aboutsummaryrefslogtreecommitdiff
path: root/openssl/src/x509
Commit message (Collapse)AuthorAgeFilesLines
* Drop rustc-serialize dependencySteven Fackler2016-11-091-2/+2
|
* Support client CA advertisementSteven Fackler2016-11-061-0/+17
|
* Return a Stack in Pkcs12Steven Fackler2016-11-051-0/+6
|
* RustfmtSteven Fackler2016-11-051-3/+2
|
* Get rid of RefSteven Fackler2016-11-041-39/+39
| | | | | There's unfortunately a rustdoc bug that causes all methods implemented for any Ref<T> to be inlined in the deref methods section :(
* Remove an enumSteven Fackler2016-11-031-6/+10
|
* Avoid lhash weirdnessSteven Fackler2016-11-031-8/+8
|
* Cleanup X509StoreContext::chainSteven Fackler2016-11-011-15/+6
|
* Implement X509StoreContextRef::get_chainLionel Flandrin2016-11-011-0/+26
|
* Replace GeneralNames by the new Stack APILionel Flandrin2016-11-012-132/+19
|
* Clean up x509 name entriesSteven Fackler2016-10-312-53/+52
|
* Update x509Steven Fackler2016-10-311-93/+30
|
* Update PKeySteven Fackler2016-10-311-4/+4
|
* Convert Asn1TimeSteven Fackler2016-10-311-5/+5
|
* RustfmtSteven Fackler2016-10-302-27/+13
|
* Use PKeyRef in X509GeneratorSteven Fackler2016-10-291-3/+3
|
* Move docsSteven Fackler2016-10-291-0/+4
|
* Fix reexportSteven Fackler2016-10-292-1/+2
|
* Implement client and server connectorsSteven Fackler2016-10-291-4/+25
|
* Make verification unconditionally exposed internallySteven Fackler2016-10-282-55/+4
|
* Move SslString to a shared locationSteven Fackler2016-10-261-39/+3
|
* Fix testsSteven Fackler2016-10-222-6/+6
|
* Use constants rather than constructors for NidSteven Fackler2016-10-222-16/+16
|
* Camel case RsaSteven Fackler2016-10-221-2/+2
|
* De-enumify NidSteven Fackler2016-10-223-17/+17
|
* Flatten crypto moduleSteven Fackler2016-10-222-6/+6
|
* Fix X509StoreContextSteven Fackler2016-10-211-11/+12
|
* Update BigNumRefSteven Fackler2016-10-211-1/+0
|
* Convert X509VerifyParamRefSteven Fackler2016-10-211-6/+11
|
* Update Asn1TimeRefSteven Fackler2016-10-211-2/+2
|
* Convert X509RefSteven Fackler2016-10-211-21/+23
|
* Switch X509Name over to new borrow setupSteven Fackler2016-10-201-8/+19
| | | | | | The use of actual references enables us to be correct with respect to mutability without needing two structs for the mutable and immutable cases and more deref impls.
* Allow the X509 verify error to be read from an SslRefSteven Fackler2016-10-181-17/+18
|
* De-enumify X509ValidationErrorSteven Fackler2016-10-181-83/+60
| | | | | | Also make it an Error. Closes #352.
* Drop lifetime on GeneralNamesSteven Fackler2016-10-181-10/+7
|
* Implement new feature setupSteven Fackler2016-10-172-2/+7
| | | | | | | | The basic idea here is that there is a feature for each supported OpenSSL version. Enabling multiple features represents support for multiple OpenSSL versions, but it's then up to you to check which version you link against (probably by depending on openssl-sys and making a build script similar to what openssl does).
* Fix missing importSteven Fackler2016-10-161-0/+1
|
* Finish error overhaulSteven Fackler2016-10-162-70/+58
|
* De-enumify message digestsSteven Fackler2016-10-152-16/+13
|
* Enable hostname verification on 1.0.2Steven Fackler2016-10-142-1/+2
|
* Support hostname verificationSteven Fackler2016-10-142-0/+44
| | | | Closes #206
* Add support for OpenSSL 1.1.0Alex Crichton2016-10-122-31/+103
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit is relatively major refactoring of the `openssl-sys` crate as well as the `openssl` crate itself. The end goal here was to support OpenSSL 1.1.0, and lots of other various tweaks happened along the way. The major new features are: * OpenSSL 1.1.0 is supported * OpenSSL 0.9.8 is no longer supported (aka all OSX users by default) * All FFI bindings are verified with the `ctest` crate (same way as the `libc` crate) * CI matrixes are vastly expanded to include 32/64 of all platforms, more OpenSSL version coverage, as well as ARM coverage on Linux * The `c_helpers` module is completely removed along with the `gcc` dependency. * The `openssl-sys` build script was completely rewritten * Now uses `OPENSSL_DIR` to find the installation, not include/lib env vars. * Better error messages for mismatched versions. * Better error messages for failing to find OpenSSL on a platform (more can be done here) * Probing of OpenSSL build-time configuration to inform the API of the `*-sys` crate. * Many Cargo features have been removed as they're now enabled by default. As this is a breaking change to both the `openssl` and `openssl-sys` crates this will necessitate a major version bump of both. There's still a few more API questions remaining but let's hash that out on a PR! Closes #452
* Fix SslContext::add_extra_chain_certSteven Fackler2016-08-171-0/+11
| | | | | | | | | SSL_CTX_add_extra_chain_cert assumes ownership of the certificate, so the method really needs to take an X509 by value. Work around this by manually cloning the cert. This method has been around for over a year but I'm guessing nobody actually used it since it produces a nice double free into segfault!
* Get rid of use Asn1TimeRef warning for some buildsDavid Weinstein2016-08-171-1/+4
|
* Be explicit regarding Asn1TimeRef lifetimesDavid Weinstein2016-08-171-2/+2
|
* Fix docsDavid Weinstein2016-08-171-2/+2
|
* Add x509_validity feature to travis testsDavid Weinstein2016-08-171-2/+4
| | | | - also update docs for new x509 `not_before`, `not_after`
* Add test for `"x509_validity"` featureDavid Weinstein2016-08-171-0/+12
|
* Add `"x509_expiry"` feature flagDavid Weinstein2016-08-171-0/+4
| | | | | - fix return of `ASN1_TIME_print` - assert on null `date`
* Introduce `Asn1TimeRef`David Weinstein2016-08-171-7/+7
|