1. d0b6ca2 Fix transcript hash for DTLS 1.3. by Nick Harper · 5 months ago
  2. 0f55aa8 Use InplaceVector for the various handshake derivations by David Benjamin · 5 months ago
  3. 87d0c17 Add a bssl::InplaceVector to libssl by David Benjamin · 6 months ago
  4. 0d9bb20 [DTLS 1.3] Use HelloRetryRequest in place of HelloVerifyRequest. by Nick Harper · 6 months ago
  5. 91a3f26 Add an SSL_CREDENTIAL API for ECDSA/RSA and delegated credentials by David Benjamin · 1 year, 1 month ago
  6. 88a537f Fold ssl_add_cert_chain into its caller by David Benjamin · 1 year ago
  7. c06c4d5 Remove redundant piece of DC state by David Benjamin · 1 year, 1 month ago
  8. 50e7ea5 LSC: Apply clang-tidy's modernize-use-bool-literals to boringssl by Anton Bikineev · 3 years, 1 month ago
  9. 18b6836 Update to draft-ietf-tls-esni-13. by David Benjamin · 3 years, 9 months ago
  10. a75027b Make ssl_parse_extensions a little easier to use. by David Benjamin · 3 years, 8 months ago
  11. ba423c9 Implement ClientHelloOuter handshakes. by David Benjamin · 3 years, 9 months ago
  12. fb4d257 Shift some complexity out of ssl_add_clienthello_tlsext. by David Benjamin · 3 years, 9 months ago
  13. 5acf9f4 Replace hs->needs_psk_binder with an output parameter. by David Benjamin · 3 years, 10 months ago
  14. 33e8c78 Initialize grease_seed on construction. by David Benjamin · 3 years, 10 months ago
  15. 3a036c7 Add SSL_ech_accepted API and ech_is_required alerts. by David Benjamin · 3 years, 9 months ago
  16. b587911 Remove the Channel ID callback. by David Benjamin · 3 years, 10 months ago
  17. 8acec00 Manage Channel ID handshake state better. by David Benjamin · 3 years, 10 months ago
  18. 9b2cdb7 Add SSL_can_release_private_key. by David Benjamin · 4 years ago
  19. b571e77 Add experimental handshake hints API. by David Benjamin · 4 years ago
  20. 00e434d Add ECH server (draft-ietf-tls-esni-09). by Daniel McArdle · 4 years, 1 month ago
  21. 9bcf307 Fix some unreachable code in the QUIC handshaker driver. by David Benjamin · 4 years ago
  22. c295935 Send ECH acceptance signal from backend server. by Dan McArdle · 4 years, 4 months ago
  23. 5351c8b Rename the master_key field in SSL_SESSION to secret. by David Benjamin · 4 years, 4 months ago
  24. c4ec14c Switch ssl_parse_extensions to bool and Span. by David Benjamin · 4 years, 6 months ago
  25. 5fa22ed Avoid relying on SSL_get_session's behavior during the handshake. by David Benjamin · 4 years, 9 months ago
  26. 44099d5 Tidy up transitions out of 0-RTT keys on the client. by David Benjamin · 5 years ago
  27. f9cc26f Require handshake flights end at record boundaries. by David Benjamin · 5 years ago
  28. f3c98ce Make TLS 1.3 split handshakes work with early data. by Matthew Braithwaite · 5 years ago
  29. ee0716f Defer early keys to QUIC clients to after certificate reverification. by David Benjamin · 5 years ago
  30. b11902a HelloRetryRequest getter by Kris Kwiatkowski · 6 years ago
  31. f492830 Fold SSL_want constants into SSL_get_error constants. by David Benjamin · 6 years ago
  32. e530ea3 Use spans for the various TLS 1.3 secrets. by David Benjamin · 6 years ago
  33. b244e3a Switch another low-level function to spans. by David Benjamin · 6 years ago
  34. 6477012 Add SSL_get_early_data_reason. by David Benjamin · 6 years ago
  35. 6c1b376 Implement server support for delegated credentials. by Christopher Patton · 7 years ago
  36. 3cbb029 Allow configuring QUIC method per-connection by Alessandro Ghedini · 6 years ago
  37. 6965d25 Work around a JDK 11 TLS 1.3 bug. by David Benjamin · 6 years ago
  38. c8e0f90 Add an interface for QUIC integration. by Steven Valdez · 7 years ago
  39. 8c7c635 Support symbol prefixes by Joshua Liebow-Feeser · 7 years ago
  40. 1c337e5 Option to reverify certs on resumption. by Jesse Selover · 7 years ago
  41. 0a3e07a Remove custom extensions support. by David Benjamin · 7 years ago
  42. 50596f8 Switch some easy SSL fields to UniquePtr. by David Benjamin · 7 years ago
  43. bfdd1a9 Give SSL_SESSION a destructor. by David Benjamin · 7 years ago
  44. 9bb15f5 Remove SSL 3.0 implementation. by David Benjamin · 7 years ago
  45. a307cb7 Preliminary support for compressed certificates. by Adam Langley · 7 years ago
  46. 911cc0a The legacy client OCSP callback should run without server OCSP. by David Benjamin · 7 years ago
  47. 103ed08 Implement legacy OCSP APIs for libssl. by David Benjamin · 7 years ago
  48. b7bc80a SSL_CONFIG: new struct for sheddable handshake configuration. by Matthew Braithwaite · 7 years ago
  49. 56986f9 Hand back ECDHE split handshakes after the first server message. by Matthew Braithwaite · 7 years ago
  50. 3fe8fa7 Add initial, experimental support for split handshakes. by Adam Langley · 7 years ago
  51. 5301c10 ssl_verify_peer_cert: implement |SSL_VERIFY_NONE| as advertised. by Matthew Braithwaite · 7 years ago
  52. a7bc944 Don't use the client_random entropy for GREASE. by David Benjamin · 7 years ago
  53. 964b237 Implement PR 1091 (TLS 1.3 draft '22'). by Steven Valdez · 7 years ago
  54. 32ce0ac Move init_buf and rwstate into SSL3_STATE. by David Benjamin · 7 years ago
  55. 8e7bbba Use more scopers. by David Benjamin · 7 years ago
  56. ea712e3 Make SSL3_BUFFER a proper C++ class. by David Benjamin · 7 years ago
  57. f6632da Make all read errors idempotent. by David Benjamin · 7 years ago
  58. d9229f9 Lift BIO above SSL_PROTOCOL_METHOD. by David Benjamin · 7 years ago
  59. 97250f4 Switch a bunch of things from int to bool. by David Benjamin · 7 years ago
  60. 75a1f23 Have a bit more fun with Span. by David Benjamin · 7 years ago
  61. 00f48c8 Rename and move a few more ssl3_ functions around. by David Benjamin · 7 years ago
  62. d1e3ce1 Rename ssl3_send_alert and ssl3_protocol_version. by David Benjamin · 7 years ago
  63. a84b6f2 Fix comment. by David Benjamin · 7 years ago
  64. e52f4c4 Replay the entire error queue on ssl_hs_error. by David Benjamin · 7 years ago
  65. b949355 Add bssl::Span<T>::subspan and use it. by David Benjamin · 7 years ago
  66. b1cf48e Store the peer_sigalgs as an Array. by David Benjamin · 7 years ago
  67. 879efc3 Switch more things to Array. by David Benjamin · 7 years ago
  68. 08f5c76 Convert more things to Array. by David Benjamin · 7 years ago
  69. cf0ce67 Use Span and Array for the curve list. by David Benjamin · 7 years ago
  70. 499742c Introduce bssl::Array<T> and use it in SSLKeyShare. by David Benjamin · 8 years ago
  71. b7e5b08 Remove some redundant OPENSSL_cleanses. by David Benjamin · 7 years ago
  72. 6dc892f Remove redundant calls to |OPENSSL_cleanse| and |OPENSSL_realloc_clean|. by Martin Kreichgauer · 8 years ago
  73. 74795b3 More miscellaneous bools. by David Benjamin · 8 years ago
  74. fd45ee7 Replace bits in SSL_HANDSHAKE with bool. by David Benjamin · 8 years ago
  75. d816874 Set SSL_in_init to false before new_session_cb. by Steven Valdez · 8 years ago
  76. 6abaa31 Remove unnecessary parameter. by David Benjamin · 8 years ago
  77. c11ea942 Convert comments in ssl. by David Benjamin · 8 years ago
  78. 4d71a9a Migrate TLS 1.2 and below state machines to the new style. by Steven Valdez · 8 years ago