- bbd9f18 Document and tidy up X509_find_by_*. by David Benjamin · 1 year, 8 months ago
- d0a0750 Remove unused X509_LOOKUP_by_* functions. by David Benjamin · 1 year, 8 months ago
- fd52296 Check some ASN1_STRING types in crypto/x509 by Emily Stark · 1 year, 8 months ago
- 7b2795a Replace even more ad-hoc bytes/integer conversions. by David Benjamin · 1 year, 8 months ago
- 9f426b6 Specify all library install destinations by Don · 1 year, 8 months ago
- 1510e46 Add a poisoned field to EVP_CIPHER_CTX. by Bob Beck · 1 year, 8 months ago
- 2e295b9 Stub out DSA paramgen functions. by David Benjamin · 1 year, 8 months ago
- 8a1542f Stub out the OpenSSL secure heap. by David Benjamin · 1 year, 8 months ago
- c990cf1 Define OPENSSL_NO_SSL_TRACE. by David Benjamin · 1 year, 8 months ago
- ea2ad5a Add ASN1_INTEGER_get_int64 and ASN1_ENUMERATED_get_int64. by David Benjamin · 1 year, 8 months ago
- e8e6cac Add the "groups" variants of SSL_CTX_set1_curves_list. by David Benjamin · 1 year, 8 months ago
- 1106836 Provide the other primes from RFC 3526. by David Benjamin · 1 year, 8 months ago
- 8462a36 Silence a GCC 12 -Warray-bounds false positive warning. by David Benjamin · 1 year, 8 months ago
- 2749466 Rework truncated SHA-2 to silence GCC 12 false positive warning. by David Benjamin · 1 year, 8 months ago
- 19009c5 Require getrandom in all FIPS builds. by David Benjamin · 1 year, 8 months ago
- aca1930 Incorporate OS entropy on FIPS CTR-DRBG reseed, not just init. by David Benjamin · 1 year, 8 months ago
- 5f627e5 Add RAND_get_system_entropy_for_custom_prng by Bob Beck · 1 year, 8 months ago
- b8e784e Rewrite RSA_verify_PKCS1_PSS_mgf1 with size_t. by David Benjamin · 1 year, 8 months ago
- 34e474f Check set_encrypt_key return value in AESTest.ABI. by David Benjamin · 1 year, 8 months ago
- 10fef97 Prefer established session properties mid renegotiation. by David Benjamin · 1 year, 8 months ago
- ee477d4 Add EVP_HPKE_KDF_hkdf_md. by David Benjamin · 1 year, 8 months ago
- 8a3b269 Find threading library by Don · 1 year, 8 months ago
- 4ff604e Use O_CLOEXEC instead of fcntl(FD_CLOEXEC) by David Benjamin · 1 year, 8 months ago
- 779f7d0 Add an EVP_HPKE_KEM_enc_len API. by David Benjamin · 1 year, 8 months ago
- ebd8b89 Track SSL_ERROR_ZERO_RETURN explicitly. by David Benjamin · 1 year, 9 months ago
- b2d3c10 Clean up header to reuse __riscv definition by Rebecca Chang Swee Fun · 1 year, 8 months ago
- a6d321b Tighten up supported PSS combinations in X.509. by David Benjamin · 1 year, 9 months ago
- d45d893 Add HMAC_CTX_get_md. by David Benjamin · 1 year, 9 months ago
- 401137f Add a test for SSL_CTX_set_quiet_shutdown. by David Benjamin · 1 year, 9 months ago
- 2135ac6 Add X509_STORE_CTX_set0_trusted_stack. by David Benjamin · 1 year, 9 months ago
- eccd103 Add X509_V_FLAG_NO_CHECK_TIME. by David Benjamin · 1 year, 9 months ago
- ce65c1d Add DSA_bits and DH_bits. by David Benjamin · 1 year, 9 months ago
- adaa322 Add handshake hints for TLS 1.2 session tickets. by David Benjamin · 1 year, 9 months ago
- 7f857ea Rework STACK_OF(T) documentation. by David Benjamin · 1 year, 11 months ago
- f3374b1 Fix some typos in comments. by David Benjamin · 1 year, 9 months ago
- db54a42 Remove stale comment. by David Benjamin · 1 year, 9 months ago
- 4da5a94 Fix SSL_load_client_CA_file when given an empty file. by David Benjamin · 1 year, 9 months ago
- 45aadce Define NR_getrandom for riscv64 by Mao Han · 1 year, 9 months ago
- e666d0a Adapt break-tests.sh to run on an attached Android device. by Pete Bentley · 1 year, 9 months ago
- 15596ef Include hopefully all ARM instructions with condition codes. by Adam Langley · 1 year, 9 months ago
- b7d6320 Replace OPENSSL_STATIC_ASSERT with static_assert. by David Benjamin · 1 year, 9 months ago
- ccd665d Make time_t conversions. Give up on the OS provided ones. by Bob Beck · 1 year, 9 months ago
- 5cb597e Test that close_notify state does not impair SSL_ERROR_SYSCALL. by David Benjamin · 1 year, 9 months ago
- 4bd32a8 Convert more of the SSL write path to size_t and Spans. by David Benjamin · 3 years ago
- 8ce0e1c Revert "Fetch entropy from a system daemon in FIPS mode on Android." by Adam Langley · 1 year, 9 months ago
- 4259ae8 Fetch entropy from a system daemon in FIPS mode on Android. by Adam Langley · 2 years ago
- fc9a8c8 Merge entropy read in FIPS mode. by Adam Langley · 2 years ago
- 33f3ee8 Rename |from_cpu| to |want_additional_input|. by Adam Langley · 2 years ago
- 4a6c8fd Support handshake hints for TLS 1.2 full handshakes. by David Benjamin · 1 year, 10 months ago
- 24c0186 Expose the CTR_DRBG API. by Adam Langley · 2 years ago
- f4cdf91 Don't try and test 3DES with ACVP. by Adam Langley · 1 year, 9 months ago
- 5c2ef10 Fix possible ODR violations for ecp_nistz256_from_mont by Adam Langley · 1 year, 9 months ago
- 2cc2aa9 Don't try to specify SHA-256 for Aarch64 FIPS. by Adam Langley · 1 year, 9 months ago
- b95c7e5 Fix up book-keeping between the write buffer and pending writes. by David Benjamin · 1 year, 9 months ago
- 64bf8c5 Fix an edge case in SSL_write's retry mechanism. by David Benjamin · 1 year, 9 months ago
- 28883d4 Fix unused variable warning on macOS + ASan by David Benjamin · 1 year, 10 months ago
- 4d7b383 Remove PEM_X509_INFO_write_bio. by David Benjamin · 1 year, 10 months ago
- 5697a92 Add SSL_CTX_get_num_tickets. by David Benjamin · 1 year, 10 months ago
- b951243 Mostly Revert 52426 - Drop AVCP support for 3DES by Bob Beck · 1 year, 10 months ago
- 1ced57a Add script to run FIPS break tests. by Adam Langley · 1 year, 10 months ago
- a6981a3 More alignment with OpenSSL on TLS 1.3 cipher suite constants. by Bob Beck · 1 year, 10 months ago
- dfddbc4 Align with OpenSSL on TLS 1.3 cipher suite constants. by David Benjamin · 1 year, 10 months ago
- 557b80f Document and organize some of the basic extensions functions. by David Benjamin · 1 year, 10 months ago
- 09b8fd4 Const-correct X509_EXTENSION functions, as best we can. by David Benjamin · 1 year, 10 months ago
- b859642 Document all the dup functions. by David Benjamin · 1 year, 10 months ago
- 84311ce Const-correct X509_REVOKED as well. by David Benjamin · 1 year, 10 months ago
- 892b9bc Const-correct and document EVP_PKCS82PKEY and EVP_PKEY2PKCS8. by David Benjamin · 1 year, 10 months ago
- 4f4ae71 Remove PKCS8_pkey_get0 and PKCS8_pkey_set0. by David Benjamin · 1 year, 10 months ago
- 918b8bc Move all the miscelleneous convenience functions into a section. by David Benjamin · 1 year, 10 months ago
- 1b58995 Fix the documentation of X509_pubkey_digest. by David Benjamin · 1 year, 10 months ago
- 81587d3 Remove the last of the Suite B code. by David Benjamin · 1 year, 10 months ago
- 6bf1292 Remove X509_ocspid_print. by David Benjamin · 1 year, 10 months ago
- 0bfc9b3 Unexport all low-level policy machinery. by David Benjamin · 1 year, 10 months ago
- b6f47e8 Document most X509_NAME functions. by David Benjamin · 1 year, 10 months ago
- 3be30a5 Add some tests for X509_NAME_ENTRY management. by David Benjamin · 1 year, 10 months ago
- 884ae3a Clarify thisUpdate vs. lastUpdate in docs. by David Benjamin · 1 year, 10 months ago
- 4363bdd Start grouping x509.h into sections. by David Benjamin · 2 years, 1 month ago
- 2812793 Start expanding DECLARE_ASN1_* macros in x509.h. by David Benjamin · 1 year, 10 months ago
- c8d3137 Bump CMake requirement to 3.8. by David Benjamin · 1 year, 10 months ago
- 534970f Remove X509_ALGORS. by David Benjamin · 1 year, 10 months ago
- f022e84 Remove X509_REQ's refcount. by David Benjamin · 1 year, 10 months ago
- dc112e7 Const-correct the i2d/dup functions we can. by David Benjamin · 1 year, 10 months ago
- 5c1d5d8 Use GTest's built-in sharding feature by David Benjamin · 2 years, 3 months ago
- 7528f03 Fix memory leak with X509V3_ADD_DELETE. by David Benjamin · 1 year, 10 months ago
- f202989 Tidy up ASN1_GENERALIZEDTIME_adj and ASN1_UTCTIME_adj. by David Benjamin · 1 year, 10 months ago
- 695b2e1 Check for invalid UCS-2 and UTF-32 in ASN1_STRING_print_ex. by David Benjamin · 1 year, 10 months ago
- 507daf3 Check Unicode string encodings in crypto/asn1. by David Benjamin · 1 year, 10 months ago
- e7681d1 Rewrite scalar operations in spake25519.c with BN_ULONG by David Benjamin · 1 year, 10 months ago
- 28c5354 Accept invalid "v3" CSRs. by David Benjamin · 1 year, 10 months ago
- 17d637d Drop stdout when looking for abort messages by Adam Langley · 1 year, 10 months ago
- d827600 Add a CCM AEAD for Matter, the IoT standard. by Adam Langley · 1 year, 10 months ago
- c239ffd Remove some unnecessary NULL checks. by David Benjamin · 1 year, 10 months ago
- fdeb4aa Reimplement ASN1_TIME_print with the new parser. by David Benjamin · 1 year, 10 months ago
- 0378578 Dedup a few more load/store implementations. by David Benjamin · 1 year, 11 months ago
- 6c2af68 Remove a few more unions. by David Benjamin · 1 year, 11 months ago
- 0f2c55c Remove p256_point_union_t. by David Benjamin · 1 year, 11 months ago
- e3ebb9e Don't use a union in Ed25519 EVP_PKEYs. by David Benjamin · 1 year, 11 months ago
- 267997d Set is_first and is_last correctly with ASN1_STRFLGS_UTF8_CONVERT. by David Benjamin · 1 year, 10 months ago
- 56eeb20 Remove unnecessary parens on return. by David Benjamin · 1 year, 10 months ago
- 520ad64 Post-clang-format fixups. by David Benjamin · 1 year, 10 months ago
