aboutsummaryrefslogtreecommitdiff
path: root/openssl/src/ssl/mod.rs
Commit message (Collapse)AuthorAgeFilesLines
* Stop once-ing init wrapperSteven Fackler2016-08-041-3/+2
| | | | The underlying function already once-s itself
* Support basic SSL options without C shimsSteven Fackler2016-08-041-51/+31
|
* Define SSL_CTX_set_mode in openssl-sysSteven Fackler2016-08-021-1/+1
|
* Merge pull request #432 from alexcrichton/mid-handshakeSteven Fackler2016-07-311-8/+112
|\ | | | | Add MidHandshakeSslStream
| * Add MidHandshakeSslStreamAlex Crichton2016-07-311-8/+112
| | | | | | | | | | | | Allows recognizing when a stream is still in handshake mode and can gracefully transition when ready. The blocking usage of the API should still be the same, just helps nonblocking implementations!
* | Fix build with dtlsSteven Fackler2016-07-311-2/+2
|/
* Merge remote-tracking branch 'origin/master' into breaksSteven Fackler2016-07-311-11/+28
|\
| * Set SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER flagShaun Taheri2016-07-241-1/+1
| |
| * Set auto retrySteven Fackler2016-07-011-1/+8
| | | | | | | | | | | | SSL_read returns a WANT_READ after a renegotiation by default which ends up bubbling up as a weird BUG error. Tell OpenSSL to just do the read again.
| * RustfmtSteven Fackler2016-05-161-15/+30
| |
* | Fix a few mutable types for `self` parameters.Corey Farwell2016-06-021-3/+3
| |
* | Remove AsRaw{Fd, Socket} implsSteven Fackler2016-05-031-18/+0
| | | | | | | | | | An SslStream can't really act as a raw socket since you'd skip the whole TLS layer
* | Remove silly internal error enumSteven Fackler2016-05-031-44/+9
| |
* | Drop MaybeSslStreamSteven Fackler2016-05-031-61/+0
| | | | | | | | It should be inlined into crates that depend on it.
* | Drop is_dtls methods on SslMethodSteven Fackler2016-05-031-26/+6
| |
* | Clean up SNI APIsSteven Fackler2016-05-031-73/+30
| |
* | Move SslContext::set_verify to a closure based APISteven Fackler2016-05-031-67/+14
| |
* | Rename getters in line with conventionsSteven Fackler2016-05-031-9/+7
| |
* | Adjust set_ssl_context APISteven Fackler2016-05-031-12/+5
| |
* | Error reformSteven Fackler2016-05-031-77/+46
| |
* | Remove deprecated methodsSteven Fackler2016-05-031-61/+1
| |
* | Remove NonblockingSslStreamSteven Fackler2016-05-031-132/+1
|/
* Add a version of Ssl::set_verify that doesn't set a callbackSteven Fackler2016-05-011-1/+8
|
* Add Ssl::set_verifySteven Fackler2016-04-301-0/+57
| | | | | It also uses a better, closure based API than the existing callback methods.
* Upgrade to work with bitflags 0.5 and 0.6Matt Brubeck2016-04-291-42/+42
|
* Add docs for set_default_verify_pathsSteven Fackler2016-04-161-0/+5
|
* Add SslContext::set_default_verify_pathsSteven Fackler2016-04-161-0/+4
|
* Update for nightly changesSteven Fackler2016-04-131-1/+1
|
* Add ability to set session ID context on an SSL contextRico Huijbers2016-04-131-0/+14
| | | | | This is necessary to make authentication with client certificates work without session restarts.
* Add safe wrapper BioMethod for ffi::BIO_METHODJoe Wilm2016-04-041-3/+3
| | | | | | Adds a wrapper for ffi::BIO_METHOD located at ssl::bio::BioMethod. This enables SslStream to be Send without doing an unsafe impl on the ffi struct.
* Cast correctly c_char raw pointers (fixes build on ARM #363)Leon Anavi2016-03-221-1/+1
| | | | | | | Fix error caused by mismatched types while building crate openssl for Raspberry Pi 2 and other ARM devices. Signed-off-by: Leon Anavi <[email protected]>
* Allow Rust to infer the type of the argument to SSL_CIPHER_description.Ms2ger2016-03-181-2/+2
| | | | | This allows the code to compile on Android, where an unsigned char is expected.
* Fix nightly warnings about zero-sized fn pointersAlex Crichton2016-03-111-2/+4
|
* Make SSLCipher.bits() return a struct.Erik Johnston2016-02-291-10/+14
|
* Add SSL_get_versionErik Johnston2016-02-291-11/+42
|
* Add support for SSL_CIPHERErik Johnston2016-02-171-0/+52
|
* Fix connect and accept error reportingSteven Fackler2016-01-221-20/+16
| | | | | We were previously trying to create an error twice so the second wouldn't be correct.
* ssl: fix refcounting of SslContext when set_ssl_context is usedCody P Schafer2016-01-181-3/+28
| | | | | | | | | | | Additionally impl Clone for SslContext to both allow us to use it & allow external users to take advantage of SslContext's internal refcount. Maintain the existing signature for set_ssl_context(), but add inline comments recommending changing it. Fixes #333
* Add stream panic propagation behind a nightly feature gateSteven Fackler2016-01-111-2/+16
|
* RustfmtSteven Fackler2015-12-181-1/+1
|
* Fix deprecation locationSteven Fackler2015-12-181-4/+4
|
* Work around the worst of clone bogusnessSteven Fackler2015-12-181-14/+20
| | | | | | | | | | SslStream::{clone,try_clone} are inherently broken since the Ssl object shared by both streams is only going to be talking to one stream. Stuff like hyper depends on try_clone, so we'll leave it here for now but minimize the brokenness to "no worse than what it used to be like". They'll be removed in 0.8. cc #325
* Fix nonblocking behaviorSteven Fackler2015-12-171-20/+8
| | | | | | | | A new nonblocking socket may not have finished connecting yet, so reads and writes can return ENOTCONNECTED which we should reinterpret into a WantRead or WantWrite Closes #323
* Fix regression of c_char type mismatches on ARMOndrej Perutka2015-12-161-1/+1
|
* RustfmtSteven Fackler2015-12-151-199/+197
|
* Fix bounds on ssl_read and ssl_writeSteven Fackler2015-12-151-28/+28
|
* Cleanup SNI stuffSteven Fackler2015-12-151-13/+6
|
* CleanupSteven Fackler2015-12-151-4/+6
|
* Merge pull request #309 from Geal/masterSteven Fackler2015-12-151-0/+112
|\ | | | | Add support for Server Name indication (SNI) on the server's side
| * Increment SSL_CTX's reference count in Ssl::get_ssl_context()Geoffroy Couprie2015-12-031-0/+1
| | | | | | | | | | | | Without this, whenever the returned SslContext is released, the refcount of the underlying SSL_CTX will decrease and it will be freed too soon