rust-openssl - Unnamed repository; edit this file 'description' to name the repository.

	Commit message (Collapse)	Author	Age	Files	Lines
*	Start on error + BN refactor	Steven Fackler	2016-10-16	1	-142/+0
\|
*	De-enumify SslMethod	Steven Fackler	2016-10-15	1	-5/+4
\|
*	Clean up features	Steven Fackler	2016-10-13	1	-4/+4
\|
*	Add support for OpenSSL 1.1.0	Alex Crichton	2016-10-12	1	-20/+39
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This commit is relatively major refactoring of the `openssl-sys` crate as well as the `openssl` crate itself. The end goal here was to support OpenSSL 1.1.0, and lots of other various tweaks happened along the way. The major new features are: * OpenSSL 1.1.0 is supported * OpenSSL 0.9.8 is no longer supported (aka all OSX users by default) * All FFI bindings are verified with the `ctest` crate (same way as the `libc` crate) * CI matrixes are vastly expanded to include 32/64 of all platforms, more OpenSSL version coverage, as well as ARM coverage on Linux * The `c_helpers` module is completely removed along with the `gcc` dependency. * The `openssl-sys` build script was completely rewritten * Now uses `OPENSSL_DIR` to find the installation, not include/lib env vars. * Better error messages for mismatched versions. * Better error messages for failing to find OpenSSL on a platform (more can be done here) * Probing of OpenSSL build-time configuration to inform the API of the `-sys` crate. Many Cargo features have been removed as they're now enabled by default. As this is a breaking change to both the `openssl` and `openssl-sys` crates this will necessitate a major version bump of both. There's still a few more API questions remaining but let's hash that out on a PR! Closes #452
*	Mangle c helper functions	Steven Fackler	2016-08-13	1	-1/+1
\| \| \| \| \| \| \|	We want to make sure that multiple openssl versions can coexist in the same dependency tree. Closes #438
*	Fix build	Steven Fackler	2016-08-10	1	-0/+5
\|
*	Method renames	Steven Fackler	2016-08-10	1	-1/+1
\|
*	More API cleanup	Steven Fackler	2016-08-10	1	-3/+6
\|
*	Asn1 and Bignum renames	Steven Fackler	2016-08-10	1	-1/+0
\|
*	Fix build	Steven Fackler	2016-08-09	1	-1/+4
\|
*	Fix build	Steven Fackler	2016-08-09	1	-3/+3
\|
*	Make c_helpers optional	Steven Fackler	2016-08-09	1	-2/+2
\|
*	DH cleanup	Steven Fackler	2016-08-07	1	-13/+4
\|
*	get_handle -> handle	Steven Fackler	2016-08-05	1	-1/+1
\|
*	Restructure PEM input/output methods	Steven Fackler	2016-08-02	1	-15/+5
\| \| \| \| \|	Dealing with byte buffers directly avoids error handling weirdness and we were loading it all into memory before anyway.
*	Fix a few mutable types for `self` parameters.	Corey Farwell	2016-06-02	1	-3/+3
\|
*	Error reform	Steven Fackler	2016-05-03	1	-7/+7
\|
*	Rustfmt	Steven Fackler	2015-12-15	1	-6/+28
\|
*	Merge pull request #261 from jedisct1/try_ssl_null	Steven Fackler	2015-09-16	1	-16/+4
\|\ \| \| \| \|	Use try_ssl_null!() when relevant
\| *	Use try_ssl_null!() when relevant	Frank Denis	2015-09-13	1	-16/+4
\| \|
* \|	Add DH::from_pem() to load DH parameters from a file	Frank Denis	2015-09-13	1	-1/+27
\|/
*	Add support for set_tmp_dh() and RFC5114 DH parameters for forward secrecy.	Frank Denis	2015-08-31	1	-0/+97
	rust-openssl didn't support forward secrecy at all. This adds support for DHE, by exposing set_tmp_dh() as well as the RFC5114 parameters, which are conveniently exposed since OpenSSL 1.0.2. With OpenSSL >= 1.0.2, and the rfc5114 feature gate, enabling DHE is as simple as (here for 2048-bit MODP group with 256-bit prime order subgroup): use openssl::dh::DH; let dh = DH::get_2048_256().unwrap(); ctx.set_tmp_dh(dh).unwrap(); With OpenSSL < 1.0.2, DH::from_params() can be used to manually specify the DH parameters (here for 2048-bit MODP group with 256-bit prime order subgroup): use openssl::bn::BigNum; use openssl::dh::DH; let p = BigNum::from_hex_str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unwrap(); let g = BigNum::from_hex_str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unwrap(); let q = BigNum::from_hex_str("8CF83642A709A097B447997640129DA299B1A47D1EB3750BA308B0FE64F5FBD3").unwrap(); let dh = DH::from_params(p, g, q).unwrap(); ctx.set_tmp_dh(dh).unwrap();