Manuel Schölling
e1d65fc2be
Return Result<(),SslError> instead of Option<SslError>
2015-04-03 14:34:24 +02:00
Manuel Schölling
b6c5c113f5
Add SslContext::add_extra_chain_cert()
2015-04-03 14:34:24 +02:00
Manuel Schölling
632d8398cf
Add ability to load private keys from files and use raw keys and certificates for SslContext
2015-04-03 14:34:24 +02:00
Manuel Schölling
b42202b858
Change SslVerifyMode to bitflags and add SSL_VERIFY_FAIL_IF_NO_PEER_CERT
...
SslVerifyMode was changed to bitflags to allow for bitwise operations
like (SSL_VERIFY_PEER | SSL_VERIFY_FAIL_IF_NO_PEER_CERT).
2015-04-03 14:34:24 +02:00
Steven Fackler
4606687829
Stabilize openssl!
2015-04-02 21:12:05 -07:00
Steven Fackler
129f6c236b
Merge pull request #194 from alexcrichton/beta
...
Fixup for beta
2015-04-02 20:08:19 -07:00
Alex Crichton
293f1ce5b1
Fixup for beta
...
Add derive(Clone) and don't negate unsigned numbers
2015-04-02 18:14:51 -07:00
Steven Fackler
f4761bb292
Remove two features
2015-04-02 13:59:55 -07:00
Steven Fackler
368c0a18ee
Release v0.5.4
2015-04-02 11:17:31 -07:00
Steven Fackler
19a24b80e9
Fix doctest errors
2015-04-02 11:15:59 -07:00
Steven Fackler
22c5f047c1
Merge pull request #193 from seanmonstar/rustup
...
rustup: changes to io::Error
2015-04-02 11:12:32 -07:00
Sean McArthur
24b876521b
rustup: changes to io::Error
2015-04-02 11:12:18 -07:00
Steven Fackler
121a667f9b
Remove a bunch of use of core feature
2015-03-30 23:09:15 -07:00
Steven Fackler
c101abac6b
Remove unsafe_destructor
2015-03-30 21:24:34 -07:00
Steven Fackler
a2199e0132
Release v0.5.3
2015-03-29 10:22:09 -07:00
Steven Fackler
2b1a9a7814
Fix verify data free function
...
Turns out this is called with a null pointer if you never set the data
which didn't end up doing anything until the recent zeroing drop
changes.
Also use a map of indexes since statics in generic functions don't
monomorphize
2015-03-29 10:18:30 -07:00
Steven Fackler
c315e05368
Merge pull request #191 from fhartwig/rustup
...
Fix error with current rust nightly
2015-03-29 12:30:28 -04:00
Florian Hartwig
7c079698fc
Fix error with current rust nightly
2015-03-29 15:19:34 +02:00
Steven Fackler
2453c0f96c
Fix npn feature
2015-03-25 22:02:14 -07:00
Steven Fackler
36c90bb205
Fix deprecation warnings
2015-03-25 21:50:21 -07:00
Steven Fackler
73a5276d47
Release v0.5.2
2015-03-25 11:38:04 -07:00
Steven Fackler
6d15621c2b
Merge pull request #189 from alexcrichton/update
...
Update to rust master
2015-03-25 11:32:23 -07:00
Alex Crichton
5a80cc8aae
Update to rust master
2015-03-25 10:51:28 -07:00
Steven Fackler
f664444ac5
Merge pull request #185 from mlalic/npn-bindings
...
Add TLS Next Protocol Negotiation
2015-03-23 23:29:44 -04:00
Marko Lalic
f50577909e
openssl: Add tests for server-side NPN
2015-03-23 08:41:15 +01:00
Marko Lalic
8f05e0452a
openssl: Add tests for client-side NPN
...
An additional `openssl` process is spun up before the tests are ran.
This process has NPN enabled with some default protocols.
2015-03-23 08:41:15 +01:00
Marko Lalic
be674a28e0
openssl: Advertise NPN protocols for server sockets
...
If a server socket is created with a context on which the
`set_npn_protocols` method has been called, during TLS connection
establishment, the server will advertise the list of protocols given to
the method, in case the client indicates that it supports the NPN TLS
extension.
2015-03-23 08:41:15 +01:00
Marko Lalic
8931299eab
openssl: Add methods to get the protocol selected by NPN
...
The method is added to the `Ssl` struct, since this is how the native
OpenSSL API works. It is also added to the `SslStream` convenience
struct, since the `Ssl` instance that it wraps is not public and clients
may want to check which protocol is in use on a particular SSL stream.
2015-03-23 08:41:15 +01:00
Marko Lalic
5689ad9260
openssl: Implement client-side NPN protocol selection
...
After the `set_npn_protocols` method of the `SslContext` struct is
called, any future TLS connections established with this context will
perform NPN negotiation.
The chosen protocol is the one with the highest priority in the
server's protocol list that is also in the client's protocol list.
(This is the default behavior provided by OpenSSL's
`SSL_select_next_proto` function.)
If there is no overlap between the two lists, no error is raised.
2015-03-23 08:41:15 +01:00
Marko Lalic
83c279013b
openssl: Add method for setting protocols to be used in NPN
...
A new method `set_npn_protocols` is added to the `SslContext` struct,
when the `npn` feature is enabled.
The method takes a list of protocols that are supported by the peer.
These protocols will be used during Next Protocol Negotiation.
The method saves the given list within the extra data of the OpenSSL
Context structure, so that the list can be referred to later on by the
callbacks invoked during TLS connection establishment.
2015-03-23 08:41:15 +01:00
Marko Lalic
3388a12802
openssl: Add NPN crate feature
2015-03-23 08:14:47 +01:00
Marko Lalic
f09cfdfdd5
openssl-sys: Add TLS extension constants
2015-03-23 08:14:47 +01:00
Marko Lalic
b96bbf6961
openssl-sys: Add NPN functions and constants
2015-03-23 08:14:47 +01:00
Steven Fackler
20335c4f00
Merge pull request #187 from manuels/x509_sign
...
Add X509Generator::sign()
2015-03-21 13:53:25 -04:00
Manuel Schölling
6373b96924
Add X509Generator::sign()
2015-03-21 18:02:29 +01:00
Steven Fackler
b406b7c6e6
Fix doc test
2015-03-21 10:00:00 -07:00
Steven Fackler
ac24bc5422
Fix warnings and build issues
2015-03-20 08:33:42 -07:00
Steven Fackler
5adbe4b362
Merge pull request #184 from alexcrichton/update
...
Remove usage of unstable features in openssl-sys
2015-03-16 11:29:00 -07:00
Alex Crichton
2560ccb330
Remove usage of unstable features in openssl-sys
2015-03-16 11:05:29 -07:00
Steven Fackler
a65b03c89e
Fix warnings
2015-03-10 19:38:44 -07:00
Steven Fackler
8b8736fb46
Merge pull request #172 from reaperhulk/add-ssl-ctx-set-get-options
...
add support for SSL_CTX_set_options and SSL_CTX_get_options
2015-03-07 08:43:30 -08:00
Steven Fackler
515872fb66
Merge pull request #175 from aatxe/master
...
Added try_clone to SslStream for SslStream<TcpStream>.
2015-03-04 22:42:32 -05:00
Steven Fackler
0b48edb4a1
Merge pull request #176 from alexcrichton/update
...
Cut down on unstable features in openssl-sys
2015-03-04 14:26:40 -08:00
Alex Crichton
1c9b8a029b
Cut down on unstable features in openssl-sys
...
* Move from `old_path` to `path` (leveraging the `fs` feature as well)
* Move from `StaticMutex` to `Mutex<()>` as they're dynamically initialized
2015-03-04 14:14:05 -08:00
Aaron Weiss
c3eee3b194
Added try_clone to SslStream for SslStream<TcpStream>.
2015-03-02 16:32:25 -05:00
Steven Fackler
5154581c32
Release v0.5.0
2015-02-27 19:49:01 -08:00
Steven Fackler
2789764fe3
Merge branch 'breaks'
...
Conflicts:
openssl/src/lib.rs
2015-02-27 19:47:24 -08:00
Steven Fackler
14e6b1b530
Silence stability warning
2015-02-26 09:02:16 -08:00
Steven Fackler
6991cc6a30
Convert to new IO.
2015-02-24 23:01:57 -08:00
Steven Fackler
1b4a2eef0e
Switch to cargo liblibc
2015-02-24 21:47:30 -08:00