Gitiles
Code Review
Sign In
gerrit.openfyde.cn
/
boringssl.googlesource.com
/
boringssl
/
1682126fd81ca12089323b936484e17285c36602
/
ssl
/
tls13_server.cc
1682126
Add Experiment 2
by Steven Valdez
· 8 years ago
a861460
Make SNI per-connection, not per-session.
by David Benjamin
· 8 years ago
74795b3
More miscellaneous bools.
by David Benjamin
· 8 years ago
046bc1f
SSL3_STATE ints to bools.
by David Benjamin
· 8 years ago
fd45ee7
Replace bits in SSL_HANDSHAKE with bool.
by David Benjamin
· 8 years ago
c11ea942
Convert comments in ssl.
by David Benjamin
· 8 years ago
4d71a9a
Migrate TLS 1.2 and below state machines to the new style.
by Steven Valdez
· 8 years ago
f60bcfb
Make SSL_state_string_long work for TLS 1.3.
by David Benjamin
· 8 years ago
f4ecc84
Prevent both early data and custom extensions from being accepted.
by Steven Valdez
· 8 years ago
7934f08
Replace init_msg/init_num with a get_message hook.
by David Benjamin
· 8 years ago
8f94c31
Replace reuse_message with an explicit next_message call.
by David Benjamin
· 8 years ago
9bbdf58
Remove expect and received flight hooks.
by David Benjamin
· 8 years ago
37af90f
Convert a few more scopers.
by David Benjamin
· 8 years ago
6dc8bf6
Convert SSL_TRANSCRIPT to C++.
by David Benjamin
· 8 years ago
31b0c9b
Add a bunch of scopers.
by David Benjamin
· 8 years ago
e39ac8f
Switch BORINGSSL_INTERNAL_CXX_TYPES in favor of subclassing games.
by David Benjamin
· 8 years ago
1386aad
Switch various things to scopers.
by David Benjamin
· 8 years ago
86e95b8
Move libssl's internals into the bssl namespace.
by David Benjamin
· 8 years ago
3a1dd46
Add async certificate verification callback.
by David Benjamin
· 8 years ago
d304a2f
Switch tls13_client and tls13_server to C++.
by David Benjamin
· 8 years ago
[Renamed (97%) from ssl/tls13_server.c]
038da9b
Move the version to an extension in the experimental TLS 1.3 encoding.
by Steven Valdez
· 8 years ago
520e122
Implement experimental alternate encoding of TLS 1.3.
by Steven Valdez
· 8 years ago
c3648fa
Add tests for SSL_VERIFY_PEER_IF_NO_OBC and fix TLS 1.3.
by David Benjamin
· 8 years ago
4414874
Simplify ssl_private_key_* state machine points.
by David Benjamin
· 8 years ago
e831a81
Adding support for sending early data on the client.
by Steven Valdez
· 8 years ago
de254b4
Enforce max_early_data_size on the server.
by Alessandro Ghedini
· 8 years ago
6952211
Support Ed25519 in TLS.
by David Benjamin
· 8 years ago
67bb45f
Support enabling early data on SSL
by Alessandro Ghedini
· 8 years ago
681eb6a
Adding support for receiving early data on the server.
by Steven Valdez
· 9 years ago
2a07072
Prevent Channel ID and Custom Extensions on 0-RTT.
by Steven Valdez
· 8 years ago
794cc59
Send half-RTT tickets when negotiating 0-RTT.
by David Benjamin
· 8 years ago
3cb1246
Remove session_tickets_sent.
by David Benjamin
· 8 years ago
2d85062
Add Data-less Zero-RTT support.
by Steven Valdez
· 9 years ago
707af29
Support asynchronous ticket decryption with TLS 1.3.
by David Benjamin
· 8 years ago
be49706
Rename initial_ctx to session_ctx.
by David Benjamin
· 8 years ago
35ac5b7
Export server-side ticket_age skew.
by David Benjamin
· 8 years ago
924a352
Remove experimental TLS 1.3 short record header extension.
by Steven Valdez
· 8 years ago
45738dd
Move new_cipher and new_session to SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
27a9e6a
Adding ALPN to session.
by Steven Valdez
· 8 years ago
46db7af
Remove |X509| things from SSL_SESSION.
by Adam Langley
· 8 years ago
908ac19
Moving transcript and PRF functions to SSL_TRANSCRIPT.
by Steven Valdez
· 9 years ago
c68e5b9
Establish that the default value of an out-arg for alerts is SSL_AD_DECODE_ERROR.
by Adam Langley
· 8 years ago
33fe4a0
Remove support for setting per-connection default session timeout
by Alessandro Ghedini
· 8 years ago
2f82a0e
Don't stash tlsext_hostname in ssl_get_new_session.
by Steven Valdez
· 8 years ago
daa0539
Remove an unnecessary TLS 1.3 ClientHello state.
by David Benjamin
· 8 years ago
17b3083
Use a separate timeout scheme for TLS 1.3.
by David Benjamin
· 8 years ago
f71036e
Remove ssl_hash_message_t from ssl_get_message.
by David Benjamin
· 8 years ago
276b7e8
Move optional message type checks out of ssl_get_message.
by David Benjamin
· 8 years ago
0f24bed
Rename tls13_prepare_* to tls13_add_*.
by David Benjamin
· 9 years ago
81b7bc3
Trim unnecessary TLS 1.3 states.
by David Benjamin
· 9 years ago
25ac251
Remove write_message from TLS 1.3 handshakes.
by David Benjamin
· 9 years ago
daf207a
Don't use the buffer BIO in TLS.
by David Benjamin
· 9 years ago
08b65f4
Enabling 0-RTT on new Session Tickets.
by Steven Valdez
· 9 years ago
650aa1c
Clean up certificate auto-chaining.
by David Benjamin
· 9 years ago
6f600d6
Add experimental TLS 1.3 short record header extension.
by David Benjamin
· 9 years ago
17cf2cb
Work around language and compiler bug in memcpy, etc.
by David Benjamin
· 9 years ago
4cb8494
Splitting handshake traffic derivation from key change.
by Steven Valdez
· 9 years ago
0c29425
Don't use |X509_get_pubkey| in TLS 1.3 code either.
by Adam Langley
· 9 years ago
364f7a6
Push the difference in chain semantics to the edge.
by Adam Langley
· 9 years ago
3977f30
Rename hs->state to hs->tls13_state.
by David Benjamin
· 9 years ago
c0fc7a1
Revert "Add |SSL_CTX_set0_buffer_pool|." and "Hold certificates in an SSL_SESSION as CRYPTO_BUFFERSs as well."
by Adam Langley
· 9 years ago
e850909
Hold certificates in an SSL_SESSION as CRYPTO_BUFFERSs as well.
by Adam Langley
· 9 years ago
731058e
Typedef ssl_early_callback_ctx to SSL_CLIENT_HELLO.
by David Benjamin
· 9 years ago
f3c8f8d
Pass explicit parameters elsewhere.
by David Benjamin
· 9 years ago
8baf963
Pass explicit hs parameters to ssl_ext_*.
by David Benjamin
· 9 years ago
6e4fc33
Pass explicit hs parameters to tls13_*.c.
by David Benjamin
· 9 years ago
8c880a2
Pass explicit hs parameters to kExtensions callbacks.
by David Benjamin
· 9 years ago
c3c8882
Match state machine functions with new calling convention.
by David Benjamin
· 9 years ago
8f820b4
Clean up resumption secret "derivation" step.
by David Benjamin
· 9 years ago
f01f42a
Negotiate ciphers before resumption.
by David Benjamin
· 9 years ago
34202b9
Call cert_cb before resolving resumption.
by David Benjamin
· 9 years ago
4eb95cc
Parse ClientHello extensions before deciding on resumption.
by David Benjamin
· 9 years ago
6929f27
Fix return values for TLS 1.3 state machine code.
by David Benjamin
· 9 years ago
75f9914
Align TLS 1.2 and 1.3 server session validity checks.
by David Benjamin
· 9 years ago
a833c35
Update to TLS 1.3 draft 18.
by Steven Valdez
· 9 years ago
ced9479
Replace hash_current_message with get_current_message.
by David Benjamin
· 9 years ago
5eead16
Splitting finish_message to finish_message/queue_message.
by Steven Valdez
· 9 years ago
c5ac2b6
Rename X.509 members in |SSL_SESSION| and |CERT|.
by Adam Langley
· 9 years ago
123db57
Measure session->timeout from ticket issuance.
by David Benjamin
· 9 years ago
0a011fc
Flush TLS 1.3 NewSessionTicket messages together.
by David Benjamin
· 9 years ago
abbbee1
Detach TLS 1.3 cipher configuration from the cipher language.
by David Benjamin
· 9 years ago
9ef31f0
Negotiate the cipher suite before ALPN.
by David Benjamin
· 9 years ago
b6b6ff3
Verifying resumption cipher validity with current configuration.
by Steven Valdez
· 9 years ago
079b394
Always enable GREASE for TLS 1.3 NewSessionTicket.
by David Benjamin
· 9 years ago
60a85cb
Implement ChannelID for TLS 1.3.
by Nick Harper
· 9 years ago
3ef7697
Don't accept {sha1, ecdsa} and {sha512, ecdsa}.
by David Benjamin
· 9 years ago
3baa6e1
Implement draft 16 HelloRetryRequest and cookie.
by David Benjamin
· 9 years ago
c4aa727
Updating Key Schedule and KeyUpdate to draft 16.
by Steven Valdez
· 9 years ago
a048678
Move some fields from tmp to hs.
by David Benjamin
· 9 years ago
1a5e8ec
Apply GREASE to TLS 1.3 tickets.
by David Benjamin
· 9 years ago
803c77a
Update crypto negotation to draft 15.
by Steven Valdez
· 9 years ago
5b98608
Updating NewSessionTicket message and updating PSK to Draft 15.
by Steven Valdez
· 9 years ago
7e1f984
Fix some bugs in TLS 1.3 server key_share code.
by David Benjamin
· 9 years ago
2c66e07
Don't send the access_denied alert innappropriately.
by David Benjamin
· 9 years ago
3d458dc
Revert of Determining certificate_auth and key_exchange based on SSL.
by David Benjamin
· 9 years ago
bd09ecc
Determining certificate_auth and key_exchange based on SSL.
by Steven Valdez
· 9 years ago
0fc37ef
Fix a number of sigalg scope issues.
by David Benjamin
· 9 years ago
7aa31d6
Remove ssl->verify_result.
by David Benjamin
· 9 years ago
dd634eb
s/nginx/NGINX/
by David Benjamin
· 9 years ago
3764683
Have |SSL_get_verify_result| return |X509_V_OK| when no client certificate is given.
by Adam Langley
· 9 years ago
Next »