aboutsummaryrefslogtreecommitdiff
path: root/openssl/src/ssl/mod.rs
Commit message (Collapse)AuthorAgeFilesLines
...
* Add a couple of FIXMEsSteven Fackler2017-11-051-0/+4
|
* Handle local retriesSteven Fackler2017-11-041-94/+73
| | | | | | | | | | | | OpenSSL can return SSL_ERROR_WANT_READ even on blocking sockets after renegotiation or heartbeats. Heartbeats ignore the flag that normally makes these things handled internally anyway on 1.0.2. To handle this more properly, we now have a special error type we use to signal this event. The `Read` and `Write` implementation automatically retry in this situation since that's what you normally want. People can use `ssl_read` and `ssl_write` if they want the lower level control. Closes #760
* Fixed a typo in an error message, WANT_WRITE -> WANT_READBrian Vincent2017-10-171-1/+1
|
* Merge pull request #752 from chrisvittal/libressl262Steven Fackler2017-10-031-2/+2
|\ | | | | Add support for LibreSSL 2.6.2
| * Fix cfgs for libressl262Christopher Vittal2017-10-041-2/+2
| |
* | Convert try! usage to ?johnthagen2017-10-031-14/+14
|/
* openssl: libressl 2.6.1 dropped suuport for npnMarc-Antoine Perennou2017-09-171-0/+2
| | | | Signed-off-by: Marc-Antoine Perennou <[email protected]>
* Add peer_cert_chainSteven Fackler2017-07-291-0/+15
|
* Use foreign-type's OpaqueSteven Fackler2017-07-151-2/+1
|
* RustfmtSteven Fackler2017-07-151-182/+290
|
* Init before creating ex indexesSteven Fackler2017-07-151-1/+3
|
* Add an API to install extra dataSteven Fackler2017-07-151-8/+78
|
* Move callbacks to a submoduleSteven Fackler2017-07-151-298/+4
|
* Merge pull request #641 from luser/pskSteven Fackler2017-07-041-1/+49
|\ | | | | Expose PSK via a SslContextBuilder::set_psk_callback method
| * Make some changes for review commentsTed Mielczarek2017-06-021-21/+24
| |
| * Expose PSK via a SslContextBuilder::set_psk_callback methodTed Mielczarek2017-05-261-2/+47
| |
* | Properly reexport ConnectConfigurationSteven Fackler2017-06-141-1/+2
| |
* | Little docs fixSteven Fackler2017-05-291-1/+1
| |
* | Add a fixmeSteven Fackler2017-05-291-64/+68
| |
* | Update bitflags 0.8 -> 0.9golem1312017-05-221-42/+42
|/
* Logic to support client-side session reuseSteven Fackler2017-03-251-1/+54
|
* Add a fixme to drop const prefixesSteven Fackler2017-02-191-0/+1
|
* TweaksSteven Fackler2017-02-181-4/+3
|
* add Ok to resultBenjamin Fry2017-02-161-1/+1
|
* only forget in non-error conditionBenjamin Fry2017-02-161-1/+1
|
* review fixes: reorder forget()Benjamin Fry2017-02-161-2/+6
|
* fix cfg options for v102 and v110Benjamin Fry2017-02-161-2/+2
|
* add set_verify_cert_store() to ssl ctxBenjamin Fry2017-02-161-0/+13
|
* Merge remote-tracking branch 'origin/master' into x509-builderSteven Fackler2017-02-111-51/+480
|\
| * Switch to foreign_typesSteven Fackler2017-02-031-6/+24
| |
| * Merge pull request #550 from Keruspe/masterSteven Fackler2017-01-221-2/+2
| |\ | | | | | | LibreSSL support improvements
| | * libressl: make set_ecdh_auto availableMarc-Antoine Perennou2017-01-051-2/+2
| | | | | | | | | | | | Signed-off-by: Marc-Antoine Perennou <[email protected]>
| * | OCSP functionalitySteven Fackler2017-01-141-5/+139
| | |
| * | Add methods to construct SslAcceptorBuilder without key and certSteven Fackler2017-01-081-10/+17
| | | | | | | | | | | | | | | This will allow, in particular, initialization directly from files rather than having to load and parse them manually.
| * | Provide master key accessSteven Fackler2017-01-041-1/+27
| | |
| * | session is nullableSteven Fackler2017-01-041-2/+9
| | |
| * | Provide access to the session IDSteven Fackler2017-01-041-2/+13
| | |
| * | Types and accessor for SslSessionSteven Fackler2017-01-041-0/+7
| |/
| * Merge pull request #538 from semarie/libresslSteven Fackler2016-12-221-0/+3
| |\ | | | | | | Add LibreSSL support
| | * Add LibreSSL 2.5.0 supportSébastien Marie2016-12-211-0/+3
| | |
| * | Handle zero-length reads/writesAlex Crichton2016-12-201-0/+14
| |/ | | | | | | | | | | | | This commit adds some short-circuits for zero-length reads/writes to `SslStream`. Because OpenSSL returns 0 on error, then we could mistakenly confuse a 0-length success as an actual error, so we avoid writing or reading 0 bytes by returning quickly with a success.
| * CleanupSteven Fackler2016-11-271-1/+2
| |
| * Rename ec_key to ecSteven Fackler2016-11-141-2/+2
| |
| * Add SslRef::set_{tmp_dh,tmp_ecdh,ecdh_auto}Steven Fackler2016-11-121-0/+18
| |
| * Add SslRef::set_tmp_{ec,}dh_calbackSteven Fackler2016-11-121-3/+78
| |
| * Add SslContextBuilder::set_tmp_{ec,}dh_callbackSteven Fackler2016-11-121-6/+85
| |
| * Add basic X509_STORE accessSteven Fackler2016-11-121-0/+11
| | | | | | | | | | | | | | There's more to do here, but this enabled addition of trusted CAs from X509 objects. Closes #394
| * Fix EOF detectionSteven Fackler2016-11-111-19/+35
| | | | | | | | See https://github.com/openssl/openssl/issues/1903 for details
* | Add stack creation and pushSteven Fackler2016-11-061-0/+4
|/
* Support client CA advertisementSteven Fackler2016-11-061-1/+12
|