- fa9796e Add SSL_early_data_reason_string. by David Benjamin · 4 years, 5 months ago
- 51607f1 Implement draft-vvv-tls-alps-01. by Steven Valdez · 4 years, 8 months ago
- e580e9d Simplify 0-RTT tests. by David Benjamin · 4 years, 6 months ago
- 3989c99 Fix crash when flushing an SSL BIO. by David Benjamin · 4 years, 6 months ago
- a673d02 Add PSK variants of HPKE setup functions to BoGo. by Daniel McArdle · 4 years, 7 months ago
- f42d5df Add Go implementation of HPKE draft 05 to runner. by Daniel McArdle · 4 years, 9 months ago
- 974ac21 runner: Implement a more complete ClientHello consistency check. by David Benjamin · 4 years, 6 months ago
- 6222fe7 runner: Refactor BoGo clientHelloMsg extension marshalling. by Dan McArdle · 4 years, 6 months ago
- 5e08695 Fix handling of quic_early_data_context. by Nick Harper · 4 years, 6 months ago
- 3ff161c Print SSL_get_error in bssl_shim. by David Benjamin · 4 years, 6 months ago
- bb72a8d Allow specifying different initial and resumption expectations. by David Benjamin · 4 years, 6 months ago
- b0e98e4 Test SSL_get0_alpn_selected on both client and server. by David Benjamin · 4 years, 6 months ago
- a6386ea runner: Rewrite sessionState parsing with byteReader. by David Benjamin · 4 years, 6 months ago
- c4ec14c Switch ssl_parse_extensions to bool and Span. by David Benjamin · 4 years, 6 months ago
- 3743aaf Add SSL_CIPHER_get_protocol_id. by David Benjamin · 4 years, 6 months ago
- 662bfad Fix potential leak in bssl::Array::Shrink. by David Benjamin · 4 years, 6 months ago
- dcd6e44 Support delegated credentials verison 06 by Watson Ladd · 4 years, 8 months ago
- 74161f4 Enforce presence of ALPN when QUIC is in use. by Nick Harper · 4 years, 8 months ago
- 70fee17 Use golang.org/x/crypto in runner. by David Benjamin · 4 years, 9 months ago
- 281a8f5 Disable ClientHello padding for QUIC. by Nick Harper · 4 years, 8 months ago
- cac9392 Disallow TLS 1.3 compatibility mode in QUIC. by Nick Harper · 4 years, 11 months ago
- d054e1b Fix unterminated clang-format off. by David Benjamin · 4 years, 8 months ago
- 5fa22ed Avoid relying on SSL_get_session's behavior during the handshake. by David Benjamin · 4 years, 9 months ago
- b3c5ac5 Add a -wait-for-debugger flag to runner. by David Benjamin · 4 years, 9 months ago
- 1b81947 Test resumability of same, different, and default ticket keys. by David Benjamin · 4 years, 10 months ago
- cd8f3d3 Enforce the keyUsage extension in TLS 1.2 client certs. by David Benjamin · 4 years, 9 months ago
- 72b095d Reword some comments. by David Benjamin · 4 years, 10 months ago
- 88024df Remove -enable-ed25519 compat hack. by Adam Langley · 4 years, 10 months ago
- 53a17f5 Add a |SSL_process_tls13_new_session_ticket|. by Adam Langley · 4 years, 10 months ago
- 8519432 Modify how QUIC 0-RTT go/no-go decision is made. by Nick Harper · 4 years, 10 months ago
- 7c52299 Restrict when 0-RTT will be accepted in QUIC. by Nick Harper · 5 years ago
- e32549e Disable TLS 1.3 compatibility mode for QUIC. by Nick Harper · 4 years, 11 months ago
- f9e0cda Add SSL_SESSION_copy_without_early_data. by David Benjamin · 5 years ago
- 47a6f5b runner: Replace supportsVersions calls with allVersions. by David Benjamin · 5 years ago
- e8434d3 Enable QUIC for some perMessageTest runner tests by Nick Harper · 5 years ago
- af6bfbe Enable more runner tests for QUIC by Nick Harper · 5 years ago
- 72cff81 Require QUIC method with Transport Parameters and vice versa by Nick Harper · 5 years ago
- 6bfd25c Add is_quic bit to SSL_SESSION by Nick Harper · 5 years ago
- 964256d Add |SSL_CTX_get0_chain|. by Adam Langley · 5 years ago
- 5298ef9 Configure QUIC secrets inside set_{read,write}_state. by David Benjamin · 5 years ago
- 80ddfc7 Allow setting QUIC transport parameters after parsing the client's by Nick Harper · 5 years ago
- 1e85905 Revise QUIC encryption secret APIs. by David Benjamin · 5 years ago
- 2fb729d Don't infinite loop when QUIC tests fail. by David Benjamin · 5 years ago
- 44099d5 Tidy up transitions out of 0-RTT keys on the client. by David Benjamin · 5 years ago
- b092192 Keep the encryption state and encryption level in sync. by David Benjamin · 5 years ago
- 472d91c Fix a couple of comment typos. by Adam Langley · 5 years ago
- 7940ed1 Ignore old -enable-ed25519 flag. by Adam Langley · 5 years ago
- 754d4c9 Fix client handling of 0-RTT rejects with cipher mismatch. by David Benjamin · 5 years ago
- 83ea777 runner: Tidy up 0-RTT support. by David Benjamin · 5 years ago
- 0c30649 Clean up TLS 1.3 handback logic. by David Benjamin · 5 years ago
- f9cc26f Require handshake flights end at record boundaries. by David Benjamin · 5 years ago
- 21a879a Delete unreachable DTLS check. by David Benjamin · 5 years ago
- 82a4b22 Rename TLS-specific functions to tls_foo from ssl3_foo. by David Benjamin · 5 years ago
- f6cc8dd Rename ssl3_choose_cipher. by David Benjamin · 5 years ago
- 8f299d5 SSL_apply_handback: don't choke on trailing data. by Matthew Braithwaite · 5 years ago
- 4f3e821 ssl_test: test early data with split handshakes. by Matthew Braithwaite · 5 years ago
- 1766935 Remove SSL_CTX_set_ed25519_enabled. by David Benjamin · 5 years ago
- 6ab75bf Improve signature algorithm tests. by David Benjamin · 5 years ago
- fbea9de Check enum values in handoff. by Adam Langley · 5 years ago
- f0a815c Add SSL_set_verify_algorithm_prefs. by David Benjamin · 5 years ago
- ebad508 Switch verify sigalg pref functions to SSL_HANDSHAKE. by David Benjamin · 5 years ago
- 9e23361 handoff: set |enable_early_data| as part of handback. by Matthew Braithwaite · 5 years ago
- 032fc66 Add 109 and 120 to SSL_alert_desc_string_long by David Schinazi · 5 years ago
- 6192ccb runner: enable split handshake tests for TLS 1.3. by Matthew Braithwaite · 5 years ago
- f3c98ce Make TLS 1.3 split handshakes work with early data. by Matthew Braithwaite · 5 years ago
- 093a823 Split half-RTT tickets out into a separate TLS 1.3 state. by Matthew Braithwaite · 5 years ago
- f249840 Remove SSL_CTX_set_rsa_pss_rsae_certs_enabled. by David Benjamin · 5 years ago
- 98b4cdb Proxy: send whole SSL records through the handshaker. by Matthew Braithwaite · 5 years ago
- f06254c test_state.cc: serialize the test clock. by Matthew Braithwaite · 5 years ago
- cc0c286 TLS 1.3 split handshake initial support. by Matthew Braithwaite · 5 years ago
- b14530e Add mock QUIC transport to runner by Nick Harper · 5 years ago
- 243b5cc Fix MSan error in SSLTest.Handoff test. by David Benjamin · 5 years ago
- 134fb89 SSLTest.Handoff: extend to include a session resumption. by Matthew Braithwaite · 5 years ago
- 08e1fe0 Move TLS 1.3 state machine constants to internal.h. by Matthew Braithwaite · 5 years ago
- c733754 Allocate small TLS read buffers inline. by David Benjamin · 5 years ago
- 98ba3bd Remove remnants of end_of_early_data alert from tests. by David Benjamin · 5 years ago
- e0d95ad Remove post-quantum experiment signal extension. by David Benjamin · 5 years ago
- ee0716f Defer early keys to QUIC clients to after certificate reverification. by David Benjamin · 5 years ago
- fd32089 Defer releasing early secrets to QUIC servers. by David Benjamin · 5 years ago
- 58d56f4 Enable TLS 1.3 by default. by Matthew Braithwaite · 5 years ago
- f0bdf5c Discard user_canceled alerts in TLS 1.3. by David Benjamin · 5 years ago
- b11902a HelloRetryRequest getter by Kris Kwiatkowski · 6 years ago
- 3ab3b12 Add compatibility functions for sigalgs by Shelley Vohr · 5 years ago
- 3ba9586 Rename a number of BUF_* functions to OPENSSL_*. by David Benjamin · 5 years ago
- 7f02881 Drop CECPQ2b code. by Adam Langley · 5 years ago fips-android-20191020
- a93beba Rename the last remnants of the early_data_info extension. by David Benjamin · 5 years ago
- 12049fd Add |SSL_get_min_proto_version| and |SSL_get_max_proto_version| by Alessandro Ghedini · 5 years ago
- 8fe1584 Switch cert_compression_algs to GrowableArray. by David Benjamin · 5 years ago
- ff746c1 Add GrowableArray<T> to ssl/internal.h. by Daniel McArdle · 6 years ago
- 49de1fc Fixed quic_method lookup in TLS 1.3 server side handshake. by Goutam Tamvada · 5 years ago
- 0e7dbd5 Add an option for explicit renegotiations. by David Benjamin · 6 years ago
- 04a89c8 Add |SSL_CIPHER_get_value| to get the IANA number of a cipher suite. by Adam Langley · 6 years ago
- b82f945 Use the Go 1.13 standard library ed25519. by David Benjamin · 6 years ago
- 3b62960 Move the config->async check into RetryAsync. by David Benjamin · 6 years ago
- d0b9794 Clear *out in ReadHandshakeData's empty case. by David Benjamin · 6 years ago
- d634357 Add initial support for 0-RTT with QUIC. by David Benjamin · 6 years ago
- 95dd54e Have some more fun with spans. by David Benjamin · 6 years ago
- f350351 Align 0-RTT and resumption state machines slightly by David Benjamin · 6 years ago
- bd2a8d6 Add a function to convert SSL_ERROR_* values to strings. by David Benjamin · 6 years ago
- f492830 Fold SSL_want constants into SSL_get_error constants. by David Benjamin · 6 years ago