917236c108
Bump to openssl 1.1.1-pre8
2018-06-28 10:40:50 -07:00
4c1891cc10
Merge pull request #950 from WanzenBug/master
...
Add access to private/public components of DSA key pairs.
2018-06-23 23:53:09 -04:00
339d09fbf3
Simplify DSA from private components
2018-06-23 18:16:32 +02:00
19430b114e
Merge pull request #952 from rumpelsepp/patch-1
...
Fix build with openssl 1.1.1 and no-psk
2018-06-21 13:41:06 -07:00
321c076ab3
Fix build with openssl 1.1.1 and no-psk
...
I used this as build flags for openssl 1.1.1:
```
/usr/bin/perl ./Configure linux-x86_64 no-shared no-zlib no-psk no-srp no-weak-ssl-ciphers no-idea
```
rust-openssl crashed with this error:
```
Compiling openssl v0.10.10
error[E0433]: failed to resolve. Use of undeclared type or module `CStr`
--> /home/stefan/.cargo/registry/src/github.com-1ecc6299db9ec823/openssl-0.10.10/src/ssl/callbacks.rs:386:16
|
386 | let line = CStr::from_ptr(line).to_bytes();
| ^^^^ Use of undeclared type or module `CStr`
error[E0412]: cannot find type `c_char` in this scope
--> /home/stefan/.cargo/registry/src/github.com-1ecc6299db9ec823/openssl-0.10.10/src/ssl/callbacks.rs:377:75
|
377 | pub unsafe extern "C" fn raw_keylog<F>(ssl: *const ffi::SSL, line: *const c_char)
| ^^^^^^ did you mean `c_uchar`?
help: possible candidates are found in other modules, you can import them into scope
|
1 | use libc::c_char;
|
1 | use std::os::raw::c_char;
|
error: aborting due to 2 previous errors
Some errors occurred: E0412, E0433.
For more information about an error, try `rustc --explain E0412`.
error: Could not compile `openssl`.
warning: build failed, waiting for other jobs to finish...
```
this patch fixes the problem
2018-06-21 22:19:29 +02:00
c624427e31
Fix fallback implementation of DSA utility methods
2018-06-18 20:32:34 +02:00
0390aba73b
Add tests for DSA key pairs
2018-06-18 18:12:34 +02:00
4994e75d2c
Add Dsa::from_(private|public)_components
...
Add 2 methods to create a DSA key pair from its raw components.
2018-06-18 18:10:02 +02:00
52c942f4b3
Add methods to access private and public part of DSA keys
2018-06-18 11:39:15 +02:00
6440ee04ef
Merge pull request #943 from lolzballs/master
...
Add wrapper for SSL_CTX_set_psk_server_callback
2018-06-17 15:47:00 -07:00
bf86580bec
Disable TLSv1.3 for psk_ciphers test
2018-06-17 17:00:22 -04:00
0f815628b4
Merge pull request #946 from sfackler/libressl-accessors
...
Switch to accessors in libressl where possible
2018-06-10 08:41:07 -07:00
115cb730b0
Switch to accessors in libressl where possible
...
Some accessors are mysteriously still macros so we can't make everything
opaque yet, unfortunately.
cc #909
2018-06-09 21:49:36 -07:00
2512c93df2
Merge pull request #936 from sfackler/windows-static
...
Add back the gdi32-sys dependency on windows
2018-06-09 10:09:38 -07:00
9bf748befb
Link to gdi32 on windows
...
Closes #935
2018-06-09 09:35:01 -07:00
6834b97ff4
Release openssl v0.10.10
2018-06-06 13:37:25 -07:00
d82a49bee2
Release openssl-sys 0.9.33
2018-06-06 13:36:24 -07:00
a10c43b1cc
Update changelog
2018-06-06 13:36:06 -07:00
5e54dd22fb
Merge pull request #945 from sfackler/ssl-alpn-protos
...
Add SslRef::set_alpn_protos
2018-06-04 20:48:43 -07:00
cdc90c7e9d
Add SslRef::set_alpn_protos
2018-06-04 20:19:27 -07:00
2c89ef5228
Merge pull request #944 from sfackler/1.1.1-pre7
...
Update to 1.1.1-pre7
2018-06-02 14:15:53 -07:00
0745d66927
Update to 1.1.1-pre7
...
The initial session ticket is now sent as part of SSL_accept, so some
tests need to write a single byte through the stream to make sure that
both ends have fully completed to avoid test flakes.
TLSv1.3 cipher suite control has been extracted from the normal cipher
list into a separate method: SslContextBuilder::set_ciphersuites.
2018-06-02 13:58:56 -07:00
88c61d252f
Ensure psk test callbacks are called
2018-06-02 15:50:24 -04:00
285884c925
push PSK callback errors onto ErrorStack
2018-06-02 15:49:59 -04:00
bcc4ca0285
Change psk test cipher to PSK-AES128-CBC-SHA
...
Hopefully it works on CI servers now
2018-06-02 13:59:04 -04:00
b1c77a7ea5
Use is_null()
2018-06-02 13:49:42 -04:00
5d8a44612d
add test for psk; deprecated set_psk_callback
2018-06-02 13:47:52 -04:00
b1eb1224f5
Merge remote-tracking branch 'origin/master'
2018-06-02 10:56:31 -04:00
24f4bdb533
Merge pull request #940 from CmdrMoozy/rsa_padding
...
Add an openssl-sys binding for RSA_padding_check_PKCS1_type_2.
2018-06-01 21:16:10 -07:00
83767b861e
Release openssl v0.10.9
2018-06-01 20:59:26 -07:00
52f581ffc9
Release openssl-sys v0.9.32
2018-06-01 20:57:09 -07:00
a3a2605115
fix build on older rustc
2018-06-01 20:47:46 -07:00
bf5772eb54
changelog
2018-06-01 20:45:19 -07:00
10b2a34529
Adjust Nid signature algorithm APIs
2018-06-01 20:36:19 -07:00
c2145384a9
Fix types
2018-06-01 20:07:13 -07:00
63afe3016c
Merge pull request #942 from sfackler/fix-cms-crash
...
Fix use-after-free in cms
2018-06-01 19:54:26 -07:00
15cb335e66
Fix use-after-free in cms
...
Closes #941
2018-06-01 19:38:52 -07:00
fb1b9b4140
Add an openssl-sys binding for RSA_padding_check_PKCS1_type_2.
...
This padding check implementation is useful for certain types of RSA
decryption, notably the type performed by Yubico's PIV library.
2018-05-30 18:48:42 -07:00
a1cb6a7328
Merge pull request #938 from sfackler/verified-chain
...
Add SslRef::verified_chain
2018-05-30 07:53:35 -07:00
3456add537
Add SslRef::verified_chain
2018-05-29 21:53:22 -07:00
a523219f6c
Merge pull request #929 from marcoh00/nid-names
...
Get Nid string representations
2018-05-28 15:02:56 -07:00
2977f6ed30
rewrite Nid::{long_name,short_name} to return Results instead of Options
2018-05-28 12:15:05 +02:00
b8de619fbe
Get Nid string representations
2018-05-28 12:13:40 +02:00
4f3d72d98c
Merge pull request #934 from sfackler/digest-algo
...
Add some digest support
2018-05-24 21:32:13 -07:00
a774c0c5f2
Rename X509Ref::fingerprint to X509Ref::digest and avoid allocating
2018-05-24 21:07:36 -07:00
772e1c003f
Add some digest support
2018-05-24 21:06:11 -07:00
58da8757f1
Merge pull request #933 from sfackler/bogus-sni
...
Don't panic on bogus servernames
2018-05-24 20:57:23 -07:00
3cd33cdd8b
Don't panic on bogus servernames
...
Also add a second version of the method to avoid filtering out non-utf8
names.
Closes #930
2018-05-24 20:22:15 -07:00
fe37bb7e9b
Merge pull request #932 from sfackler/get-final
...
Add bindings to SSL_get_finished and SSL_get_peer_finished
2018-05-24 20:14:19 -07:00
c0876cc8c6
Add bindings to SSL_get_finished and SSL_get_peer_finished
...
These are used for the tls-unique SCRAM channel binding mode.
2018-05-24 20:00:28 -07:00
Steven Fackler