aboutsummaryrefslogtreecommitdiff
path: root/openssl/src
Commit message (Collapse)AuthorAgeFilesLines
...
* Fix signature of EVP_DigestVerifyFinal on 1.0.1Steven Fackler2016-10-151-1/+1
|
* Support HMAC PKeys and remove hmac moduleSteven Fackler2016-10-154-567/+87
|
* Remove old RSA sign and verify methodsSteven Fackler2016-10-152-87/+1
|
* Signature and verification supportSteven Fackler2016-10-152-5/+207
|
* Merge pull request #471 from sfackler/no-compSteven Fackler2016-10-141-0/+10
|\ | | | | Handle OPENSSL_NO_COMP
| * Handle OPENSSL_NO_COMPSteven Fackler2016-10-141-0/+10
| | | | | | | | Closes #459
* | Fix test_alpn_server_select_noneSteven Fackler2016-10-142-54/+88
|/ | | | | | | | | | | | In OpenSSL 1.1, a failure to negotiate a protocol is a fatal error, so fork that test. This also popped up an issue where we assumed all errors had library, function, and reason strings which is not necessarily the case. While we're in here, adjust the Display impl to match what OpenSSL prints out. Closes #465
* Enable hostname verification on 1.0.2Steven Fackler2016-10-144-8/+9
|
* Support hostname verificationSteven Fackler2016-10-144-0/+100
| | | | Closes #206
* Remove link_name usageSteven Fackler2016-10-141-3/+8
|
* Ignore DTLS tests on Windows/ARM for nowAlex Crichton2016-10-141-1/+4
| | | | cc #467
* CleanupSteven Fackler2016-10-131-2/+0
|
* Use stdlib logic for udpSteven Fackler2016-10-132-41/+2
|
* Fix windows for realSteven Fackler2016-10-131-1/+2
|
* Disable npn tests on < 1.0.2Steven Fackler2016-10-131-0/+2
| | | | s_client doesn't seem to support the required flag before then.
* Fix tests on windowsSteven Fackler2016-10-131-5/+6
|
* Reenable dtls testsSteven Fackler2016-10-131-26/+6
|
* Clean up featuresSteven Fackler2016-10-134-57/+21
|
* Flag off dtls and mask ssl_opsSteven Fackler2016-10-131-13/+3
| | | | Also un-feature gate npn as it ships with 1.0.1
* Ignore a test on OpenSSL 1.1.0Alex Crichton2016-10-121-0/+3
|
* Add remaining SSL_OP constantsSteven Fackler2016-10-121-0/+5
|
* Add support for OpenSSL 1.1.0Alex Crichton2016-10-1221-548/+939
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit is relatively major refactoring of the `openssl-sys` crate as well as the `openssl` crate itself. The end goal here was to support OpenSSL 1.1.0, and lots of other various tweaks happened along the way. The major new features are: * OpenSSL 1.1.0 is supported * OpenSSL 0.9.8 is no longer supported (aka all OSX users by default) * All FFI bindings are verified with the `ctest` crate (same way as the `libc` crate) * CI matrixes are vastly expanded to include 32/64 of all platforms, more OpenSSL version coverage, as well as ARM coverage on Linux * The `c_helpers` module is completely removed along with the `gcc` dependency. * The `openssl-sys` build script was completely rewritten * Now uses `OPENSSL_DIR` to find the installation, not include/lib env vars. * Better error messages for mismatched versions. * Better error messages for failing to find OpenSSL on a platform (more can be done here) * Probing of OpenSSL build-time configuration to inform the API of the `*-sys` crate. * Many Cargo features have been removed as they're now enabled by default. As this is a breaking change to both the `openssl` and `openssl-sys` crates this will necessitate a major version bump of both. There's still a few more API questions remaining but let's hash that out on a PR! Closes #452
* Rename NoPadding to NoneSteven Fackler2016-10-071-5/+5
|
* Rename EncryptionPadding to PaddingSteven Fackler2016-10-071-17/+17
|
* Removed max_size; removed all encrypt/decrypt methods except private/public ↵Andrei Oprisan2016-10-071-69/+26
| | | | encrypt/decrypt which take the padding
* added try_ssl_size, which handles -1 as error and returns the value ↵Andrei Oprisan2016-10-052-0/+217
| | | | | | | | otherwise; added RSA private_decrypt and public encrypt lift_ssl_size Added public/private encrypt/decrypt to RSA from the original commit + tests; added try_ssl_returns_size macro to check for -1 in case of SSL functions which return size
* Make sure private component exists when signingSteven Fackler2016-09-291-0/+1
| | | | Closes #457
* Release v0.8.3Steven Fackler2016-09-091-1/+1
|
* Fix password callback on ARMSteven Fackler2016-09-081-1/+1
| | | Closes #449
* Implement Clone for openssl::error::ErrorStackNovotnik, Petr2016-09-011-1/+2
|
* Release openssl-sys v0.7.17, openssl v0.8.2Steven Fackler2016-08-181-1/+1
|
* Fix SslContext::add_extra_chain_certSteven Fackler2016-08-173-3/+27
| | | | | | | | | SSL_CTX_add_extra_chain_cert assumes ownership of the certificate, so the method really needs to take an X509 by value. Work around this by manually cloning the cert. This method has been around for over a year but I'm guessing nobody actually used it since it produces a nice double free into segfault!
* Ignore flickering test on windowsSteven Fackler2016-08-161-0/+1
|
* Get rid of use Asn1TimeRef warning for some buildsDavid Weinstein2016-08-171-1/+4
|
* Be explicit regarding Asn1TimeRef lifetimesDavid Weinstein2016-08-171-2/+2
|
* Fix docsDavid Weinstein2016-08-171-2/+2
|
* Add x509_validity feature to travis testsDavid Weinstein2016-08-171-2/+4
| | | | - also update docs for new x509 `not_before`, `not_after`
* Add test for `"x509_validity"` featureDavid Weinstein2016-08-171-0/+12
|
* Add `"x509_expiry"` feature flagDavid Weinstein2016-08-173-3/+7
| | | | | - fix return of `ASN1_TIME_print` - assert on null `date`
* Introduce `Asn1TimeRef`David Weinstein2016-08-172-15/+35
|
* Progress on asn1 expiryDavid Weinstein2016-08-175-1/+45
| | | | | | - Use MemBio and implement `Display` for Asn1Time - Tweak doc for asn1 `not_before`, `not_after`
* Release openssl-sys v0.7.16, openssl v0.8.1Steven Fackler2016-08-151-1/+1
|
* Add a little comment to sketchy transmuteSteven Fackler2016-08-151-0/+1
|
* Docs for pkcs12Steven Fackler2016-08-141-0/+2
|
* Fix memory leak in general name stackSteven Fackler2016-08-141-2/+13
|
* PKCS #12 supportSteven Fackler2016-08-143-9/+72
|
* More test fixesSteven Fackler2016-08-141-1/+1
|
* Fix testsSteven Fackler2016-08-141-9/+9
|
* Start on PKCS #12 supportSteven Fackler2016-08-144-5/+45
|
* Mangle c helper functionsSteven Fackler2016-08-136-33/+33
| | | | | | | We want to make sure that multiple openssl versions can coexist in the same dependency tree. Closes #438