Sign in
boringssl
/
boringssl
/
300ef4767d79df194089e2d70e8ac28fc5cfb51f
/
ssl
af6bfbe
Enable more runner tests for QUIC
by Nick Harper
· 5 years ago
72cff81
Require QUIC method with Transport Parameters and vice versa
by Nick Harper
· 5 years ago
6bfd25c
Add is_quic bit to SSL_SESSION
by Nick Harper
· 5 years ago
964256d
Add |SSL_CTX_get0_chain|.
by Adam Langley
· 5 years ago
5298ef9
Configure QUIC secrets inside set_{read,write}_state.
by David Benjamin
· 5 years ago
80ddfc7
Allow setting QUIC transport parameters after parsing the client's
by Nick Harper
· 5 years ago
1e85905
Revise QUIC encryption secret APIs.
by David Benjamin
· 5 years ago
2fb729d
Don't infinite loop when QUIC tests fail.
by David Benjamin
· 5 years ago
44099d5
Tidy up transitions out of 0-RTT keys on the client.
by David Benjamin
· 5 years ago
b092192
Keep the encryption state and encryption level in sync.
by David Benjamin
· 5 years ago
472d91c
Fix a couple of comment typos.
by Adam Langley
· 5 years ago
7940ed1
Ignore old -enable-ed25519 flag.
by Adam Langley
· 5 years ago
754d4c9
Fix client handling of 0-RTT rejects with cipher mismatch.
by David Benjamin
· 5 years ago
83ea777
runner: Tidy up 0-RTT support.
by David Benjamin
· 5 years ago
0c30649
Clean up TLS 1.3 handback logic.
by David Benjamin
· 5 years ago
f9cc26f
Require handshake flights end at record boundaries.
by David Benjamin
· 5 years ago
21a879a
Delete unreachable DTLS check.
by David Benjamin
· 5 years ago
82a4b22
Rename TLS-specific functions to tls_foo from ssl3_foo.
by David Benjamin
· 5 years ago
f6cc8dd
Rename ssl3_choose_cipher.
by David Benjamin
· 5 years ago
8f299d5
SSL_apply_handback: don't choke on trailing data.
by Matthew Braithwaite
· 5 years ago
4f3e821
ssl_test: test early data with split handshakes.
by Matthew Braithwaite
· 5 years ago
1766935
Remove SSL_CTX_set_ed25519_enabled.
by David Benjamin
· 5 years ago
6ab75bf
Improve signature algorithm tests.
by David Benjamin
· 5 years ago
fbea9de
Check enum values in handoff.
by Adam Langley
· 5 years ago
f0a815c
Add SSL_set_verify_algorithm_prefs.
by David Benjamin
· 5 years ago
ebad508
Switch verify sigalg pref functions to SSL_HANDSHAKE.
by David Benjamin
· 5 years ago
9e23361
handoff: set |enable_early_data| as part of handback.
by Matthew Braithwaite
· 5 years ago
032fc66
Add 109 and 120 to SSL_alert_desc_string_long
by David Schinazi
· 5 years ago
6192ccb
runner: enable split handshake tests for TLS 1.3.
by Matthew Braithwaite
· 5 years ago
f3c98ce
Make TLS 1.3 split handshakes work with early data.
by Matthew Braithwaite
· 5 years ago
093a823
Split half-RTT tickets out into a separate TLS 1.3 state.
by Matthew Braithwaite
· 5 years ago
f249840
Remove SSL_CTX_set_rsa_pss_rsae_certs_enabled.
by David Benjamin
· 5 years ago
98b4cdb
Proxy: send whole SSL records through the handshaker.
by Matthew Braithwaite
· 5 years ago
f06254c
test_state.cc: serialize the test clock.
by Matthew Braithwaite
· 5 years ago
cc0c286
TLS 1.3 split handshake initial support.
by Matthew Braithwaite
· 5 years ago
b14530e
Add mock QUIC transport to runner
by Nick Harper
· 5 years ago
243b5cc
Fix MSan error in SSLTest.Handoff test.
by David Benjamin
· 5 years ago
134fb89
SSLTest.Handoff: extend to include a session resumption.
by Matthew Braithwaite
· 5 years ago
08e1fe0
Move TLS 1.3 state machine constants to internal.h.
by Matthew Braithwaite
· 5 years ago
c733754
Allocate small TLS read buffers inline.
by David Benjamin
· 5 years ago
98ba3bd
Remove remnants of end_of_early_data alert from tests.
by David Benjamin
· 5 years ago
e0d95ad
Remove post-quantum experiment signal extension.
by David Benjamin
· 5 years ago
ee0716f
Defer early keys to QUIC clients to after certificate reverification.
by David Benjamin
· 5 years ago
fd32089
Defer releasing early secrets to QUIC servers.
by David Benjamin
· 5 years ago
58d56f4
Enable TLS 1.3 by default.
by Matthew Braithwaite
· 5 years ago
f0bdf5c
Discard user_canceled alerts in TLS 1.3.
by David Benjamin
· 5 years ago
b11902a
HelloRetryRequest getter
by Kris Kwiatkowski
· 6 years ago
3ab3b12
Add compatibility functions for sigalgs
by Shelley Vohr
· 5 years ago
3ba9586
Rename a number of BUF_* functions to OPENSSL_*.
by David Benjamin
· 5 years ago
7f02881
Drop CECPQ2b code.
by Adam Langley
· 5 years ago
fips-android-20191020
a93beba
Rename the last remnants of the early_data_info extension.
by David Benjamin
· 5 years ago
12049fd
Add |SSL_get_min_proto_version| and |SSL_get_max_proto_version|
by Alessandro Ghedini
· 5 years ago
8fe1584
Switch cert_compression_algs to GrowableArray.
by David Benjamin
· 5 years ago
ff746c1
Add GrowableArray<T> to ssl/internal.h.
by Daniel McArdle
· 6 years ago
49de1fc
Fixed quic_method lookup in TLS 1.3 server side handshake.
by Goutam Tamvada
· 5 years ago
0e7dbd5
Add an option for explicit renegotiations.
by David Benjamin
· 6 years ago
04a89c8
Add |SSL_CIPHER_get_value| to get the IANA number of a cipher suite.
by Adam Langley
· 6 years ago
b82f945
Use the Go 1.13 standard library ed25519.
by David Benjamin
· 6 years ago
3b62960
Move the config->async check into RetryAsync.
by David Benjamin
· 6 years ago
d0b9794
Clear *out in ReadHandshakeData's empty case.
by David Benjamin
· 6 years ago
d634357
Add initial support for 0-RTT with QUIC.
by David Benjamin
· 6 years ago
95dd54e
Have some more fun with spans.
by David Benjamin
· 6 years ago
f350351
Align 0-RTT and resumption state machines slightly
by David Benjamin
· 6 years ago
bd2a8d6
Add a function to convert SSL_ERROR_* values to strings.
by David Benjamin
· 6 years ago
f492830
Fold SSL_want constants into SSL_get_error constants.
by David Benjamin
· 6 years ago
e530ea3
Use spans for the various TLS 1.3 secrets.
by David Benjamin
· 6 years ago
b244e3a
Switch another low-level function to spans.
by David Benjamin
· 6 years ago
79b8b3a
Switch tls13_enc.cc to spans.
by David Benjamin
· 6 years ago
9806ae0
Check the second ClientHello's PSK binder on resumption.
by David Benjamin
· 6 years ago
8c98bac
Remove stale TODO.
by David Benjamin
· 6 years ago
fd863b6
Add a QUIC test for HelloRetryRequest.
by David Benjamin
· 6 years ago
ee4888c
Make alert_dispatch into a bool.
by David Benjamin
· 6 years ago
bc42402
Trim some more per-connection memory.
by David Benjamin
· 6 years ago
94b2871
Remove SSL_export_early_keying_material.
by David Benjamin
· 6 years ago
ef0183c
Make SSL_get_servername work in the early callback.
by David Benjamin
· 6 years ago
4dfd5af
Only bypass the signature verification itself in fuzzer mode.
by David Benjamin
· 6 years ago
9f5c419
Move the PQ-experiment signal to SSL_CTX.
by Adam Langley
· 6 years ago
b9e2b8a
Name cipher suite tests in runner by IETF names.
by David Benjamin
· 6 years ago
a86c698
Add post-quantum experiment signal extension.
by Adam Langley
· 6 years ago
0fc4979
Fix shim error message endings.
by Adam Langley
· 6 years ago
3c8ae0f
Implements SIKE/p434
by Kris Kwiatkowski
· 6 years ago
d6f9c35
Factor out TLS cipher selection to ssl_choose_tls_cipher.
by Steven Valdez
· 6 years ago
629f321
Add an API to record use of delegated credential
by Watson Ladd
· 6 years ago
d59682c
Fix runner tests with Go 1.13.
by David Benjamin
· 6 years ago
5b89336
Replace addc64,subc64,mul64 in SIKE Go code with functions from math/bits
by Kris Kwiatkowski
· 6 years ago
c0b4c72
Eliminate some superfluous conditions in SIKE Go code.
by Adam Langley
· 6 years ago
567e463
Fix various typos.
by Adam Langley
· 6 years ago
78c88c9
Integrate SIKE with TLS key exchange.
by Kris Kwiatkowski
· 6 years ago
6676b9a
Convert ecdsa_p224_key.pem to PKCS#8.
by David Benjamin
· 6 years ago
5274cea
Always store early data tickets.
by Steven Valdez
· 6 years ago
b29e1e1
Save and restore errors when ignoring ssl_send_alert result.
by David Benjamin
· 6 years ago
b19b79d
Make expect/expected flag and variable names match.
by David Benjamin
· 6 years ago
0ad8d57
clang-format Flag arrays in test_config.cc.
by David Benjamin
· 6 years ago
262fd6a
Rename remnants of ticket_early_data_info.
by David Benjamin
· 6 years ago
6433a91
Enforce the ticket_age parameter for 0-RTT.
by David Benjamin
· 6 years ago
6477012
Add SSL_get_early_data_reason.
by David Benjamin
· 6 years ago
572edbf
Remove implicit -on-resume for -expect-early-data-accept.
by David Benjamin
· 6 years ago
ffe384c
Fix spelling in comments.
by Adam Langley
· 6 years ago
1b878e7
Check for errors when setting up X509_STORE_CTX.
by David Benjamin
· 6 years ago
1e77ef4
Convert a few more things from int to bool.
by David Benjamin
· 6 years ago
Next »