| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Add SslContextBuilder::set_tmp_{ec,}dh_callback | Steven Fackler | 2016-11-12 | 2 | -0/+20 |
| | | |||||
| * | Add PKey::bits | Steven Fackler | 2016-11-12 | 2 | -0/+2 |
| | | |||||
| * | Fix function signature | Steven Fackler | 2016-11-12 | 1 | -1/+1 |
| | | |||||
| * | Add basic X509_STORE access | Steven Fackler | 2016-11-12 | 1 | -0/+5 |
| | | | | | | | | There's more to do here, but this enabled addition of trusted CAs from X509 objects. Closes #394 | ||||
| * | Consistently support both PEM and DER encodings | Steven Fackler | 2016-11-11 | 1 | -0/+9 |
| | | | | | Closes #500 | ||||
| * | Add EcKey <-> PKey conversions | Steven Fackler | 2016-11-11 | 1 | -0/+2 |
| | | | | | Closes #499 | ||||
| * | PKey <-> DH conversions | Steven Fackler | 2016-11-11 | 1 | -0/+2 |
| | | | | | Closes #498 | ||||
| * | Add PKey::dsa | Steven Fackler | 2016-11-11 | 1 | -0/+1 |
| | | | | | Closes #501 | ||||
| * | Release v0.9.1v0.9.1 | Steven Fackler | 2016-11-11 | 1 | -1/+1 |
| | | |||||
| * | Actually support AES GCM | Steven Fackler | 2016-11-08 | 1 | -0/+5 |
| | | | | | | | This is an AEAD cipher, so we need some extra functionality. As another bonus, we no longer panic if provided an IV with a different length than the cipher's default. | ||||
| * | Support client CA advertisement | Steven Fackler | 2016-11-06 | 3 | -0/+8 |
| | | |||||
| * | Fix build on 1.0.1 | Steven Fackler | 2016-11-06 | 1 | -0/+5 |
| | | |||||
| * | Add accessors for cert and private key | Steven Fackler | 2016-11-06 | 1 | -0/+5 |
| | | | | | Closes #340 | ||||
| * | Release v0.9.0 | Steven Fackler | 2016-11-05 | 1 | -1/+1 |
| | | |||||
| * | Avoid lhash weirdness | Steven Fackler | 2016-11-03 | 3 | -2/+5 |
| | | |||||
| * | Fix signature | Steven Fackler | 2016-11-02 | 1 | -1/+1 |
| | | |||||
| * | Use built in DH parameters when available | Steven Fackler | 2016-11-01 | 1 | -2/+2 |
| | | | | | | Fall back to a hardcoded PEM blob on 1.0.1, but serialized from DH_get_2048_256. | ||||
| * | Don't clear BigNums in destructor | Steven Fackler | 2016-11-01 | 1 | -0/+2 |
| | | | | | Instead add a clear method. | ||||
| * | Fix stack signatures | Steven Fackler | 2016-11-01 | 1 | -2/+2 |
| | | |||||
| * | Clean up stack | Steven Fackler | 2016-11-01 | 1 | -0/+2 |
| | | |||||
| * | Merge pull request #506 from simias/stack | Steven Fackler | 2016-11-01 | 2 | -4/+5 |
| |\ | | | | | Implemented a generic Stack API and use it to deal with StackOf(X509) and StackOf(GENERAL_NAME) | ||||
| | * | Implement X509StoreContextRef::get_chain | Lionel Flandrin | 2016-11-01 | 2 | -0/+2 |
| | | | |||||
| | * | Implement a generic Stack API to deal with OpenSSL stacks | Lionel Flandrin | 2016-11-01 | 1 | -4/+3 |
| | | | |||||
| * | | Add method to encode a public key as a DER blob | Lionel Flandrin | 2016-11-01 | 1 | -0/+2 |
| |/ | |||||
| * | Clean up x509 name entries | Steven Fackler | 2016-10-31 | 1 | -1/+4 |
| | | |||||
| * | Update x509 | Steven Fackler | 2016-10-31 | 1 | -1/+3 |
| | | |||||
| * | Update verify | Steven Fackler | 2016-10-31 | 1 | -0/+2 |
| | | |||||
| * | Expose SSL_MODEs | Steven Fackler | 2016-10-30 | 1 | -2/+8 |
| | | |||||
| * | Configure ECDH parameters in connector | Steven Fackler | 2016-10-30 | 1 | -0/+5 |
| | | |||||
| * | Implement EcKey | Steven Fackler | 2016-10-30 | 1 | -1/+4 |
| | | | | | cc #499 | ||||
| * | Add a macro definition | Steven Fackler | 2016-10-27 | 1 | -0/+6 |
| | | |||||
| * | Support AES GCM | Steven Fackler | 2016-10-25 | 1 | -2/+2 |
| | | | | | Closes #326 | ||||
| * | Add a shutdown method | Steven Fackler | 2016-10-25 | 1 | -0/+1 |
| | | |||||
| * | Remove NIDs only defined in 1.0.2+ | Steven Fackler | 2016-10-23 | 1 | -39/+0 |
| | | |||||
| * | De-enumify Nid | Steven Fackler | 2016-10-22 | 1 | -3/+949 |
| | | |||||
| * | Allow the X509 verify error to be read from an SslRef | Steven Fackler | 2016-10-18 | 1 | -1/+2 |
| | | |||||
| * | De-enumify X509ValidationError | Steven Fackler | 2016-10-18 | 1 | -0/+1 |
| | | | | | | | Also make it an Error. Closes #352. | ||||
| * | Callback cleanup | Steven Fackler | 2016-10-18 | 1 | -12/+12 |
| | | |||||
| * | Migrate DSA sign/verify to EVP APIs | Steven Fackler | 2016-10-15 | 1 | -0/+2 |
| | | |||||
| * | Correctly bind BIO_new_mem_buf | Steven Fackler | 2016-10-15 | 1 | -0/+3 |
| | | |||||
| * | Fix signature of EVP_DigestVerifyFinal on 1.0.1 | Steven Fackler | 2016-10-15 | 2 | -1/+8 |
| | | |||||
| * | Support HMAC PKeys and remove hmac module | Steven Fackler | 2016-10-15 | 1 | -0/+6 |
| | | |||||
| * | Add digest signature methods | Steven Fackler | 2016-10-15 | 1 | -0/+17 |
| | | |||||
| * | Merge pull request #471 from sfackler/no-comp | Steven Fackler | 2016-10-14 | 1 | -0/+2 |
| |\ | | | | | Handle OPENSSL_NO_COMP | ||||
| | * | Handle OPENSSL_NO_COMP | Steven Fackler | 2016-10-14 | 1 | -0/+2 |
| | | | | | | | | | Closes #459 | ||||
| * | | Fix test_alpn_server_select_none | Steven Fackler | 2016-10-14 | 1 | -0/+12 |
| |/ | | | | | | | | | | | | In OpenSSL 1.1, a failure to negotiate a protocol is a fatal error, so fork that test. This also popped up an issue where we assumed all errors had library, function, and reason strings which is not necessarily the case. While we're in here, adjust the Display impl to match what OpenSSL prints out. Closes #465 | ||||
| * | Respect osslconf in systest | Steven Fackler | 2016-10-14 | 1 | -0/+1 |
| | | | | | | | Also cfg off SSLv3_method, since it's disabled in the OpenSSL that ships with Arch Linux. More such flags can be added on demand - it doesn't seem worth auditing everything for them. | ||||
| * | Enable hostname verification on 1.0.2 | Steven Fackler | 2016-10-14 | 3 | -15/+45 |
| | | |||||
| * | Support hostname verification | Steven Fackler | 2016-10-14 | 1 | -15/+30 |
| | | | | | Closes #206 | ||||
| * | Remove link_name usage | Steven Fackler | 2016-10-14 | 3 | -4/+4 |
| | | |||||