aboutsummaryrefslogtreecommitdiff
path: root/openssl/src
Commit message (Collapse)AuthorAgeFilesLines
...
| | * | Fixes the implementation of `X509StoreContextRef::verify_cert`Bastian Köcher2018-03-072-34/+38
| | | | | | | | | | | | | | | | | | | | | | | | The certificate, the store and the certificates chain does not need to be consumed by `verify_cert` and instead are taken as references. We also call `X509_STORE_CTX_cleanup`, after the verification succeeded.
| | * | delay return until after forgetsBenjamin Fry2018-03-071-2/+4
| | | |
| | * | cleanup and add negative testBenjamin Fry2018-03-072-6/+23
| | | |
| | * | add cleanup ffi to store contextBenjamin Fry2018-03-072-3/+7
| | | |
| | * | restructure to self contained functionBenjamin Fry2018-03-072-8/+12
| | | |
| | * | Little tweaksSteven Fackler2018-03-071-4/+4
| | | |
| | * | convert to raw pass-through methodsBenjamin Fry2018-03-072-7/+23
| | | |
| | * | add comment about consuming self in verify_certBenjamin Fry2018-03-071-0/+3
| | | |
| | * | fix error checkBenjamin Fry2018-03-072-5/+4
| | | |
| | * | properly version library functionsBenjamin Fry2018-03-072-0/+8
| | | |
| | * | Fix memory mgmtBenjamin Fry2018-03-071-1/+1
| | | |
| | * | add verify_cert and store_context_builderBenjamin Fry2018-03-071-0/+17
| | |/
| * | Rename Oid to IdSteven Fackler2018-03-111-19/+19
| | |
| * | Merge pull request #862 from bkchr/sign_verifierSteven Fackler2018-03-103-1/+148
| |\ \ | | | | | | | | Adds new functions for Verifier/Signer
| | * | Switches to new type wrapper for RsaPssSaltlenBastian Köcher2018-03-102-20/+18
| | | |
| | * | Adds `RsaPssSaltlen` enum to encode the special valuesBastian Köcher2018-03-081-7/+30
| | | |
| | * | Switches to newtype wrapper for OidBastian Köcher2018-03-081-22/+27
| | | |
| | * | Adds more functions to `Verifier`/`Signer` for RSA keysBastian Köcher2018-03-071-0/+87
| | | |
| | * | Adds RSA PKCS1 PSS paddingBastian Köcher2018-03-071-0/+1
| | | |
| | * | Adds `PKeyRef::get_id` to get the OID of a keyBastian Köcher2018-03-071-0/+33
| | |/
| * | Add one more set of implsSteven Fackler2018-03-101-0/+3
| | |
| * | Impl Sync and Send for various typesSteven Fackler2018-03-094-1/+21
| |/ | | | | | | Closes #865
| * Remove the x509 module-level exampleSteven Fackler2018-03-051-33/+0
| | | | | | | | | | | | | | | | | | | | | | | | The example generated a bogus certificate that was missing a serial number, a validity range, etc. Generating a correct x509 certificate is complex enough that doing it correctly is too long to be a reasonable doc example. There's already a more complete example in the examples directory that handles things more correctly. Closes #859
* | Generic custom extension add fn return typeBenjamin Saunders2018-03-103-30/+30
| |
* | High-level API for OpenSSL 1.1.1 custom extension supportBenjamin Saunders2018-03-093-0/+207
|/
* Add SslOptions::ENABLE_MIDDLEBOX_COMPATBenjamin Saunders2018-03-031-0/+7
|
* Always include something in ErrorStack's DisplaySteven Fackler2018-02-271-0/+4
| | | | | | The error stack can be empty after a some kinds of errors (AEAD validation failure in Crypter is one example), and we don't want to display as an empty string in that case.
* Add min/max protocol version supportSteven Fackler2018-02-252-4/+133
|
* Restore error stack in cookie callbackSteven Fackler2018-02-251-7/+12
|
* Expose cookie generate/verify callback settersBenjamin Saunders2018-02-252-0/+95
|
* Merge pull request #850 from sfackler/put-errorSteven Fackler2018-02-242-16/+57
|\ | | | | Add the ability to push errors back onto the error stack.
| * Add the ability to push errors back onto the error stack.Steven Fackler2018-02-242-16/+57
| |
* | Add RFC 5705 supportSteven Fackler2018-02-232-2/+72
|/
* Actually add version stuffSteven Fackler2018-02-211-2/+16
|
* Merge pull request #840 from olehermanse/masterSteven Fackler2018-02-212-1/+92
|\ | | | | Add des_ede3_cbc cipher and more tests/examples
| * Added example/test in symm.rs for encrypting a private key with a symmetric ↵Ole Herman Schumacher Elgesem2018-02-211-0/+30
| | | | | | | | | | | | cipher Signed-off-by: Ole Herman Schumacher Elgesem <[email protected]>
| * Add des_ede3_cbc cipherOle Herman Schumacher Elgesem2018-02-151-0/+15
| | | | | | | | Signed-off-by: Ole Herman Schumacher Elgesem <[email protected]>
| * More tests for pem_pkcs1 methodsOle Herman Schumacher Elgesem2018-02-151-1/+47
| | | | | | | | Signed-off-by: Ole Herman Schumacher Elgesem <[email protected]>
* | Inline connector constantsSteven Fackler2018-02-211-17/+15
| |
* | Don't special case 1.0.1Steven Fackler2018-02-211-7/+0
| | | | | | | | It appears that 1.0.1's defaults are actually okay.
* | Update SslConnector cipher listSteven Fackler2018-02-201-6/+11
| | | | | | | | | | | | | | | | Based off of python/cpython#3532, we use OpenSSL's default cipher list and turn of things we don't like. This can't be used with 1.0.1, however, which had a poor default set. There, we use the old defaults, with the bits that aren't implemented in 1.0.1 removed (namely TLSv1.3 suites and ChaCha).
* | Add some debugging-related bindingsSteven Fackler2018-02-172-23/+88
| |
* | Add SSL_version bindingSteven Fackler2018-02-171-2/+40
| |
* | Fix session cloningSteven Fackler2018-02-171-1/+1
| |
* | Bind remove and get session callbacksSteven Fackler2018-02-162-1/+101
| |
* | SSL session callbacks have always been aroundSteven Fackler2018-02-163-12/+2
| |
* | Fix symm decrypt documentation examplenyradr2018-02-161-1/+1
| |
* | Doc tweakSteven Fackler2018-02-151-1/+1
| |
* | Add more session cache supportSteven Fackler2018-02-153-3/+148
| |
* | Tweak featuresSteven Fackler2018-02-148-42/+73
| | | | | | | | We should keep the version features totally separate for now.