- fa9796e Add SSL_early_data_reason_string. by David Benjamin · 4 years, 5 months ago
- 0782715 Add raw redeem API. by Steven Valdez · 4 years, 6 months ago
- e9fce74 Const-correct X509V3_extensions_print. by David Benjamin · 4 years, 5 months ago
- 1e8e563 clang-format and convert comments in x509v3.h. by David Benjamin · 4 years, 5 months ago
- c46b173 aarch64: Improve conditional compilation by Tamas Petz · 4 years, 6 months ago
- 51607f1 Implement draft-vvv-tls-alps-01. by Steven Valdez · 4 years, 8 months ago
- 3989c99 Fix crash when flushing an SSL BIO. by David Benjamin · 4 years, 6 months ago
- 6d904d5 Document low-level PEM read/write functions. by David Benjamin · 4 years, 6 months ago
- 5e549fb clang-format pem.h and convert comments. by David Benjamin · 4 years, 6 months ago
- f2b2ef8 Update TrustTokenV2 to use VOPRFs and assemble RR. by Steven Valdez · 4 years, 6 months ago
- 38bcb53 Add a warning to des.h. by David Benjamin · 4 years, 6 months ago
- 9bf1634 Move Trusty workaround to the OPENSSL_LINUX define. by David Benjamin · 4 years, 6 months ago
- 0ee5808 Add a few more OPENSSL_NO_* constants. by David Benjamin · 4 years, 6 months ago
- e0900ac Mirror dsa.h's deprecation notice in dh.h. by David Benjamin · 4 years, 7 months ago
- cefbf9c Const-correct X509_get0_extensions. by David Benjamin · 4 years, 7 months ago
- 3743aaf Add SSL_CIPHER_get_protocol_id. by David Benjamin · 4 years, 6 months ago
- 9adcb0a Add TrustTokenV2. by Steven Valdez · 4 years, 7 months ago
- ee4af9e Add X509_get_pathlen and X509_REVOKED_get0_extensions. by David Benjamin · 4 years, 7 months ago
- 5eeaf30 Add some accommodations for FreeRDP by Adam Langley · 4 years, 7 months ago
- 6d70353 Const-correct X509V3_CONF_METHOD. by David Benjamin · 4 years, 7 months ago
- 49e9f67 Bump OPENSSL_VERSION_NUMBER to 1.1.1. by David Benjamin · 4 years, 7 months ago
- a82cfdf Document more of x509.h. by David Benjamin · 4 years, 7 months ago
- 6ad3b46 Remove ASN1_STRING_length_set. by David Benjamin · 4 years, 7 months ago
- bc24805 Implement PSK variants of HPKE setup functions. by Daniel McArdle · 4 years, 7 months ago
- 4ef5de0 Document a few more functions in x509.h. by David Benjamin · 4 years, 7 months ago
- 298d8be Add subject key ID and authority key ID accessors. by David Benjamin · 4 years, 7 months ago
- 1c58648 Remove sxnet and pkey_usage_period extensions. by David Benjamin · 4 years, 10 months ago
- 125a38f Const-correct various X509 functions. by David Benjamin · 4 years, 8 months ago
- 95d8eaa Make X509_set_not{Before,After} functions rather than macros. by David Benjamin · 4 years, 8 months ago
- 48cb69f Add X509_get0_uids from OpenSSL 1.1.0. by David Benjamin · 4 years, 8 months ago
- 9372f38 Bound RSA and DSA key sizes better. by David Benjamin · 4 years, 8 months ago
- c947efa Add set1 versions of X509 timestamp setters. by David Benjamin · 4 years, 8 months ago
- a0b49d6 aarch64: support BTI and pointer authentication in assembly by Tamas Petz · 4 years, 10 months ago
- dcd6e44 Support delegated credentials verison 06 by Watson Ladd · 4 years, 8 months ago
- 74161f4 Enforce presence of ALPN when QUIC is in use. by Nick Harper · 4 years, 8 months ago
- 7d3a24d Fix the naming of alert error codes. by David Benjamin · 4 years, 8 months ago
- db129f3 Add X509_SIG_get0 and X509_SIG_getm. by David Benjamin · 4 years, 8 months ago
- cac9392 Disallow TLS 1.3 compatibility mode in QUIC. by Nick Harper · 5 years ago
- eda849d Opaquify PKCS8_PRIV_KEY_INFO. by David Benjamin · 4 years, 9 months ago
- 5d7c2f8 Implement i2d_PUBKEY and friends without crypto/asn1. by David Benjamin · 4 years, 9 months ago
- d0637e9 Remove TRUST_TOKEN_experiment_v0. by Steven Valdez · 4 years, 10 months ago
- b9fbf40 Clarify in-place rules for low-level AES mode functions. by David Benjamin · 4 years, 9 months ago
- 25638f0 Remove x509->name. by David Benjamin · 4 years, 9 months ago
- 939d426 Maybe build for AArch64 Windows. by Adam Langley · 4 years, 9 months ago
- 5fa22ed Avoid relying on SSL_get_session's behavior during the handshake. by David Benjamin · 4 years, 10 months ago
- 86f86cb Add missing OPENSSL_EXPORT to X509_get_X509_PUBKEY. by David Benjamin · 4 years, 9 months ago
- 430a742 Const-correct various functions in crypto/asn1. by David Benjamin · 4 years, 10 months ago
- 33f8d33 Convert X.509 accessor macros to proper functions. by David Benjamin · 4 years, 10 months ago
- d206a11 Remove X509_CINF_get_issuer and X509_CINF_get_extensions. by David Benjamin · 4 years, 10 months ago
- beaf594 Remove X509_get_signature_type. by David Benjamin · 4 years, 10 months ago
- 991d31b clang-format x509.h and run comment converter. by David Benjamin · 4 years, 10 months ago
- a3cc778 Remove some unimplemented prototypes. by David Benjamin · 4 years, 10 months ago
- dd86e75 Check the X.509 version when parsing. by David Benjamin · 4 years, 10 months ago
- fd86eaa Fix x509v3_cache_extensions error-handling. by David Benjamin · 4 years, 10 months ago
- 53a17f5 Add a |SSL_process_tls13_new_session_ticket|. by Adam Langley · 4 years, 10 months ago
- 8519432 Modify how QUIC 0-RTT go/no-go decision is made. by Nick Harper · 4 years, 11 months ago
- 9701e84 Remove RAND_set_urandom_fd. by David Benjamin · 5 years ago
- 8f12996 Fix docs link for SSL_CTX_load_verify_locations by Anna Sarai Rosenberg · 4 years, 11 months ago
- 3e4dfbb Add CRYPTO_pre_sandbox_init. by David Benjamin · 5 years ago
- 7c52299 Restrict when 0-RTT will be accepted in QUIC. by Nick Harper · 5 years ago
- 5430473 Use token hash to encode private metadata for Trust Token Experiment V1. by Steven Valdez · 5 years ago
- aa764c4 Introduce TRUST_TOKENS_experiment_v1. by David Benjamin · 5 years ago
- 239634d Introduce a TRUST_TOKEN_METHOD hook to select TRUST_TOKEN variations. by David Benjamin · 5 years ago
- 17078f2 Fix the types used in token counts. by David Benjamin · 5 years ago
- b1086cd Harden against fork via MADV_WIPEONFORK. by David Benjamin · 6 years ago
- a27ed58 Add missing ERR_LIB_TRUST_TOKEN constants. by David Benjamin · 5 years ago
- 78987bb Implement DLEQ checks for Trust Token. by Steven Valdez · 5 years ago
- 538a124 Trust Token Implementation. by Steven Valdez · 5 years ago
- 3c11bf5 Add SHA-512-256. by Adam Langley · 5 years ago
- f9e0cda Add SSL_SESSION_copy_without_early_data. by David Benjamin · 5 years ago
- 72cff81 Require QUIC method with Transport Parameters and vice versa by Nick Harper · 5 years ago
- cdc5c18 Add simpler getters for DH and DSA. by David Benjamin · 5 years ago
- 5cd0724 Add X509_STORE_CTX_get0_chain. by David Benjamin · 5 years ago
- 0064c29 Add DH_set_length. by David Benjamin · 5 years ago
- 964256d Add |SSL_CTX_get0_chain|. by Adam Langley · 5 years ago
- 959c76d Fix comment for |BORINGSSL_self_test|. by Adam Langley · 5 years ago
- 0b710a3 Trust Token Key Generation. by Steven Valdez · 5 years ago
- 1e85905 Revise QUIC encryption secret APIs. by David Benjamin · 5 years ago
- 6432bb4 Add ECDSA_SIG_get0_r and ECDSA_SIG_get0_s. by Shelley Vohr · 5 years ago
- a12a249 Const-correct various X509_NAME APIs. by David Benjamin · 5 years ago
- 754d4c9 Fix client handling of 0-RTT rejects with cipher mismatch. by David Benjamin · 5 years ago
- 0dc70e4 Add X509_getm_notBefore and X509_getm_notAfter. by David Benjamin · 5 years ago
- f9cc26f Require handshake flights end at record boundaries. by David Benjamin · 5 years ago
- 7e43e2e Add more convenient RSA getters. by David Benjamin · 5 years ago
- 1766935 Remove SSL_CTX_set_ed25519_enabled. by David Benjamin · 5 years ago
- f0a815c Add SSL_set_verify_algorithm_prefs. by David Benjamin · 5 years ago
- 10165d8 Add SSL_AD_NO_APPLICATION_PROTOCOL by David Schinazi · 5 years ago
- 032fc66 Add 109 and 120 to SSL_alert_desc_string_long by David Schinazi · 5 years ago
- 1cc95ac Define EVP compatibility constants for X448 and Ed448. by David Benjamin · 5 years ago
- a965a25 Add a few little-endian functions to CBS/CBB. by Adam Langley · 5 years ago
- f249840 Remove SSL_CTX_set_rsa_pss_rsae_certs_enabled. by David Benjamin · 5 years ago
- 0deb91a Clarify that we perform the point-on-curve check. by David Benjamin · 5 years ago
- 056035e Remove alignment requirement on CRYPTO_poly1305_finish. by David Benjamin · 5 years ago
- 0df6edf Split BN_prime_checks into two constants for generation and validation. by David Benjamin · 5 years ago
- 82dbb53 bytestring: add methods for int64. by Matthew Braithwaite · 5 years ago
- e0d95ad Remove post-quantum experiment signal extension. by David Benjamin · 5 years ago
- 35c1075 Give ERR_error_string_n a return value for convenience. by David Benjamin · 5 years ago
- 706da62 Add stub functions for RSA-PSS keygen parameters. by Shelley Vohr · 5 years ago
- b11902a HelloRetryRequest getter by Kris Kwiatkowski · 6 years ago
- 3ab3b12 Add compatibility functions for sigalgs by Shelley Vohr · 5 years ago