1. 8fc2dc0 Put SCTs and OCSP responses in CRYPTO_BUFFERs. by David Benjamin · 8 years ago
  2. 7934f08 Replace init_msg/init_num with a get_message hook. by David Benjamin · 8 years ago
  3. 9bbdf58 Remove expect and received flight hooks. by David Benjamin · 8 years ago
  4. 6e9321f Add a bssl::PushToStack helper. by David Benjamin · 8 years ago
  5. e664a53 Return null from SSL_get0_peer_certificates if unauthenticated. by David Benjamin · 8 years ago
  6. 6dc8bf6 Convert SSL_TRANSCRIPT to C++. by David Benjamin · 8 years ago
  7. 31b0c9b Add a bunch of scopers. by David Benjamin · 8 years ago
  8. e39ac8f Switch BORINGSSL_INTERNAL_CXX_TYPES in favor of subclassing games. by David Benjamin · 8 years ago
  9. 1386aad Switch various things to scopers. by David Benjamin · 8 years ago
  10. 86e95b8 Move libssl's internals into the bssl namespace. by David Benjamin · 8 years ago
  11. 3a1dd46 Add async certificate verification callback. by David Benjamin · 8 years ago
  12. 11d11d6 Fix and/or annotate all switch fall-throughs. by Adam Langley · 8 years ago
  13. 81678aa Switch t1_lib, tls_record, and tls13_both to C++. by David Benjamin · 8 years ago[Renamed (95%) from ssl/tls13_both.c]
  14. 520e122 Implement experimental alternate encoding of TLS 1.3. by Steven Valdez · 8 years ago
  15. 4414874 Simplify ssl_private_key_* state machine points. by David Benjamin · 8 years ago
  16. 8d606e3 Clear out f_err pattern from handshake_client.c. by David Benjamin · 8 years ago
  17. e831a81 Adding support for sending early data on the client. by Steven Valdez · 8 years ago
  18. bbba939 Acknowledge KeyUpdate messages. by David Benjamin · 8 years ago
  19. a232a71 Deprecate SSL_PRIVATE_KEY_METHOD type and max_signature_len. by David Benjamin · 8 years ago
  20. 681eb6a Adding support for receiving early data on the server. by Steven Valdez · 9 years ago
  21. 794cc59 Send half-RTT tickets when negotiating 0-RTT. by David Benjamin · 8 years ago
  22. 2d85062 Add Data-less Zero-RTT support. by Steven Valdez · 9 years ago
  23. 707af29 Support asynchronous ticket decryption with TLS 1.3. by David Benjamin · 8 years ago
  24. ab1d28e Trim x509.h includes. by David Benjamin · 8 years ago
  25. 2a3b343 Move X509-related verification code into ssl_x509.c. by Adam Langley · 8 years ago
  26. 45738dd Move new_cipher and new_session to SSL_HANDSHAKE. by David Benjamin · 8 years ago
  27. 83a3212 Move SCT lists and OCSP responses to CERT. by David Benjamin · 8 years ago
  28. 46db7af Remove |X509| things from SSL_SESSION. by Adam Langley · 8 years ago
  29. 908ac19 Moving transcript and PRF functions to SSL_TRANSCRIPT. by Steven Valdez · 9 years ago
  30. c68e5b9 Establish that the default value of an out-arg for alerts is SSL_AD_DECODE_ERROR. by Adam Langley · 8 years ago
  31. 8df6766 Support setting per-connection SCT list by Alessandro Ghedini · 8 years ago
  32. f71036e Remove ssl_hash_message_t from ssl_get_message. by David Benjamin · 8 years ago
  33. 276b7e8 Move optional message type checks out of ssl_get_message. by David Benjamin · 8 years ago
  34. 3a2b47a Don't use |X509| objects in |CERT|, by default. by Adam Langley · 8 years ago
  35. 0f24bed Rename tls13_prepare_* to tls13_add_*. by David Benjamin · 9 years ago
  36. 25ac251 Remove write_message from TLS 1.3 handshakes. by David Benjamin · 9 years ago
  37. daf207a Don't use the buffer BIO in TLS. by David Benjamin · 9 years ago
  38. 8d5f9da Abstract away BIO_flush calls in the handshake. by David Benjamin · 9 years ago
  39. 08b65f4 Enabling 0-RTT on new Session Tickets. by Steven Valdez · 9 years ago
  40. a4b9198 Make TLS 1.3 check ECDSA KeyUsage and add test. by Adam Langley · 9 years ago
  41. 0c29425 Don't use |X509_get_pubkey| in TLS 1.3 code either. by Adam Langley · 9 years ago
  42. f1050fd Preserve the peer signature algorithm across resumes. by David Benjamin · 9 years ago
  43. d519bf6 Add |SSL_CTX_set0_buffer_pool|. by Adam Langley · 9 years ago
  44. 68e7124 Hold certificates in an SSL_SESSION as CRYPTO_BUFFERSs as well. by Adam Langley · 9 years ago
  45. 364f7a6 Push the difference in chain semantics to the edge. by Adam Langley · 9 years ago
  46. c0fc7a1 Revert "Add |SSL_CTX_set0_buffer_pool|." and "Hold certificates in an SSL_SESSION as CRYPTO_BUFFERSs as well." by Adam Langley · 9 years ago
  47. 5a6e616 Add |SSL_CTX_set0_buffer_pool|. by Adam Langley · 9 years ago
  48. e850909 Hold certificates in an SSL_SESSION as CRYPTO_BUFFERSs as well. by Adam Langley · 9 years ago
  49. 559f064 Support setting per-connection OCSP staple by Alessandro Ghedini · 9 years ago
  50. f3c8f8d Pass explicit parameters elsewhere. by David Benjamin · 9 years ago
  51. 6e4fc33 Pass explicit hs parameters to tls13_*.c. by David Benjamin · 9 years ago
  52. c3c8882 Match state machine functions with new calling convention. by David Benjamin · 9 years ago
  53. ce8c9d2 Maintain SSL_HANDSHAKE lifetime outside of handshake_func. by David Benjamin · 9 years ago
  54. 6f5f49f Flush TLS 1.3 certificate extensions. by Adam Langley · 9 years ago
  55. cfa08c3 Enforce basic sanity of SCT lists. by Adam Langley · 9 years ago
  56. bbaf367 Add |SSL_set_retain_only_sha256_of_client_certs|. by David Benjamin · 9 years ago
  57. ffb1107 Add a helper function for parsing extensions blocks. by David Benjamin · 9 years ago
  58. a833c35 Update to TLS 1.3 draft 18. by Steven Valdez · 9 years ago
  59. 5eead16 Splitting finish_message to finish_message/queue_message. by Steven Valdez · 9 years ago
  60. c5ac2b6 Rename X.509 members in |SSL_SESSION| and |CERT|. by Adam Langley · 9 years ago
  61. 60a85cb Implement ChannelID for TLS 1.3. by Nick Harper · 9 years ago
  62. c4aa727 Updating Key Schedule and KeyUpdate to draft 16. by Steven Valdez · 9 years ago
  63. 1db9e1b Add the certificate_required alert. by David Benjamin · 9 years ago
  64. 04aa694 Implement BORINGSSL_UNSAFE_FUZZER_MODE for TLS 1.3. by David Benjamin · 9 years ago
  65. 7aa31d6 Remove ssl->verify_result. by David Benjamin · 9 years ago
  66. 32635b8 Add limit for consecutive KeyUpdate messages. by Steven Valdez · 9 years ago
  67. dd634eb s/nginx/NGINX/ by David Benjamin · 9 years ago
  68. 3764683 Have |SSL_get_verify_result| return |X509_V_OK| when no client certificate is given. by Adam Langley · 9 years ago
  69. 867bcba Move ssl_handshake_new, etc., into s3_both.c. by David Benjamin · 9 years ago
  70. 8a8349b Request contexts are now illegal during the handshake. by David Benjamin · 9 years ago
  71. 96a16cd Finish aligning up_ref functions with OpenSSL 1.1.0. by David Benjamin · 9 years ago
  72. 4087df9 Move more side-specific code out of tls13_process_certificate. by David Benjamin · 9 years ago
  73. e455e51 Push some duplicated code into ssl_verify_cert_chain. by David Benjamin · 9 years ago
  74. 1e6f11a Adding NewSessionTicket. by Steven Valdez · 9 years ago
  75. da2630c Remove redundant SSL_VERIFY_PEER check. by David Benjamin · 9 years ago
  76. 3ce4389 Move some client/server special-cases out of tls13_process_certificate. by David Benjamin · 9 years ago
  77. 1dc53d2 Adding handling for KeyUpdate post-handshake message. by Steven Valdez · 9 years ago
  78. 8e1c7be Adding Post-Handshake message handling. by Steven Valdez · 9 years ago
  79. 87eab49 Splitting SSL session state. by Steven Valdez · 9 years ago
  80. 613fe3b Call expect_flight and received_flight in the 1.3 logic. by David Benjamin · 9 years ago
  81. 5440fe0 Adding HelloRetryRequest. by Steven Valdez · 9 years ago
  82. f2401eb Add a ssl_hs_flush_and_read_message wait mode. by David Benjamin · 9 years ago
  83. 143e8b3 Add TLS 1.3 1-RTT. by Steven Valdez · 9 years ago