1. 5aaaa98 Detect WatchGuard's TLS 1.3 interference failure mode. by David Benjamin · 8 years ago
  2. b529253 Implement scrypt from RFC 7914. by David Benjamin · 8 years ago
  3. 2f3404b Enforce incrementing counter for TLS 1.2 AES-GCM. by Steven Valdez · 8 years ago
  4. 8ebc9ea Update BN_enhanced_miller_rabin_primality_test to enforce preconditions and accept BN_prime_checks. by Steven Valdez · 8 years ago
  5. 6fdea2a Move PKCS#7 functions into their own directory. by David Benjamin · 8 years ago
  6. de254b4 Enforce max_early_data_size on the server. by Alessandro Ghedini · 8 years ago
  7. b15143f Fix check_fips for public keys and synchronize the EC and RSA versions. by Steven Valdez · 8 years ago
  8. d0b9882 Add RSA_check_fips to support public key validation checks. by Steven Valdez · 8 years ago
  9. 3cfeb95 Disable SSLv3 by default. by David Benjamin · 8 years ago
  10. d69d94e Teach crypto/x509 how to verify an Ed25519 signature. by David Benjamin · 8 years ago
  11. 417830d Support EVP_PKEY_{sign,verify}_message with Ed25519. by David Benjamin · 8 years ago
  12. 05bb1c5 Implement draft-ietf-curdle-pkix-04's serialization. by David Benjamin · 8 years ago
  13. 2a07072 Prevent Channel ID and Custom Extensions on 0-RTT. by Steven Valdez · 8 years ago
  14. 3cb047e Decouple PKCS#12 hash lookup from the OID table. by David Benjamin · 8 years ago
  15. 2d85062 Add Data-less Zero-RTT support. by Steven Valdez · 8 years ago
  16. cfb9d14 Update pkcs8 error data. by David Benjamin · 8 years ago
  17. 2d05568 Fix out-of-memory condition in conf. by David Benjamin · 8 years ago
  18. 4c341d0 Support asynchronous ticket decryption with TLS 1.0–1.2. by Adam Langley · 8 years ago
  19. 6ad20dc Move error-on-empty-cipherlist into ssl_create_cipher_list(). by Matthew Braithwaite · 8 years ago
  20. d04ca95 Add |SSL[_CTX]_set_chain_and_key|. by Adam Langley · 8 years ago
  21. a58baaf Forbid the server certificate from changing on renego. by David Benjamin · 8 years ago
  22. bc6ef7a Convert err_test to GTest. by David Benjamin · 8 years ago
  23. 17cf2cb Work around language and compiler bug in memcpy, etc. by David Benjamin · 8 years ago
  24. d515722 Don't depend on the X509 code for getting public keys. by Adam Langley · 8 years ago
  25. aedf303 Parse the entire PSK extension. by David Benjamin · 8 years ago
  26. a4ee74d Skipping early data on 0RTT rejection. by Steven Valdez · 8 years ago
  27. 9b885c5 Don't allow invalid SCT lists to be set. by Adam Langley · 8 years ago
  28. e1cc35e Tolerate cipher changes on TLS 1.3 resumption as a client. by David Benjamin · 8 years ago
  29. a833c35 Update to TLS 1.3 draft 18. by Steven Valdez · 8 years ago
  30. 1db9e1b Add the certificate_required alert. by David Benjamin · 9 years ago
  31. 803c77a Update crypto negotation to draft 15. by Steven Valdez · 9 years ago
  32. c8b6b4f Only predict X25519 in TLS 1.3. by David Benjamin · 9 years ago
  33. 7e1f984 Fix some bugs in TLS 1.3 server key_share code. by David Benjamin · 9 years ago
  34. 163c956 Forbid EMS from changing during renegotation. by David Benjamin · 9 years ago
  35. 311c257 Declare SSL_R_BLOCK_CIPHER_PAD_IS_WRONG and SSL_R_NO_CIPHERS_SPECIFIED. by David Benjamin · 9 years ago
  36. 32635b8 Add limit for consecutive KeyUpdate messages. by Steven Valdez · 9 years ago
  37. 3e51757d Enforce the server ALPN protocol was advertised. by David Benjamin · 9 years ago
  38. 143e8b3 Add TLS 1.3 1-RTT. by Steven Valdez · 9 years ago
  39. 6167281 Check for buffered handshake messages on cipher change in DTLS. by David Benjamin · 9 years ago
  40. 1f61f0d Implement TLS 1.3's downgrade signal. by David Benjamin · 9 years ago
  41. ea9a0d5 Refine SHA-1 default in signature algorithm negotiation. by David Benjamin · 9 years ago
  42. 2b8415e Move the Digest/Sign split for SignatureAlgorithms to a lower level. by Steven Valdez · 9 years ago
  43. c9ae27c Build up TLS 1.3 record-layer tests. by David Benjamin · 9 years ago
  44. 8cf79af Always use Fermat's Little Theorem in ecdsa_sign_setup. by David Benjamin · 9 years ago
  45. a353cdb Wrap MSVC-only warning pragmas in a macro. by David Benjamin · 9 years ago
  46. 29270de Split unlock functions into read/write variants. by David Benjamin · 9 years ago
  47. 3473315 Reimplement PKCS #3 DH parameter parsing with crypto/bytestring. by David Benjamin · 9 years ago
  48. 52a3bf2 Add checks to X509_NAME_oneline() by David Benjamin · 9 years ago
  49. 56703d9 Make err_data_generator.go silent by default. by David Benjamin · 9 years ago
  50. a2f2bc3 Align with upstream's error strings, take two. by David Benjamin · 9 years ago
  51. fb8e678 Match upstream's error codes for the old sigalg code. by David Benjamin · 9 years ago
  52. 63d9246 Reset crypto/evp error codes. by David Benjamin · 9 years ago
  53. 17727c6 Move all signature algorithm code to crypto/x509. by David Benjamin · 9 years ago
  54. b9824e2 Handle SSL_shutdown while in init more appropriately by Steven Valdez · 9 years ago
  55. 68772b3 Implement new SPKI parsers. by David Benjamin · 9 years ago
  56. fda22a7 Reimplement DSA parsing logic with crypto/asn1. by David Benjamin · 9 years ago
  57. 2f6410b Rewrite ECPrivateKey serialization. by David Benjamin · 9 years ago
  58. 70ab223 Remove ASN1_R_MALLOC_FAILURE. by David Benjamin · 9 years ago
  59. ece5ba2 Reset ssl error codes. by David Benjamin · 9 years ago
  60. cd24a39 Limit DHE groups to 4096-bit. by David Benjamin · 9 years ago
  61. 3fc138e Don't bother sampling __func__. by David Benjamin · 9 years ago
  62. 96c2a28 Fix all sign/unsigned warnings with Clang and GCC. by Adam Langley · 10 years ago
  63. 301afaf Add a run_tests target to run all tests. by David Benjamin · 10 years ago
  64. 76c2efc Forbid a server from negotiating both ALPN and NPN. by David Benjamin · 10 years ago
  65. 73415b6 Move arm_arch.h and fix up lots of include paths. by Adam Langley · 10 years ago
  66. 8a36e53 Avoid using |WIN32| and use |OPENSSL_WINDOWS| instead. by Brian Smith · 10 years ago
  67. 0950563 Implement custom extensions. by Adam Langley · 10 years ago
  68. 33ad2b5 Tidy up extensions stuff and drop fastradio support. by Adam Langley · 10 years ago
  69. 207bb43 ERR_LIB_USER should be the last error. by David Benjamin · 10 years ago
  70. 3570d73 Remove the func parameter to OPENSSL_PUT_ERROR. by David Benjamin · 10 years ago
  71. 34248d4 Get rid of err function codes. by David Benjamin · 10 years ago
  72. 2e857bd Convert the signature algorithms extension to the new system by Adam Langley · 10 years ago
  73. 74f7110 Parse RSAPrivateKey with CBS. by David Benjamin · 10 years ago
  74. c0e245a Parse RSAPublicKey with CBS. by David Benjamin · 10 years ago
  75. 87897a8 Implement ECDSA_SIG_{parse,marshal} with crypto/bytestring. by David Benjamin · 10 years ago
  76. b9c579d Add crypto/bytestring-based BIGNUM DER functions. by David Benjamin · 10 years ago
  77. 5021b22 Convert the renegotiation extension to the new system. by Adam Langley · 10 years ago
  78. 614c66a Add infrastructure for better extension handling. by Adam Langley · 10 years ago
  79. 6cacac0 Promote SSL_CTX_[gs]et_tlsext_ticket_keys to functions. by David Benjamin · 10 years ago
  80. c0fe12c Restore |X509_REQ_print| and friends, from OpenSSL at ce7e647b. by Matt Braithwaite · 10 years ago
  81. b0acb77 Export pkcs1_prefixed_msg as RSA_add_pkcs1_prefix. by David Benjamin · 10 years ago
  82. fd67aa8 Add SSL_SESSION_from_bytes. by David Benjamin · 10 years ago
  83. 24f346d Limit the number of warning alerts silently consumed. by David Benjamin · 10 years ago
  84. 839b881 Multi-prime RSA support. by Adam Langley · 10 years ago
  85. ba5934b Tighten up EMS resumption behaviour. by Adam Langley · 10 years ago
  86. c933a47 Switch the ssl_write_bytes hook to ssl_write_app_data. by David Benjamin · 10 years ago
  87. 074cc04 Reject negative shifts for BN_rshift and BN_lshift. by David Benjamin · 10 years ago
  88. 3fa65f0 Fix some malloc test crashs. by David Benjamin · 10 years ago
  89. 0b635c5 Add malloc test support to unit tests. by David Benjamin · 10 years ago
  90. 31a0779 Factor SSL_AEAD_CTX into a dedicated type. by David Benjamin · 10 years ago
  91. d72e284 Support arbitrary elliptic curve groups. by Adam Langley · 10 years ago
  92. 9b68e72 Define compatibility function |ERR_remove_state|. by Matt Braithwaite · 10 years ago
  93. d6e95ee Get rid of ssl_undefined_* by David Benjamin · 10 years ago
  94. 605641e Move the NULL case in ssl_add_cert_chain up. by David Benjamin · 10 years ago
  95. 7133d42 Promote SNI macros to functions. by David Benjamin · 10 years ago
  96. c280758 Promote channel ID macros to proper functions. by David Benjamin · 10 years ago
  97. 15a3b00 Promote set_tmp_dh and set_tmp_ecdh to functions. by David Benjamin · 10 years ago
  98. 59015c3 Promote all SSL callback ctrl hooks to proper functions. by David Benjamin · 10 years ago
  99. 9febf19 Add do-nothing compatibility function |ERR_load_ERR_strings|. by Matt Braithwaite · 10 years ago
  100. cca4ba7 Remove unnecessary NULL checks, part 3. by David Benjamin · 10 years ago