aboutsummaryrefslogtreecommitdiff
path: root/openssl-sys/src/lib.rs
Commit message (Collapse)AuthorAgeFilesLines
* Refactor openssl-sysSteven Fackler2018-09-121-2891/+148
| | | | | The old layout tried to structure itself by version but it ended up with a lot of duplication. Instead, follow the structure of the header files.
* Fix lookup errors with SNI callback.Steven Fackler2018-08-311-0/+4
| | | | | | | | | | | | | | | | | The job of an SNI callback is typically to swap out the context associated with an SSL depending on the domain the client is trying to talk to. Typically, only the callbacks associated with the current context are used, but this is not the case for the SNI callback. If SNI is run for a second time on a connection (i.e. in a renegotiation) and the context was replaced with one that didn't itself register an SNI callback, the old callback would run but wouldn't be able to find its state in the context's ex data. To work around this, we pass the pointer to the callback data directly to the callback to make sure it's always available. It still lives in ex data to handle the lifetime management. Closes #979
* SRTP cleanupSteven Fackler2018-08-191-3/+5
|
* Add methods for DTLS/SRTP key handshakeAron Wieck2018-08-141-0/+16
|
* Add get_shutdown and set_shutdownSteven Fackler2018-08-081-0/+5
|
* Add bindings for custom error definitionSteven Fackler2018-07-101-2/+12
|
* Merge pull request #943 from lolzballs/masterSteven Fackler2018-06-171-0/+8
|\ | | | | Add wrapper for SSL_CTX_set_psk_server_callback
| * Merge remote-tracking branch 'origin/master'Benjamin Cheng2018-06-021-50/+78
| |\
| * | Add wrapper for SSL_CTX_set_psk_server_callbackBenjamin Cheng2018-05-161-0/+8
| | |
* | | Switch to accessors in libressl where possibleSteven Fackler2018-06-091-1/+1
| |/ |/| | | | | | | | | | | Some accessors are mysteriously still macros so we can't make everything opaque yet, unfortunately. cc #909
* | Add an openssl-sys binding for RSA_padding_check_PKCS1_type_2.Axel Rasmussen2018-05-301-0/+8
| | | | | | | | | | This padding check implementation is useful for certain types of RSA decryption, notably the type performed by Yubico's PIV library.
* | Get Nid string representationsMarco Huenseler2018-05-281-0/+1
| |
* | Add some digest supportSteven Fackler2018-05-241-0/+7
| |
* | Add bindings to SSL_get_finished and SSL_get_peer_finishedSteven Fackler2018-05-241-0/+2
| | | | | | | | These are used for the tls-unique SCRAM channel binding mode.
* | Merge pull request #920 from Ralith/max-early-data-accessorsSteven Fackler2018-05-221-0/+3
|\ \ | | | | | | TLS1.3 early data support
| * | Expose early I/OBenjamin Saunders2018-05-221-0/+3
| |/
* | Support ALPN on libresslSteven Fackler2018-05-201-4/+4
| | | | | | | | Closes #690
* | Overhaul openssl cfgsSteven Fackler2018-05-201-5/+5
| | | | | | | | Also expose hostname verification on libressl
* | Expose X509_VERIFY_PARAM on libresslSteven Fackler2018-05-201-5/+5
| |
* | Clean up openssl-sys cfgsSteven Fackler2018-05-201-41/+41
| |
* | Support min/max version in LibreSSLSteven Fackler2018-05-191-10/+17
|/ | | | | Their implementations of the accessors don't behave expected with no bounds, so we ignore those bits of the tests.
* Some sys cleanupSteven Fackler2018-05-131-114/+4
|
* Merge pull request #902 from ur0/CMS_signSteven Fackler2018-05-131-0/+55
|\ | | | | Add the CMS_sign and i2d_CMS_ContentInfo function bindings
| * Gate away CMS_KEY_PARAM from OpenSSL 1.0.1Umang Raghuvanshi2018-05-101-1/+1
| |
| * Properly version-gate CMS constantsUmang Raghuvanshi2018-05-101-0/+21
| |
| * Move CMS_* flags to the openssl-sys packageUmang Raghuvanshi2018-05-101-0/+24
| | | | | | | | Also renames attributes in the bitflags struct.
| * Fix mutability issues with CMS_signUmang Raghuvanshi2018-04-201-3/+3
| |
| * Add the CMS_sign and i2d_CMS_ContentInfo function bindingsUmang Raghuvanshi2018-04-201-1/+11
| | | | | | | | | | This adds the CMS_sign and i2d_CMS_ContentInfo bindings in the openssl-sys crate and Rusty wrappers in the openssl crate.
* | Implement Clone for RsaSteven Fackler2018-05-121-0/+1
| | | | | | | | Closes #917
* | Change SslContext callback handlingSteven Fackler2018-05-121-1/+7
| | | | | | | | Use the existing infrastructure!
* | Expose SslSession <-> DER conversionBenjamin Saunders2018-04-291-0/+3
| |
* | Reform version checking logicSteven Fackler2018-04-261-5/+5
| | | | | | | | | | | | | | Rather than having an infinitely growing set of things to look for, just grab the literal version out. We also provide that to downstream crates, and it should be used rather than the random assortment of other stuff that's also passed down.
* | Add functions to X509Req to obtain public key and extensionsRené Richter2018-04-211-0/+2
|/ | | | This allows for basic CSR signing.
* Add support for LibreSSL 2.7.1Ossi Herrala2018-03-311-4/+4
| | | | | While there, support also future LibreSSL 2.7 versions out of the box. This fixes compiling this crate in OpenBSD -current.
* Add Asn1IntegerRef::to_bnSteven Fackler2018-03-281-0/+1
| | | | Also deprecate Asn1IntegerRef since it's just asking for trouble.
* Support LibreSSL 2.7.0Steven Fackler2018-03-221-24/+30
| | | | | Closes #883 Closes #805
* Merge pull request #856 from Flakebi/masterSteven Fackler2018-03-191-0/+9
|\ | | | | Make it possible to use cmac
| * Make it possible to use cmacFlakebi2018-03-191-0/+9
| | | | | | | | | | | | | | | | This adds Signer::new_without_digest to create Signers which don't have a digest (like cmac, which is based on aes). As openssl supports cmac since version 1.1.0, the functions are behind the ossl110 feature. This allows building CMAC/OMAC1 and the EAX AEAD on top of this library.
* | Expose additional cipher and digest accessorsBenjamin Saunders2018-03-161-0/+4
|/
* Merge pull request #864 from mlen/aes-ccm-bindingsSteven Fackler2018-03-111-0/+2
|\ | | | | Implement AES-{128,256}-CCM bindings
| * Implement AES-{128,256}-CCM bindingsMateusz Lenik2018-03-081-0/+2
| |
* | Merge branch 'master' into custom-extensionsSteven Fackler2018-03-111-0/+49
|\ \
| * \ Merge pull request #863 from rohit-lshift/masterSteven Fackler2018-03-111-0/+6
| |\ \ | | | | | | | | Exposed some of ECDSA functions
| | * | Use examples listed in OpenSSL docs for testingRohit Aggarwal2018-03-081-2/+2
| | | |
| | * | Add support LibreSSL and remove OpenSSL binding which we aren't usingRohit Aggarwal2018-03-081-0/+6
| | |/
| * | Merge pull request #861 from bkchr/verify_certificateSteven Fackler2018-03-111-0/+4
| |\ \ | | | | | | | | Implements `X509_verify_cert`
| | * | add cleanup ffi to store contextBenjamin Fry2018-03-071-0/+1
| | | |
| | * | fix error checkBenjamin Fry2018-03-071-1/+0
| | | |
| | * | add verify_cert and store_context_builderBenjamin Fry2018-03-071-0/+4
| | |/
| * | Adds more functions to `Verifier`/`Signer` for RSA keysBastian Köcher2018-03-071-0/+37
| | |