aboutsummaryrefslogtreecommitdiff
path: root/openssl-sys/src/lib.rs
Commit message (Collapse)AuthorAgeFilesLines
...
| * Fix function signatureSteven Fackler2016-11-121-1/+1
| |
| * Add basic X509_STORE accessSteven Fackler2016-11-121-0/+5
| | | | | | | | | | | | | | There's more to do here, but this enabled addition of trusted CAs from X509 objects. Closes #394
| * Consistently support both PEM and DER encodingsSteven Fackler2016-11-111-0/+9
| | | | | | | | Closes #500
| * Add EcKey <-> PKey conversionsSteven Fackler2016-11-111-0/+2
| | | | | | | | Closes #499
| * PKey <-> DH conversionsSteven Fackler2016-11-111-0/+2
| | | | | | | | Closes #498
| * Add PKey::dsaSteven Fackler2016-11-111-0/+1
| | | | | | | | Closes #501
| * Release v0.9.1v0.9.1Steven Fackler2016-11-111-1/+1
| |
| * Actually support AES GCMSteven Fackler2016-11-081-0/+5
| | | | | | | | | | | | This is an AEAD cipher, so we need some extra functionality. As another bonus, we no longer panic if provided an IV with a different length than the cipher's default.
* | Add an X509ReqBuilderSteven Fackler2016-11-071-0/+4
| |
* | Start of extension supportSteven Fackler2016-11-061-0/+1
| |
* | Add conf moduleSteven Fackler2016-11-061-0/+5
| |
* | Start on an X509BuilderSteven Fackler2016-11-061-20/+8
|/
* Support client CA advertisementSteven Fackler2016-11-061-0/+2
|
* Fix build on 1.0.1Steven Fackler2016-11-061-0/+5
|
* Add accessors for cert and private keySteven Fackler2016-11-061-0/+5
| | | | Closes #340
* Release v0.9.0Steven Fackler2016-11-051-1/+1
|
* Avoid lhash weirdnessSteven Fackler2016-11-031-2/+1
|
* Fix signatureSteven Fackler2016-11-021-1/+1
|
* Use built in DH parameters when availableSteven Fackler2016-11-011-2/+2
| | | | | Fall back to a hardcoded PEM blob on 1.0.1, but serialized from DH_get_2048_256.
* Don't clear BigNums in destructorSteven Fackler2016-11-011-0/+2
| | | | Instead add a clear method.
* Add method to encode a public key as a DER blobLionel Flandrin2016-11-011-0/+2
|
* Clean up x509 name entriesSteven Fackler2016-10-311-1/+4
|
* Update x509Steven Fackler2016-10-311-1/+3
|
* Update verifySteven Fackler2016-10-311-0/+2
|
* Expose SSL_MODEsSteven Fackler2016-10-301-2/+8
|
* Configure ECDH parameters in connectorSteven Fackler2016-10-301-0/+5
|
* Implement EcKeySteven Fackler2016-10-301-1/+4
| | | | cc #499
* Support AES GCMSteven Fackler2016-10-251-2/+2
| | | | Closes #326
* Add a shutdown methodSteven Fackler2016-10-251-0/+1
|
* Remove NIDs only defined in 1.0.2+Steven Fackler2016-10-231-39/+0
|
* De-enumify NidSteven Fackler2016-10-221-3/+949
|
* Allow the X509 verify error to be read from an SslRefSteven Fackler2016-10-181-1/+2
|
* De-enumify X509ValidationErrorSteven Fackler2016-10-181-0/+1
| | | | | | Also make it an Error. Closes #352.
* Callback cleanupSteven Fackler2016-10-181-12/+12
|
* Migrate DSA sign/verify to EVP APIsSteven Fackler2016-10-151-0/+2
|
* Correctly bind BIO_new_mem_bufSteven Fackler2016-10-151-0/+3
|
* Fix signature of EVP_DigestVerifyFinal on 1.0.1Steven Fackler2016-10-151-0/+5
|
* Support HMAC PKeys and remove hmac moduleSteven Fackler2016-10-151-0/+6
|
* Add digest signature methodsSteven Fackler2016-10-151-0/+17
|
* Merge pull request #471 from sfackler/no-compSteven Fackler2016-10-141-0/+2
|\ | | | | Handle OPENSSL_NO_COMP
| * Handle OPENSSL_NO_COMPSteven Fackler2016-10-141-0/+2
| | | | | | | | Closes #459
* | Fix test_alpn_server_select_noneSteven Fackler2016-10-141-0/+12
|/ | | | | | | | | | | | In OpenSSL 1.1, a failure to negotiate a protocol is a fatal error, so fork that test. This also popped up an issue where we assumed all errors had library, function, and reason strings which is not necessarily the case. While we're in here, adjust the Display impl to match what OpenSSL prints out. Closes #465
* Enable hostname verification on 1.0.2Steven Fackler2016-10-141-3/+21
|
* Remove link_name usageSteven Fackler2016-10-141-4/+0
|
* Flag off dtls and mask ssl_opsSteven Fackler2016-10-131-0/+4
| | | | Also un-feature gate npn as it ships with 1.0.1
* Add remaining SSL_OP constantsSteven Fackler2016-10-121-10/+5
|
* Add support for OpenSSL 1.1.0Alex Crichton2016-10-121-551/+173
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit is relatively major refactoring of the `openssl-sys` crate as well as the `openssl` crate itself. The end goal here was to support OpenSSL 1.1.0, and lots of other various tweaks happened along the way. The major new features are: * OpenSSL 1.1.0 is supported * OpenSSL 0.9.8 is no longer supported (aka all OSX users by default) * All FFI bindings are verified with the `ctest` crate (same way as the `libc` crate) * CI matrixes are vastly expanded to include 32/64 of all platforms, more OpenSSL version coverage, as well as ARM coverage on Linux * The `c_helpers` module is completely removed along with the `gcc` dependency. * The `openssl-sys` build script was completely rewritten * Now uses `OPENSSL_DIR` to find the installation, not include/lib env vars. * Better error messages for mismatched versions. * Better error messages for failing to find OpenSSL on a platform (more can be done here) * Probing of OpenSSL build-time configuration to inform the API of the `*-sys` crate. * Many Cargo features have been removed as they're now enabled by default. As this is a breaking change to both the `openssl` and `openssl-sys` crates this will necessitate a major version bump of both. There's still a few more API questions remaining but let's hash that out on a PR! Closes #452
* Add RAND_status()manuels2016-10-011-0/+1
| | | RAND_status() returns 1 if the PRNG has been seeded with enough data, 0 otherwise.
* Add RSA_*_PADDING constantsmanuels2016-10-011-0/+6
|
* Release openssl-sys v0.7.17, openssl v0.8.2Steven Fackler2016-08-181-1/+1
|
generated by cgit v1.2.3 (git 2.25.1) at 2026-04-23 22:11:37 +0000