aboutsummaryrefslogtreecommitdiff
path: root/openssl/src/x509/mod.rs
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #937 from marcoh00/iterable-x509namesSteven Fackler2018-07-071-7/+40
|\ | | | | X509NameRef: Provide an iterator over all entries
| * Only grab the name entry count when neededSteven Fackler2018-06-261-3/+1
| |
| * Rename X509NameRef::all_entries and refactor end-of-iterator checksMarco Huenseler2018-06-031-5/+7
| |
| * Provide an Asn1Object getter method for X509NameEntryRefMarco Huenseler2018-06-031-0/+13
| |
| * Make X509NameRef provide an iterator over all X509NameEntriesMarco Huenseler2018-06-031-5/+25
| |
* | Switch to accessors in libressl where possibleSteven Fackler2018-06-091-24/+28
|/ | | | | | | Some accessors are mysteriously still macros so we can't make everything opaque yet, unfortunately. cc #909
* Rename X509Ref::fingerprint to X509Ref::digest and avoid allocatingSteven Fackler2018-05-241-9/+21
|
* Overhaul openssl cfgsSteven Fackler2018-05-201-83/+83
| | | | Also expose hostname verification on libressl
* Add functions to X509Req to obtain public key and extensionsRené Richter2018-04-211-0/+22
| | | | This allows for basic CSR signing.
* Add X509Ref::serial_numberSteven Fackler2018-03-281-0/+13
|
* Remove version-specific featuresSteven Fackler2018-03-191-2/+1
| | | | Closes #852
* Tweak verify_cert's signatureSteven Fackler2018-03-111-26/+24
| | | | | The call can fail either due to an invalid cert or an internal error, and we should distinguish between the two.
* Changes `init` to take a closure which is called with the initialized contextBastian Köcher2018-03-111-7/+25
| | | | | After calling the closure, we automatically cleanup the context. This is required, because otherwise we could have dangling references in the context.
* Moves store context init into its own functionBastian Köcher2018-03-101-10/+18
|
* Moves `cleanup` into its own functionBastian Köcher2018-03-081-5/+14
|
* Fixes the implementation of `X509StoreContextRef::verify_cert`Bastian Köcher2018-03-071-31/+30
| | | | | | The certificate, the store and the certificates chain does not need to be consumed by `verify_cert` and instead are taken as references. We also call `X509_STORE_CTX_cleanup`, after the verification succeeded.
* delay return until after forgetsBenjamin Fry2018-03-071-2/+4
|
* cleanup and add negative testBenjamin Fry2018-03-071-5/+8
|
* add cleanup ffi to store contextBenjamin Fry2018-03-071-2/+6
|
* restructure to self contained functionBenjamin Fry2018-03-071-4/+11
|
* Little tweaksSteven Fackler2018-03-071-4/+4
|
* convert to raw pass-through methodsBenjamin Fry2018-03-071-5/+21
|
* add comment about consuming self in verify_certBenjamin Fry2018-03-071-0/+3
|
* fix error checkBenjamin Fry2018-03-071-2/+2
|
* properly version library functionsBenjamin Fry2018-03-071-0/+7
|
* Remove the x509 module-level exampleSteven Fackler2018-03-051-33/+0
| | | | | | | | | | | | The example generated a bogus certificate that was missing a serial number, a validity range, etc. Generating a correct x509 certificate is complex enough that doing it correctly is too long to be a reasonable doc example. There's already a more complete example in the examples directory that handles things more correctly. Closes #859
* Tweak featuresSteven Fackler2018-02-141-2/+2
| | | | We should keep the version features totally separate for now.
* add support for rfc822Name (email) and uniformResourceIdentifier (uri) to ↵Ian P. Cooke2018-01-151-4/+19
| | | | GeneralName
* Rename key serialization/deserialization methodsSteven Fackler2018-01-061-25/+92
| | | | | | Also document their specific formats. Closes #502
* Fix links in x509 moduleAnsley Peduru2018-01-011-2/+4
|
* Merge branch 'master' into x509-docsAnsley Peduru2018-01-011-17/+0
|\
| * Move X509Filetype to SslFiletypeSteven Fackler2018-01-011-12/+0
| | | | | | | | | | | | These constants have the same values, but X509_FILETYPE_DEFAULT doesn't work in the Ssl methods and using the SSL_* names is a bit less confusing.
* | Fix x509 doc examplesAnsley Peduru2018-01-011-7/+20
| |
* | Add documentation for x509 moduleAnsley Peduru2017-12-311-3/+156
|/
* Parameterize keys over what they containSteven Fackler2017-12-301-6/+18
| | | | Closes #790
* Add issuer name access.Steven Fackler2017-12-291-3/+47
| | | | Closes #808
* Split X509StoreContextRef::ssl upSteven Fackler2017-12-261-15/+22
|
* Overhaul verify error typeSteven Fackler2017-12-261-25/+27
| | | | Also set the error in the hostname verification callback for 1.0.1
* Remove deprecated APIsSteven Fackler2017-12-251-277/+1
|
* Rename X509FileType to X509FiletypeSteven Fackler2017-12-251-5/+5
|
* Move to associated constsSteven Fackler2017-12-251-6/+6
|
* Make Nid values associated constantsSteven Fackler2017-12-251-27/+15
|
* Impl Send + Sync for x509 stuffSteven Fackler2017-12-131-8/+8
|
* Upgrade foreign-typesSteven Fackler2017-11-261-13/+0
| | | | | foreign-types 0.3 and 0.2 now share the same types and traits, so this is backwards compatible.
* Revert "Update foreign-types to 0.3"Steven Fackler2017-11-211-0/+13
|
* Update foreign-types to 0.3Anthony Ramine2017-11-211-13/+0
|
* Convert try! usage to ?johnthagen2017-10-031-38/+38
|
* Fix X509::clone implSteven Fackler2017-07-191-1/+1
| | | | Closes #667
* RustfmtSteven Fackler2017-07-151-111/+168
|
* Add an API to install extra dataSteven Fackler2017-07-151-3/+17
|