2bbeddd14a
Convert SslRef
2016-10-21 19:33:56 -07:00
fe98a90719
Convert SslContextRef
2016-10-21 19:15:09 -07:00
b7017a7eec
Update Asn1TimeRef
2016-10-21 17:13:30 -07:00
23fc6c828b
Convert X509Ref
2016-10-21 17:01:13 -07:00
b3eb8d516c
Switch X509Name over to new borrow setup
...
The use of actual references enables us to be correct with respect to
mutability without needing two structs for the mutable and immutable
cases and more deref impls.
2016-10-20 22:51:10 -07:00
cc65318cc4
Merge pull request #485 from sfackler/verify-error
...
Store a MidHandshakeSslStream in fatal errors
2016-10-20 21:19:35 -07:00
bd0c0c60bd
Store a MidHandshakeSslStream in fatal errors
...
This in particular allows the X509 verification error to be retrieved,
as well as the stream itself.
2016-10-20 20:57:53 -07:00
efa7f55940
Merge pull request #484 from sfackler/ssl-overhaul
...
Redo SslStream construction
2016-10-20 20:30:08 -07:00
8f3511c0cd
Redo SslStream construction
...
SslStream is now constructed via methods on Ssl. You realistically want
to create an Ssl for SNI and hostname verification so making it harder
to construct a stream directly from an SslContext is a good thing.
2016-10-20 19:59:09 -07:00
494bc9b754
Merge pull request #483 from sfackler/x509-error
...
X509 verification error cleanup
2016-10-19 21:27:45 -07:00
5ab037f056
Allow the X509 verify error to be read from an SslRef
2016-10-18 22:21:06 -07:00
cfd5192a7d
De-enumify X509ValidationError
...
Also make it an Error.
Closes #352 .
2016-10-18 22:10:37 -07:00
080050e10d
Drop lifetime on GeneralNames
2016-10-18 21:52:49 -07:00
591c03e78a
Merge pull request #481 from sfackler/pn-errors
...
Check for errors in NPN and ALPN logic
2016-10-18 21:45:53 -07:00
c4459c37d9
Callback cleanup
2016-10-18 21:13:13 -07:00
f7e6d7fce6
Don't ignore errors in NPN/ALPN logic
...
Closes #479
2016-10-18 21:12:55 -07:00
d377b50349
Merge pull request #478 from sfackler/feature-overhaul
...
Implement new feature setup
2016-10-17 22:44:13 -07:00
194298a057
Implement new feature setup
...
The basic idea here is that there is a feature for each supported
OpenSSL version. Enabling multiple features represents support for
multiple OpenSSL versions, but it's then up to you to check which
version you link against (probably by depending on openssl-sys and
making a build script similar to what openssl does).
2016-10-17 21:57:54 -07:00
f6bf022cf2
Merge pull request #476 from sfackler/error-handling
...
Overhaul error handling plus random APIs
2016-10-17 09:14:33 -07:00
a938a001a7
Fix missing import
2016-10-16 23:26:38 -07:00
b7400d56e8
Fix algorithm field
2016-10-16 23:22:00 -07:00
68954cfc51
Finish BN overhaul
2016-10-16 23:13:00 -07:00
7ec015325b
Finish error overhaul
2016-10-16 21:07:17 -07:00
78daed2d58
ssl error handling cleanup
2016-10-16 20:14:04 -07:00
89a366d9f7
Finish crypto error cleanup
2016-10-16 19:24:04 -07:00
19440c2981
More error cleanup
...
Also allocation free RSA
2016-10-16 19:06:02 -07:00
73ccfe7a29
Continue error handling cleanup
...
Also overhaul/clean up pkcs5 internals
2016-10-16 16:42:56 -07:00
8f89f0bfa9
Start on error + BN refactor
2016-10-16 15:54:09 -07:00
fdb4131064
Merge pull request #475 from sfackler/no-enums
...
Turn enums into structs
2016-10-15 17:03:17 -07:00
6ea551dc82
Fix set_read_ahead signature
2016-10-15 16:53:10 -07:00
872fcfc3d5
Always build updated OpenSSL
...
Trusty's default OpenSSL seems to have a bug with DTLS if read_ahead
isn't enabled, even though that's not supposed to do anything for DTLS
(!?!).
2016-10-15 16:51:29 -07:00
4ba5292a0a
De-enumify Padding
2016-10-15 16:19:19 -07:00
ee18988584
De-enumify SslMethod
2016-10-15 16:10:03 -07:00
1cecaeb62d
De-enumify Cipher
2016-10-15 15:47:40 -07:00
c171be551a
De-enumify message digests
2016-10-15 15:23:29 -07:00
6609a81685
Migrate DSA sign/verify to EVP APIs
2016-10-15 15:02:02 -07:00
228b8fbc5b
Correctly bind BIO_new_mem_buf
2016-10-15 13:39:47 -07:00
d7501d4285
Merge pull request #474 from sfackler/digest
...
Signature/Digest API
2016-10-15 13:36:32 -07:00
4ed81d6426
Fix EVP_DigestVerifyFinal version support
2016-10-15 13:12:37 -07:00
2ff82649b5
Add examples to crypto::sign
2016-10-15 12:50:03 -07:00
ea8cbbe9dc
Fix typo
2016-10-15 12:31:30 -07:00
4d567358a1
Distinguish between verification errors and "other" errors.
2016-10-15 12:31:06 -07:00
bb23b33829
Fix signature of EVP_DigestVerifyFinal on 1.0.1
2016-10-15 12:24:20 -07:00
6ae472487f
Support HMAC PKeys and remove hmac module
2016-10-15 11:06:11 -07:00
cce1d44f28
Remove old RSA sign and verify methods
2016-10-15 10:43:19 -07:00
f73313d688
Signature and verification support
2016-10-15 10:36:59 -07:00
b564cb5db7
Add digest signature methods
2016-10-15 09:48:34 -07:00
64b8e5e553
Merge pull request #471 from sfackler/no-comp
...
Handle OPENSSL_NO_COMP
2016-10-14 23:09:11 -07:00
e1d1006fad
Check feature compatibility in build script
2016-10-14 23:03:44 -07:00
ba997c590e
Prefer 1.1 when looking for Homebrew installs
2016-10-14 22:55:44 -07:00
Steven Fackler