aboutsummaryrefslogtreecommitdiff
path: root/openssl/src/ssl
Commit message (Collapse)AuthorAgeFilesLines
...
* Clean up featuresSteven Fackler2016-10-132-20/+17
|
* Flag off dtls and mask ssl_opsSteven Fackler2016-10-131-13/+3
| | | | Also un-feature gate npn as it ships with 1.0.1
* Ignore a test on OpenSSL 1.1.0Alex Crichton2016-10-121-0/+3
|
* Add remaining SSL_OP constantsSteven Fackler2016-10-121-0/+5
|
* Add support for OpenSSL 1.1.0Alex Crichton2016-10-123-262/+388
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit is relatively major refactoring of the `openssl-sys` crate as well as the `openssl` crate itself. The end goal here was to support OpenSSL 1.1.0, and lots of other various tweaks happened along the way. The major new features are: * OpenSSL 1.1.0 is supported * OpenSSL 0.9.8 is no longer supported (aka all OSX users by default) * All FFI bindings are verified with the `ctest` crate (same way as the `libc` crate) * CI matrixes are vastly expanded to include 32/64 of all platforms, more OpenSSL version coverage, as well as ARM coverage on Linux * The `c_helpers` module is completely removed along with the `gcc` dependency. * The `openssl-sys` build script was completely rewritten * Now uses `OPENSSL_DIR` to find the installation, not include/lib env vars. * Better error messages for mismatched versions. * Better error messages for failing to find OpenSSL on a platform (more can be done here) * Probing of OpenSSL build-time configuration to inform the API of the `*-sys` crate. * Many Cargo features have been removed as they're now enabled by default. As this is a breaking change to both the `openssl` and `openssl-sys` crates this will necessitate a major version bump of both. There's still a few more API questions remaining but let's hash that out on a PR! Closes #452
* Fix SslContext::add_extra_chain_certSteven Fackler2016-08-172-3/+16
| | | | | | | | | SSL_CTX_add_extra_chain_cert assumes ownership of the certificate, so the method really needs to take an X509 by value. Work around this by manually cloning the cert. This method has been around for over a year but I'm guessing nobody actually used it since it produces a nice double free into segfault!
* Ignore flickering test on windowsSteven Fackler2016-08-161-0/+1
|
* PKCS #12 supportSteven Fackler2016-08-141-1/+1
|
* More test fixesSteven Fackler2016-08-141-1/+1
|
* Fix testsSteven Fackler2016-08-141-9/+9
|
* Start on PKCS #12 supportSteven Fackler2016-08-141-4/+4
|
* Mangle c helper functionsSteven Fackler2016-08-131-1/+1
| | | | | | | We want to make sure that multiple openssl versions can coexist in the same dependency tree. Closes #438
* Fix testsSteven Fackler2016-08-101-1/+1
|
* Little tweaksSteven Fackler2016-08-101-3/+6
|
* Method renamesSteven Fackler2016-08-101-3/+3
|
* More API cleanupSteven Fackler2016-08-101-1/+1
|
* Make c_helpers optionalSteven Fackler2016-08-091-108/+137
|
* Remove rust_SSL_cloneSteven Fackler2016-08-092-60/+95
|
* Move init to crate rootSteven Fackler2016-08-071-7/+2
|
* get_error -> errorSteven Fackler2016-08-071-2/+2
|
* Clean up asn1timeSteven Fackler2016-08-061-33/+37
|
* Fix pkey method safetySteven Fackler2016-08-051-1/+1
|
* Clean up x509Steven Fackler2016-08-052-9/+9
|
* Move SSL_CTX_set_ecdh_auto to -sysSteven Fackler2016-08-041-1/+1
|
* Mvoe SSL_CTX_add_extra_chain_cert to -sysSteven Fackler2016-08-041-3/+2
|
* Move SSL_CTX_set_tmp_dh to -sysSteven Fackler2016-08-041-1/+1
|
* Move SSL_CTX_set_read_ahead to -sysSteven Fackler2016-08-041-1/+1
|
* Move SSL_CTX_set_tlsext_servername_callback to -sysSteven Fackler2016-08-041-1/+1
|
* Move SSL_set_tlsext_host_name to -sysSteven Fackler2016-08-041-1/+1
|
* Move BIO macros into -sysSteven Fackler2016-08-041-2/+2
|
* Stop once-ing init wrapperSteven Fackler2016-08-041-3/+2
| | | | The underlying function already once-s itself
* Support basic SSL options without C shimsSteven Fackler2016-08-041-51/+31
|
* Define SSL_CTX_set_mode in openssl-sysSteven Fackler2016-08-021-1/+1
|
* Restructure PEM input/output methodsSteven Fackler2016-08-021-11/+4
| | | | | Dealing with byte buffers directly avoids error handling weirdness and we were loading it all into memory before anyway.
* Merge pull request #432 from alexcrichton/mid-handshakeSteven Fackler2016-07-312-19/+136
|\ | | | | Add MidHandshakeSslStream
| * Add MidHandshakeSslStreamAlex Crichton2016-07-312-19/+136
| | | | | | | | | | | | Allows recognizing when a stream is still in handshake mode and can gracefully transition when ready. The blocking usage of the API should still be the same, just helps nonblocking implementations!
* | Fix build with dtlsSteven Fackler2016-07-311-2/+2
|/
* Merge remote-tracking branch 'origin/master' into breaksSteven Fackler2016-07-313-43/+64
|\
| * Set SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER flagShaun Taheri2016-07-241-1/+1
| |
| * Set auto retrySteven Fackler2016-07-011-1/+8
| | | | | | | | | | | | SSL_read returns a WANT_READ after a renegotiation by default which ends up bubbling up as a weird BUG error. Tell OpenSSL to just do the read again.
| * RustfmtSteven Fackler2016-05-163-42/+60
| |
| * Update certSteven Fackler2016-05-151-7/+7
| | | | | | | | Now with a 10 year expriation
* | Fix a few mutable types for `self` parameters.Corey Farwell2016-06-022-4/+4
| |
* | Remove AsRaw{Fd, Socket} implsSteven Fackler2016-05-031-18/+0
| | | | | | | | | | An SslStream can't really act as a raw socket since you'd skip the whole TLS layer
* | Remove silly internal error enumSteven Fackler2016-05-031-44/+9
| |
* | Drop MaybeSslStreamSteven Fackler2016-05-031-61/+0
| | | | | | | | It should be inlined into crates that depend on it.
* | Drop is_dtls methods on SslMethodSteven Fackler2016-05-031-26/+6
| |
* | Clean up SNI APIsSteven Fackler2016-05-031-73/+30
| |
* | Move SslContext::set_verify to a closure based APISteven Fackler2016-05-032-133/+56
| |
* | Rename getters in line with conventionsSteven Fackler2016-05-032-11/+9
| |
generated by cgit v1.2.3 (git 2.25.1) at 2026-05-01 11:13:56 +0000