1. 9d75dce Add TLSv1.3 post-handshake authentication (PHA) by Todd Short · 7 years ago
  2. c589c34 Add support for the TLS 1.3 signature_algorithms_cert extension by Benjamin Kaduk · 7 years ago
  3. 97ea1e7 Updates following review of SSL_stateless() code by Matt Caswell · 7 years ago
  4. d0debc0 Add a timestamp to the cookie by Matt Caswell · 7 years ago
  5. dd77962 Fix the cookie/key_share extensions for use with SSL_stateless() by Matt Caswell · 7 years ago
  6. c36001c Fix logic around when to send an HRR based on cookies by Matt Caswell · 7 years ago
  7. 43054d3 Add support for sending TLSv1.3 cookies by Matt Caswell · 7 years ago
  8. 56d3628 Remove spaces at end of line in ssl/statem by Paul Yang · 7 years ago
  9. fc7129d Update state machine to send CCS based on whether we did an HRR by Matt Caswell · 7 years ago
  10. 88050dd Update ServerHello to new draft-22 format by Matt Caswell · 7 years ago
  11. 2894e9c Fix bug in TLSv1.3 PSK processing by Matt Caswell · 7 years ago
  12. 29bfd5b Add some more cleanups by Matt Caswell · 7 years ago
  13. 635c8f7 Fix up a few places in the state machine that got missed with SSLfatal() by Matt Caswell · 7 years ago
  14. 3ec8d11 Convert remaining functions in statem_srvr.c to use SSLfatal() by Matt Caswell · 7 years ago
  15. f63a17d Convert the state machine code to use SSLfatal() by Matt Caswell · 7 years ago
  16. cf72c75 Implement Maximum Fragment Length TLS extension. by FdaSilvaYY · 7 years ago
  17. f48d826 Change curves to groups where relevant by Dr. Stephen Henson · 7 years ago
  18. ff6d20a Use separate functions for supported and peer groups lists by Dr. Stephen Henson · 7 years ago
  19. 34e5292 Rename tls1_get_curvelist. by Dr. Stephen Henson · 8 years ago
  20. 612f9d2 New function ssl_generate_param_group by Dr. Stephen Henson · 8 years ago
  21. 43b95d7 Replace tls1_ec_curve_id2nid. by Dr. Stephen Henson · 8 years ago
  22. 9e84a42 Store groups as uint16_t by Dr. Stephen Henson · 8 years ago
  23. 630369d Add server side sanity checks of SNI/ALPN for use with early_data by Matt Caswell · 8 years ago
  24. add8d0e Enable the ability to use an external PSK for sending early_data by Matt Caswell · 8 years ago
  25. 44e6995 Fix some Typos and indents by FdaSilvaYY · 8 years ago
  26. e374335 Don't modify resumed session objects by Benjamin Kaduk · 8 years ago
  27. d4504fe Fix early_data with an HRR by Matt Caswell · 8 years ago
  28. e3c0d76 Do not allow non-dhe kex_modes by default by Matt Caswell · 8 years ago
  29. 011d768 Fix some bugs in the TLSv1.3 PSK code by Matt Caswell · 8 years ago
  30. 3a7c56b Add TLSv1.3 server side external PSK support by Matt Caswell · 8 years ago
  31. 0de6d66 Move ciphersuite selection before session resumption in TLSv1.3 by Matt Caswell · 8 years ago
  32. db0f35d Fix #2400 Add NO_RENEGOTIATE option by Todd Short · 8 years ago
  33. fb34a0f Try to be more consistent about the alerts we send by Matt Caswell · 8 years ago
  34. b186a59 Fail if we receive a response to an extension that we didn't request by Matt Caswell · 8 years ago
  35. b6fdc12 Send a missing_extension alert if key_share/supported groups not present by Matt Caswell · 8 years ago
  36. 721586e Fix some alert codes by Matt Caswell · 8 years ago
  37. cf53cbe Fix 'no-ec' by Richard Levitte · 8 years ago
  38. 12635aa Updates to supported_groups following review feedback by Matt Caswell · 8 years ago
  39. 6af8754 Send the supported_groups extension in EE where applicable by Matt Caswell · 8 years ago
  40. d1186c3 Fix minor compiler issues. by Todd Short · 8 years ago
  41. fe874d2 Move the extensions context codes into the public API by Matt Caswell · 8 years ago
  42. 6594189 Merge early_data_info extension into early_data by Matt Caswell · 8 years ago
  43. 312e938 Fix a memory leak on an error path by Matt Caswell · 8 years ago
  44. 30d1bab Silence some clang warnings by Matt Caswell · 8 years ago
  45. 38df5a4 Don't accept early_data if we are going to issue a HelloRetryRequest by Matt Caswell · 8 years ago
  46. 2c604cb Validate the ticket age for resumed sessions by Matt Caswell · 8 years ago
  47. 1ea4d09 Construct the server side early_data extension by Matt Caswell · 8 years ago
  48. 0a87d0a Parse the early_data extension by Matt Caswell · 8 years ago
  49. 3fc8d85 Construct the ticket_early_data_info extension by Matt Caswell · 8 years ago
  50. 28a31a0 Don't change the state of the ETM flags until CCS processing by Matt Caswell · 8 years ago
  51. aff9929 Implement support for resumption with a HelloRetryRequest by Matt Caswell · 8 years ago
  52. 7d061fc Add server side support for creating the Hello Retry Request message by Matt Caswell · 8 years ago
  53. 6113835 Make the context available to the extensions parse and construction funcs by Matt Caswell · 8 years ago
  54. 1b8bacf Add a TODO around validating the ticket age by Matt Caswell · 8 years ago
  55. 1a9f457 If we have no suitable PSK kex modes then don't attempt to resume by Matt Caswell · 8 years ago
  56. 1f5b44e Miscellaneous style tweaks based on feedback received by Matt Caswell · 8 years ago
  57. 534a43f Always ensure that session->cipher is set by Matt Caswell · 8 years ago
  58. 0247086 Implement server side of PSK extension construction by Matt Caswell · 8 years ago
  59. 1053a6e Implement Server side of PSK extension parsing by Matt Caswell · 8 years ago
  60. f4bbb37 Provide a key_share extension finaliser by Matt Caswell · 8 years ago
  61. b2f7e8c Add support for the psk_key_exchange_modes extension by Matt Caswell · 8 years ago
  62. c7f4778 Move state machine knowledge out of the record layer by Matt Caswell · 8 years ago
  63. 703bcee Convert Sigalgs processing to use ints by Matt Caswell · 8 years ago
  64. aff8c12 Move extension data into sub-structs by Rich Salz · 8 years ago
  65. 8521ced Rename the chain variable to chainidx by Matt Caswell · 8 years ago
  66. f63e428 Implement TLSv1.3 style CertificateStatus by Matt Caswell · 8 years ago
  67. e96e0f8 Create Certificate messages in TLS1.3 format by Matt Caswell · 8 years ago
  68. f97d4c3 Extends extension parsing to take the Certificate by Matt Caswell · 8 years ago
  69. 30aeba4 Extend tls_construct_extensions() to enable passing of a certificate by Matt Caswell · 8 years ago
  70. 3cf96e8 Fix compilation with no-ec by Matt Caswell · 8 years ago
  71. 7fe97c0 Fix make update issues by Matt Caswell · 8 years ago
  72. cbb0954 Introduce TLSEXT_STATUSTYPE_nothing constant by Matt Caswell · 8 years ago
  73. d270de3 Change TLSEXT_IDX_* values into an enum by Matt Caswell · 8 years ago
  74. 1266eef Various style updates following extensions refactor by Matt Caswell · 8 years ago
  75. 8924737 Fix travis mixed declarations and code error by Matt Caswell · 8 years ago
  76. a1448c2 Remove some spurious whitespace by Matt Caswell · 8 years ago
  77. 70af3d8 Avoid repeatedly scanning the list of extensions by Matt Caswell · 8 years ago
  78. 24b8e4b Simplify ClientHello extension parsing by Matt Caswell · 8 years ago
  79. 02f0274 Move ALPN processing into an extension finalisation function by Matt Caswell · 8 years ago
  80. 805a2e9 Provide server side extension init and finalisation functions by Matt Caswell · 8 years ago
  81. ab83e31 Move client construction of ClientHello extensions into new framework by Matt Caswell · 8 years ago
  82. 6dd083f Move client parsing of ServerHello extensions into new framework by Matt Caswell · 8 years ago
  83. e56c33b Rename some functions by Matt Caswell · 8 years ago
  84. 7da160b Move ServerHello extension construction into the new extensions framework by Matt Caswell · 8 years ago
  85. 25670f3 Split extensions code into core extensions and server extensions code by Matt Caswell · 8 years ago