1. fd45ee7 Replace bits in SSL_HANDSHAKE with bool. by David Benjamin · 8 years ago
  2. c11ea942 Convert comments in ssl. by David Benjamin · 8 years ago
  3. 4d71a9a Migrate TLS 1.2 and below state machines to the new style. by Steven Valdez · 8 years ago
  4. 8fc2dc0 Put SCTs and OCSP responses in CRYPTO_BUFFERs. by David Benjamin · 8 years ago
  5. 72912d2 Rotate the default ticket encryption key. by Martin Kreichgauer · 8 years ago
  6. f4ecc84 Prevent both early data and custom extensions from being accepted. by Steven Valdez · 8 years ago
  7. 7934f08 Replace init_msg/init_num with a get_message hook. by David Benjamin · 8 years ago
  8. 37af90f Convert a few more scopers. by David Benjamin · 8 years ago
  9. ee910bf Use new STACK_OF helpers. by David Benjamin · 8 years ago
  10. 10e1060 Send correct fatal alert the renegotation extension fails to match. by Adam Langley · 8 years ago
  11. c642aca Convert SSL_ECDH_CTX to C++. by David Benjamin · 8 years ago
  12. 6dc8bf6 Convert SSL_TRANSCRIPT to C++. by David Benjamin · 8 years ago
  13. 31b0c9b Add a bunch of scopers. by David Benjamin · 8 years ago
  14. e39ac8f Switch BORINGSSL_INTERNAL_CXX_TYPES in favor of subclassing games. by David Benjamin · 8 years ago
  15. 1386aad Switch various things to scopers. by David Benjamin · 8 years ago
  16. 86e95b8 Move libssl's internals into the bssl namespace. by David Benjamin · 8 years ago
  17. a3d76d0 Switch OPENSSL_COMPILE_ASSERT to static_assert in C++ code. by David Benjamin · 8 years ago
  18. 81678aa Switch t1_lib, tls_record, and tls13_both to C++. by David Benjamin · 8 years ago[Renamed (96%) from ssl/t1_lib.c]
  19. 9343b0b Don't check renegotiation_info in fuzzer mode. by David Benjamin · 8 years ago
  20. 8f36c51 Revise version negotiation logic on the C side. by Steven Valdez · 8 years ago
  21. 68161cb Stash the computed version range in SSL_HANDSHAKE. by David Benjamin · 8 years ago
  22. 8d606e3 Clear out f_err pattern from handshake_client.c. by David Benjamin · 8 years ago
  23. a365138 Factor out the default signature algorithm logic. by David Benjamin · 8 years ago
  24. 71c21b4 Add SSL_CTX_set_verify_algorithm_prefs. by David Benjamin · 8 years ago
  25. 6952211 Support Ed25519 in TLS. by David Benjamin · 8 years ago
  26. a232a71 Deprecate SSL_PRIVATE_KEY_METHOD type and max_signature_len. by David Benjamin · 8 years ago
  27. bf833c3 Rename hs->public_key. by David Benjamin · 8 years ago
  28. c8ff30c Add an option to allow unknown ALPN protocols. by David Benjamin · 8 years ago 3071 chromium-3071
  29. 67bb45f Support enabling early data on SSL by Alessandro Ghedini · 8 years ago
  30. 246eeee Make RI on TLS 1.3 alert with ILLEGAL_PARAMETER. by Steven Valdez · 8 years ago
  31. 2d85062 Add Data-less Zero-RTT support. by Steven Valdez · 9 years ago
  32. 707af29 Support asynchronous ticket decryption with TLS 1.3. by David Benjamin · 8 years ago
  33. 4c341d0 Support asynchronous ticket decryption with TLS 1.0–1.2. by Adam Langley · 8 years ago
  34. be49706 Rename initial_ctx to session_ctx. by David Benjamin · 8 years ago
  35. 35ac5b7 Export server-side ticket_age skew. by David Benjamin · 8 years ago
  36. 924a352 Remove experimental TLS 1.3 short record header extension. by Steven Valdez · 8 years ago
  37. ad8f5e1 Don't use long for timestamps. by David Benjamin · 8 years ago
  38. fc02b59 Move tmp.extended_master_secret to SSL_HANDSHAKE. by David Benjamin · 8 years ago
  39. 45738dd Move new_cipher and new_session to SSL_HANDSHAKE. by David Benjamin · 8 years ago
  40. 83a3212 Move SCT lists and OCSP responses to CERT. by David Benjamin · 8 years ago
  41. 46db7af Remove |X509| things from SSL_SESSION. by Adam Langley · 8 years ago
  42. 908ac19 Moving transcript and PRF functions to SSL_TRANSCRIPT. by Steven Valdez · 9 years ago
  43. c68e5b9 Establish that the default value of an out-arg for alerts is SSL_AD_DECODE_ERROR. by Adam Langley · 8 years ago
  44. 8df6766 Support setting per-connection SCT list by Alessandro Ghedini · 8 years ago
  45. 2f82a0e Don't stash tlsext_hostname in ssl_get_new_session. by Steven Valdez · 8 years ago
  46. 2fe6e22 Remove mask_a and mask_k from CERT. by David Benjamin · 8 years ago
  47. 5db7c9b Get OPENSSL_COMPILE_ASSERT working in function bodies. by David Benjamin · 8 years ago
  48. 6752efd Never send SNI warning alerts. by David Benjamin · 9 years ago
  49. a8c8b38 Don't call the SNI callback as a client. by David Benjamin · 9 years ago
  50. c253864 Remove some node.js hacks. by David Benjamin · 9 years ago
  51. 6f600d6 Add experimental TLS 1.3 short record header extension. by David Benjamin · 9 years ago
  52. 17cf2cb Work around language and compiler bug in memcpy, etc. by David Benjamin · 9 years ago
  53. 76bb141 Remove the BORINGSSL_ANDROID_SYSTEM P-521 special-case. by David Benjamin · 9 years ago
  54. 4882a6c Replace key_exchange_info with group_id. by David Benjamin · 9 years ago
  55. 559f064 Support setting per-connection OCSP staple by Alessandro Ghedini · 9 years ago
  56. 30c4c30 Revise some integer sizes. by David Benjamin · 9 years ago
  57. f04c2e9 Move client_version into SSL_HANDSHAKE. by David Benjamin · 9 years ago
  58. 9d125dc Remove SSL_OP_DISABLE_NPN. by David Benjamin · 9 years ago
  59. 731058e Typedef ssl_early_callback_ctx to SSL_CLIENT_HELLO. by David Benjamin · 9 years ago
  60. f3c8f8d Pass explicit parameters elsewhere. by David Benjamin · 9 years ago
  61. 8baf963 Pass explicit hs parameters to ssl_ext_*. by David Benjamin · 9 years ago
  62. 2bd1917 Pass explicit hs parameters into custom_extensions.c. by David Benjamin · 9 years ago
  63. 8c880a2 Pass explicit hs parameters to kExtensions callbacks. by David Benjamin · 9 years ago
  64. aedf303 Parse the entire PSK extension. by David Benjamin · 9 years ago
  65. a4ee74d Skipping early data on 0RTT rejection. by Steven Valdez · 9 years ago
  66. cfa08c3 Enforce basic sanity of SCT lists. by Adam Langley · 9 years ago
  67. fbbef12 Don't put a colon in the extra error message. by Adam Langley · 9 years ago
  68. 35598ae Remove ext_alpn_init. by David Benjamin · 9 years ago
  69. e7f60a2 Fix alert on tls1_process_alert failure. by David Benjamin · 9 years ago
  70. 12d6baf Make ssl_ext_pre_shared_key_add_clienthello static. by David Benjamin · 9 years ago
  71. 4eb95cc Parse ClientHello extensions before deciding on resumption. by David Benjamin · 9 years ago
  72. 53210cb Do not send unsolicited SCTs in TLS 1.3. by David Benjamin · 9 years ago
  73. 75f9914 Align TLS 1.2 and 1.3 server session validity checks. by David Benjamin · 9 years ago
  74. a833c35 Update to TLS 1.3 draft 18. by Steven Valdez · 9 years ago
  75. eab773a Add missing PSK identity comment. by David Benjamin · 9 years ago
  76. 78476f6 Move tlsext_ticket_expected to SSL_HANDSHAKE. by David Benjamin · 9 years ago
  77. 9ef31f0 Negotiate the cipher suite before ALPN. by David Benjamin · 9 years ago
  78. af3b8a9 Fix multiple PSK identity parsing. by Steven Valdez · 9 years ago
  79. 70aba26 Skip ec_point_format if min_version >= TLS 1.3. by David Benjamin · 9 years ago
  80. 74df74b Remove ssl_any_ec_cipher_suites_enabled check. by David Benjamin · 9 years ago
  81. 3a322f5 Revise signing preferences. by David Benjamin · 9 years ago
  82. 9559401 Use SHA256_CTX instead of EVP_MD_CTX when computing Channel ID. by Nick Harper · 9 years ago
  83. 60a85cb Implement ChannelID for TLS 1.3. by Nick Harper · 9 years ago
  84. 3ef7697 Don't accept {sha1, ecdsa} and {sha512, ecdsa}. by David Benjamin · 9 years ago
  85. a128a55 Update the TLS 1.3 draft version to draft 16. by David Benjamin · 9 years ago
  86. 3baa6e1 Implement draft 16 HelloRetryRequest and cookie. by David Benjamin · 9 years ago
  87. 53a2dfc Remove incorrect ciphers check. by David Benjamin · 9 years ago
  88. 52bf690 Saved Finished messages are twelve bytes. by David Benjamin · 9 years ago
  89. 43612b6 Move peer_supported_group_list to SSL_HANDSHAKE. by David Benjamin · 9 years ago
  90. f04976b Remove the get_peer_groups parameter to tls1_get_grouplist. by David Benjamin · 9 years ago
  91. 9d0b4bc Trim tls1_check_group_id. by David Benjamin · 9 years ago
  92. 938fa7c Inline tls1_check_ec_cert. by David Benjamin · 9 years ago
  93. b74b081 Move next_proto_neg_seen into SSL_HANDSHAKE. by David Benjamin · 9 years ago
  94. f5d2cd0 Move extensions bitmasks into SSL_HANDSHAKE. by David Benjamin · 9 years ago
  95. a048678 Move some fields from tmp to hs. by David Benjamin · 9 years ago
  96. 7f78df4 Add a few more tests around processing the server PSK extension. by David Benjamin · 9 years ago
  97. 803c77a Update crypto negotation to draft 15. by Steven Valdez · 9 years ago
  98. 5b98608 Updating NewSessionTicket message and updating PSK to Draft 15. by Steven Valdez · 9 years ago
  99. daa8850 Add tests for OCSP's interaction with resumption. by David Benjamin · 9 years ago
  100. 5fd1807 Implement SSL_CTX_set1_curves_list() by Alessandro Ghedini · 9 years ago