Commit Graph

1420 Commits

Author SHA1 Message Date
Steven Fackler 2fe7462aa9
Fix link
Closes #1201
2019-12-12 07:25:29 -05:00
Nathan Froyd 6202626629
fix a typo in the description of `Asn1Time` 2019-12-09 16:23:27 -05:00
oberien 9f4c489588 Use d2i_PKCS8_PRIV_KEY_INFO instead of *_bio 2019-12-04 02:02:33 +01:00
oberien fc529b6c81 Pkey::private_key_from_pkcs8 free p8inf 2019-12-03 03:05:05 +01:00
oberien a7fa260331 Support for PKCS#8 unencrypted private key deserialization 2019-12-01 03:02:01 +01:00
Steven Fackler 454cb6f9bc
Merge pull request #1192 from fengyc/master
Add EVP_md_null() and MessageDigest::md_null()
2019-11-23 10:17:07 -05:00
Yingcai Feng 395142f7cf
Update openssl/src/hash.rs
Rename MessageDigest::md_null to MessageDigest::null

Co-Authored-By: Steven Fackler <sfackler@gmail.com>
2019-11-23 22:46:32 +08:00
Steven Fackler 2034331e0e Release openssl v0.10.26 2019-11-22 15:35:03 -08:00
Steven Fackler a5c757f164 Release openssl-sys v0.9.53 2019-11-22 15:29:03 -08:00
Steven Fackler 605003eec8 Fix up base64 docs 2019-11-22 15:22:47 -08:00
fengyingcai 288b189de0 Add EVP_md_null() and MessageDigest::md_null() 2019-11-22 16:33:15 +08:00
Steven Fackler 18552f1f1d Cleanup 2019-11-21 17:10:34 -08:00
Steven Fackler b5eafedf17
Merge pull request #1191 from sfackler/fix-seal
Fix IV handling in envelope
2019-11-21 20:09:21 -05:00
Steven Fackler 56335d12fc
Merge pull request #1183 from adamreichold/base64
Expose OpenSSL interfaces for base64 coding.
2019-11-21 20:04:18 -05:00
Steven Fackler f85d631fcf
Merge pull request #1184 from Atul9/cargo-fmt
Format code using 'cargo fmt'
2019-11-21 20:01:39 -05:00
Steven Fackler ca5474683a Fix IV handling in envelope
Closes #1190
2019-11-21 16:59:44 -08:00
Steven Fackler 0fb1e55a98 Allow configuration of EC groups and signature algorithms
Closes #1186
2019-11-16 10:54:27 -08:00
Atul Bhosale 784978bad0
Format code using 'cargo fmt' 2019-11-14 21:00:53 +05:30
Adam Reichold 86db2315d4 Avoid initialization overhead for base64 coding 2019-11-14 10:09:44 +01:00
Adam Reichold bcbebbcace Expose EVP_{Encode,Decode}Block interfaces for base64 coding 2019-11-14 10:06:24 +01:00
Steven Fackler 34c2b69118
Merge pull request #1180 from PrismaPhonic/master
Added clonability for sha hash state.  Useful for incremental hashing
2019-11-11 21:01:19 -05:00
Peter Farr 5991f425fa Added unit test to test that new cloning feature works as intended 2019-11-11 16:40:05 -08:00
Peter Farr 8fae1115a4 Changed all sha objects to be clonable per PR review suggestion. 2019-11-11 16:31:47 -08:00
Lukas Lihotzki 258c49a581 Add #[cfg(ossl110)] 2019-11-11 23:03:40 +01:00
Lukas Lihotzki 6d6429237d Add EC_GROUP_order_bits 2019-11-11 22:04:14 +01:00
Peter Farr 22f029064a Added clonability for sha hash state. Useful for incremental hashing 2019-11-11 11:09:49 -08:00
Brian Olsen 80e0dd03ba
Add method to create Asn1Time from time_t value
This is mostly just a rework of the earlier work done by @illegalprime
in his PR #673 and credit should go to him.
2019-10-13 23:10:16 +02:00
Brian Olsen 14a6a98ebf
Add diff method and comparisons to Asn1TimeRef
This implements a `diff` method on `Asn1TimeRef` using `ASN1_TIME_diff`
and uses this new method to implement combinations of `PartialEq` and
`PartialOrd` for `Asn1Time` and `Asn1TimeRef`.

This is mostly just a rework of the earlier work done by @illegalprime
in his PR #673 and credit should go to him.
2019-10-13 23:09:12 +02:00
Matt Vertescher b771738a3a Fix rustc warnings
- Use `..=` for inclusive ranges
- Add the `dyn` keyword for trait objects
- Switch from `ONCE_INIT` to `std::sync::Once::new()`
2019-10-08 08:35:35 -04:00
Steven Fackler bb3e0f474b Release openssl v0.10.25 2019-10-02 17:52:36 -07:00
Steven Fackler 02c3262be8 Release openssl-sys v0.9.50 2019-10-02 17:46:57 -07:00
Steven Fackler 7ce0835b74 Implement Clone for PKey 2019-10-01 18:45:10 -07:00
Steven Fackler 79d6d1ff2b
Merge pull request #1153 from sturmsebastian/eddsa
Added support for Ed25519 and Ed448 signatures
2019-09-08 20:49:41 -04:00
Sebastian Sturm cf9978bc0e Ensure Signer::len has documentation
Applied conditional compilation to internal helpers
2019-09-08 14:45:06 +02:00
Steven Fackler 9780fd6ba2
Merge pull request #1152 from thomaswhiteway/ecdsa_sig_set0_leak
Free r and s on ECDSA_SIG before overwriting them in ECDSA_SIG_set0
2019-09-06 09:20:33 -04:00
Thomas Whiteway 106d613805 Free r and s on ECDSA_SIG before overwriting them in ECDSA_SIG_set0 2019-09-06 10:52:15 +01:00
Sebastian Sturm bdede43afe Added support for Ed25519 and Ed448 signatures 2019-08-16 11:15:04 +02:00
Steven Fackler 8b2c370b86 Release openssl-sys v0.9.49 2019-08-15 22:19:46 -04:00
Steven Fackler dbe0672dc4 Release openssl v0.10.24 2019-07-19 07:45:32 -07:00
Steven Fackler 45c83e2772 Release openssl-sys v0.9.48 2019-07-19 07:30:11 -07:00
Steven Fackler 8d2e9e783d Hack around an unpatched OpenSSL issue
Why backport fixes to your LTS version? Seems like a lot of work, I
guess!

Closes #1133
2019-07-18 22:44:02 -04:00
Leo d598f156a7 Add AES-192 tests in CTR, CFB, and OFB modes 2019-07-07 11:07:20 +08:00
Leo 88c5bd81c7 Add AES-192 and OFB mode 2019-07-06 17:11:37 +08:00
Leo a02a962f7d Expose pem serialize function for DSA private key
Expose private_key_to_pem() & private_key_to_pem_passphrase() for DsaRef
2019-06-30 23:35:50 +08:00
Steven Fackler 850e93ee85 Don't depend on NO_SSL_MASK 2019-06-28 20:07:22 -07:00
Steven Fackler d3104955dd Minimize test duplication 2019-06-28 19:51:52 -07:00
Steven Fackler 1b3e0c8a15 Add mozilla v5 configurations
Closes #1134
2019-06-28 19:42:29 -07:00
Mike Belopuhov aef0517dcf Expose EC_POINT_dup as EcPoint::to_owned 2019-06-19 21:34:48 +02:00
Mike Belopuhov e8fc907da3 Expose EC_GROUP_get_cofactor as EcGroup::cofactor 2019-06-14 16:41:47 +02:00
Mike Belopuhov 390d71f1e5 Expose EC_GROUP_get0_generator as EcGroup::generator 2019-06-13 03:09:45 +02:00
Daniel Abramov fab6ea4727 Conditionally compile PEM functions for CMS
Apparently libressl does not quite support all CMS functions (well, at
least the bindings for CMS are currently compile-time guarded), so CI
checks inside the systest fail during the verification on libressl.
This is an attempt to fix it.
2019-06-12 16:48:16 +02:00
Daniel Abramov ed966a09ac Extend CMS unit tests (pem/der conversions) 2019-06-12 10:36:44 +02:00
Daniel Abramov 69ee79d435 Fix formatting in cms `to_der` implementation 2019-06-12 10:24:53 +02:00
Daniel Abramov 124c05d058 Add `CmsContentInfo` <-> PEM bindings 2019-06-12 10:23:48 +02:00
Leo d2e48e8d1f Add Debug impl for EcKey 2019-06-10 21:57:10 +08:00
Russell Greene 1c3f5b5f57 Address comments 2019-06-07 19:32:36 -06:00
Russell Greene b9341856b1 Add AES_wrap_key and AES_unwrap_key functionality 2019-06-05 21:03:34 -06:00
Simon Génier e3ac3f40bf Display for Error was incorrectly showing func instead of reason. 2019-05-30 15:06:14 -04:00
Steven Fackler 3b064fdb02 Release openssl v0.10.23 2019-05-18 12:13:39 -07:00
Steven Fackler b6d968b378 Release openssl-sys v0.9.47 2019-05-18 12:10:57 -07:00
Steven Fackler b39a712076 Fix handling of session callbacks
The session context is used for session callbacks rather than the normal
context, which breaks state lookup when the context has been swapped out
(e.g. for SNI). Since there isn't an accessor for the session context,
we just store an extra reference in the SSL's ex data.

Closes #1115
2019-05-18 10:27:40 -07:00
Andy Caldwell 2e37753790
Const-correctness 2019-05-13 19:11:15 +01:00
Andy Caldwell 41fea135ad
Allow passing by non-owned reference 2019-05-13 18:49:09 +01:00
Andy Caldwell 628c3b338a
Add SSL_CTX_add_client_CA on OpenSSL 2019-05-13 15:08:02 +01:00
Steven Fackler 6686092edf Release openssl v0.10.22 2019-05-08 18:46:43 -07:00
Steven Fackler a9b9f818a1
Merge pull request #1097 from vishwin/master
Support LibreSSL 2.9.1
2019-05-08 18:40:18 -07:00
Steven Fackler 801a236413 Ignore SRTP tests on libressl 2.9.1
SRTP is broken in that release!
2019-05-08 18:19:42 -07:00
Steven Fackler d2b169dae6 Fix doc link bugs 2019-05-03 07:32:05 -07:00
Steven Fackler 3331908a1d Release openssl v0.10.21 2019-04-30 21:59:02 -07:00
Nathaniel McCallum 7ad3208937 Fix output size check for stream ciphers
The previous output size check presumed a block cipher. Therefore, it
enforced an unnecessary extra byte in the case of stream ciphers. This
patch ensures that our size checks don't force the caller to
overallocate for stream ciphers.
2019-04-29 17:45:12 -04:00
Steven Fackler 4121ac34cb Fix deprecation warnings in tests 2019-04-25 10:03:13 -07:00
Charlie Li d79090a00a Reconcile exdata and version functions between libraries/versions. 2019-04-24 23:15:56 -04:00
Charlie Li 98f91769e3 Add missing any() in the {,D}TLS_method usage logic. 2019-04-24 19:29:01 -04:00
Charlie Li f0b8a2e467 Support LibreSSL 2.9.1
LibreSSL 2.9.1 added generic DTLS methods.

While here, bump CircleCI.
2019-04-24 16:08:42 -04:00
Steven Fackler 2024379f17 Clean up seal/open a bit 2019-04-23 20:21:43 -07:00
Vojtěch Pejša f40a328d43 Remove unnecessary version req and clean up param names. 2019-04-18 10:47:50 +02:00
Vojtěch Pejša 1b5293a977 Address comments. 2019-04-17 20:11:14 +02:00
Vojtěch Pejša bbff79636f Remove nested groups in use. 2019-04-15 13:59:29 +02:00
Vojtěch Pejša 63c7bda0c2 Add minimum ossl version. 2019-04-15 13:41:54 +02:00
Vojtěch Pejša 08879ed512 Add EVP_Seal and EVP_Open 2019-04-15 00:54:49 +02:00
Steven Fackler 0b1c2a1048 Cleanup ssl tests 2019-03-20 19:34:50 -07:00
Steven Fackler 576de0eaa2 Release openssl v0.10.20 2019-03-20 10:45:10 -04:00
Nathaniel McCallum 702bc48b1c Expose EC_GROUP_get_curve_name()
This gives us the ability to get the Nid from an EcGroupRef.
2019-03-19 11:10:35 -04:00
Nathaniel McCallum d9cb5433b1 Expose EVP_MD_type()
This gives us the ability to get the Nid from a MessageDigest.
2019-03-19 11:10:35 -04:00
Steven Fackler c3e2604702 Implement Eq for MessageDigest
Closes #1081
2019-03-17 14:33:56 -04:00
Steven Fackler 2a028e59e4 Move CHANGELOG.md into openssl 2019-03-14 12:04:01 -07:00
Alexey Galakhov a0e5b31799 X.509: add verify methods 2019-03-11 22:35:43 +01:00
tgbit 546eb4d391 CMS: add encrypt, from_der 2019-03-02 00:33:52 +01:00
Steven Fackler 4436245ab8 Release openssl v0.10.19 2019-03-01 12:40:21 -08:00
Steven Fackler 0dd632456f Release openssl-sys v0.9.42 2019-03-01 12:38:18 -08:00
Steven Fackler 404670691c Use into for infallible conversions 2019-03-01 12:36:01 -08:00
Steven Fackler 404b7f1790 Add session cache size accessors 2019-03-01 10:07:51 -08:00
Steven Fackler a16482f972 Add session info accessors 2019-02-28 22:08:48 -08:00
Steven Fackler 913267e68a Add SslCtx::{add,remove}_session 2019-02-28 19:48:10 -08:00
Edouard Oger 55fee497bb Implement Clone for Dsa 2019-02-28 14:10:49 -05:00
Steven Fackler e088d1d856 Release openssl v0.10.18 2019-02-22 12:34:11 -07:00
Steven Fackler 58ccea26ad Fix cipher_name return value 2019-02-22 12:33:41 -07:00
Steven Fackler 28c0af386f Release openssl v0.10.17 2019-02-22 10:51:35 -07:00
Steven Fackler 4c6af10cbd Release openssl-sys v0.9.41 2019-02-22 10:50:16 -07:00
Steven Fackler 70afbb8393 Add standard ciphername support 2019-02-22 10:33:12 -07:00