1. 12d2c48 Add a packed renegotiation test. by David Benjamin · 9 years ago
  2. 0e04498 Fix funny line-wrapping. by David Benjamin · 9 years ago
  3. 613fe3b Call expect_flight and received_flight in the 1.3 logic. by David Benjamin · 9 years ago
  4. a68c118 Make SSL_get_extms_support a little friendlier. by David Benjamin · 9 years ago
  5. b9afd51 Move some typedefs to base.h. by Matt Braithwaite · 9 years ago
  6. 5e7e7cc Add SSL_set_fallback_version. by David Benjamin · 9 years ago
  7. d5d24fd Add mod_mul tests where M ≪ A and B. by Adam Langley · 9 years ago
  8. 17b6a7f Add myriad2 cpu config awareness. by Radu Margarint · 9 years ago
  9. b57e4fc Migrate from Android.mk to Android.bp by Dan Willemsen · 9 years ago
  10. 00d7a7c Drop cached certificate signature validity flag by David Benjamin · 9 years ago
  11. 84f8551 Move deprecated SSL_OP_* values back to the top. by David Benjamin · 9 years ago
  12. d7573dc Tweak ssl_early_callback_init. by David Benjamin · 9 years ago
  13. 5440fe0 Adding HelloRetryRequest. by Steven Valdez · 9 years ago
  14. 4d90c10 Send extension indicating the TLS 1.3 draft version in Go. by Nick Harper · 9 years ago
  15. 13f1ebe Factor out the client_cert_cb code. by David Benjamin · 9 years ago
  16. 14a077c Revert "Add tests to ensure our ClientHello does not change." by David Benjamin · 9 years ago
  17. 69f40df Add tests to ensure our ClientHello does not change. by David Benjamin · 9 years ago
  18. dcfbc67 Implement HelloRetryRequest in Go. by Nick Harper · 9 years ago
  19. c7fe3b9 Ensure result affine coordinates in nistz256 are fully reduced. by Brian Smith · 9 years ago
  20. 93a034a CBBs are in an undefined state after an operation failed. by David Benjamin · 9 years ago
  21. 0af8240 Infrastructure: Temporarily switch Android builders to experimental. by Andrii Shyshkalov · 9 years ago
  22. 8b466e3 Add Android bots to CQ. by Andrii Shyshkalov · 9 years ago
  23. 3a28755 Fix sending draft_version. by Steven Valdez · 9 years ago
  24. e776cc2 Implement SSLKEYLOGFILE support for TLS 1.3. by David Benjamin · 9 years ago
  25. f2401eb Add a ssl_hs_flush_and_read_message wait mode. by David Benjamin · 9 years ago
  26. feff406 Switch one point addition to a point doubling in p256-x86_64.c. by Brian Smith · 9 years ago
  27. e470e66 Test if the ServerHello includes an unknown cipher suite. by David Benjamin · 9 years ago
  28. b62d287 Add TLS 1.3 versions of the -Enforced versions. by David Benjamin · 9 years ago
  29. 8d315d7 Remove enableTLS13Handshake. by David Benjamin · 9 years ago
  30. 4f92157 Add a TLS 1.3 version of UnsupportedCurve. by David Benjamin · 9 years ago
  31. 942f4ed Implement OCSP stapling in TLS 1.3. by David Benjamin · 9 years ago
  32. 143e8b3 Add TLS 1.3 1-RTT. by Steven Valdez · 9 years ago
  33. 4ee027f Allow server supported_curves in TLS 1.3 in Go. by David Benjamin · 9 years ago
  34. eeef635 Remove dead code. by David Benjamin · 9 years ago
  35. 225e5ad Teach bssl server about -max-version and -min-version. by David Benjamin · 9 years ago
  36. f5975d8 Support TLS 1.3 in bssl client. by David Benjamin · 9 years ago
  37. 0b8d5da Add much more aggressive WrongMessageType tests. by David Benjamin · 9 years ago
  38. 7964b18 Add machinery for testing TLS 1.3 cipher change synchronization. by David Benjamin · 9 years ago
  39. 6167281 Check for buffered handshake messages on cipher change in DTLS. by David Benjamin · 9 years ago
  40. cea0ab4 Reject 1.3 ServerHellos with the RI extension in Go. by David Benjamin · 9 years ago
  41. 9ec1c75 Add TLS 1.3 version of EmptyCertificateList. by David Benjamin · 9 years ago
  42. edd65fb Const-correct HKDF_expand. by David Benjamin · 9 years ago
  43. 97d17d9 Run extensions tests at all versions. by David Benjamin · 9 years ago
  44. 46f94bd Enforce in Go that all ServerHello extensions are known. by David Benjamin · 9 years ago
  45. d8ba86d Add a table for porting SSL_CTX_ctrl code. by David Benjamin · 9 years ago
  46. d3440b4 Give SSL_PRIVATE_KEY_METHOD a message-based API. by David Benjamin · 9 years ago
  47. 0c0b7e1 Widen SSL_PRIVATE_KEY_METHOD types to include the curve name. by David Benjamin · 9 years ago
  48. ca3d545 Add SSL_set_signing_algorithm_prefs. by David Benjamin · 9 years ago
  49. 0ee2e11 Fixing TLS 1.3 Go Handshake Bugs. by Steven Valdez · 9 years ago
  50. bf5aa84 Moving ssl_check_leaf_certificate to ssl_cert. by Steven Valdez · 9 years ago
  51. 2aad406 Switch application traffic keys at the right time in Go TLS 1.3. by David Benjamin · 9 years ago
  52. 90bf710 Reformat some macros. by David Benjamin · 9 years ago
  53. 49ec9bb Fix ssl3_get_cert_verify key type checks. by David Benjamin · 9 years ago
  54. 5c900c8 Factor out certificate list parsing. by David Benjamin · 9 years ago
  55. e0332e8 Factor out CA list parsing. by David Benjamin · 9 years ago
  56. 5208fd4 Generalize invalid signature tests and run at all versions. by David Benjamin · 9 years ago
  57. 32a66d5 Tidy up a few certificate-related utility functions. by David Benjamin · 9 years ago
  58. add5e52 Test SSL_get_peer_certificate and SSL_get_peer_cert_chain behavior. by David Benjamin · 9 years ago
  59. 25490f2 Add a unit test for SSL_CTX_set_retain_only_sha256_of_client_certs. by David Benjamin · 9 years ago
  60. f74ec79 Fix Go TLS 1.3 sigalg handling. by David Benjamin · 9 years ago
  61. bbfff7c Rename all the signature algorithm tests. by David Benjamin · 9 years ago
  62. 8ac3571 Use SSL_get_extms_support in bssl_shim. by David Benjamin · 9 years ago
  63. e907765 Enforce that EMS is not advertised in TLS 1.3. by David Benjamin · 9 years ago
  64. 6e6abe1 Temporarily skip resume tests in TLS 1.3. by David Benjamin · 9 years ago
  65. 2f8935d Test NULL client CA lists. by David Benjamin · 9 years ago
  66. 1115330 Always include the CA list in CertificateRequest. by David Benjamin · 9 years ago
  67. 97a0a08 Implement exporters for TLS 1.3 in Go. by David Benjamin · 9 years ago
  68. c87ebde Fix up TLS 1.3 PSK placeholder logic in the Go code. by David Benjamin · 9 years ago
  69. c78aa4a Don't crash on EnableAllCiphers in deriveTrafficAEAD. by David Benjamin · 9 years ago
  70. 9deb117 Temporarily skip resumption in 1.3 cipher suite tests. by David Benjamin · 9 years ago
  71. 1edae6b Make WrongCertificateMessageType work in both 1.3 and 1.2. by David Benjamin · 9 years ago
  72. 6f8f4de Set m.raw in encryptedExtensionsMsg. by David Benjamin · 9 years ago
  73. 49864a5 Use new APIs in bssl tool for connection info. by David Benjamin · 9 years ago
  74. 54c217c Forbid PSK ciphers in TLS 1.3 for now. by David Benjamin · 9 years ago
  75. 7944a9f Account for key size when selecting RSA-PSS. by David Benjamin · 9 years ago
  76. 1c25654 RSA_marshal_private_key: add missing CBB_flush() by Matt Braithwaite · 9 years ago
  77. 8d343b4 Implement client certificates for TLS 1.3 in Go. by David Benjamin · 9 years ago version_for_cocoapods_5.0
  78. 615119a Add OCSP stapling and SCT list support to 1.3 servers in Go. by David Benjamin · 9 years ago
  79. 728eed8 Implement basic TLS 1.3 server handshake in Go. by Nick Harper · 9 years ago
  80. 1f61f0d Implement TLS 1.3's downgrade signal. by David Benjamin · 9 years ago
  81. 0a8deb2 Remove ourSigAlgs parameter to selectSignatureAlgorithm. by David Benjamin · 9 years ago
  82. 29bb140 Move isSupportedSignatureAlgorithm calls to verifyMessage in Go. by David Benjamin · 9 years ago
  83. 7a41d37 Configure verify/sign signature algorithms in Go separately. by David Benjamin · 9 years ago
  84. eff1e8d Adding RSA-PSS signature algorithms. by Steven Valdez · 9 years ago
  85. 0c22295 Update run_android_tests.go for test cert changes. by David Benjamin · 9 years ago
  86. fd5c45f Add support for RSA-PSS to the TLS 1.3 Go code. by David Benjamin · 9 years ago
  87. 1fb125c Enforce ECDSA curve matching in TLS 1.3. by David Benjamin · 9 years ago
  88. 75ea5bb Don't check certificates against the curve list in TLS 1.3. by David Benjamin · 9 years ago
  89. 3386326 Match ECDSA curve with hash in tests. by David Benjamin · 9 years ago
  90. 887c300 Move the key type check from tls12_check_peer_sigalg to ssl_verify_*. by David Benjamin · 9 years ago
  91. a95e9f3 Test that signature verification checks the key type. by David Benjamin · 9 years ago
  92. 51dd7d6 Don't fall back to SHA-1 in TLS 1.3, only TLS 1.2. by David Benjamin · 9 years ago
  93. a2d81f1 Don't decompose signature algorithms in ssl_rsa.c. by David Benjamin · 9 years ago
  94. 6b8509a Add default handlers for extension parsing. by Steven Valdez · 9 years ago
  95. 310d3f6 Change |EVP_PKEY_up_ref| to return int. by Adam Langley · 9 years ago
  96. 27516f7 Add no-op function ENGINE_register_all_complete. by Adam Langley · 9 years ago
  97. ea9a0d5 Refine SHA-1 default in signature algorithm negotiation. by David Benjamin · 9 years ago
  98. d246b81 Don't decompose sigalgs in key preferences. by David Benjamin · 9 years ago
  99. 0aa25bd Don't call tls12_get_hash in the server handshake. by David Benjamin · 9 years ago
  100. 7bf80e1 Rename util/BUILD to as not to confuse Bazel. by Adam Langley · 9 years ago