1. 1682126 Add Experiment 2 by Steven Valdez · 8 years ago
  2. e51fb0f Fix empty fragment handling in DTLS message reassembly. by David Benjamin · 8 years ago
  3. d0beda0 Properly report SSL_session_reused after a renegotiation. by David Benjamin · 8 years ago
  4. 0a47191 Test empty extensions fields are omitted. by David Benjamin · 8 years ago
  5. 3969fdf Test invalid certificates. by David Benjamin · 8 years ago
  6. f216507 Cut down on some redundant flags. by David Benjamin · 8 years ago
  7. 5c4271f Don't reauthenticate on renegotiation. by David Benjamin · 8 years ago
  8. 302b818 Only enable DTLS post-handshake rexmits if we sent the final Finished. by David Benjamin · 8 years ago
  9. f4ecc84 Prevent both early data and custom extensions from being accepted. by Steven Valdez · 8 years ago
  10. bd70845 Add tests for CertificateVerify by Dimitar Vlahovski · 8 years ago
  11. 4a37de0 Test that Finished checks are enforced in 0-RTT. by David Benjamin · 8 years ago
  12. f6ae9e6 Fix more hard-coded TLS 1.3 variant strings. by David Benjamin · 8 years ago
  13. 78b8b99 Fix a bug in and test the message callback. by David Benjamin · 8 years ago
  14. b0c761e Tolerate early ChangeCipherSpec in DTLS. by David Benjamin · 8 years ago
  15. 182b573 Don't set timeout in runner when using GDB. by Adam Langley · 8 years ago
  16. e6c58ff go fmt runner.go by Adam Langley · 8 years ago
  17. 10e1060 Send correct fatal alert the renegotation extension fails to match. by Adam Langley · 8 years ago
  18. 0e4a448 Add ClientHello no_session_id variant. by Steven Valdez · 8 years ago
  19. 3a1dd46 Add async certificate verification callback. by David Benjamin · 8 years ago
  20. 09ed119 Test that record-splitting splits records. by David Benjamin · 8 years ago
  21. b853f31 Fix handling of ServerHellos with omitted extensions. by David Benjamin · 8 years ago
  22. c386440 Add some timestamps to connect/accept failures. by David Benjamin · 8 years ago
  23. dbe0158 Implement ContentType TLS 1.3 variant. by Steven Valdez · 8 years ago
  24. a502239 Actually test the TLS 1.3 experimental variant. by David Benjamin · 8 years ago
  25. 038da9b Move the version to an extension in the experimental TLS 1.3 encoding. by Steven Valdez · 8 years ago
  26. 520e122 Implement experimental alternate encoding of TLS 1.3. by Steven Valdez · 8 years ago
  27. d9cbb53 Fix SSL_version on 0-RTT. by David Benjamin · 8 years ago
  28. a1ce856 Test record splitting at all ciphers. by David Benjamin · 8 years ago
  29. 634f475 Test the Channel IDs are not requested without ECDHE. by David Benjamin · 8 years ago
  30. c3648fa Add tests for SSL_VERIFY_PEER_IF_NO_OBC and fix TLS 1.3. by David Benjamin · 8 years ago
  31. 364af78 Add some cipher negotiation tests. by David Benjamin · 8 years ago
  32. 413e79e Test the client rejects invalid compression methods from the server. by David Benjamin · 8 years ago
  33. 9343b0b Don't check renegotiation_info in fuzzer mode. by David Benjamin · 8 years ago
  34. 0fde2eb Update TLS fuzzer format with prepended settings. by David Benjamin · 8 years ago
  35. c94998a Revise version negotiation on the Go half. by Steven Valdez · 8 years ago
  36. 353577c Fix SSL_set_{min,max}_proto_version APIs in invalid versions. by David Benjamin · 8 years ago
  37. 5aaaa98 Detect WatchGuard's TLS 1.3 interference failure mode. by David Benjamin · 8 years ago
  38. e831a81 Adding support for sending early data on the client. by Steven Valdez · 8 years ago
  39. 24e5886 Add a test for invalid alert types. by David Benjamin · 8 years ago fips-20170615
  40. 2d04cf0 Test with IPv6 by default, and IPv4 only if that fails. by Matthew Braithwaite · 8 years ago
  41. 873ebc9 Improve TestConfig flags for initial and resumption connections. by Steven Valdez · 8 years ago
  42. 4d1f4ba Timeout the shim on Accept and Wait. by David Benjamin · 8 years ago
  43. 2997589 Unwind DHE support from BoGo. by David Benjamin · 8 years ago
  44. c88f245 Don't print message when waiting for urandom entropy. by Adam Langley · 8 years ago
  45. 4b65693 Make runner ignore entropy warnings. by Adam Langley · 8 years ago
  46. de254b4 Enforce max_early_data_size on the server. by Alessandro Ghedini · 8 years ago
  47. 71c21b4 Add SSL_CTX_set_verify_algorithm_prefs. by David Benjamin · 8 years ago
  48. 96bc12a Remove includeDHE from runner.go. by David Benjamin · 8 years ago
  49. 3cfeb95 Disable SSLv3 by default. by David Benjamin · 8 years ago
  50. bbba939 Acknowledge KeyUpdate messages. by David Benjamin · 8 years ago
  51. ebacdee Add SendServerHelloAsHelloRetryRequest test. by David Benjamin · 8 years ago
  52. 6952211 Support Ed25519 in TLS. by David Benjamin · 8 years ago
  53. c8ff30c Add an option to allow unknown ALPN protocols. by David Benjamin · 8 years ago 3071 chromium-3071
  54. 6bb507b Add missing tests for the Channel ID / 0-RTT interaction. by David Benjamin · 8 years ago
  55. 764ab98 Support and test P-224 certificates. by Adam Langley · 8 years ago
  56. 8c26d75 Test the behavior of running SSL_do_handshake twice in a row. by David Benjamin · 8 years ago
  57. 681eb6a Adding support for receiving early data on the server. by Steven Valdez · 9 years ago
  58. 32c8927 Add a test for missing end_of_early_data. by David Benjamin · 8 years ago
  59. 065d733 Test ticket age skew when resuming a resumed session. by David Benjamin · 8 years ago
  60. 2a07072 Prevent Channel ID and Custom Extensions on 0-RTT. by Steven Valdez · 8 years ago
  61. 794cc59 Send half-RTT tickets when negotiating 0-RTT. by David Benjamin · 8 years ago
  62. e3843d4 Run all state machine coverage tests on implicit handshake. by David Benjamin · 8 years ago
  63. bbf4246 Add a test that ALPN is rejected on renegotiation. by David Benjamin · 8 years ago
  64. 2d85062 Add Data-less Zero-RTT support. by Steven Valdez · 9 years ago
  65. cedc6f1 Remove DHE ciphersuites from TLS. by Matthew Braithwaite · 8 years ago
  66. 35ac5b7 Export server-side ticket_age skew. by David Benjamin · 8 years ago
  67. 924a352 Remove experimental TLS 1.3 short record header extension. by Steven Valdez · 8 years ago
  68. a58baaf Forbid the server certificate from changing on renego. by David Benjamin · 8 years ago
  69. 11c8289 Remove support for blocking DTLS timeout handling. by David Benjamin · 8 years ago
  70. 2ff7933 Add test for |SSL_get_client_CA_list|. by Adam Langley · 8 years ago
  71. 898be92 Support P-224 certificates as a server. by Adam Langley · 8 years ago
  72. 07ab5d4 Stop skipping stray HelloRequests. by David Benjamin · 8 years ago
  73. 7ebe61a Fix server-side KeyUpdates. by David Benjamin · 8 years ago
  74. d4c349b Test various lengths of ticket session IDs. by David Benjamin · 8 years ago
  75. cdb6fe9 Test the exporter at all versions + ciphers + side. by David Benjamin · 8 years ago
  76. 3bd57e3 Remove remnants of non-standard ECDHE_PSK GCM ciphers. by David Benjamin · 8 years ago
  77. 023d419 Test that we tolerate server name acknowledgements. by David Benjamin · 8 years ago
  78. ab20cec Read 0-RTT data in Bogo. by Nick Harper · 9 years ago
  79. f2511f1 Send 0-RTT data in bogo. by Nick Harper · 9 years ago
  80. daa0539 Remove an unnecessary TLS 1.3 ClientHello state. by David Benjamin · 8 years ago
  81. 17b3083 Use a separate timeout scheme for TLS 1.3. by David Benjamin · 8 years ago
  82. b5c58db TLS 1.3 sessions should not be added to the server session cache. by David Benjamin · 8 years ago
  83. 9b16066 Ignore 0-RTT-capable tickets unless enabled. by David Benjamin · 8 years ago
  84. 2e83924 Remove old ChaCha20-Poly1305 AEAD. by Adam Langley · 8 years ago
  85. 5322010 Revert "Remove old ChaCha20-Poly1305 AEAD." by Adam Langley · 8 years ago
  86. def9b46 Remove old ChaCha20-Poly1305 AEAD. by Adam Langley · 8 years ago
  87. e3fbb36 Test SSL_set_max_send_fragment. by David Benjamin · 9 years ago
  88. d261004 Report TLS 1.3 as supporting secure renegotiation. by David Benjamin · 9 years ago
  89. 9c33ae8 Fix TLS 1.3 NewSessionTicket processing. by David Benjamin · 9 years ago
  90. 08b65f4 Enabling 0-RTT on new Session Tickets. by Steven Valdez · 9 years ago
  91. a1eaba1 Add a test for renegotiation on busy write buffer. by David Benjamin · 9 years ago
  92. a81967b Add tests for the point format extension. by David Benjamin · 9 years ago
  93. 6f600d6 Add experimental TLS 1.3 short record header extension. by David Benjamin · 9 years ago
  94. 56cadc3 Assert on the alert sent on FALLBACK_SCSV. by David Benjamin · 9 years ago
  95. b442dee Rename FallbackSCSV-MatchVersion. by David Benjamin · 9 years ago
  96. 65fb425 Remove version-specific cipher lists. by David Benjamin · 9 years ago
  97. a4b9198 Make TLS 1.3 check ECDSA KeyUsage and add test. by Adam Langley · 9 years ago
  98. aa01204 Move per-cipher-suite tests into a separate function. by David Benjamin · 9 years ago
  99. db5bd72 Move key_share extension check with ECDHE code. by David Benjamin · 9 years ago
  100. f1050fd Preserve the peer signature algorithm across resumes. by David Benjamin · 9 years ago