Commit Graph

2633 Commits

Author SHA1 Message Date
Steven Fackler 0745d66927 Update to 1.1.1-pre7
The initial session ticket is now sent as part of SSL_accept, so some
tests need to write a single byte through the stream to make sure that
both ends have fully completed to avoid test flakes.

TLSv1.3 cipher suite control has been extracted from the normal cipher
list into a separate method: SslContextBuilder::set_ciphersuites.
2018-06-02 13:58:56 -07:00
Benjamin Cheng 88c61d252f
Ensure psk test callbacks are called 2018-06-02 15:50:24 -04:00
Benjamin Cheng 285884c925
push PSK callback errors onto ErrorStack 2018-06-02 15:49:59 -04:00
Benjamin Cheng bcc4ca0285
Change psk test cipher to PSK-AES128-CBC-SHA
Hopefully it works on CI servers now
2018-06-02 13:59:04 -04:00
Benjamin Cheng b1c77a7ea5
Use is_null() 2018-06-02 13:49:42 -04:00
Benjamin Cheng 5d8a44612d
add test for psk; deprecated set_psk_callback 2018-06-02 13:47:52 -04:00
Benjamin Cheng b1eb1224f5
Merge remote-tracking branch 'origin/master' 2018-06-02 10:56:31 -04:00
Steven Fackler 24f4bdb533
Merge pull request #940 from CmdrMoozy/rsa_padding
Add an openssl-sys binding for RSA_padding_check_PKCS1_type_2.
2018-06-01 21:16:10 -07:00
Steven Fackler 83767b861e Release openssl v0.10.9 2018-06-01 20:59:26 -07:00
Steven Fackler 52f581ffc9 Release openssl-sys v0.9.32 2018-06-01 20:57:09 -07:00
Steven Fackler a3a2605115 fix build on older rustc 2018-06-01 20:47:46 -07:00
Steven Fackler bf5772eb54 changelog 2018-06-01 20:45:19 -07:00
Steven Fackler 10b2a34529 Adjust Nid signature algorithm APIs 2018-06-01 20:36:19 -07:00
Steven Fackler c2145384a9 Fix types 2018-06-01 20:07:13 -07:00
Steven Fackler 63afe3016c
Merge pull request #942 from sfackler/fix-cms-crash
Fix use-after-free in cms
2018-06-01 19:54:26 -07:00
Steven Fackler 15cb335e66 Fix use-after-free in cms
Closes #941
2018-06-01 19:38:52 -07:00
Axel Rasmussen fb1b9b4140
Add an openssl-sys binding for RSA_padding_check_PKCS1_type_2.
This padding check implementation is useful for certain types of RSA
decryption, notably the type performed by Yubico's PIV library.
2018-05-30 18:48:42 -07:00
Steven Fackler a1cb6a7328
Merge pull request #938 from sfackler/verified-chain
Add SslRef::verified_chain
2018-05-30 07:53:35 -07:00
Steven Fackler 3456add537 Add SslRef::verified_chain 2018-05-29 21:53:22 -07:00
Steven Fackler a523219f6c
Merge pull request #929 from marcoh00/nid-names
Get Nid string representations
2018-05-28 15:02:56 -07:00
Marco Huenseler 2977f6ed30 rewrite Nid::{long_name,short_name} to return Results instead of Options 2018-05-28 12:15:05 +02:00
Marco Huenseler b8de619fbe Get Nid string representations 2018-05-28 12:13:40 +02:00
Steven Fackler 4f3d72d98c
Merge pull request #934 from sfackler/digest-algo
Add some digest support
2018-05-24 21:32:13 -07:00
Steven Fackler a774c0c5f2 Rename X509Ref::fingerprint to X509Ref::digest and avoid allocating 2018-05-24 21:07:36 -07:00
Steven Fackler 772e1c003f Add some digest support 2018-05-24 21:06:11 -07:00
Steven Fackler 58da8757f1
Merge pull request #933 from sfackler/bogus-sni
Don't panic on bogus servernames
2018-05-24 20:57:23 -07:00
Steven Fackler 3cd33cdd8b Don't panic on bogus servernames
Also add a second version of the method to avoid filtering out non-utf8
names.

Closes #930
2018-05-24 20:22:15 -07:00
Steven Fackler fe37bb7e9b
Merge pull request #932 from sfackler/get-final
Add bindings to SSL_get_finished and SSL_get_peer_finished
2018-05-24 20:14:19 -07:00
Steven Fackler c0876cc8c6 Add bindings to SSL_get_finished and SSL_get_peer_finished
These are used for the tls-unique SCRAM channel binding mode.
2018-05-24 20:00:28 -07:00
Steven Fackler c7db3d18ad
Merge pull request #920 from Ralith/max-early-data-accessors
TLS1.3 early data support
2018-05-22 20:42:46 -07:00
Benjamin Saunders 2e478fdcf4 Expose early I/O 2018-05-22 20:25:28 -07:00
Steven Fackler 677617bc0b Fix changelog 2018-05-20 21:04:34 -07:00
Steven Fackler b187eb0ee3 Release openssl v0.10.8 2018-05-20 21:03:16 -07:00
Steven Fackler 25df3c8b51 Release openssl-sys 0.9.31 2018-05-20 21:02:12 -07:00
Steven Fackler 58c273845f Fix changelog 2018-05-20 20:56:35 -07:00
Steven Fackler ac1021373c
Merge pull request #928 from sfackler/revert-927-move-prot-accessors
Revert "Move proto version accessors to SslContextRef"
2018-05-20 20:55:40 -07:00
Steven Fackler 7a7f98a32c
Revert "Move proto version accessors to SslContextRef" 2018-05-20 20:55:20 -07:00
Steven Fackler 6bc52f076e
Merge pull request #927 from sfackler/move-prot-accessors
Move proto version accessors to SslContextRef
2018-05-20 20:55:00 -07:00
Steven Fackler b976b5fd52 Move proto version accessors to SslContextRef
Add a Derf impl for SslContextBuilder so existing use still works.
2018-05-20 20:47:00 -07:00
Steven Fackler a2be3535b5 Changelog 2018-05-20 20:43:33 -07:00
Steven Fackler 41b0520416
Merge pull request #926 from sfackler/clean-errors
Improve error Display impls
2018-05-20 20:28:48 -07:00
Steven Fackler f0347fbce8 Improve error Display impls 2018-05-20 19:37:19 -07:00
Steven Fackler 83f6a24026
Merge pull request #925 from sfackler/stack-sync-send
Make Stack Sync + Send
2018-05-20 15:35:07 -07:00
Steven Fackler 3ab1cc7a8f Make Stack Sync + Send 2018-05-20 15:24:38 -07:00
Steven Fackler 9f5d750744
Merge pull request #924 from sfackler/libressl-alpn
Support ALPN on libressl
2018-05-20 12:58:28 -07:00
Steven Fackler 4c1fdf1d81 Support ALPN on libressl
Closes #690
2018-05-20 12:52:49 -07:00
Steven Fackler 440ede3b54
Merge pull request #923 from sfackler/libressl-hostname
Hostname verification support on libressl
2018-05-20 12:47:00 -07:00
Steven Fackler a6fcef01c0 Overhaul openssl cfgs
Also expose hostname verification on libressl
2018-05-20 12:33:02 -07:00
Steven Fackler 9df403043b Expose X509_VERIFY_PARAM on libressl 2018-05-20 11:29:27 -07:00
Steven Fackler 862d784161 Clean up openssl-sys cfgs 2018-05-20 11:29:27 -07:00