Gitiles
Code Review
Sign In
gerrit.openfyde.cn
/
boringssl.googlesource.com
/
boringssl
/
fd45ee7da8d897e45bf995125301f0a5a86c7792
/
ssl
/
ssl_lib.cc
fd45ee7
Replace bits in SSL_HANDSHAKE with bool.
by David Benjamin
· 8 years ago
d816874
Set SSL_in_init to false before new_session_cb.
by Steven Valdez
· 8 years ago
c11ea942
Convert comments in ssl.
by David Benjamin
· 8 years ago
4d71a9a
Migrate TLS 1.2 and below state machines to the new style.
by Steven Valdez
· 8 years ago
5ef40c6
Mark renego-established sessions not resumable.
by David Benjamin
· 8 years ago
8fc2dc0
Put SCTs and OCSP responses in CRYPTO_BUFFERs.
by David Benjamin
· 8 years ago
72912d2
Rotate the default ticket encryption key.
by Martin Kreichgauer
· 8 years ago
70dbf04
Add SSL_CTX_cipher_in_group.
by David Benjamin
· 8 years ago
7934f08
Replace init_msg/init_num with a get_message hook.
by David Benjamin
· 8 years ago
8f94c31
Replace reuse_message with an explicit next_message call.
by David Benjamin
· 8 years ago
e3dee27
Remove the free_buffer parameter to release_current_message.
by David Benjamin
· 8 years ago
27e377e
Fix miscellaneous clang-tidy warnings.
by David Benjamin
· 8 years ago
31b0c9b
Add a bunch of scopers.
by David Benjamin
· 8 years ago
e39ac8f
Switch BORINGSSL_INTERNAL_CXX_TYPES in favor of subclassing games.
by David Benjamin
· 8 years ago
1386aad
Switch various things to scopers.
by David Benjamin
· 8 years ago
cfc11c2
C++-ify SSL_AEAD_CTX.
by David Benjamin
· 8 years ago
86e95b8
Move libssl's internals into the bssl namespace.
by David Benjamin
· 8 years ago
3a1dd46
Add async certificate verification callback.
by David Benjamin
· 8 years ago
a3d76d0
Switch OPENSSL_COMPILE_ASSERT to static_assert in C++ code.
by David Benjamin
· 8 years ago
f526081
Switch ssl_aead_ctx, ssl_file, and ssl_lib to C++.
by David Benjamin
· 8 years ago
[Renamed (98%) from ssl/ssl_lib.c]
52586f9
Adding TLS 1.3 variant to SSL*.
by Steven Valdez
· 8 years ago
520e122
Implement experimental alternate encoding of TLS 1.3.
by Steven Valdez
· 8 years ago
8f36c51
Revise version negotiation logic on the C side.
by Steven Valdez
· 8 years ago
05d4c97
Simplify SSL_get0_next_proto_negotiated.
by David Benjamin
· 8 years ago
0a9bf66
Clean up some duplicated code.
by David Benjamin
· 8 years ago
fc08dfc
Rename {ssl,ctx}->{min,max}_version.
by David Benjamin
· 8 years ago
ca74358
Test SSL_select_next_proto and SSL_get_fd.
by David Benjamin
· 8 years ago
0391f16
Fix some malloc failure handling.
by David Benjamin
· 8 years ago
e831a81
Adding support for sending early data on the client.
by Steven Valdez
· 8 years ago
d94682d
Remove ex_data's dup hook.
by David Benjamin
· 8 years ago
93731d9
Remove old SSL min/max version functions.
by David Benjamin
· 8 years ago
71c21b4
Add SSL_CTX_set_verify_algorithm_prefs.
by David Benjamin
· 8 years ago
7e06de5
Really remove DHE ciphersuites from TLS.
by Matthew Braithwaite
· 8 years ago
3cfeb95
Disable SSLv3 by default.
by David Benjamin
· 8 years ago
c8ff30c
Add an option to allow unknown ALPN protocols.
by David Benjamin
· 8 years ago
3071
chromium-3071
67bb45f
Support enabling early data on SSL
by Alessandro Ghedini
· 8 years ago
681eb6a
Adding support for receiving early data on the server.
by Steven Valdez
· 9 years ago
7d2dbc3
Add a comment around the set_{min,max}_version logic.
by David Benjamin
· 8 years ago
2d85062
Add Data-less Zero-RTT support.
by Steven Valdez
· 9 years ago
57e81e6
Name |select_certificate_cb| return values
by Alessandro Ghedini
· 8 years ago
4c341d0
Support asynchronous ticket decryption with TLS 1.0–1.2.
by Adam Langley
· 8 years ago
be49706
Rename initial_ctx to session_ctx.
by David Benjamin
· 8 years ago
6ad20dc
Move error-on-empty-cipherlist into ssl_create_cipher_list().
by Matthew Braithwaite
· 8 years ago
35ac5b7
Export server-side ticket_age skew.
by David Benjamin
· 8 years ago
fe36672
Allow users of the |CRYPTO_BUFFER|-based methods to verify certs after the handshake.
by Adam Langley
· 8 years ago
8ebeabf
Add SSL_CTX_get_ciphers.
by David Benjamin
· 8 years ago
924a352
Remove experimental TLS 1.3 short record header extension.
by Steven Valdez
· 8 years ago
ad8f5e1
Don't use long for timestamps.
by David Benjamin
· 8 years ago
2a3b343
Move X509-related verification code into ssl_x509.c.
by Adam Langley
· 8 years ago
34b4c82
Hold CA names as |CRYPTO_BUFFER|s.
by Adam Langley
· 8 years ago
a57dcfb
Add new cipherlist-setting APIs that reject nonsense.
by Matthew Braithwaite
· 8 years ago
fc02b59
Move tmp.extended_master_secret to SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
45738dd
Move new_cipher and new_session to SSL_HANDSHAKE.
by David Benjamin
· 8 years ago
12709db
Stop reporting SSL_R_SHUTDOWN_WHILE_IN_INIT.
by David Benjamin
· 8 years ago
5960a90
Move sid_ctx from SSL/SSL_CTX to CERT.
by David Benjamin
· 8 years ago
26e1ff3
Remove some unnecessary return values.
by David Benjamin
· 8 years ago
83a3212
Move SCT lists and OCSP responses to CERT.
by David Benjamin
· 8 years ago
9e766d7
Unexport the handshake's internal state.
by David Benjamin
· 8 years ago
908ac19
Moving transcript and PRF functions to SSL_TRANSCRIPT.
by Steven Valdez
· 9 years ago
3509dac
Add |X509_METHOD| and, using it, move many functions to ssl_x509.c.
by Adam Langley
· 8 years ago
8df6766
Support setting per-connection SCT list
by Alessandro Ghedini
· 8 years ago
33fe4a0
Remove support for setting per-connection default session timeout
by Alessandro Ghedini
· 8 years ago
17b3083
Use a separate timeout scheme for TLS 1.3.
by David Benjamin
· 8 years ago
0b1bb12
Push the SSL_CTX session_timeout zero logic up.
by David Benjamin
· 8 years ago
3a2b47a
Don't use |X509| objects in |CERT|, by default.
by Adam Langley
· 8 years ago
daf207a
Don't use the buffer BIO in TLS.
by David Benjamin
· 9 years ago
1a999cf
Don't use the buffer BIO in DTLS.
by David Benjamin
· 9 years ago
6d50f47
Remove support for RSA premaster logging.
by David Benjamin
· 8 years ago
d1515a3
Move a number of X.509 functions from ssl_lib.c to ssl_x509.c
by Adam Langley
· 8 years ago
07820b5
Add a getter for SSL_set_session_id_context.
by David Benjamin
· 9 years ago
d261004
Report TLS 1.3 as supporting secure renegotiation.
by David Benjamin
· 9 years ago
08b65f4
Enabling 0-RTT on new Session Tickets.
by Steven Valdez
· 9 years ago
2be4aa7
Add a helper function for resetting SSL_get_error state.
by David Benjamin
· 9 years ago
f650c71
Use SSL_CTX_up_ref to up-ref an SSL_CTX.
by David Benjamin
· 9 years ago
6f600d6
Add experimental TLS 1.3 short record header extension.
by David Benjamin
· 9 years ago
17cf2cb
Work around language and compiler bug in memcpy, etc.
by David Benjamin
· 9 years ago
65fb425
Remove version-specific cipher lists.
by David Benjamin
· 9 years ago
629db8c
Add |SSL_get_peer_full_cert_chain|.
by Adam Langley
· 9 years ago
f1050fd
Preserve the peer signature algorithm across resumes.
by David Benjamin
· 9 years ago
4882a6c
Replace key_exchange_info with group_id.
by David Benjamin
· 9 years ago
5488122
Remove SSL_get_dhe_group_size.
by David Benjamin
· 9 years ago
d519bf6
Add |SSL_CTX_set0_buffer_pool|.
by Adam Langley
· 9 years ago
364f7a6
Push the difference in chain semantics to the edge.
by Adam Langley
· 9 years ago
cb0c29f
Move state and next_state to SSL_HANDSHAKE.
by David Benjamin
· 9 years ago
2644a13
Set up the SSL_HANDSHAKE object earlier.
by David Benjamin
· 9 years ago
287fc4f
Don't use SSL_want_* macros internally.
by David Benjamin
· 9 years ago
c0fc7a1
Revert "Add |SSL_CTX_set0_buffer_pool|." and "Hold certificates in an SSL_SESSION as CRYPTO_BUFFERSs as well."
by Adam Langley
· 9 years ago
651aaef
Remove CECPQ1 (experimental post-quantum key agreement).
by Matthew Braithwaite
· 9 years ago
5a6e616
Add |SSL_CTX_set0_buffer_pool|.
by Adam Langley
· 9 years ago
559f064
Support setting per-connection OCSP staple
by Alessandro Ghedini
· 9 years ago
7c57286
Remove SSL_set_reject_peer_renegotiations.
by David Benjamin
· 9 years ago
b79cc84
Fix SSL_clear's interaction with session resumption.
by David Benjamin
· 9 years ago
30c4c30
Revise some integer sizes.
by David Benjamin
· 9 years ago
813fc01
Remove unreachable check.
by David Benjamin
· 9 years ago
f04c2e9
Move client_version into SSL_HANDSHAKE.
by David Benjamin
· 9 years ago
a2bda9f
Make more functions static.
by David Benjamin
· 9 years ago
eebd3c8
Add SSL_(CTX_)set_tls_channel_id_enabled.
by David Benjamin
· 9 years ago
2578b29
Make ssl3_choose_cipher and dependencies static.
by David Benjamin
· 9 years ago
731058e
Typedef ssl_early_callback_ctx to SSL_CLIENT_HELLO.
by David Benjamin
· 9 years ago
f3c8f8d
Pass explicit parameters elsewhere.
by David Benjamin
· 9 years ago
Next »