| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Fix test_alpn_server_select_none | Steven Fackler | 2016-10-14 | 1 | -12/+34 |
| | | | | | | | | | | | | | In OpenSSL 1.1, a failure to negotiate a protocol is a fatal error, so fork that test. This also popped up an issue where we assumed all errors had library, function, and reason strings which is not necessarily the case. While we're in here, adjust the Display impl to match what OpenSSL prints out. Closes #465 | ||||
| * | Enable hostname verification on 1.0.2 | Steven Fackler | 2016-10-14 | 1 | -4/+4 |
| | | |||||
| * | Support hostname verification | Steven Fackler | 2016-10-14 | 1 | -0/+44 |
| | | | | | Closes #206 | ||||
| * | Ignore DTLS tests on Windows/ARM for now | Alex Crichton | 2016-10-14 | 1 | -1/+4 |
| | | | | | cc #467 | ||||
| * | Use stdlib logic for udp | Steven Fackler | 2016-10-13 | 1 | -38/+2 |
| | | |||||
| * | Fix windows for real | Steven Fackler | 2016-10-13 | 1 | -1/+2 |
| | | |||||
| * | Disable npn tests on < 1.0.2 | Steven Fackler | 2016-10-13 | 1 | -0/+2 |
| | | | | | s_client doesn't seem to support the required flag before then. | ||||
| * | Fix tests on windows | Steven Fackler | 2016-10-13 | 1 | -5/+6 |
| | | |||||
| * | Reenable dtls tests | Steven Fackler | 2016-10-13 | 1 | -26/+6 |
| | | |||||
| * | Clean up features | Steven Fackler | 2016-10-13 | 1 | -10/+5 |
| | | |||||
| * | Ignore a test on OpenSSL 1.1.0 | Alex Crichton | 2016-10-12 | 1 | -0/+3 |
| | | |||||
| * | Add support for OpenSSL 1.1.0 | Alex Crichton | 2016-10-12 | 1 | -60/+64 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit is relatively major refactoring of the `openssl-sys` crate as well as the `openssl` crate itself. The end goal here was to support OpenSSL 1.1.0, and lots of other various tweaks happened along the way. The major new features are: * OpenSSL 1.1.0 is supported * OpenSSL 0.9.8 is no longer supported (aka all OSX users by default) * All FFI bindings are verified with the `ctest` crate (same way as the `libc` crate) * CI matrixes are vastly expanded to include 32/64 of all platforms, more OpenSSL version coverage, as well as ARM coverage on Linux * The `c_helpers` module is completely removed along with the `gcc` dependency. * The `openssl-sys` build script was completely rewritten * Now uses `OPENSSL_DIR` to find the installation, not include/lib env vars. * Better error messages for mismatched versions. * Better error messages for failing to find OpenSSL on a platform (more can be done here) * Probing of OpenSSL build-time configuration to inform the API of the `*-sys` crate. * Many Cargo features have been removed as they're now enabled by default. As this is a breaking change to both the `openssl` and `openssl-sys` crates this will necessitate a major version bump of both. There's still a few more API questions remaining but let's hash that out on a PR! Closes #452 | ||||
| * | Fix SslContext::add_extra_chain_cert | Steven Fackler | 2016-08-17 | 1 | -0/+8 |
| | | | | | | | | | | SSL_CTX_add_extra_chain_cert assumes ownership of the certificate, so the method really needs to take an X509 by value. Work around this by manually cloning the cert. This method has been around for over a year but I'm guessing nobody actually used it since it produces a nice double free into segfault! | ||||
| * | Ignore flickering test on windows | Steven Fackler | 2016-08-16 | 1 | -0/+1 |
| | | |||||
| * | More test fixes | Steven Fackler | 2016-08-14 | 1 | -1/+1 |
| | | |||||
| * | Fix tests | Steven Fackler | 2016-08-14 | 1 | -9/+9 |
| | | |||||
| * | Start on PKCS #12 support | Steven Fackler | 2016-08-14 | 1 | -4/+4 |
| | | |||||
| * | Fix tests | Steven Fackler | 2016-08-10 | 1 | -1/+1 |
| | | |||||
| * | Remove rust_SSL_clone | Steven Fackler | 2016-08-09 | 1 | -1/+1 |
| | | |||||
| * | get_error -> error | Steven Fackler | 2016-08-07 | 1 | -2/+2 |
| | | |||||
| * | Clean up x509 | Steven Fackler | 2016-08-05 | 1 | -3/+3 |
| | | |||||
| * | Restructure PEM input/output methods | Steven Fackler | 2016-08-02 | 1 | -11/+4 |
| | | | | | | Dealing with byte buffers directly avoids error handling weirdness and we were loading it all into memory before anyway. | ||||
| * | Add MidHandshakeSslStream | Alex Crichton | 2016-07-31 | 1 | -11/+24 |
| | | | | | | | Allows recognizing when a stream is still in handshake mode and can gracefully transition when ready. The blocking usage of the API should still be the same, just helps nonblocking implementations! | ||||
| * | Merge remote-tracking branch 'origin/master' into breaks | Steven Fackler | 2016-07-31 | 1 | -19/+18 |
| |\ | |||||
| | * | Rustfmt | Steven Fackler | 2016-05-16 | 1 | -14/+12 |
| | | | |||||
| | * | Update cert | Steven Fackler | 2016-05-15 | 1 | -7/+7 |
| | | | | | | | | | Now with a 10 year expriation | ||||
| * | | Fix a few mutable types for `self` parameters. | Corey Farwell | 2016-06-02 | 1 | -1/+1 |
| | | | |||||
| * | | Move SslContext::set_verify to a closure based API | Steven Fackler | 2016-05-03 | 1 | -66/+42 |
| | | | |||||
| * | | Rename getters in line with conventions | Steven Fackler | 2016-05-03 | 1 | -2/+2 |
| | | | |||||
| * | | Error reform | Steven Fackler | 2016-05-03 | 1 | -1/+1 |
| | | | |||||
| * | | Remove deprecated methods | Steven Fackler | 2016-05-03 | 1 | -32/+24 |
| | | | |||||
| * | | Remove NonblockingSslStream | Steven Fackler | 2016-05-03 | 1 | -13/+13 |
| |/ | |||||
| * | Add a version of Ssl::set_verify that doesn't set a callback | Steven Fackler | 2016-05-01 | 1 | -1/+1 |
| | | |||||
| * | Add Ssl::set_verify | Steven Fackler | 2016-04-30 | 1 | -0/+30 |
| | | | | | | It also uses a better, closure based API than the existing callback methods. | ||||
| * | Ignore default verify paths test on windows | Steven Fackler | 2016-04-29 | 1 | -0/+1 |
| | | |||||
| * | Add SslContext::set_default_verify_paths | Steven Fackler | 2016-04-16 | 1 | -0/+17 |
| | | |||||
| * | More deprecated function cleanup | Steven Fackler | 2016-02-08 | 1 | -1/+1 |
| | | |||||
| * | Stop using deprecated method | Steven Fackler | 2016-02-08 | 1 | -1/+2 |
| | | |||||
| * | openssl/ssl/context: test that we are refcounting correctly | Cody P Schafer | 2016-01-18 | 1 | -0/+13 |
| | | | | | | | | | | | Not a perfect test, on failure it _might_ exit with this output: Process didn't exit successfully: `/home/cody/g/rust-openssl/openssl/target/debug/openssl-8e712036e3aac4fe` (signal: 11) But unclear if we can do any better. | ||||
| * | Fix should_panic check | Steven Fackler | 2016-01-11 | 1 | -3/+3 |
| | | |||||
| * | Add stream panic propagation behind a nightly feature gate | Steven Fackler | 2016-01-11 | 1 | -0/+88 |
| | | |||||
| * | Work around the worst of clone bogusness | Steven Fackler | 2015-12-18 | 1 | -0/+8 |
| | | | | | | | | | | | SslStream::{clone,try_clone} are inherently broken since the Ssl object shared by both streams is only going to be talking to one stream. Stuff like hyper depends on try_clone, so we'll leave it here for now but minimize the brokenness to "no worse than what it used to be like". They'll be removed in 0.8. cc #325 | ||||
| * | Disable cross compilation for now | Steven Fackler | 2015-12-17 | 1 | -1/+2 |
| | | |||||
| * | Rustfmt | Steven Fackler | 2015-12-15 | 1 | -93/+112 |
| | | |||||
| * | Replace SslStream implementation! | Steven Fackler | 2015-12-09 | 1 | -20/+1 |
| | | |||||
| * | Implement read and write | Steven Fackler | 2015-12-09 | 1 | -0/+12 |
| | | |||||
| * | IT LIVES | Steven Fackler | 2015-12-09 | 1 | -1/+8 |
| | | |||||
| * | Move SSL methods to Ssl object, add getter | Steven Fackler | 2015-11-16 | 1 | -19/+19 |
| | | |||||
| * | Revert "Revert "Merge pull request #280 from ltratt/libressl_build"" | Steven Fackler | 2015-11-16 | 1 | -4/+0 |
| | | | | | This reverts commit ae3d0e36d71bb121c2fc1a75b3bc6d97f0e61480. | ||||
| * | Get nonblocking tests working on OSX/Windows | Alex Crichton | 2015-10-22 | 1 | -0/+935 |