl_handshake_new, etc., into s3_both.c.
by David Benjamin
· 9 years ago
ee32bea
Fix TLS 1.2 sigalgs fallback logic for ECDSA.
by David Benjamin
· 9 years ago
8a8349b
Request contexts are now illegal during the handshake.
by David Benjamin
· 9 years ago
e73c7f4
Flesh out missing TLS 1.3 state machine coverage.
by David Benjamin
· 9 years ago
e54af06
Configure common config bits in one place.
by David Benjamin
· 9 years ago
405da48
Improve TLS 1.3 resumption/version tests.
by David Benjamin
· 9 years ago
4aa154e
Adding code to send session as PSK Identity.
by Steven Valdez
· 9 years ago
05cad5e
Fix typo.
by David Benjamin
· 9 years ago
5013fb4
Adding PORTING.md for instructions on how to port the test runner
by EKR
· 9 years ago
eed2401
Apply SendClientVersion at the end.
by David Benjamin
· 9 years ago
4ac2dc4
Add a comment about ServerHello.supported_groups.
by David Benjamin
· 9 years ago
version_for_cocoapods_6.0
96a16cd
Finish aligning up_ref functions with OpenSSL 1.1.0.
by David Benjamin
· 9 years ago
3e51757d
Enforce the server ALPN protocol was advertised.
by David Benjamin
· 9 years ago
37b486a
Remove optimisation for known DH groups.
by Adam Langley
· 9 years ago
881f196
Make ECDHE_PSK + AES_GCM unmatchable.
by David Benjamin
· 9 years ago
25fe85b
Insert a state before cert_cb.
by David Benjamin
· 9 years ago
fddbadc
Pass a ClientHello into ssl3_choose_cipher.
by David Benjamin
· 9 years ago
1deb41b
Move SCSV handling out of cipher list parsing.
by David Benjamin
· 9 years ago
19d5cf8
Move remaining ScopedContext types out of scoped_types.h
by Martin Kreichgauer
· 9 years ago
e14ff06
Only have one ClientHello parser, not three.
by David Benjamin
· 9 years ago
f71d7ed
Shim-specific configuration file with suppressions and error translation.
by EKR
· 9 years ago
baafa4a
Undo rename of tlsext_tick_lifetime_hint.
by Martin Kreichgauer
· 9 years ago
e7e36aa
Test that switching versions on renego is illegal.
by David Benjamin
· 9 years ago
b919540
Align SSL_SESSION_up_ref with OpenSSL.
by David Benjamin
· 9 years ago
a9c3bf1
Add TLS_{client,server}_method.
by David Benjamin
· 9 years ago
4087df9
Move more side-specific code out of tls13_process_certificate.
by David Benjamin
· 9 years ago
bb9e36e
Test client certificates carry over on session resumption.
by David Benjamin
· 9 years ago
e455e51
Push some duplicated code into ssl_verify_cert_chain.
by David Benjamin
· 9 years ago
56d280d
Remove the SSL_R_SESSION_ID_CONTEXT_UNINITIALIZED sanity check.
by David Benjamin
· 9 years ago
721e8b7
Test that servers enforce session timeouts.
by David Benjamin
· 9 years ago
a20e535
Add a test for session ID context logic.
by David Benjamin
· 9 years ago
33dad1b
Stop pretending to ssl_clear_bad_session.
by David Benjamin
· 9 years ago
cec7344
Add a CBS version of SSL_early_callback_ctx_extension_get.
by David Benjamin
· 9 years ago
1e6f11a
Adding NewSessionTicket.
by Steven Valdez
· 9 years ago
e8e84b9
Reject warning alerts in TLS 1.3.
by David Benjamin
· 9 years ago
7259f2f
Prefix ext_key_share methods.
by Steven Valdez
· 9 years ago
Next »