1. 4b8e871 Merge pull request #659 from h2o/kazuho/check-sign-algo by Kazuho Oku · 10 hours ago main
  2. c497973 before verifying CertificateVerify, confirm that the signature algorithm being used is among the options that we advertised by Kazuho Oku · 31 hours ago
  3. 7f0d38c Merge pull request #633 from h2o/kazuho/audit2609/m2 by Kazuho Oku · 3 days ago
  4. 6c5cfd7 Merge pull request #658 from h2o/kazuho/audit2609/m6 by Kazuho Oku · 4 days ago
  5. 6fc256f Merge pull request #657 from h2o/kazuho/audit2609/l18 by Kazuho Oku · 4 days ago
  6. 7ef9d52 Merge pull request #656 from h2o/kazuho/audit2609/l17 by Kazuho Oku · 4 days ago
  7. 3f4050d Merge pull request #655 from h2o/kazuho/audit2609/l16 by Kazuho Oku · 4 days ago
  8. 7039b13 Merge pull request #654 from h2o/kazuho/audit2609/l15 by Kazuho Oku · 4 days ago
  9. c1b7017 Merge pull request #653 from h2o/kazuho/audit2609/l13 by Kazuho Oku · 4 days ago
  10. bb70efa Merge pull request #652 from h2o/kazuho/audit2609/l10 by Kazuho Oku · 4 days ago
  11. 45115ed Merge pull request #651 from h2o/kazuho/audit2609/l9 by Kazuho Oku · 4 days ago
  12. c6f0aac Merge pull request #650 from h2o/kazuho/audit2609/l14 by Kazuho Oku · 4 days ago
  13. 686cc68 Merge pull request #649 from h2o/kazuho/audit2609/l11 by Kazuho Oku · 4 days ago
  14. 859be49 Merge pull request #648 from h2o/kazuho/audit2609/l12 by Kazuho Oku · 4 days ago
  15. 23ed02a Merge pull request #647 from h2o/kazuho/audit2609/l6 by Kazuho Oku · 4 days ago
  16. a1e2b4e Merge pull request #646 from h2o/kazuho/audit2609/m18 by Kazuho Oku · 4 days ago
  17. 44404d4 Merge pull request #645 from h2o/kazuho/audit2609/m17 by Kazuho Oku · 4 days ago
  18. 1e4a852 Merge pull request #644 from h2o/kazuho/audit2609/m15 by Kazuho Oku · 4 days ago
  19. 007c22d Merge pull request #643 from h2o/kazuho/audit2609/m12 by Kazuho Oku · 4 days ago
  20. 75e9ae1 Merge pull request #642 from h2o/kazuho/audit2609/m13 by Kazuho Oku · 4 days ago
  21. e3c7bf1 Merge pull request #641 from h2o/kazuho/audit2609/m11 by Kazuho Oku · 4 days ago
  22. 3667faa Merge pull request #640 from h2o/kazuho/audit2609/m10 by Kazuho Oku · 4 days ago
  23. 8994fb9 Merge pull request #639 from h2o/kazuho/audit2609/m9 by Kazuho Oku · 4 days ago
  24. 5b520e3 Merge pull request #637 from h2o/kazuho/audit2609/m7 by Kazuho Oku · 4 days ago
  25. 9462e9c Merge pull request #638 from h2o/kazuho/audit2609/m8 by Kazuho Oku · 4 days ago
  26. f4de84b Merge pull request #636 from h2o/kazuho/audit2609/m5 by Kazuho Oku · 4 days ago
  27. 2c842a1 Merge pull request #635 from h2o/kazuho/audit2609/m4 by Kazuho Oku · 4 days ago
  28. c359452 Merge pull request #634 from h2o/kazuho/audit2609/m3 by Kazuho Oku · 4 days ago
  29. bd78ed2 Merge pull request #632 from h2o/kazuho/audit2609/h1-m14 by Kazuho Oku · 4 days ago
  30. 7a1205a check the length of the TLS 1.3 traffic secret when importing a connection by Kazuho Oku · 4 days ago
  31. 8845599 add tests for characters following base64 padding by Kazuho Oku · 5 days ago
  32. 2007205 assert that the selected PSK binder fits in the buffer it is copied into by Kazuho Oku · 5 days ago
  33. 9179f94 abort the handshake when the binder of the selected external PSK has wrong length by Kazuho Oku · 5 days ago
  34. f46bd60 fusion: test the correct CPUID bit for PCLMULQDQ on Windows by Kazuho Oku · 5 days ago
  35. c49b7f7 openssl: handle failure of ASYNC_WAIT_CTX_new by Kazuho Oku · 5 days ago
  36. d5f1e33 openssl: check the result of asynchronous signing by Kazuho Oku · 5 days ago
  37. 8cc9f2f ffx: fix crash when ptls_ffx_setup_crypto fails by Kazuho Oku · 5 days ago
  38. 3aba685 ffx: fix the number of bits being enciphered when bit_length is not a multiple of 8 by Kazuho Oku · 5 days ago
  39. f03c26a copy only the bytes being derived when updating the traffic key by Kazuho Oku · 5 days ago
  40. 2ba4d81 server: remove always-true condition when selecting key share by Kazuho Oku · 5 days ago
  41. 13b5085 server: remove redundant check when setting up ECH by Kazuho Oku · 5 days ago
  42. aef9830 remove stray semicolon from the buffer_push_extension macro by Kazuho Oku · 5 days ago
  43. 39e5fdb openssl: remove unused variable in ptls_openssl_create_key_exchange by Kazuho Oku · 5 days ago
  44. bc96c86 libaegis: clear the cipher state when disposing of the AEAD context by Kazuho Oku · 5 days ago
  45. 7292356 ECH: handle failure to create the AEAD context when greasing by Kazuho Oku · 5 days ago
  46. cbf2b09 openssl: fix memory leak in verify_cert when building the chain fails by Kazuho Oku · 5 days ago
  47. 1c1dc08 server: check the errors returned by key_schedule_extract by Kazuho Oku · 5 days ago
  48. e7ba433 client: check the error returned by send_finished by Kazuho Oku · 5 days ago
  49. 99964d8 fix NULL dereference in send_session_ticket upon memory allocation failure by Kazuho Oku · 5 days ago
  50. 3c028c0 fix memory leak in key_schedule_new when creating the outer hash context fails by Kazuho Oku · 5 days ago
  51. 745619d openssl: fix double free of EC_KEY when ptls_openssl_create_key_exchange fails by Kazuho Oku · 5 days ago
  52. 99bca67 hpke: report an error when the AEAD context cannot be created by Kazuho Oku · 5 days ago
  53. b9c89c4 base64: reject non-blank characters following the padding by Kazuho Oku · 5 days ago
  54. 99699a2 ECH: fix the amount of padding when SNI is present by Kazuho Oku · 5 days ago
  55. d827c51 fix memory leak in client_setup_ech by Kazuho Oku · 5 days ago
  56. ebadde5 propagate the error code returned by the on_extension callback by Kazuho Oku · 5 days ago
  57. b7ea10d client: do not save session tickets when no key share is available by Kazuho Oku · 5 days ago
  58. a9601b6 apply per-connection log filters when the connection state is up to date by Kazuho Oku · 5 days ago
  59. 2976e31 check the length of the PSK binder when using an external PSK by Kazuho Oku · 5 days ago
  60. df495ab Merge pull request #627 from pascaldekloe/null_new by Kazuho Oku · 5 days ago
  61. 2109d72 use early return for NULL check in ptls_{client,server}_new by Kazuho Oku · 5 days ago
  62. 8dbb4d4 Merge pull request #630 from shivampwm2020/fix-unexpected-message-alerts by Kazuho Oku · 5 days ago
  63. b12809b remove test that only asserts the alert constants being changed by Kazuho Oku · 5 days ago
  64. 2d4f5d6 Merge pull request #631 from sleepybishop/cpudetfix by Kazuho Oku · 5 days ago
  65. 2aed7fe require both vaes and vpclmulqdq for 256-bit fusion mode by joseph calderon · 5 days ago
  66. 6ad04c6 fix alert code for unexpected handshake messages in server handshake states by Shivam Maurya · 9 days ago
  67. 112054b Merge pull request #629 from h2o/kazuho/css-right-after-hrr by Kazuho Oku · 9 days ago
  68. e3fc73a in compatibility mode, CSS goes right after HRR by Kazuho Oku · 9 days ago
  69. 81ec2ad NULL handing in new_* by Pascal S. de Kloe · 3 weeks ago
  70. f06553b Merge pull request #626 from h2o/kazuho/probe-smallints-ilp64 by Kazuho Oku · 3 weeks ago
  71. eaeaec8 remove PTLS_IS_SIGNED as it returns true when given unsigned types smaller than `unsigned`; code the expression directly and emit using %u or %d if they fit sizeof(int), the latter is theoretical improvement except on ILP64 by Kazuho Oku · 3 weeks ago
  72. 34138f3 Merge pull request #625 from h2o/kazuho/i-told-claude-to-not-leave-deprecated by Kazuho Oku · 4 weeks ago
  73. 1615399 API compat has never been the goal by Kazuho Oku · 4 weeks ago
  74. 4ea82c8 Merge pull request #624 from h2o/kazuho/detect-signedness by Kazuho Oku · 4 weeks ago
  75. 5fdc1f5 merge PTLS_LOG_ELEMENT_SIGNED and PTLS_LOG_ELEMENT_UNSIGNED to PTLS_LOG_ELEMENT_NUMBER, thereby covering u?int(32|64)_t, float, and double in one macro by Kazuho Oku · 4 weeks ago
  76. df11038 Merge pull request #623 from h2o/kazuho/ptlslog-float by Kazuho Oku · 4 weeks ago
  77. 653d506 [ptlslog] add support for float (such as quicly's new RTT measurements) by Kazuho Oku · 4 weeks ago
  78. d957407 Merge pull request #622 from h2o/kazuho/fusion-rewrite-transformH by Kazuho Oku · 4 weeks ago
  79. 583546f replace transformH with a newly written function from scratch; the transformation itself comes from the algorithm defined in https://crypto.stanford.edu/RealWorldCrypto/slides/gueron.pdf, as the source code already refers to by Kazuho Oku · 4 weeks ago
  80. d6c3da6 Merge pull request #621 from red5pro/shared-libraries by Christian Huitema · 4 weeks ago
  81. c18e1a7 cmake: support building the picotls libraries as shared libraries by p · 4 weeks ago
  82. 3598470 Merge pull request #619 from h2o/kazuho/save-ticket-early-data-flag by Kazuho Oku · 6 weeks ago
  83. b777a84 expose early-data indication to ticket callbacks by Kazuho Oku · 6 weeks ago
  84. d08b0c5 Merge pull request #618 from h2o/kazuho/pr617-picotls-fixes by Kazuho Oku · 6 weeks ago
  85. ba509fd Merge branch 'master' into kazuho/pr617-picotls-fixes by Kazuho Oku · 6 weeks ago
  86. e7ff709 Revert "Merge pull request #617 from sleepybishop/quic-rfc-constraints" by Kazuho Oku · 6 weeks ago
  87. f24fbc5 Merge pull request #617 from sleepybishop/quic-rfc-constraints by Kazuho Oku · 6 weeks ago
  88. f611d1f expose ticket properties and reject unsupported KeyUpdate by Kazuho Oku · 6 weeks ago
  89. dfa7752 test custom record layer KeyUpdate rejection by Kazuho Oku · 6 weeks ago
  90. 56ea446 enforce quic-specific tls constraints by joseph calderon · 7 weeks ago
  91. f07f1c8 Merge pull request #611 from h2o/kazuho/issue605 by Kazuho Oku · 3 months ago
  92. 766c061 test the needed invariant (that secp256r1 is available) by Kazuho Oku · 3 months ago
  93. ab094f7 Merge branch 'master' into kazuho/issue605 by Kazuho Oku · 3 months ago
  94. d24069a test that the selected group of HRR matches that agreed in the 1st flight by Kazuho Oku · 3 months ago
  95. 97fe244 Merge pull request #610 from h2o/kazuho/ci-remove-macos-openssl1.1 by Kazuho Oku · 3 months ago
  96. 50f650f Merge pull request #609 from h2o/kazuho/fix-windows-warnings by Kazuho Oku · 3 months ago
  97. f20f5c8 ptls_send checks for misuse (e.g., called after ServerHello is received) by Kazuho Oku · 3 months ago
  98. efc06dc reject encrypted Alert/Handshake records with an empty payload (Section 5.4 of RFC 8446) by Kazuho Oku · 3 months ago
  99. 81da2da drop macOS/openssl1.1 from the CI matrix; the cask no longer exists in homebrew by Kazuho Oku · 3 months ago
  100. ca91df5 use intptr_t for file descriptor abstraction so that Win32 HANDLEs can be retained; fix other warnings too by Kazuho Oku · 3 months ago