- 879efc3 Switch more things to Array. by David Benjamin · 8 years ago
- 08f5c76 Convert more things to Array. by David Benjamin · 8 years ago
- a861460 Make SNI per-connection, not per-session. by David Benjamin · 8 years ago
- 74795b3 More miscellaneous bools. by David Benjamin · 8 years ago
- 046bc1f SSL3_STATE ints to bools. by David Benjamin · 8 years ago
- fd45ee7 Replace bits in SSL_HANDSHAKE with bool. by David Benjamin · 8 years ago
- d816874 Set SSL_in_init to false before new_session_cb. by Steven Valdez · 8 years ago
- c11ea942 Convert comments in ssl. by David Benjamin · 8 years ago
- 4d71a9a Migrate TLS 1.2 and below state machines to the new style. by Steven Valdez · 8 years ago
- 5ef40c6 Mark renego-established sessions not resumable. by David Benjamin · 8 years ago
- 8fc2dc0 Put SCTs and OCSP responses in CRYPTO_BUFFERs. by David Benjamin · 8 years ago
- 72912d2 Rotate the default ticket encryption key. by Martin Kreichgauer · 8 years ago
- 70dbf04 Add SSL_CTX_cipher_in_group. by David Benjamin · 8 years ago
- 7934f08 Replace init_msg/init_num with a get_message hook. by David Benjamin · 8 years ago
- 8f94c31 Replace reuse_message with an explicit next_message call. by David Benjamin · 8 years ago
- e3dee27 Remove the free_buffer parameter to release_current_message. by David Benjamin · 8 years ago
- 27e377e Fix miscellaneous clang-tidy warnings. by David Benjamin · 8 years ago
- 31b0c9b Add a bunch of scopers. by David Benjamin · 8 years ago
- e39ac8f Switch BORINGSSL_INTERNAL_CXX_TYPES in favor of subclassing games. by David Benjamin · 8 years ago
- 1386aad Switch various things to scopers. by David Benjamin · 8 years ago
- cfc11c2 C++-ify SSL_AEAD_CTX. by David Benjamin · 8 years ago
- 86e95b8 Move libssl's internals into the bssl namespace. by David Benjamin · 8 years ago
- 3a1dd46 Add async certificate verification callback. by David Benjamin · 8 years ago
- a3d76d0 Switch OPENSSL_COMPILE_ASSERT to static_assert in C++ code. by David Benjamin · 8 years ago
- f526081 Switch ssl_aead_ctx, ssl_file, and ssl_lib to C++. by David Benjamin · 8 years ago[Renamed (98%) from ssl/ssl_lib.c]
- 52586f9 Adding TLS 1.3 variant to SSL*. by Steven Valdez · 8 years ago
- 520e122 Implement experimental alternate encoding of TLS 1.3. by Steven Valdez · 8 years ago
- 8f36c51 Revise version negotiation logic on the C side. by Steven Valdez · 8 years ago
- 05d4c97 Simplify SSL_get0_next_proto_negotiated. by David Benjamin · 8 years ago
- 0a9bf66 Clean up some duplicated code. by David Benjamin · 8 years ago
- fc08dfc Rename {ssl,ctx}->{min,max}_version. by David Benjamin · 8 years ago
- ca74358 Test SSL_select_next_proto and SSL_get_fd. by David Benjamin · 8 years ago
- 0391f16 Fix some malloc failure handling. by David Benjamin · 8 years ago
- e831a81 Adding support for sending early data on the client. by Steven Valdez · 8 years ago
- d94682d Remove ex_data's dup hook. by David Benjamin · 8 years ago
- 93731d9 Remove old SSL min/max version functions. by David Benjamin · 8 years ago
- 71c21b4 Add SSL_CTX_set_verify_algorithm_prefs. by David Benjamin · 8 years ago
- 7e06de5 Really remove DHE ciphersuites from TLS. by Matthew Braithwaite · 8 years ago
- 3cfeb95 Disable SSLv3 by default. by David Benjamin · 8 years ago
- c8ff30c Add an option to allow unknown ALPN protocols. by David Benjamin · 8 years ago 3071 chromium-3071
- 67bb45f Support enabling early data on SSL by Alessandro Ghedini · 8 years ago
- 681eb6a Adding support for receiving early data on the server. by Steven Valdez · 9 years ago
- 7d2dbc3 Add a comment around the set_{min,max}_version logic. by David Benjamin · 8 years ago
- 2d85062 Add Data-less Zero-RTT support. by Steven Valdez · 9 years ago
- 57e81e6 Name |select_certificate_cb| return values by Alessandro Ghedini · 8 years ago
- 4c341d0 Support asynchronous ticket decryption with TLS 1.0–1.2. by Adam Langley · 8 years ago
- be49706 Rename initial_ctx to session_ctx. by David Benjamin · 8 years ago
- 6ad20dc Move error-on-empty-cipherlist into ssl_create_cipher_list(). by Matthew Braithwaite · 8 years ago
- 35ac5b7 Export server-side ticket_age skew. by David Benjamin · 8 years ago
- fe36672 Allow users of the |CRYPTO_BUFFER|-based methods to verify certs after the handshake. by Adam Langley · 8 years ago
- 8ebeabf Add SSL_CTX_get_ciphers. by David Benjamin · 8 years ago
- 924a352 Remove experimental TLS 1.3 short record header extension. by Steven Valdez · 8 years ago
- ad8f5e1 Don't use long for timestamps. by David Benjamin · 8 years ago
- 2a3b343 Move X509-related verification code into ssl_x509.c. by Adam Langley · 8 years ago
- 34b4c82 Hold CA names as |CRYPTO_BUFFER|s. by Adam Langley · 8 years ago
- a57dcfb Add new cipherlist-setting APIs that reject nonsense. by Matthew Braithwaite · 8 years ago
- fc02b59 Move tmp.extended_master_secret to SSL_HANDSHAKE. by David Benjamin · 8 years ago
- 45738dd Move new_cipher and new_session to SSL_HANDSHAKE. by David Benjamin · 8 years ago
- 12709db Stop reporting SSL_R_SHUTDOWN_WHILE_IN_INIT. by David Benjamin · 8 years ago
- 5960a90 Move sid_ctx from SSL/SSL_CTX to CERT. by David Benjamin · 8 years ago
- 26e1ff3 Remove some unnecessary return values. by David Benjamin · 8 years ago
- 83a3212 Move SCT lists and OCSP responses to CERT. by David Benjamin · 8 years ago
- 9e766d7 Unexport the handshake's internal state. by David Benjamin · 8 years ago
- 908ac19 Moving transcript and PRF functions to SSL_TRANSCRIPT. by Steven Valdez · 9 years ago
- 3509dac Add |X509_METHOD| and, using it, move many functions to ssl_x509.c. by Adam Langley · 8 years ago
- 8df6766 Support setting per-connection SCT list by Alessandro Ghedini · 8 years ago
- 33fe4a0 Remove support for setting per-connection default session timeout by Alessandro Ghedini · 8 years ago
- 17b3083 Use a separate timeout scheme for TLS 1.3. by David Benjamin · 8 years ago
- 0b1bb12 Push the SSL_CTX session_timeout zero logic up. by David Benjamin · 8 years ago
- 3a2b47a Don't use |X509| objects in |CERT|, by default. by Adam Langley · 8 years ago
- daf207a Don't use the buffer BIO in TLS. by David Benjamin · 9 years ago
- 1a999cf Don't use the buffer BIO in DTLS. by David Benjamin · 9 years ago
- 6d50f47 Remove support for RSA premaster logging. by David Benjamin · 8 years ago
- d1515a3 Move a number of X.509 functions from ssl_lib.c to ssl_x509.c by Adam Langley · 8 years ago
- 07820b5 Add a getter for SSL_set_session_id_context. by David Benjamin · 9 years ago
- d261004 Report TLS 1.3 as supporting secure renegotiation. by David Benjamin · 9 years ago
- 08b65f4 Enabling 0-RTT on new Session Tickets. by Steven Valdez · 9 years ago
- 2be4aa7 Add a helper function for resetting SSL_get_error state. by David Benjamin · 9 years ago
- f650c71 Use SSL_CTX_up_ref to up-ref an SSL_CTX. by David Benjamin · 9 years ago
- 6f600d6 Add experimental TLS 1.3 short record header extension. by David Benjamin · 9 years ago
- 17cf2cb Work around language and compiler bug in memcpy, etc. by David Benjamin · 9 years ago
- 65fb425 Remove version-specific cipher lists. by David Benjamin · 9 years ago
- 629db8c Add |SSL_get_peer_full_cert_chain|. by Adam Langley · 9 years ago
- f1050fd Preserve the peer signature algorithm across resumes. by David Benjamin · 9 years ago
- 4882a6c Replace key_exchange_info with group_id. by David Benjamin · 9 years ago
- 5488122 Remove SSL_get_dhe_group_size. by David Benjamin · 9 years ago
- d519bf6 Add |SSL_CTX_set0_buffer_pool|. by Adam Langley · 9 years ago
- 364f7a6 Push the difference in chain semantics to the edge. by Adam Langley · 9 years ago
- cb0c29f Move state and next_state to SSL_HANDSHAKE. by David Benjamin · 9 years ago
- 2644a13 Set up the SSL_HANDSHAKE object earlier. by David Benjamin · 9 years ago
- 287fc4f Don't use SSL_want_* macros internally. by David Benjamin · 9 years ago
- c0fc7a1 Revert "Add |SSL_CTX_set0_buffer_pool|." and "Hold certificates in an SSL_SESSION as CRYPTO_BUFFERSs as well." by Adam Langley · 9 years ago
- 651aaef Remove CECPQ1 (experimental post-quantum key agreement). by Matthew Braithwaite · 9 years ago
- 5a6e616 Add |SSL_CTX_set0_buffer_pool|. by Adam Langley · 9 years ago
- 559f064 Support setting per-connection OCSP staple by Alessandro Ghedini · 9 years ago
- 7c57286 Remove SSL_set_reject_peer_renegotiations. by David Benjamin · 9 years ago
- b79cc84 Fix SSL_clear's interaction with session resumption. by David Benjamin · 9 years ago
- 30c4c30 Revise some integer sizes. by David Benjamin · 9 years ago
- 813fc01 Remove unreachable check. by David Benjamin · 9 years ago
- f04c2e9 Move client_version into SSL_HANDSHAKE. by David Benjamin · 9 years ago