1. a23b68f ssl/test/runner: Change ecdsa.PublicKey initialization by Martin Kreichgauer · 8 years ago
  2. 5c4271f Don't reauthenticate on renegotiation. by David Benjamin · 8 years ago
  3. bd70845 Add tests for CertificateVerify by Dimitar Vlahovski · 8 years ago
  4. b0c761e Tolerate early ChangeCipherSpec in DTLS. by David Benjamin · 8 years ago
  5. 0e4a448 Add ClientHello no_session_id variant. by Steven Valdez · 8 years ago
  6. b853f31 Fix handling of ServerHellos with omitted extensions. by David Benjamin · 8 years ago
  7. dbe0158 Implement ContentType TLS 1.3 variant. by Steven Valdez · 8 years ago
  8. 038da9b Move the version to an extension in the experimental TLS 1.3 encoding. by Steven Valdez · 8 years ago
  9. 520e122 Implement experimental alternate encoding of TLS 1.3. by Steven Valdez · 8 years ago
  10. 413e79e Test the client rejects invalid compression methods from the server. by David Benjamin · 8 years ago
  11. 9343b0b Don't check renegotiation_info in fuzzer mode. by David Benjamin · 8 years ago
  12. c94998a Revise version negotiation on the Go half. by Steven Valdez · 8 years ago
  13. e831a81 Adding support for sending early data on the client. by Steven Valdez · 8 years ago
  14. d768c5d Support Ed25519 keys in BoGo. by David Benjamin · 8 years ago
  15. bbf4246 Add a test that ALPN is rejected on renegotiation. by David Benjamin · 8 years ago
  16. 2d85062 Add Data-less Zero-RTT support. by Steven Valdez · 9 years ago
  17. 2070f8a Apply bugs to second, TLS 1.3 ClientHello. by Adam Langley · 8 years ago
  18. 924a352 Remove experimental TLS 1.3 short record header extension. by Steven Valdez · 8 years ago
  19. a58baaf Forbid the server certificate from changing on renego. by David Benjamin · 8 years ago
  20. 023d419 Test that we tolerate server name acknowledgements. by David Benjamin · 8 years ago
  21. ab20cec Read 0-RTT data in Bogo. by Nick Harper · 9 years ago
  22. 17b3083 Use a separate timeout scheme for TLS 1.3. by David Benjamin · 8 years ago
  23. 7cd0a97 Bogo: Send and receive 0.5-RTT data. by Nick Harper · 9 years ago
  24. 47383aa Skip over early data in bogo. by Nick Harper · 9 years ago
  25. 053fee9 Enforce the SSL 3.0 no_certificate alert in tests. by David Benjamin · 9 years ago
  26. a81967b Add tests for the point format extension. by David Benjamin · 9 years ago
  27. 6f600d6 Add experimental TLS 1.3 short record header extension. by David Benjamin · 9 years ago
  28. 48891ad Simplify BoGo's TLS 1.3 key derivation. by David Benjamin · 9 years ago
  29. 2b02f4b Loosen TLS 1.3 session/cipher matching in BoGo. by David Benjamin · 9 years ago
  30. d0d532f Select TLS 1.3 cipher before resumption in BoGo. by David Benjamin · 9 years ago
  31. 71186e8 Move ExpectTicketAge out of AcceptAnySession. by David Benjamin · 9 years ago
  32. 0b8f85e Fix AcceptAnyVersion bug. by David Benjamin · 9 years ago
  33. ea80f9d obfuscated_ticket_age must also be reset when comparing. by David Benjamin · 9 years ago
  34. c5665c9 Remove out-of-date BoGo earlyDataContext parsing bits. by David Benjamin · 9 years ago
  35. a833c35 Update to TLS 1.3 draft 18. by Steven Valdez · 9 years ago
  36. da4789e Fix BoGo HelloVerifyRequest version handling. by David Benjamin · 9 years ago
  37. c984611 Fix bogo implementation of Channel ID for TLS < 1.2. by Nick Harper · 9 years ago
  38. 60a85cb Implement ChannelID for TLS 1.3. by Nick Harper · 9 years ago
  39. a128a55 Update the TLS 1.3 draft version to draft 16. by David Benjamin · 9 years ago
  40. 3baa6e1 Implement draft 16 HelloRetryRequest and cookie. by David Benjamin · 9 years ago
  41. c4aa727 Updating Key Schedule and KeyUpdate to draft 16. by Steven Valdez · 9 years ago
  42. 490469f Test unknown TLS 1.3 ServerHello extensions. by David Benjamin · 9 years ago
  43. 1db9e1b Add the certificate_required alert. by David Benjamin · 9 years ago
  44. 7f78df4 Add a few more tests around processing the server PSK extension. by David Benjamin · 9 years ago
  45. 803c77a Update crypto negotation to draft 15. by Steven Valdez · 9 years ago
  46. 5b98608 Updating NewSessionTicket message and updating PSK to Draft 15. by Steven Valdez · 9 years ago
  47. 5ecb88b Make EnableAllCiphers client-only and rename. by David Benjamin · 9 years ago
  48. daa8850 Add tests for OCSP's interaction with resumption. by David Benjamin · 9 years ago
  49. d9791bf Apply GREASE to the version extension. by David Benjamin · 9 years ago
  50. fdd1099 Moving TLS 1.3 version negotiation into extension. by Steven Valdez · 9 years ago
  51. b1dd8cd Prepare runner's wire/version conversions for the version extension. by David Benjamin · 9 years ago
  52. 3c6a1ea Apply version/wire mapping at a higher layer in runner. by David Benjamin · 9 years ago
  53. 65ac997 Implement draft-davidben-tls-grease-01. by David Benjamin · 9 years ago
  54. abe94e3 Test that SNI warning alerts are ignored. by David Benjamin · 9 years ago
  55. 163c956 Forbid EMS from changing during renegotation. by David Benjamin · 9 years ago
  56. 4666248 Test resuming renewed sessions. by David Benjamin · 9 years ago
  57. 8a8349b Request contexts are now illegal during the handshake. by David Benjamin · 9 years ago
  58. e73c7f4 Flesh out missing TLS 1.3 state machine coverage. by David Benjamin · 9 years ago
  59. 405da48 Improve TLS 1.3 resumption/version tests. by David Benjamin · 9 years ago
  60. e7e36aa Test that switching versions on renego is illegal. by David Benjamin · 9 years ago
  61. 0b3625b Add support for TLS 1.3 PSK resumption in Go. by Nick Harper · 9 years ago
  62. 0c40a96 Send unsupported_extension on unexpected ServerHello extensions. by David Benjamin · 9 years ago
  63. 02edcd0 Reject stray post-Finished messages in DTLS. by David Benjamin · 9 years ago
  64. 21c0028 Implement KeyUpdate in Go. by David Benjamin · 9 years ago
  65. 5810488 Add support for sending TLS 1.3 tickets in Go. by David Benjamin · 9 years ago
  66. 12d2c48 Add a packed renegotiation test. by David Benjamin · 9 years ago
  67. 5440fe0 Adding HelloRetryRequest. by Steven Valdez · 9 years ago
  68. dcfbc67 Implement HelloRetryRequest in Go. by Nick Harper · 9 years ago
  69. 8d315d7 Remove enableTLS13Handshake. by David Benjamin · 9 years ago
  70. 143e8b3 Add TLS 1.3 1-RTT. by Steven Valdez · 9 years ago
  71. 0b8d5da Add much more aggressive WrongMessageType tests. by David Benjamin · 9 years ago
  72. 7964b18 Add machinery for testing TLS 1.3 cipher change synchronization. by David Benjamin · 9 years ago
  73. 6167281 Check for buffered handshake messages on cipher change in DTLS. by David Benjamin · 9 years ago
  74. 0ee2e11 Fixing TLS 1.3 Go Handshake Bugs. by Steven Valdez · 9 years ago
  75. 2aad406 Switch application traffic keys at the right time in Go TLS 1.3. by David Benjamin · 9 years ago
  76. f74ec79 Fix Go TLS 1.3 sigalg handling. by David Benjamin · 9 years ago
  77. 97a0a08 Implement exporters for TLS 1.3 in Go. by David Benjamin · 9 years ago
  78. c87ebde Fix up TLS 1.3 PSK placeholder logic in the Go code. by David Benjamin · 9 years ago
  79. 1edae6b Make WrongCertificateMessageType work in both 1.3 and 1.2. by David Benjamin · 9 years ago
  80. 8d343b4 Implement client certificates for TLS 1.3 in Go. by David Benjamin · 9 years ago version_for_cocoapods_5.0
  81. 615119a Add OCSP stapling and SCT list support to 1.3 servers in Go. by David Benjamin · 9 years ago
  82. 728eed8 Implement basic TLS 1.3 server handshake in Go. by Nick Harper · 9 years ago
  83. 1f61f0d Implement TLS 1.3's downgrade signal. by David Benjamin · 9 years ago
  84. 29bb140 Move isSupportedSignatureAlgorithm calls to verifyMessage in Go. by David Benjamin · 9 years ago
  85. 7a41d37 Configure verify/sign signature algorithms in Go separately. by David Benjamin · 9 years ago
  86. 1fb125c Enforce ECDSA curve matching in TLS 1.3. by David Benjamin · 9 years ago
  87. 85f20c2 Implement downgrade signaling in Go. by Nick Harper · 9 years ago
  88. f25dda9 Split readClientHello in two. by David Benjamin · 9 years ago
  89. 7d79f83 Pull Go TLS server extension logic into its own function. by David Benjamin · 9 years ago
  90. 582ba04 Add tests for packed handshake records in TLS. by David Benjamin · 9 years ago
  91. b3d51be Split ServerHello extensions into a separate struct. by Nick Harper · 9 years ago
  92. 24599a8 Rename EncryptedExtensions in Go in preparation for TLS 1.3. by David Benjamin · 9 years ago
  93. cecee27 Fix the Go code to be aware of DTLS version bounds. by David Benjamin · 9 years ago
  94. 60edffd Change SignatureAndHashAlgorithm to SignatureScheme in Go. by Nick Harper · 9 years ago
  95. 1fd39d8 Add TLS 1.3 record layer to go implementation. by Nick Harper · 9 years ago
  96. 0407e76 Test both disabled version/cipher combinations too. by David Benjamin · 9 years ago
  97. 80d1b35 Add a test for SCTs sent on resume. by David Benjamin · 9 years ago
  98. 0b7ca7d Add tests for doing client auth with no certificates. by David Benjamin · 9 years ago
  99. 8411b24 Add tests for bad ChangeCipherSpecs. by David Benjamin · 10 years ago
  100. 3e052de Tighten SSL_OP_LEGACY_SERVER_CONNECT to align with RFC 5746. by David Benjamin · 10 years ago