1. 9e0ac6a Check ClientHello boundary as per draft-19 by Matt Caswell · 8 years ago
  2. 6594189 Merge early_data_info extension into early_data by Matt Caswell · 8 years ago
  3. ef6c191 Update end of early data processing for draft-19 by Matt Caswell · 8 years ago
  4. 3e0458f Update secret generation for draft-19 by Matt Caswell · 8 years ago
  5. dda12ce Remove dead code by Benjamin Kaduk · 8 years ago
  6. d9aea04 Tighten up client status_request processing by Benjamin Kaduk · 8 years ago
  7. a5bb1aa Clear alpn_selected_len for clients, too by Benjamin Kaduk · 8 years ago
  8. e0926ef De-obfuscate by Benjamin Kaduk · 8 years ago
  9. aebe9e3 Fix some -Wshadow warnings by Benjamin Kaduk · 8 years ago
  10. d61461a Use the callbacks from the SSL object instead of the SSL_CTX object by Pauli · 8 years ago
  11. d3bc980 Avoid questionable use of the value of a pointer by Bernd Edlinger · 8 years ago
  12. 42c28b6 Use the new TLSv1.3 certificate_required alert where appropriate by Matt Caswell · 8 years ago
  13. 652a6b7 Check that the PSK extension is last by Matt Caswell · 8 years ago
  14. 0b1f266 Fixup previous merge. by Bernd Edlinger · 8 years ago
  15. 6aad939 this change will prevent undefined behavior when src and dst are equal (memcpy), effectively allowing setting length only in both functions. by Roberto Guimaraes · 8 years ago
  16. 4f7b76b Fix no-comp by Matt Caswell · 8 years ago
  17. 524420d Check TLSv1.3 ServerHello, Finished and KeyUpdates are on record boundary by Matt Caswell · 8 years ago
  18. b8c4961 Provide a function to test whether we have unread records pending by Matt Caswell · 8 years ago
  19. 9015d34 Get pointer type right in BIO_ssl_shutdown() by Rich Salz · 8 years ago
  20. 4321969 Tweak the TLSv1.3 record overflow limits by Matt Caswell · 8 years ago
  21. febb0af Fix double free in cookie generation. by Kurt Roeckx · 8 years ago
  22. e6941c7 Don't call memcmp with a NULL pointer by Matt Caswell · 8 years ago
  23. cfef502 Add basic TLSv1.3 cookie support by Matt Caswell · 8 years ago
  24. 312e938 Fix a memory leak on an error path by Matt Caswell · 8 years ago
  25. 5528d68 Set specific error is we have no valid signature algorithms set by Dr. Stephen Henson · 8 years ago
  26. b0e9ab9 Signature algorithm enhancement. by Dr. Stephen Henson · 8 years ago
  27. 8f12296 Disallow zero length signature algorithms by Dr. Stephen Henson · 8 years ago
  28. 224b4e3 Don't allow DSA for TLS 1.3 by Dr. Stephen Henson · 8 years ago
  29. 42f50fd Silence some more clang warnings by Matt Caswell · 8 years ago
  30. 30d1bab Silence some clang warnings by Matt Caswell · 8 years ago
  31. 09f2887 Update early data API for writing to unauthenticated clients by Matt Caswell · 8 years ago
  32. 0665b4e Rename SSL_write_early() to SSL_write_early_data() by Matt Caswell · 8 years ago
  33. f533fbd Rename SSL_read_early() to SSL_read_early_data() by Matt Caswell · 8 years ago
  34. 3eaa417 Make SSL_write_early_finish() an internal only function by Matt Caswell · 8 years ago
  35. f7e393b Various fixes required to allow SSL_write/SSL_read during early data by Matt Caswell · 8 years ago
  36. d7f8783 Enable the server to call SSL_write() without stopping the ability to call SSL_read_early() by Matt Caswell · 8 years ago
  37. 564547e Enable the client to call SSL_read() without stopping the ability to call SSL_write_early() by Matt Caswell · 8 years ago
  38. 4004ce5 Introduce a new early_data state in the state machine by Matt Caswell · 8 years ago
  39. bc908c6 Improve the early data sanity check in SSL_do_handshake() by Matt Caswell · 8 years ago
  40. 0a5ece5 Tighten sanity checks when calling early data functions by Matt Caswell · 8 years ago
  41. f5b519c Make SSL_get_early_data_status() take a const by Matt Caswell · 8 years ago
  42. 46dcb94 Make SSL_get_max_early_data() and SSL_CTX_get_max_early_data() take a const by Matt Caswell · 8 years ago
  43. fcc4757 Add a SSL_SESSION_get_max_early_data() function by Matt Caswell · 8 years ago
  44. 7daf715 Don't attempt to write more early_data than we know the server will accept by Matt Caswell · 8 years ago
  45. f637004 Only accept early_data if the negotiated ALPN is the same by Matt Caswell · 8 years ago
  46. a832b5e Skip early_data if appropriate after a HelloRetryRequest by Matt Caswell · 8 years ago
  47. 38df5a4 Don't accept early_data if we are going to issue a HelloRetryRequest by Matt Caswell · 8 years ago
  48. 538bea6 Add extra validation parsing the server-to-client early_data extension by Matt Caswell · 8 years ago
  49. 329114f Remove some TLSv1.3 TODOs that are no longer relevant by Matt Caswell · 8 years ago
  50. 2c604cb Validate the ticket age for resumed sessions by Matt Caswell · 8 years ago
  51. bfa9a9a Provide a default value for max_early_data by Matt Caswell · 8 years ago
  52. 70ef40a Check max_early_data against the amount of early data we actually receive by Matt Caswell · 8 years ago
  53. 67f78ea Make sure we reset the read sequence when skipping records by Matt Caswell · 8 years ago
  54. 1010936 Disallow handshake messages in the middle of early_data by Matt Caswell · 8 years ago
  55. c117af6 Fix seg fault when sending early_data using CCM ciphersuites by Matt Caswell · 8 years ago
  56. b2cc7f3 Implement client side parsing of the early_data extension by Matt Caswell · 8 years ago
  57. fe5e20f Fix changing of the cipher state when dealing with early data by Matt Caswell · 8 years ago
  58. 1ea4d09 Construct the server side early_data extension by Matt Caswell · 8 years ago
  59. d781d24 Provide an SSL_read_early() function for reading early data by Matt Caswell · 8 years ago
  60. 6cb4226 Change the cipher state when sending early data by Matt Caswell · 8 years ago
  61. d49e23e Implement the early data changes required in tls13_change_cipher_state() by Matt Caswell · 8 years ago
  62. 0a87d0a Parse the early_data extension by Matt Caswell · 8 years ago
  63. a4f376a Construct the early_data extension by Matt Caswell · 8 years ago
  64. 49e7fe1 Provide functions to write early data by Matt Caswell · 8 years ago
  65. 5d5b3fb Parse the ticket_early_data_info extension by Matt Caswell · 8 years ago
  66. 29fac54 Teach SSL_trace() about the early_data_info extension by Matt Caswell · 8 years ago
  67. 3fc8d85 Construct the ticket_early_data_info extension by Matt Caswell · 8 years ago
  68. f33f9dd Fix a compression bug by Matt Caswell · 8 years ago
  69. c19602b Ensure that we never select compression in TLSv1.3 by Matt Caswell · 8 years ago
  70. a3004c8 Check for zero records and return immediately by Jon Spillett · 8 years ago
  71. 607c926 Code health: ssl/ssl_locl.h unused macros by Andy · 8 years ago
  72. 2f0ca54 Remove some obsolete/obscure internal define switches: by Emilia Kasper · 8 years ago
  73. 38f2837 Remove some commented out code in libssl by Matt Caswell · 8 years ago
  74. 2722ff5 Remove some #if 0 code in ssl, crypto/bio by Todd Short · 8 years ago
  75. 14097b6 Code health: Stop using timeb.h / ftime() (VMS only) by Richard Levitte · 8 years ago
  76. b53338c Clean up references to FIPS by Emilia Kasper · 8 years ago
  77. fa7e9ed Remove unnecessary memset after PR #2583 avoids accessing by Bernd Edlinger · 8 years ago
  78. df15c84 Remove some dead code from libssl by Matt Caswell · 8 years ago
  79. fa64210 Trace support for TLS 1.3 certificate request message by Dr. Stephen Henson · 8 years ago
  80. 03f44b9 Initial incomplete TLS 1.3 certificate request support. by Dr. Stephen Henson · 8 years ago
  81. 26a556e Add missing blank lines and cosmetic improvements by Dr. Stephen Henson · 8 years ago
  82. 5032abd TLS 1.3 support for ssl_print_ticket() by Dr. Stephen Henson · 8 years ago
  83. 2621235 print out alpn extension by Dr. Stephen Henson · 8 years ago
  84. 5243484 Add ffdhe groups to trace output by Dr. Stephen Henson · 8 years ago
  85. b9d7199 Print numerical value of named roups by Dr. Stephen Henson · 8 years ago
  86. f1dae5f Add entry for PSK extension by Dr. Stephen Henson · 8 years ago
  87. 6e7c553 Add trace entries for remaining TLS 1.3 ciphersuites by Dr. Stephen Henson · 8 years ago
  88. 095a982 For TLS 1.3 reject SHA1 TLS signatures by Dr. Stephen Henson · 8 years ago
  89. e892e32 Reject compressed point format with TLS 1.3 by Dr. Stephen Henson · 8 years ago
  90. 599b586 Add SuiteB support to tls_choose_sigalg() by Dr. Stephen Henson · 8 years ago
  91. 75c13e7 Tidy up certificate type handling. by Dr. Stephen Henson · 8 years ago
  92. 4ee7d3f Implement SSL_read_ex() and SSL_write_ex() as documented. by Kurt Roeckx · 8 years ago
  93. 6b1bb98 Add SSL_CTX early callback by Benjamin Kaduk · 8 years ago
  94. ddf9725 Prepare for WORK_MORE_C by Benjamin Kaduk · 8 years ago
  95. 90134d9 Refactor SSL_bytes_to_cipher_list() by Benjamin Kaduk · 8 years ago
  96. ccb8e6e Export SSL_bytes_to_cipher_list() by Benjamin Kaduk · 8 years ago
  97. 60d685d Let ssl_get_cipher_by_char yield not-valid ciphers by Benjamin Kaduk · 8 years ago
  98. 650c6e4 Add more first-class support for SCSVS by Benjamin Kaduk · 8 years ago
  99. cb7a1f5 Move CLIENTHELLO_MSG up in the header by Benjamin Kaduk · 8 years ago
  100. 26f4268 Store the number of extensions in CLIENTHELLO_MSG by Benjamin Kaduk · 8 years ago