| Age | Commit message (Expand) | Author |
|---|
| 2020-06-06 | Implement a rolling hash of the ClientHello message, Enforce RFC 8446 | Bob Beck |
| 2020-05-29 | Mop up servername_done, which is unused. | Joel Sing |
| 2020-05-24 | Fix some stylistic nits from jsing. | Theo Buehler |
| 2020-05-23 | Enforce that SNI hostnames be correct as per rfc 6066 and 5980. | Bob Beck |
| 2020-05-23 | Do not assume that server_group != 0 or tlsext_supportedgroups != NULL | Theo Buehler |
| 2020-05-19 | Only send ocsp staples if the client asked for ocsp certificate status. | Bob Beck |
| 2020-05-19 | Add support for TLS 1.3 server to send certificate status | Bob Beck |
| 2020-05-13 | Fix pesky whitespace. | Joel Sing |
| 2020-05-10 | Use size_t for OCSP response length. | Joel Sing |
| 2020-05-10 | Only reset TLS extension state when parsing client hello or server hello. | Joel Sing |
| 2020-05-09 | Add support for certificate status requests in TLS 1.3 client | Bob Beck |
| 2020-05-09 | Add support for HelloRetryRequests in the TLSv1.3 server. | Joel Sing |
| 2020-04-21 | Handle TLSv1.3 key shares other than X25519 on the server side. | Joel Sing |
| 2020-02-18 | drop unused include <openssl/curve25519.h> | Theo Buehler |
| 2020-02-16 | Avoid potential NULL dereference when parsing a server keyshare extension. | Joel Sing |
| 2020-02-06 | Correctly handle key share extensions in a hello retry request. | Joel Sing |
| 2020-02-01 | Correctly unpack client key shares. | Joel Sing |
| 2020-01-30 | Provide struct/functions for handling TLSv1.3 key shares. | Joel Sing |
| 2020-01-26 | Add sigalgs for server side to enable client certificate processing | Bob Beck |
| 2020-01-25 | Only discard the extension block for client hello and server hello | Joel Sing |
| 2020-01-25 | Only send an RI extension for pre-TLSv1.3 versions. | Joel Sing |
| 2020-01-22 | Rename failure into alert_desc in tlsext_ocsp_server_parse(). | Theo Buehler |
| 2020-01-22 | fix previous: alert_desc needs to be an int. | Theo Buehler |
| 2020-01-22 | Avoid modifying alert in the success path. | Theo Buehler |
| 2019-11-16 | Revert previous deduplication diff, I broke portable in a strange way. | Bob Beck |
| 2019-11-15 | Deduplicate some extension processing code. | Bob Beck |
| 2019-05-29 | Relax parsing of TLS key share extensions on the server. | Joel Sing |
| 2019-05-29 | Do not send an SNI extension when resuming a session that contains a server | Joel Sing |
| 2019-05-28 | Fix typo and label indent. | Joel Sing |
| 2019-05-28 | Tidy up some names/structures following the renaming of TLS extension | Joel Sing |
| 2019-05-08 | In DTLS, use_srtp is part of the extended server hello while in TLSv1.3, | Theo Buehler |
| 2019-03-25 | Defer sigalgs selection until the certificate is known. | Joel Sing |
| 2019-03-19 | Revert TLS1_get{,_client}_version simplification because DTLS. | Joel Sing |
| 2019-03-17 | Partially clean up the TLS1_get_{,client}_version macros. | Joel Sing |
| 2019-02-03 | Revert r1.38 as it introduces use of a stack value post function return. | Joel Sing |
| 2019-01-31 | unwrap a line introduced in previous. | Theo Buehler |
| 2019-01-30 | Correct handling of TLS sigalgs extension for TLSv1.0/TLSv1.1. | Joel Sing |
| 2019-01-28 | Deduplicate a bunch of replicated code in the extension handling | Bob Beck |
| 2019-01-28 | Add tls_extension_seen(), a utility to know if a particular extension | Bob Beck |
| 2019-01-24 | Add server side of versions, keyshare, and client and server of cookie | Bob Beck |
| 2019-01-24 | move the extensions_seen into the handshake struct | Bob Beck |
| 2019-01-23 | Modify sigalgs extension processing to accomodate TLS 1.3. | Bob Beck |
| 2019-01-23 | revert previous, accidentally contained another diff in addition | Bob Beck |
| 2019-01-23 | Modify sigalgs extension processing for TLS 1.3. | Bob Beck |
| 2019-01-20 | TLS 1.3 clients always need to send the supported groups extension. | Joel Sing |
| 2019-01-18 | bump copyright years appopriately | Bob Beck |
| 2019-01-18 | Add client side of supported versions and keyshare extensions with basic regress | Bob Beck |
| 2019-01-18 | Add support for RFC 8446 section 4.2 enforcing which extensions may | Bob Beck |
| 2019-01-18 | Rename TLS extension handling to use less "hello". | Joel Sing |
| 2018-11-09 | Add the ability to have a separate priority list for sigalgs. | Bob Beck |
