Log - c79ae7aa8b07c036538fbfcd0708bc6626ecbc20 - boringssl.googlesource.com/boringssl

4d71a9a Migrate TLS 1.2 and below state machines to the new style. by Steven Valdez · 8 years ago
e3bb51c Remove deprecated cipher property APIs. by David Benjamin · 8 years ago 3202 chromium-3202
8fc2dc0 Put SCTs and OCSP responses in CRYPTO_BUFFERs. by David Benjamin · 8 years ago
4512b79 Run comment conversion script on include/ by David Benjamin · 8 years ago
72912d2 Rotate the default ticket encryption key. by Martin Kreichgauer · 8 years ago
f4ecc84 Prevent both early data and custom extensions from being accepted. by Steven Valdez · 8 years ago
348f0d8 Add OpenSSL 1.1.0's cipher property functions. by David Benjamin · 8 years ago
70dbf04 Add SSL_CTX_cipher_in_group. by David Benjamin · 8 years ago
ba2d3df Add DTLS_with_buffers_method. by David Benjamin · 8 years ago
211a06a Rephrase documentation on early data reset. by David Benjamin · 8 years ago
27e377e Fix miscellaneous clang-tidy warnings. by David Benjamin · 8 years ago
abbf365 Make the bssl::SealRecord out_suffix arg fixed length. by Martin Kreichgauer · 8 years ago
13fafcd Add a warning to |SSL_get_servername|. by Adam Langley · 8 years ago
22df691 Document the behaviour of non-standard separators in cipher strings. by Adam Langley · 8 years ago
17c3057 Add bssl::SealRecord and bssl::OpenRecord. by Martin Kreichgauer · 8 years ago
e39ac8f Switch BORINGSSL_INTERNAL_CXX_TYPES in favor of subclassing games. by David Benjamin · 8 years ago
86e95b8 Move libssl's internals into the bssl namespace. by David Benjamin · 8 years ago
0e4a448 Add ClientHello no_session_id variant. by Steven Valdez · 8 years ago
71dfad4 Add new functions for configuring the client CA list. by David Benjamin · 8 years ago
3a1dd46 Add async certificate verification callback. by David Benjamin · 8 years ago
dbe0158 Implement ContentType TLS 1.3 variant. by Steven Valdez · 8 years ago
a93a68d Fix comment for SSL_ERROR_PENDING_CERTIFICATE. by David Benjamin · 8 years ago
52586f9 Adding TLS 1.3 variant to SSL*. by Steven Valdez · 8 years ago
520e122 Implement experimental alternate encoding of TLS 1.3. by Steven Valdez · 8 years ago
be483db Revise SSL_CTX_sess_set_new_cb documentation. by David Benjamin · 8 years ago
04017c1 Overhaul session resumption documentation. by David Benjamin · 8 years ago
06a6ed0 Clarify use of |SSL_VERIFY_FAIL_IF_NO_PEER_CERT| flag. by Piotr Sikora · 8 years ago
5aaaa98 Detect WatchGuard's TLS 1.3 interference failure mode. by David Benjamin · 8 years ago
6fff386 Support standard RFC cipher suite names alongside OpenSSL ones. by David Benjamin · 8 years ago
fc08dfc Rename {ssl,ctx}->{min,max}_version. by David Benjamin · 8 years ago
9961dff Unwind V2ClientHello counters. by David Benjamin · 8 years ago
ca74358 Test SSL_select_next_proto and SSL_get_fd. by David Benjamin · 8 years ago
e831a81 Adding support for sending early data on the client. by Steven Valdez · 8 years ago
d94682d Remove ex_data's dup hook. by David Benjamin · 8 years ago
01f8a8c Convert stack.h to use inline functions. by David Benjamin · 8 years ago
d55bd79 Fix SSL_COMP_get_compression_methods type signature. by David Benjamin · 8 years ago
48b6b8f Add SSL_CIPHER_has_SHA384_HMAC. by Alessandro Ghedini · 8 years ago
93731d9 Remove old SSL min/max version functions. by David Benjamin · 8 years ago
de254b4 Enforce max_early_data_size on the server. by Alessandro Ghedini · 8 years ago
71c21b4 Add SSL_CTX_set_verify_algorithm_prefs. by David Benjamin · 8 years ago
7e06de5 Really remove DHE ciphersuites from TLS. by Matthew Braithwaite · 8 years ago
3cfeb95 Disable SSLv3 by default. by David Benjamin · 8 years ago
6952211 Support Ed25519 in TLS. by David Benjamin · 8 years ago
a232a71 Deprecate SSL_PRIVATE_KEY_METHOD type and max_signature_len. by David Benjamin · 8 years ago
c8ff30c Add an option to allow unknown ALPN protocols. by David Benjamin · 8 years ago 3071 chromium-3071
67bb45f Support enabling early data on SSL by Alessandro Ghedini · 8 years ago
764ab98 Support and test P-224 certificates. by Adam Langley · 8 years ago
fc2d78d Document server 0-RTT behavior. by David Benjamin · 8 years ago
2a07072 Prevent Channel ID and Custom Extensions on 0-RTT. by Steven Valdez · 8 years ago
2d85062 Add Data-less Zero-RTT support. by Steven Valdez · 9 years ago
57e81e6 Name |select_certificate_cb| return values by Alessandro Ghedini · 8 years ago
edb7299 Fix typo in the |ssl_ticket_aead_success| documentation by Alessandro Ghedini · 8 years ago
48e1d18 Restore SSL_CTX_set_ecdh_auto compatibility hook. by David Benjamin · 8 years ago
4c341d0 Support asynchronous ticket decryption with TLS 1.0–1.2. by Adam Langley · 8 years ago
be49706 Rename initial_ctx to session_ctx. by David Benjamin · 8 years ago
6ad20dc Move error-on-empty-cipherlist into ssl_create_cipher_list(). by Matthew Braithwaite · 8 years ago
d04ca95 Add |SSL[_CTX]_set_chain_and_key|. by Adam Langley · 8 years ago
35ac5b7 Export server-side ticket_age skew. by David Benjamin · 8 years ago
fe36672 Allow users of the |CRYPTO_BUFFER|-based methods to verify certs after the handshake. by Adam Langley · 8 years ago
8ebeabf Add SSL_CTX_get_ciphers. by David Benjamin · 8 years ago
f29c429 Remove support for old-style SSL_PRIVATE_KEY_METHOD types. by David Benjamin · 8 years ago
f465461 Add SSL_get0_peer_certificates. by David Benjamin · 8 years ago
924a352 Remove experimental TLS 1.3 short record header extension. by Steven Valdez · 8 years ago
d6c22ee Add |SSL_get0_server_requested_CAs|. by Adam Langley · 8 years ago
a58baaf Forbid the server certificate from changing on renego. by David Benjamin · 8 years ago
ad8f5e1 Don't use long for timestamps. by David Benjamin · 8 years ago
11c8289 Remove support for blocking DTLS timeout handling. by David Benjamin · 8 years ago
39425b0 Add |TLS_with_buffers_method|. by Adam Langley · 8 years ago
34b4c82 Hold CA names as |CRYPTO_BUFFER|s. by Adam Langley · 8 years ago
adec772 Remove SSL_CIPHER_has_MD5_HMAC. by David Benjamin · 8 years ago
de5c325 Fix SSL_write doc comment by Michel Lespinasse · 8 years ago
a57dcfb Add new cipherlist-setting APIs that reject nonsense. by Matthew Braithwaite · 8 years ago
c92f29d Remove freelist_max_len. by David Benjamin · 8 years ago
5960a90 Move sid_ctx from SSL/SSL_CTX to CERT. by David Benjamin · 8 years ago
26e1ff3 Remove some unnecessary return values. by David Benjamin · 8 years ago
27a9e6a Adding ALPN to session. by Steven Valdez · 8 years ago
83a3212 Move SCT lists and OCSP responses to CERT. by David Benjamin · 8 years ago
16b1b1d Simplify state and info_callback management. by David Benjamin · 8 years ago
77458a4 Avoid transitioning into SSL_ST_OK and back out. by David Benjamin · 8 years ago
9e766d7 Unexport the handshake's internal state. by David Benjamin · 8 years ago
46db7af Remove |X509| things from SSL_SESSION. by Adam Langley · 8 years ago
3509dac Add |X509_METHOD| and, using it, move many functions to ssl_x509.c. by Adam Langley · 8 years ago
8df6766 Support setting per-connection SCT list by Alessandro Ghedini · 8 years ago
33fe4a0 Remove support for setting per-connection default session timeout by Alessandro Ghedini · 8 years ago
3f2611a Hide SSL struct. by David Benjamin · 8 years ago
2056f63 Recommend ex_data for SSL_CTX_set_cert_verify_callback. by David Benjamin · 8 years ago
bdcfd13 Move the SSL BIO into ssl/ from decrepit/. by Adam Langley · 8 years ago
17b3083 Use a separate timeout scheme for TLS 1.3. by David Benjamin · 8 years ago
0b1bb12 Push the SSL_CTX session_timeout zero logic up. by David Benjamin · 8 years ago
258508f Adding V2ClientHello counter. by Steven Valdez · 8 years ago
daf207a Don't use the buffer BIO in TLS. by David Benjamin · 9 years ago
1a999cf Don't use the buffer BIO in DTLS. by David Benjamin · 9 years ago
958346a Run select_certificate_cb multiple times by Alessandro Ghedini · 9 years ago
07820b5 Add a getter for SSL_set_session_id_context. by David Benjamin · 9 years ago
6752efd Never send SNI warning alerts. by David Benjamin · 9 years ago
0726fb7 Add SSL_CIPHER_is_AEAD. by Alessandro Ghedini · 9 years ago
c253864 Remove some node.js hacks. by David Benjamin · 9 years ago
745745d Add SSL_CIPHER_is_static_RSA. by David Benjamin · 9 years ago
5fc99c6 There are no more MD5 ciphers. by David Benjamin · 9 years ago
1d6eeb3 Spellcheck our public headers. by David Benjamin · 9 years ago