aboutsummaryrefslogtreecommitdiff
path: root/openssl-sys/src
Commit message (Collapse)AuthorAgeFilesLines
...
* Add digest signature methodsSteven Fackler2016-10-151-0/+17
|
* Merge pull request #471 from sfackler/no-compSteven Fackler2016-10-141-0/+2
|\ | | | | Handle OPENSSL_NO_COMP
| * Handle OPENSSL_NO_COMPSteven Fackler2016-10-141-0/+2
| | | | | | | | Closes #459
* | Fix test_alpn_server_select_noneSteven Fackler2016-10-141-0/+12
|/ | | | | | | | | | | | In OpenSSL 1.1, a failure to negotiate a protocol is a fatal error, so fork that test. This also popped up an issue where we assumed all errors had library, function, and reason strings which is not necessarily the case. While we're in here, adjust the Display impl to match what OpenSSL prints out. Closes #465
* Respect osslconf in systestSteven Fackler2016-10-141-0/+1
| | | | | | Also cfg off SSLv3_method, since it's disabled in the OpenSSL that ships with Arch Linux. More such flags can be added on demand - it doesn't seem worth auditing everything for them.
* Enable hostname verification on 1.0.2Steven Fackler2016-10-143-15/+45
|
* Support hostname verificationSteven Fackler2016-10-141-15/+30
| | | | Closes #206
* Remove link_name usageSteven Fackler2016-10-143-4/+4
|
* Flag off dtls and mask ssl_opsSteven Fackler2016-10-131-0/+4
| | | | Also un-feature gate npn as it ships with 1.0.1
* Add remaining SSL_OP constantsSteven Fackler2016-10-121-10/+5
|
* Add support for OpenSSL 1.1.0Alex Crichton2016-10-124-628/+888
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit is relatively major refactoring of the `openssl-sys` crate as well as the `openssl` crate itself. The end goal here was to support OpenSSL 1.1.0, and lots of other various tweaks happened along the way. The major new features are: * OpenSSL 1.1.0 is supported * OpenSSL 0.9.8 is no longer supported (aka all OSX users by default) * All FFI bindings are verified with the `ctest` crate (same way as the `libc` crate) * CI matrixes are vastly expanded to include 32/64 of all platforms, more OpenSSL version coverage, as well as ARM coverage on Linux * The `c_helpers` module is completely removed along with the `gcc` dependency. * The `openssl-sys` build script was completely rewritten * Now uses `OPENSSL_DIR` to find the installation, not include/lib env vars. * Better error messages for mismatched versions. * Better error messages for failing to find OpenSSL on a platform (more can be done here) * Probing of OpenSSL build-time configuration to inform the API of the `*-sys` crate. * Many Cargo features have been removed as they're now enabled by default. As this is a breaking change to both the `openssl` and `openssl-sys` crates this will necessitate a major version bump of both. There's still a few more API questions remaining but let's hash that out on a PR! Closes #452
* Add RAND_status()manuels2016-10-011-0/+1
| | | RAND_status() returns 1 if the PRNG has been seeded with enough data, 0 otherwise.
* Add RSA_*_PADDING constantsmanuels2016-10-011-0/+6
|
* Release openssl-sys v0.7.17, openssl v0.8.2Steven Fackler2016-08-181-1/+1
|
* Fix SslContext::add_extra_chain_certSteven Fackler2016-08-171-0/+1
| | | | | | | | | SSL_CTX_add_extra_chain_cert assumes ownership of the certificate, so the method really needs to take an X509 by value. Work around this by manually cloning the cert. This method has been around for over a year but I'm guessing nobody actually used it since it produces a nice double free into segfault!
* Add `"x509_expiry"` feature flagDavid Weinstein2016-08-171-1/+1
| | | | | - fix return of `ASN1_TIME_print` - assert on null `date`
* Progress on asn1 expiryDavid Weinstein2016-08-171-1/+4
| | | | | | - Use MemBio and implement `Display` for Asn1Time - Tweak doc for asn1 `not_before`, `not_after`
* Release openssl-sys v0.7.16, openssl v0.8.1Steven Fackler2016-08-151-1/+1
|
* Initialize algorithms in initSteven Fackler2016-08-141-1/+2
| | | | Required to deserialize PKCS12 on 0.9.8, looks like
* Fix memory leak in general name stackSteven Fackler2016-08-141-0/+2
|
* PKCS #12 supportSteven Fackler2016-08-141-0/+4
|
* Start on PKCS #12 supportSteven Fackler2016-08-141-0/+16
|
* Release openssl-sys v0.7.15, openssl v0.8.0Steven Fackler2016-08-111-1/+1
|
* Undelete bogus extern declarationSteven Fackler2016-08-101-0/+3
| | | | Old rust-openssl versions rely on it being there
* Fix buildSteven Fackler2016-08-091-2/+0
|
* Make hmac support optional and remove openssl-sys-extrasSteven Fackler2016-08-091-0/+2
| | | | rust-openssl no longer requires headers for the default feature set.
* symm reformSteven Fackler2016-08-081-0/+7
|
* Copy over getter macrosSteven Fackler2016-08-081-0/+12
|
* Remove symm_internalSteven Fackler2016-08-081-1/+34
|
* Add PKey::from_rsaSteven Fackler2016-08-071-0/+2
|
* Add RSA::generateSteven Fackler2016-08-071-1/+4
|
* PKey reformSteven Fackler2016-08-071-2/+2
| | | | | This deletes the vast majority of PKey's API, since it was weirdly tied to RSA and super broken.
* Hash reformSteven Fackler2016-08-071-0/+2
| | | | Closes #430
* Move SSL_CTX_set_ecdh_auto to -sysSteven Fackler2016-08-041-4/+10
|
* Mvoe SSL_CTX_add_extra_chain_cert to -sysSteven Fackler2016-08-041-0/+4
|
* Move SSL_CTX_set_tmp_dh to -sysSteven Fackler2016-08-041-0/+5
|
* Move SSL_CTX_set_read_ahead to -sysSteven Fackler2016-08-041-0/+4
|
* Move SSL_CTX_set_tlsext_servername_callback to -sysSteven Fackler2016-08-041-0/+7
|
* Move SSL_set_tlsext_host_name to -sysSteven Fackler2016-08-041-0/+4
|
* Move BIO macros into -sysSteven Fackler2016-08-041-0/+20
|
* Support basic SSL options without C shimsSteven Fackler2016-08-041-0/+48
|
* Define SSL_CTX_set_mode in openssl-sysSteven Fackler2016-08-021-0/+7
|
* Restructure PEM input/output methodsSteven Fackler2016-08-021-0/+7
| | | | | Dealing with byte buffers directly avoids error handling weirdness and we were loading it all into memory before anyway.
* Add MidHandshakeSslStreamAlex Crichton2016-07-311-0/+1
| | | | | | Allows recognizing when a stream is still in handshake mode and can gracefully transition when ready. The blocking usage of the API should still be the same, just helps nonblocking implementations!
* Merge pull request #402 from bbatha/feat/dsa-ffiSteven Fackler2016-07-291-2/+48
|\ | | | | DSA bindings
| * add low level dsa primitivesBen Batha2016-07-291-2/+48
| |
* | Implement save_der for X509 and X509ReqOnur Aslan2016-07-291-0/+3
|/
* Set SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER flagShaun Taheri2016-07-241-0/+1
|
* Release v0.7.14Steven Fackler2016-07-011-1/+1
|
* Set auto retrySteven Fackler2016-07-011-1/+3
| | | | | | SSL_read returns a WANT_READ after a renegotiation by default which ends up bubbling up as a weird BUG error. Tell OpenSSL to just do the read again.
generated by cgit v1.2.3 (git 2.25.1) at 2026-03-12 21:45:48 +0000