aboutsummaryrefslogtreecommitdiff
path: root/ssl
AgeCommit message (Expand)AuthorFilesLines
2017-04-14Add SSL_CTX_set_verify_algorithm_prefs.David Benjamin7-15/+120
2017-04-14Remove includeDHE from runner.go.David Benjamin1-89/+1
2017-04-13Remove the last remnants of key_exchange_info.David Benjamin1-17/+1
2017-04-11Really remove DHE ciphersuites from TLS.Matthew Braithwaite13-402/+16
2017-04-11Disable SSLv3 by default.David Benjamin4-9/+60
2017-04-10Acknowledge KeyUpdate messages.David Benjamin7-66/+205
2017-04-10Add SendServerHelloAsHelloRetryRequest test.David Benjamin3-3/+29
2017-04-10Remove a batch of f_errs.David Benjamin1-36/+33
2017-04-06Support Ed25519 in TLS.David Benjamin15-149/+361
2017-04-06Comment typo fix: 1024 bits is too small, not too large.Adam Langley1-2/+2
2017-04-05Support Ed25519 keys in BoGo.David Benjamin7-20/+120
2017-04-05Vendor a copy of golang.org/x/crypto/ed25519.David Benjamin5-0/+3557
2017-04-05Stop pretending RSA and ECDSA sigalgs are configurable.David Benjamin2-73/+3
2017-04-05Clean up signature algorithm logic.David Benjamin2-134/+89
2017-04-05Deprecate SSL_PRIVATE_KEY_METHOD type and max_signature_len.David Benjamin10-94/+66
2017-04-05Rename hs->public_key.David Benjamin3-10/+12
2017-04-05Convert ssl_privkey.c to message-based signing APIs.David Benjamin1-169/+64
2017-04-05Add an option to allow unknown ALPN protocols.chromium-3071David Benjamin6-23/+48
2017-04-03Support enabling early data on SSLAlessandro Ghedini7-6/+15
2017-03-30Sync vendored copies of Go poly1305 and curve25519.David Benjamin15-2879/+1112
2017-03-30Update fuzzer exclusions.David Benjamin1-1/+1
2017-03-30Add missing tests for the Channel ID / 0-RTT interaction.David Benjamin1-4/+70
2017-03-30Fix fuzzer excludes.Steven Valdez1-1/+8
2017-03-29Support and test P-224 certificates.Adam Langley3-27/+25
2017-03-28Add cipher asserts for read/write app data.Steven Valdez1-0/+2
2017-03-27Tidy up ssl3_choose_cipher.David Benjamin1-28/+22
2017-03-27Test the behavior of running SSL_do_handshake twice in a row.David Benjamin4-0/+124
2017-03-27Just allocate what's needed for SSL write buffers.David Benjamin1-20/+1
2017-03-26Clean up end_of_early_data processing.David Benjamin2-29/+8
2017-03-26Adding support for receiving early data on the server.Steven Valdez13-61/+133
2017-03-26Add a test for missing end_of_early_data.David Benjamin3-1/+24
2017-03-26Test ticket age skew when resuming a resumed session.David Benjamin1-2/+4
2017-03-26Prevent Channel ID and Custom Extensions on 0-RTT.Steven Valdez4-0/+71
2017-03-26Make RI on TLS 1.3 alert with ILLEGAL_PARAMETER.Steven Valdez1-0/+1
2017-03-26Send half-RTT tickets when negotiating 0-RTT.David Benjamin9-118/+209
2017-03-26Remove session_tickets_sent.David Benjamin2-5/+0
2017-03-25Use set_{accept,connect}_state + do_handshake in bssl_shim.David Benjamin1-12/+8
2017-03-25Add a comment around the set_{min,max}_version logic.David Benjamin1-0/+2
2017-03-25Run all state machine coverage tests on implicit handshake.David Benjamin1-51/+32
2017-03-25Add a test that ALPN is rejected on renegotiation.David Benjamin2-0/+30
2017-03-25Add Data-less Zero-RTT support.Steven Valdez22-54/+830
2017-03-22Name |select_certificate_cb| return valuesAlessandro Ghedini4-27/+29
2017-03-21Remove DHE ciphersuites from TLS.Matthew Braithwaite4-131/+194
2017-03-21Convert bio_test to GTest.David Benjamin1-0/+3
2017-03-20Fix SSLv3 version check in BoGo.David Benjamin1-1/+1
2017-03-11Apply bugs to second, TLS 1.3 ClientHello.Adam Langley1-5/+11
2017-03-11Support asynchronous ticket decryption with TLS 1.3.David Benjamin5-119/+166
2017-03-11Support asynchronous ticket decryption with TLS 1.0–1.2.Adam Langley6-73/+430
2017-03-10Rename initial_ctx to session_ctx.David Benjamin6-24/+26
2017-03-10Fix configuring the empty cipher list.David Benjamin2-5/+24