1. 5fe3715 Flush server side unauthenticated writes by Matt Caswell · 7 years ago
  2. a216df5 Fix SSL_get_shared_ciphers() by Matt Caswell · 7 years ago
  3. c4fa1f7 Fix regression with session cache use by clients by Benjamin Kaduk · 7 years ago
  4. bd7775e Fix assertion failure in SSL_set_bio() by Matt Caswell · 7 years ago
  5. a53b5be Fix configuration of TLSv1.3 ciphersuites by Matt Caswell · 7 years ago
  6. cdb10ba Set error code on alloc failures by Rich Salz · 7 years ago
  7. 4cffafe Use the private RNG for data that is not public by Kurt Roeckx · 7 years ago
  8. e6e9170 Allow NULL for some _free routines. by Rich Salz · 7 years ago
  9. 320a812 Remove some code for a contributor that we cannot find by Matt Caswell · 7 years ago
  10. d316cdc Do not cache sessions with zero sid_ctx_length when SSL_VERIFY_PEER by Benjamin Kaduk · 7 years ago
  11. 4bfb96f Place ticket keys into secure memory by Todd Short · 7 years ago
  12. 8a5ed9d Apply system_default configuration on SSL_CTX_new(). by Tomas Mraz · 7 years ago
  13. 16cfc2c Don't use a ssl specific DRBG anymore by Kurt Roeckx · 7 years ago
  14. 31393fd RAND_DRBG: add a function for setting the default DRBG type and flags by Dr. Matthias St. Pierre · 7 years ago
  15. 6decf94 Publish the RAND_DRBG API by Dr. Matthias St. Pierre · 7 years ago
  16. fa25763 Put the default set of TLSv1.3 ciphersuites in a header file by Matt Caswell · 7 years ago
  17. f865b08 Split configuration of TLSv1.3 ciphers from older ciphers by Matt Caswell · 7 years ago
  18. df0fed9 Session Ticket app data by Todd Short · 7 years ago
  19. e440f51 Give more information in the SSL_stateless return code by Matt Caswell · 7 years ago
  20. 0e1d6ec Add X448/Ed448 support to libssl by Matt Caswell · 7 years ago
  21. c39e404 Do not set a nonzero default max_early_data by Benjamin Kaduk · 7 years ago
  22. b38ede8 Export keying material using early exporter master secret by Tatsuhiro Tsujikawa · 7 years ago
  23. 8164d91 DRBG: make the derivation function the default for ctr_drbg by Dr. Matthias St. Pierre · 7 years ago
  24. 1d0c08b The function ssl_get_min_max_version() can fail by Matt Caswell · 7 years ago
  25. 8883499 Free pha_dgst in SSL_clear() by Todd Short · 7 years ago
  26. 9d75dce Add TLSv1.3 post-handshake authentication (PHA) by Todd Short · 7 years ago
  27. 20928ff Add RAND_DRBG_bytes by Kurt Roeckx · 7 years ago
  28. d6bb50a Fix the SSL_stateless() return code by Matt Caswell · 7 years ago
  29. 808d160 Fix interaction between SSL_stateless() and SSL_clear() by Matt Caswell · 7 years ago
  30. c36001c Fix logic around when to send an HRR based on cookies by Matt Caswell · 7 years ago
  31. 042c575 Add the SSL_stateless() function by Matt Caswell · 7 years ago
  32. 43054d3 Add support for sending TLSv1.3 cookies by Matt Caswell · 7 years ago
  33. 48e5119 Copyright update of more files that have changed this year by Richard Levitte · 7 years ago
  34. a41a612 Make data argument const in SSL_dane_tlsa_add by Patrick Schlangen · 7 years ago
  35. f7414b0 Disable partial writes for early data by Matt Caswell · 7 years ago
  36. 2a8db71 Don't flush the ClientHello if we're going to send early data by Matt Caswell · 7 years ago
  37. a93ba40 Add master DRBG for reseeding by Dr. Matthias St. Pierre · 7 years ago
  38. fce78bd Fix invalid function type casts. Rename bio_info_cb to BIO_info_cb. by Bernd Edlinger · 7 years ago
  39. a5816a5 Implement session id TLSv1.3 middlebox compatibility mode by Matt Caswell · 7 years ago
  40. cbe2964 Consistent formatting for sizeof(foo) by Rich Salz · 7 years ago
  41. dd5a427 Fix some formatting nits by Matt Caswell · 7 years ago
  42. f63a17d Convert the state machine code to use SSLfatal() by Matt Caswell · 7 years ago
  43. cf72c75 Implement Maximum Fragment Length TLS extension. by FdaSilvaYY · 7 years ago
  44. 1fcb4e4 Use atomics for SSL_CTX statistics by Benjamin Kaduk · 7 years ago
  45. 7a90820 Simplify the stack reservation by Paul Yang · 7 years ago
  46. e6b10c3 Fix error handling in SSL_new by Bernd Edlinger · 7 years ago
  47. 26a7d93 Remove parentheses of return. by KaoruToda · 7 years ago
  48. 2139145 Add missing RAND_DRBG locking by Benjamin Kaduk · 7 years ago
  49. c16de9d Fix reseeding issues of the public RAND_DRBG by Dr. Matthias St. Pierre · 7 years ago
  50. 208fb89 Since return is inconsistent, I removed unnecessary parentheses and by KaoruToda · 7 years ago
  51. f32b0ab Remove unnecessary #include <openssl/lhash.h> directives. by Pauli · 8 years ago
  52. e431363 Add stack space reservations. by Pauli · 8 years ago
  53. b92d7b6 Use size of entries, not size of the pointer. by Kurt Roeckx · 8 years ago
  54. 9e84a42 Store groups as uint16_t by Dr. Stephen Henson · 8 years ago
  55. 79b4444 Cleanup whitespace in ssl_lib.c (tabs to spaces) by Dr. Matthias St. Pierre · 8 years ago
  56. 6aaa29f Allow use of RSA-PSS certificates in TLS 1.2 by Dr. Stephen Henson · 8 years ago
  57. 3edabd3 Provide getters for min/max proto version by Christian Heimes · 8 years ago
  58. 4cacc9d Revert "GH614: Use memcpy()/strdup() when possible" by Pauli · 8 years ago
  59. a9c0d8b Rename SSL_CTX_set_early_cb to SSL_CTX_set_client_hello_cb. by David Benjamin · 8 years ago
  60. add8d0e Enable the ability to use an external PSK for sending early_data by Matt Caswell · 8 years ago
  61. cd420b0 Move the REF_PRINT support from e_os.h to internal/refcount.h. by Pauli · 8 years ago
  62. 677963e e_os.h removal from other headers and source files. by Pauli · 8 years ago
  63. 0b14a5b Don't auto-instantiate a DRBG when trying to use it and it's not by Kurt Roeckx · 8 years ago
  64. 0aed6e4 Add SSL_get_pending_cipher() by Benjamin Kaduk · 8 years ago
  65. ae3947d Add a DRBG to each SSL object by Rich Salz · 8 years ago
  66. 67dc995 Move ossl_assert by Matt Caswell · 8 years ago
  67. 5d61491 Fix new_session_cb calls in TLSv1.3 by Matt Caswell · 8 years ago
  68. 190b9a0 Make SSL_set_tlsext_host_name no effect from server side by Paul Yang · 8 years ago
  69. a58eb06 Add support to free/allocate SSL buffers by Todd Short · 8 years ago
  70. 2425253 Remove session checks from SSL_clear() by Matt Caswell · 8 years ago
  71. 59ff3f0 Fix SSL_clear() in TLSv1.3 by Matt Caswell · 8 years ago
  72. c8feba7 Error out when forcing an unsupported TLS version by Benjamin Kaduk · 8 years ago
  73. 23cec1f Add documentation for the SSL_export_keying_material() function by Matt Caswell · 8 years ago
  74. 7225720 PSK related tweaks based on review feedback by Matt Caswell · 8 years ago
  75. 725b0f1 Make the input parameters for SSL_SESSION_set1_master_key const by Matt Caswell · 8 years ago
  76. 911d63f Add SSL_SESSION_set1_master_key() by Matt Caswell · 8 years ago
  77. f46184b Add public API functions for setting TLSv1.3 PSK callbacks by Matt Caswell · 8 years ago
  78. 9368f86 Add TLSv1.3 client side external PSK support by Matt Caswell · 8 years ago
  79. b202155 Allow Ed25519 in TLS 1.2 by Dr. Stephen Henson · 8 years ago
  80. c80149d Merge Nokia copyright notice into standard by Rich Salz · 8 years ago
  81. aa8f3d7 Modify Sun copyright to follow OpenSSL style by Rich Salz · 8 years ago
  82. 193b5d7 Add SSL_early_get1_extensions_present() by Benjamin Kaduk · 8 years ago
  83. db0f35d Fix #2400 Add NO_RENEGOTIATE option by Todd Short · 8 years ago
  84. b77f3ed Convert existing usage of assert() to ossl_assert() in libssl by Matt Caswell · 8 years ago
  85. a89325e Fix some style issues in returns by Matt Caswell · 8 years ago
  86. 380a522 Replace instances of OPENSSL_assert() with soft asserts in libssl by Matt Caswell · 8 years ago
  87. 6944311 Make SSL_is_server() accept a const SSL by Matt Caswell · 8 years ago
  88. fb34a0f Try to be more consistent about the alerts we send by Matt Caswell · 8 years ago
  89. 2118188 Copy custom extension flags in a call to SSL_set_SSL_CTX() by Matt Caswell · 8 years ago
  90. c649d10 TLS1.3 Padding by Todd Short · 8 years ago
  91. 8af91fd Don't fail the connection in SSLv3 if server selects ECDHE by Matt Caswell · 8 years ago
  92. 6a71e06 CT_POLICY_EVAL_CTX_set_time expects milliseconds, but given seconds by Rob Percival · 8 years ago
  93. fa7c263 New certificate_authorities functions by Dr. Stephen Henson · 8 years ago
  94. a0cb628 Tweak a style issue by Matt Caswell · 8 years ago
  95. bbea9f2 Restore s->early_data_state with the original value by Tatsuhiro Tsujikawa · 8 years ago
  96. a8e75d5 Fix a typo in the SSL_get_max_early_data() declarations by Kazuki Yamaguchi · 8 years ago
  97. 116d0da Fix early data bug with pause between EoED and CF by Matt Caswell · 8 years ago
  98. 69687aa More typo fixes by FdaSilvaYY · 8 years ago
  99. ef6c191 Update end of early data processing for draft-19 by Matt Caswell · 8 years ago
  100. b8c4961 Provide a function to test whether we have unread records pending by Matt Caswell · 8 years ago