1. 68161cb Stash the computed version range in SSL_HANDSHAKE. by David Benjamin · 8 years ago
  2. fc08dfc Rename {ssl,ctx}->{min,max}_version. by David Benjamin · 8 years ago
  3. 4414874 Simplify ssl_private_key_* state machine points. by David Benjamin · 8 years ago
  4. 9961dff Unwind V2ClientHello counters. by David Benjamin · 8 years ago
  5. 0d1730d Squash together states in the TLS 1.2 server Certificate flight. by David Benjamin · 8 years ago
  6. b5f55c3 Squash together TLS 1.2 states for server Finished block. by David Benjamin · 8 years ago
  7. d98107b Remove the last of the f_err pattern. by David Benjamin · 8 years ago
  8. 8d606e3 Clear out f_err pattern from handshake_client.c. by David Benjamin · 8 years ago
  9. a75fc71 Update fuzzer mode suppressions. by David Benjamin · 8 years ago
  10. ca74358 Test SSL_select_next_proto and SSL_get_fd. by David Benjamin · 8 years ago
  11. 0391f16 Fix some malloc failure handling. by David Benjamin · 8 years ago
  12. e831a81 Adding support for sending early data on the client. by Steven Valdez · 8 years ago
  13. 24e5886 Add a test for invalid alert types. by David Benjamin · 8 years ago fips-20170615
  14. 1967094 Align EVP_PKEY Ed25519 API with upstream. by David Benjamin · 8 years ago
  15. 8ba6a14 Fix build with VS 2017. by David Benjamin · 8 years ago
  16. 2f3404b Enforce incrementing counter for TLS 1.2 AES-GCM. by Steven Valdez · 8 years ago
  17. 2d04cf0 Test with IPv6 by default, and IPv4 only if that fails. by Matthew Braithwaite · 8 years ago
  18. d94682d Remove ex_data's dup hook. by David Benjamin · 8 years ago
  19. 01f8a8c Convert stack.h to use inline functions. by David Benjamin · 8 years ago
  20. d55bd79 Fix SSL_COMP_get_compression_methods type signature. by David Benjamin · 8 years ago
  21. 48b6b8f Add SSL_CIPHER_has_SHA384_HMAC. by Alessandro Ghedini · 8 years ago
  22. 873ebc9 Improve TestConfig flags for initial and resumption connections. by Steven Valdez · 8 years ago
  23. 93731d9 Remove old SSL min/max version functions. by David Benjamin · 8 years ago
  24. 4d1f4ba Timeout the shim on Accept and Wait. by David Benjamin · 8 years ago
  25. 2997589 Unwind DHE support from BoGo. by David Benjamin · 8 years ago
  26. c88f245 Don't print message when waiting for urandom entropy. by Adam Langley · 8 years ago
  27. 321fcdc Convert default version tests in ssl_test. by David Benjamin · 8 years ago
  28. e11726a Properly convert more of ssl_test. by David Benjamin · 8 years ago
  29. a365138 Factor out the default signature algorithm logic. by David Benjamin · 8 years ago
  30. 4b65693 Make runner ignore entropy warnings. by Adam Langley · 8 years ago
  31. de254b4 Enforce max_early_data_size on the server. by Alessandro Ghedini · 8 years ago
  32. 71c21b4 Add SSL_CTX_set_verify_algorithm_prefs. by David Benjamin · 8 years ago
  33. 96bc12a Remove includeDHE from runner.go. by David Benjamin · 8 years ago
  34. 11fa703 Remove the last remnants of key_exchange_info. by David Benjamin · 8 years ago
  35. 7e06de5 Really remove DHE ciphersuites from TLS. by Matthew Braithwaite · 8 years ago
  36. 3cfeb95 Disable SSLv3 by default. by David Benjamin · 8 years ago
  37. bbba939 Acknowledge KeyUpdate messages. by David Benjamin · 8 years ago
  38. ebacdee Add SendServerHelloAsHelloRetryRequest test. by David Benjamin · 8 years ago
  39. d3bca04 Remove a batch of f_errs. by David Benjamin · 8 years ago
  40. 6952211 Support Ed25519 in TLS. by David Benjamin · 8 years ago
  41. 0aef168 Comment typo fix: 1024 bits is too small, not too large. by Adam Langley · 8 years ago
  42. d768c5d Support Ed25519 keys in BoGo. by David Benjamin · 8 years ago
  43. e1d18a7 Vendor a copy of golang.org/x/crypto/ed25519. by David Benjamin · 8 years ago
  44. cc17c24 Stop pretending RSA and ECDSA sigalgs are configurable. by David Benjamin · 8 years ago
  45. 6114c3c Clean up signature algorithm logic. by David Benjamin · 8 years ago
  46. a232a71 Deprecate SSL_PRIVATE_KEY_METHOD type and max_signature_len. by David Benjamin · 8 years ago
  47. bf833c3 Rename hs->public_key. by David Benjamin · 8 years ago
  48. 76feb1f Convert ssl_privkey.c to message-based signing APIs. by David Benjamin · 8 years ago
  49. c8ff30c Add an option to allow unknown ALPN protocols. by David Benjamin · 8 years ago chromium-3071
  50. 67bb45f Support enabling early data on SSL by Alessandro Ghedini · 8 years ago
  51. ebcb5be Sync vendored copies of Go poly1305 and curve25519. by David Benjamin · 8 years ago
  52. 0c05c37 Update fuzzer exclusions. by David Benjamin · 8 years ago
  53. 6bb507b Add missing tests for the Channel ID / 0-RTT interaction. by David Benjamin · 8 years ago
  54. f368c73 Fix fuzzer excludes. by Steven Valdez · 8 years ago
  55. 764ab98 Support and test P-224 certificates. by Adam Langley · 8 years ago
  56. a0ba400 Add cipher asserts for read/write app data. by Steven Valdez · 8 years ago
  57. ccbb165 Tidy up ssl3_choose_cipher. by David Benjamin · 8 years ago
  58. 8c26d75 Test the behavior of running SSL_do_handshake twice in a row. by David Benjamin · 8 years ago
  59. 0f5d7d3 Just allocate what's needed for SSL write buffers. by David Benjamin · 8 years ago
  60. bbfe603 Clean up end_of_early_data processing. by David Benjamin · 8 years ago
  61. 681eb6a Adding support for receiving early data on the server. by Steven Valdez · 8 years ago
  62. 32c8927 Add a test for missing end_of_early_data. by David Benjamin · 8 years ago
  63. 065d733 Test ticket age skew when resuming a resumed session. by David Benjamin · 8 years ago
  64. 2a07072 Prevent Channel ID and Custom Extensions on 0-RTT. by Steven Valdez · 8 years ago
  65. 246eeee Make RI on TLS 1.3 alert with ILLEGAL_PARAMETER. by Steven Valdez · 8 years ago
  66. 794cc59 Send half-RTT tickets when negotiating 0-RTT. by David Benjamin · 8 years ago
  67. 3cb1246 Remove session_tickets_sent. by David Benjamin · 8 years ago
  68. 4784b99 Use set_{accept,connect}_state + do_handshake in bssl_shim. by David Benjamin · 8 years ago
  69. 7d2dbc3 Add a comment around the set_{min,max}_version logic. by David Benjamin · 8 years ago
  70. e3843d4 Run all state machine coverage tests on implicit handshake. by David Benjamin · 8 years ago
  71. bbf4246 Add a test that ALPN is rejected on renegotiation. by David Benjamin · 8 years ago
  72. 2d85062 Add Data-less Zero-RTT support. by Steven Valdez · 8 years ago
  73. 57e81e6 Name |select_certificate_cb| return values by Alessandro Ghedini · 8 years ago
  74. cedc6f1 Remove DHE ciphersuites from TLS. by Matthew Braithwaite · 8 years ago
  75. 5c12778 Convert bio_test to GTest. by David Benjamin · 8 years ago
  76. 73812e0 Fix SSLv3 version check in BoGo. by David Benjamin · 8 years ago
  77. 2070f8a Apply bugs to second, TLS 1.3 ClientHello. by Adam Langley · 8 years ago
  78. 707af29 Support asynchronous ticket decryption with TLS 1.3. by David Benjamin · 8 years ago
  79. 4c341d0 Support asynchronous ticket decryption with TLS 1.0–1.2. by Adam Langley · 8 years ago
  80. be49706 Rename initial_ctx to session_ctx. by David Benjamin · 8 years ago
  81. 91222b8 Fix configuring the empty cipher list. by David Benjamin · 8 years ago
  82. 6ad20dc Move error-on-empty-cipherlist into ssl_create_cipher_list(). by Matthew Braithwaite · 8 years ago
  83. 130d529 Adding version to AEAD. by Steven Valdez · 8 years ago
  84. d04ca95 Add |SSL[_CTX]_set_chain_and_key|. by Adam Langley · 8 years ago
  85. 35ac5b7 Export server-side ticket_age skew. by David Benjamin · 8 years ago
  86. fe36672 Allow users of the |CRYPTO_BUFFER|-based methods to verify certs after the handshake. by Adam Langley · 8 years ago
  87. 0cade98 Make the no-op verify function push an error. by Adam Langley · 8 years ago
  88. 54689ed Move ssl_verify_alarm_type into ssl_x509.c. by David Benjamin · 8 years ago
  89. ab1d28e Trim x509.h includes. by David Benjamin · 8 years ago
  90. 8ebeabf Add SSL_CTX_get_ciphers. by David Benjamin · 8 years ago
  91. f29c429 Remove support for old-style SSL_PRIVATE_KEY_METHOD types. by David Benjamin · 8 years ago
  92. f465461 Add SSL_get0_peer_certificates. by David Benjamin · 8 years ago
  93. 924a352 Remove experimental TLS 1.3 short record header extension. by Steven Valdez · 8 years ago
  94. d6c22ee Add |SSL_get0_server_requested_CAs|. by Adam Langley · 8 years ago
  95. a58baaf Forbid the server certificate from changing on renego. by David Benjamin · 8 years ago
  96. ad8f5e1 Don't use long for timestamps. by David Benjamin · 8 years ago
  97. 11c8289 Remove support for blocking DTLS timeout handling. by David Benjamin · 8 years ago
  98. 39425b0 Add |TLS_with_buffers_method|. by Adam Langley · 8 years ago
  99. d5c565a Name ssl_x509.c functions consistently. by Adam Langley · 8 years ago
  100. 94a62e6 Hang ssl_auto_chain_if_needed off |X509_METHOD|. by Adam Langley · 8 years ago