aboutsummaryrefslogtreecommitdiff
path: root/ssl
AgeCommit message (Expand)AuthorFilesLines
2016-11-22Disable RSA-PSS by default.version_for_cocoapods_8.0chromium-2883Adam Langley3-44/+100
2016-09-27Apply GREASE to the version extension.David Benjamin3-2/+15
2016-09-27Moving TLS 1.3 version negotiation into extension.Steven Valdez12-111/+337
2016-09-27Add a test for SSL_version.David Benjamin1-7/+57
2016-09-27Prepare runner's wire/version conversions for the version extension.David Benjamin6-39/+96
2016-09-27Apply version/wire mapping at a higher layer in runner.David Benjamin6-44/+43
2016-09-27Fix ssl_ctx_make_profiles error handling.David Benjamin1-14/+17
2016-09-27Check for sk_X509_NAME_push failures.David Benjamin1-20/+21
2016-09-26Require custom private keys to specify curve in 1.3.David Benjamin1-2/+1
2016-09-23Implement draft-davidben-tls-grease-01.David Benjamin11-3/+161
2016-09-22Disable Channel ID signature checking in fuzzer mode.David Benjamin2-3/+8
2016-09-22Rename NPN-Server test.David Benjamin1-1/+1
2016-09-22Record resumption and renewal transcripts separately.David Benjamin1-12/+6
2016-09-22No-op ticket encryption in fuzzer mode.David Benjamin2-3/+20
2016-09-22Fix remaining non-determinism in fuzzer transcripts.David Benjamin3-3/+10
2016-09-22Add a fuzzer mode suppressions file.David Benjamin1-0/+25
2016-09-22Add a InvalidChannelIDSignature test.David Benjamin4-0/+24
2016-09-22Add tests for SSL_peek.David Benjamin4-1/+97
2016-09-21Support default versions with set_{min,max}_proto_version.David Benjamin2-13/+58
2016-09-21Only predict X25519 in TLS 1.3.David Benjamin4-69/+32
2016-09-21Renumber TLS 1.3 signature algorithms.David Benjamin2-7/+7
2016-09-21Fix some bugs in TLS 1.3 server key_share code.David Benjamin6-22/+73
2016-09-21Align SSL_set_{min,max}_version with upstream.David Benjamin3-54/+70
2016-09-21Don't return invalid versions in version_from_wire.David Benjamin10-104/+231
2016-09-21Take the version parameter out of ssl_do_msg_callback.David Benjamin8-29/+44
2016-09-21Improve -valgrind error-handling.David Benjamin1-2/+9
2016-09-21Don't swallow tool output on failure.David Benjamin1-1/+1
2016-09-21Fix TLS 1.3 fuzzer mode in Go.David Benjamin4-36/+39
2016-09-21Remove SSL_set_fallback_version.David Benjamin7-100/+13
2016-09-20Test interaction of RSA key exchange and ClientHello.version.David Benjamin1-0/+14
2016-09-20Do not distinguish NULL and empty PSK identity hints.David Benjamin6-5/+51
2016-09-20Move peer_psk_identity_hint to SSL_HANDSHAKE.David Benjamin4-11/+8
2016-09-19Release TLS 1.3 key shares earlier in TLS 1.2.David Benjamin4-2/+29
2016-09-16Don't send the access_denied alert innappropriately.David Benjamin3-12/+14
2016-09-16Remove a few more remnants of RC4/TLS.David Benjamin1-14/+0
2016-09-16Remove RC4 from TLS for real.Matthew Braithwaite5-153/+16
2016-09-14Add SSL_CTX_get_keylog_callback.David Benjamin1-0/+5
2016-09-13Remove identical tests.David Benjamin1-26/+0
2016-09-12Revert of Determining certificate_auth and key_exchange based on SSL.David Benjamin6-32/+14
2016-09-12Add tests for trailing data in handshake messages.David Benjamin7-16/+74
2016-09-12Factor per-message test machinery out.David Benjamin1-285/+233
2016-09-12Use C99 for size_t loops.David Benjamin13-64/+34
2016-09-12Serialize unresumable sessions to a placeholder value.Steven Valdez2-0/+19
2016-09-12Determining certificate_auth and key_exchange based on SSL.Steven Valdez6-14/+32
2016-09-12Only allow SSL_set_session before the handshake.David Benjamin5-8/+19
2016-09-12Use a common state to begin the handshake.David Benjamin3-16/+14
2016-09-12Temporary remove the TLS 1.3 anti-downgrade mechanism.David Benjamin3-34/+10
2016-09-09Add tests around compression methods.David Benjamin3-0/+57
2016-09-09Test that SNI warning alerts are ignored.David Benjamin4-0/+19
2016-09-07Fold stack-allocated types into headers.David Benjamin1-1/+1