| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | | | Make error handling more reliable | Steven Fackler | 2015-12-10 | 1 | -5/+16 | |
| | | | | ||||||
| * | | | Replace SslStream implementation! | Steven Fackler | 2015-12-09 | 5 | -532/+139 | |
| | | | | ||||||
| * | | | Implement read and write | Steven Fackler | 2015-12-09 | 2 | -96/+142 | |
| | | | | ||||||
| * | | | IT LIVES | Steven Fackler | 2015-12-09 | 3 | -15/+144 | |
| | | | | ||||||
| * | | | Custom BIO infrastructure | Steven Fackler | 2015-12-08 | 2 | -0/+142 | |
| | | | | ||||||
| * | | | Bump openssl version for travis | Steven Fackler | 2015-12-07 | 1 | -1/+1 | |
| | |/ |/| | ||||||
| * | | Cast correctly c_char raw pointers (fixes build on ARM #314) | Ondrej Perutka | 2015-11-30 | 4 | -19/+22 | |
| | | | ||||||
| * | | Release v0.7.1 | Steven Fackler | 2015-11-28 | 2 | -5/+5 | |
| |/ | ||||||
| * | Implement try_clone for MaybeSslStream | Steven Fackler | 2015-11-20 | 1 | -0/+10 | |
| | | | | | Closes #308 | |||||
| * | Fixed a typo in a comment. | Alex Gaynor | 2015-11-19 | 1 | -1/+1 | |
| | | ||||||
| * | Fix a leak when using `EVP_PKEY_get1_RSA`. | Overmind JIANG | 2015-11-18 | 1 | -0/+1 | |
| | | | | | | | `EVP_PKEY_get1_RSA` returns a RSA structure with its reference count increased by 1 and therefore we need to call `RSA_free` after finishing using that value. | |||||
| * | Release v0.7.0 | Steven Fackler | 2015-11-16 | 2 | -5/+5 | |
| | | ||||||
| * | Remove deprecated X509 methods | Steven Fackler | 2015-11-16 | 1 | -37/+4 | |
| | | ||||||
| * | Move HMAC_CTX_copy to sys-extras | Steven Fackler | 2015-11-16 | 1 | -1/+1 | |
| | | ||||||
| * | Split stuff requiring a shim out to a separate crate | Steven Fackler | 2015-11-16 | 6 | -63/+67 | |
| | | ||||||
| * | Bump ws2_32-sys version | Steven Fackler | 2015-11-16 | 1 | -1/+1 | |
| | | ||||||
| * | Switch to libc 0.2 | Steven Fackler | 2015-11-16 | 2 | -30/+17 | |
| | | ||||||
| * | Move SSL methods to Ssl object, add getter | Steven Fackler | 2015-11-16 | 2 | -124/+66 | |
| | | ||||||
| * | Fix feature gated sslv3 | Steven Fackler | 2015-11-16 | 1 | -0/+1 | |
| | | ||||||
| * | Revert "Revert "Merge pull request #280 from ltratt/libressl_build"" | Steven Fackler | 2015-11-16 | 2 | -4/+3 | |
| | | | | | This reverts commit ae3d0e36d71bb121c2fc1a75b3bc6d97f0e61480. | |||||
| * | Revert "Use AsRef for backwards compatibility with passing IV as Vec" | Steven Fackler | 2015-11-16 | 1 | -5/+4 | |
| | | | | | This reverts commit d2d20a83778b7c363322997332bf1ff5deef92d5. | |||||
| * | Merge pull request #300 from thommay/pkey_private_encrypt | Steven Fackler | 2015-11-16 | 1 | -12/+115 | |
| |\ | | | | | Provide public_decrypt, private_encrypt for PKEY | |||||
| | * | Provide public_decrypt, private_encrypt for PKEY | Thom May | 2015-10-28 | 1 | -12/+115 | |
| | | | ||||||
| * | | Travis without sudo | Steven Fackler | 2015-11-08 | 1 | -3/+2 | |
| |/ | ||||||
| * | Better debug impls | Steven Fackler | 2015-10-26 | 1 | -3/+7 | |
| | | ||||||
| * | Get nonblocking tests working on OSX/Windows | Alex Crichton | 2015-10-22 | 3 | -122/+190 | |
| | | ||||||
| * | Nonblocking streams support. | Jamie Turner | 2015-10-20 | 4 | -2/+406 | |
| | | ||||||
| * | Release v0.6.7 | Steven Fackler | 2015-10-14 | 2 | -4/+4 | |
| | | ||||||
| * | Revert "Merge pull request #280 from ltratt/libressl_build" | Steven Fackler | 2015-10-14 | 2 | -3/+4 | |
| | | | | | | This reverts commit aad933e5077b2c73e1f05d7314e442531a562bcf, reversing changes made to 60ee731408facdc8e3dfc000fdee2f1291fad664. | |||||
| * | Merge pull request #286 from jedisct1/use_certificate_chain | Steven Fackler | 2015-10-13 | 1 | -0/+10 | |
| |\ | | | | | Add set_certificate_chain_file() | |||||
| | * | Add set_certificate_chain_file() | Frank Denis | 2015-10-12 | 1 | -0/+10 | |
| | | | | | | | | | | | | | | | | | SSL_CTX_use_certificate_chain_file() is preferred over SSL_CTX_use_certificate_file(). It allows the use of complete certificate chains instead of loading only the first certificate in a PEM file. | |||||
| * | | Merge pull request #284 from bheart/cfb-mode | Steven Fackler | 2015-10-12 | 2 | -1/+80 | |
| |\ \ | |/ |/| | AES CFB-mode feature | |||||
| | * | AES CFB{1,8,128} mode support | Will Tange | 2015-10-11 | 2 | -1/+80 | |
| | | | ||||||
| * | | Merge pull request #280 from ltratt/libressl_build | Steven Fackler | 2015-10-10 | 2 | -4/+3 | |
| |\ \ | | | | | | | Fix build on LibreSSL. | |||||
| | * | | Fix build on LibreSSL. | Laurence Tratt | 2015-10-03 | 2 | -4/+3 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | LibreSSL has deprecated SSLv3_method, so this commit makes that a compile-time feature. It also removes a test referencing SSL_OP_CISCO_ANYCONNECT, as the LibreSSL header says it is amongst "Obsolete flags kept for compatibility. No sane code should use them." | |||||
| * | | | Merge pull request #277 from nixpulvis/read_public_pem | Steven Fackler | 2015-10-10 | 2 | -0/+35 | |
| |\ \ \ | |_|/ |/| | | Add public key PEM read function. | |||||
| | * | | Add public key PEM read function. | Nathan Lilienthal | 2015-10-01 | 2 | -0/+35 | |
| | | | | ||||||
| * | | | Release v0.6.6 | Steven Fackler | 2015-10-05 | 2 | -4/+4 | |
| | |/ |/| | ||||||
| * | | Update documentation about SSLv23 | John Downey | 2015-10-02 | 1 | -1/+2 | |
| |/ | | | | | | | In OpenSSL world, the SSLv23 option is a poorly name method that will negotiate what version of TLS or SSL to use. It starts with the best version the library supports and then precedes to keep trying all the way down to SSL 2.0. | |||||
| * | Add an ecdh_auto description | Frank Denis | 2015-09-25 | 1 | -0/+4 | |
| | | ||||||
| * | Add SSL::set_ecdh_auto() | Frank Denis | 2015-09-25 | 2 | -0/+9 | |
| | | | | | | This sets automatic curve selection and enables ECDH support. Requires LibreSSL or OpenSSL >= 1.0.2, so behind a feature gate. | |||||
| * | Enable testing on Windows via AppVeyor | Alex Crichton | 2015-09-22 | 4 | -81/+165 | |
| | | | | | | | | This abolishes the test.sh script which spawns a bunch of `openssl` instances to instead run/manage the binary in-process (providing more isolation to boot). The tests have been updated accordingly and the `connected_socket` dependency was also dropped in favor of `net2` as it the former doesn't work on Windows. | |||||
| * | Merge pull request #266 from jmesmon/alpn | Steven Fackler | 2015-09-16 | 2 | -5/+51 | |
| |\ | | | | | ssl/npn+alpn: adjust protocol selection to fail if no protocols match | |||||
| | * | ssl/alpn: test mismatch between protocols resulting in None | Cody P Schafer | 2015-09-16 | 1 | -0/+43 | |
| | | | ||||||
| | * | ssl/npn+alpn: adjust protocol selection to fail if no protocols match | Cody P Schafer | 2015-09-01 | 1 | -2/+5 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The current behavior causes a server written using rust-openssl to (if it cannot negotiate a protocol) fallback to the first protocol it has avaliable. This makes it impossible to detect protocol mismatches. This updates our selection to be more similar to how openssl's s_server behaves: non-matching protocols are not supplied with a fallback. Note that some setups may actually want a fallback protocol supplied via ALPN. To support those cases, we should consider adding a generic callback that allows protocol selection to be entirely controlled by the programmer. For the purposes of having a sane default, however, not supplying a default (and mimicing s_server's behavior) is the best choice. | |||||
| | * | openssl/ssl: fix some of the comment text where I missed replacing NPN with ALPN | Cody P Schafer | 2015-09-01 | 1 | -3/+3 | |
| | | | ||||||
| * | | Merge pull request #261 from jedisct1/try_ssl_null | Steven Fackler | 2015-09-16 | 2 | -28/+7 | |
| |\ \ | | | | | | | Use try_ssl_null!() when relevant | |||||
| | * | | Use try_ssl_null!() when relevant | Frank Denis | 2015-09-13 | 2 | -28/+7 | |
| | | | | ||||||
| * | | | Add DH::from_pem() to load DH parameters from a file | Frank Denis | 2015-09-13 | 2 | -1/+35 | |
| |/ / | ||||||
| * | | Merge pull request #270 from mvdnes/crypto_segv | Steven Fackler | 2015-09-11 | 1 | -7/+67 | |
| |\ \ | | | | | | | Check if public/private RSA key is properly loaded | |||||