Commit Graph

549 Commits

Author SHA1 Message Date
Christopher Dumoulin 78c77b288c Add SslStream::from_raw_parts 2020-06-23 15:27:42 +00:00
Steven Fackler 7546bfd148 Ignore default verify paths test on windows 2020-06-06 13:58:44 -07:00
Samani G. Gikandi d5be3e5758 Adds Debug derive for SslConnector 2020-06-04 17:23:20 -07:00
Steven Fackler e851708589 Add SslRef::set_mtu 2020-05-25 17:22:24 -07:00
Steven Fackler f401ba2ec1 Run clippy 2020-05-24 16:31:04 -07:00
Steven Fackler 406031991f Run rustfmt on github actions 2020-05-24 10:39:01 -07:00
Kirill Fomichev 5d7d83e869
Fix function name in peer_finished documentation 2020-04-12 16:20:13 +03:00
Steven Fackler 1ed175f85f FIx build 2020-04-07 17:39:56 -07:00
Steven Fackler 40e66bab6b Add SslContextBuilder::set_cert_store 2020-04-07 17:05:38 -07:00
Steven Fackler 2cbc436b8b
Merge pull request #1248 from coolreader18/ssl-functions
Add functions for SSL{_CTX}_get_verify_mode and SSL_is_init_finished
2020-03-26 20:52:42 -04:00
Noah 354a984a7c
Add SslMethod::tls_{client,server} 2020-03-24 21:56:04 -05:00
Steven Fackler e450f3fee0
Update openssl/src/ssl/mod.rs 2020-03-24 19:27:04 -04:00
Noah f572a8306b
Add man page links 2020-03-24 17:01:14 -05:00
Noah 1e9cc8426e
Add functions for SSL{_CTX}_get_verify_mode and SSL_is_init_finished 2020-03-24 15:32:39 -05:00
Steven Fackler 7801226796 Tweak interface a bit 2020-02-12 16:14:28 -08:00
Steven Fackler eed35cefb0
Merge pull request #1229 from axos88/master
SslAcceptor and SslConnector: Ability to turn into SslContext
2020-02-12 19:10:01 -05:00
Akos Vandra c81810d869 adds ability access the internal &SslContext of an SslAcceptor and SslConnector 2020-02-12 22:15:11 +01:00
Nipunn Koorapati 4898f60e52 Attach cfg[allow_deprecated] to methods w/ uninitialized functionality
Additionally - update usage of ONCE_INIT
2020-02-10 12:53:51 -08:00
Hiroki Noda 9189b67326 Add NO RENEGOTIATION option
SSL_OP_NO_RENEGOTIATION was added in OpenSSLv1.1.1 and backported to
v1.1.0h.
2020-01-28 04:07:38 +09:00
Steven Fackler ad37e7e07d
Merge pull request #1160 from HyeonuPark/set-dtls-mtu
Add ssl::set_dtls_mtu_size(usize)
2020-01-13 12:53:23 -05:00
Hyeonu Park 4d5e5e1787 add SslStreamBuilder::set_dtls_mtu_size(usize) 2019-12-29 04:17:00 +09:00
Kent Fredric bba670dc90 Avoid false-failures if underlying network connection errors
In Air-Gapped or otherwise network-restricted environments,
   TcpStream::connect can spuriously fail due to name resolution
   failure, or just in establishing the socket itself.

In this situation, the test can't give a meaningful result, and this
failure doesn't indicate a problem in the OpenSSL stack.

Bug: https://github.com/sfackler/rust-openssl/issues/1215
2019-12-27 21:15:39 +13:00
Andrii Radyk fc3c0a93d5 remove deprecated Error::description, replace deprecated cause with source 2019-12-21 23:53:49 +01:00
Steven Fackler 0815ac9b5d
Merge pull request #1208 from Sach1nAgarwal/comment2
Fix documentation typo of "the"
2019-12-20 09:14:58 -05:00
Steven Fackler 4cec131f37
Merge pull request #1207 from Sach1nAgarwal/comment1
In the documentation of SslContextBuilder::set_session_id_context, we…
2019-12-20 09:14:44 -05:00
Steven Fackler 3ca6974f9e
Merge pull request #1209 from Sach1nAgarwal/comment3
Fix documentation typo of link
2019-12-20 09:14:28 -05:00
Sachin agarwal 81cd1736d9 In the documentation of SslContextBuilder::set_cipher_list, we had given
link of "SSL_get_client_ciphers" rather than "SSL_CTX_set_cipher_list". In this commit,
we fix the typo.
2019-12-20 08:48:38 +05:30
Sachin agarwal 7599cc5b43 In the documentation of SslContextBuilder::set_certificate, we had written
"lthe" rather than "the". In this commit,
we fix the typo.
2019-12-20 08:40:01 +05:30
Sachin agarwal 96c49eee3c In the documentation of SslContextBuilder::set_session_id_context, we had written
"be be" rather than "be". In this commit,
we fix the typo.
2019-12-20 08:32:51 +05:30
Steven Fackler 0d8561b58a
Merge pull request #1202 from traviscross/fix-chain-typo
Fix documentation typo of "chain"
2019-12-13 07:19:44 -05:00
Travis Cross ac8214dad3 Fix documentation typo of "chain"
In the documentation of `SslRef::verified_chain`, we had written
"certificate chani" rather than "certificate chain".  In this commit,
we fix the typo.
2019-12-12 22:03:42 +00:00
Steven Fackler 2fe7462aa9
Fix link
Closes #1201
2019-12-12 07:25:29 -05:00
Steven Fackler f85d631fcf
Merge pull request #1184 from Atul9/cargo-fmt
Format code using 'cargo fmt'
2019-11-21 20:01:39 -05:00
Steven Fackler 0fb1e55a98 Allow configuration of EC groups and signature algorithms
Closes #1186
2019-11-16 10:54:27 -08:00
Atul Bhosale 784978bad0
Format code using 'cargo fmt' 2019-11-14 21:00:53 +05:30
Matt Vertescher b771738a3a Fix rustc warnings
- Use `..=` for inclusive ranges
- Add the `dyn` keyword for trait objects
- Switch from `ONCE_INIT` to `std::sync::Once::new()`
2019-10-08 08:35:35 -04:00
Steven Fackler 8d2e9e783d Hack around an unpatched OpenSSL issue
Why backport fixes to your LTS version? Seems like a lot of work, I
guess!

Closes #1133
2019-07-18 22:44:02 -04:00
Steven Fackler 850e93ee85 Don't depend on NO_SSL_MASK 2019-06-28 20:07:22 -07:00
Steven Fackler d3104955dd Minimize test duplication 2019-06-28 19:51:52 -07:00
Steven Fackler 1b3e0c8a15 Add mozilla v5 configurations
Closes #1134
2019-06-28 19:42:29 -07:00
Steven Fackler b39a712076 Fix handling of session callbacks
The session context is used for session callbacks rather than the normal
context, which breaks state lookup when the context has been swapped out
(e.g. for SNI). Since there isn't an accessor for the session context,
we just store an extra reference in the SSL's ex data.

Closes #1115
2019-05-18 10:27:40 -07:00
Andy Caldwell 2e37753790
Const-correctness 2019-05-13 19:11:15 +01:00
Andy Caldwell 41fea135ad
Allow passing by non-owned reference 2019-05-13 18:49:09 +01:00
Andy Caldwell 628c3b338a
Add SSL_CTX_add_client_CA on OpenSSL 2019-05-13 15:08:02 +01:00
Steven Fackler a9b9f818a1
Merge pull request #1097 from vishwin/master
Support LibreSSL 2.9.1
2019-05-08 18:40:18 -07:00
Steven Fackler 801a236413 Ignore SRTP tests on libressl 2.9.1
SRTP is broken in that release!
2019-05-08 18:19:42 -07:00
Steven Fackler 4121ac34cb Fix deprecation warnings in tests 2019-04-25 10:03:13 -07:00
Charlie Li d79090a00a Reconcile exdata and version functions between libraries/versions. 2019-04-24 23:15:56 -04:00
Charlie Li 98f91769e3 Add missing any() in the {,D}TLS_method usage logic. 2019-04-24 19:29:01 -04:00
Charlie Li f0b8a2e467 Support LibreSSL 2.9.1
LibreSSL 2.9.1 added generic DTLS methods.

While here, bump CircleCI.
2019-04-24 16:08:42 -04:00