3a170b655b
Make Rsa::generate delegate to Rsa::generate_with_e
2019-01-30 09:16:12 -08:00
e48901e20b
Merge pull request #1054 from Zolmeister/generate-with-e
...
add Rsa::generate_with_e(bits: u32, e: BigNum)
2019-01-29 18:50:33 -08:00
dd140f5167
add Rsa::generate_with_e(bits: u32, e: BigNum)
2019-01-29 12:00:47 -06:00
34755f8a6b
ASN1_TIME_from_string_x509 was added in 1.1.1
2019-01-27 13:14:11 -08:00
691ce7ca2a
Add Asn1Time::from_str and Asn1Time::from_str_x509
...
Closes #1051
2019-01-27 13:05:03 -08:00
e56e09b6a4
Add RsaRef::check_key
2019-01-18 21:03:04 -06:00
6378eff9db
Forward to BigNumRef::to_asn1_integer
2019-01-18 17:58:48 +01:00
4ff5f4486f
Add `Asn1Integer::from_bn`
2019-01-18 12:21:39 +01:00
b565a0c7eb
Implement AsRef<str/[u8]> for OpensslString{Ref}
2019-01-17 14:19:36 +01:00
69aa335871
Drop data_encoding dev dependency
2019-01-04 20:50:00 -08:00
1c48c9c456
Update bn.rs
2019-01-04 11:54:36 +01:00
57e02abb50
Release openssl v0.10.16
2018-12-16 09:04:07 -08:00
800c232c09
Fix cargo dependency documentation
...
`feature` -> `features`
2018-11-24 13:29:10 -07:00
5c7fa43d87
Add bindings to RAND_keep_random_devices_open
...
Closes #1019
2018-11-22 09:32:50 -07:00
38a4dccceb
Add new SHAKE128/256 EVP message digest functions in OpenSSL 1.1.1, fixes #1017 .
2018-11-21 15:46:03 -05:00
e0e0a96cb3
Add new SHA3 EVP message digest functions in OpenSSL 1.1.1
2018-11-21 15:31:50 -05:00
b88778bc76
Release openssl v0.10.15
2018-10-22 09:03:28 -07:00
93c67e2f77
Implement DoubleEndedIterator for stack iters
2018-10-22 08:49:24 -07:00
e2783971ea
Release openssl v0.10.14
2018-10-18 20:16:55 -07:00
3aecfe5655
Release openssl-sys v0.9.39
2018-10-18 20:11:35 -07:00
4256cfbf19
Fix some accidentally-public functions
2018-10-18 11:37:36 -07:00
3013d2e93f
Release openssl v0.10.13
2018-10-14 16:10:22 -07:00
d3bb880866
Release openssl-sys 0.9.37
2018-10-14 16:09:17 -07:00
d52be16cc4
Merge pull request #1005 from samscott89/add-pkcs7-support
...
Add PKCS7 support
2018-10-10 22:18:46 -07:00
04ada473d1
Cleanup
2018-10-10 21:25:29 -07:00
d2cc0eae2d
Move README info into crate root docs
...
This is more discoverable in the modern Rust world!
2018-10-07 19:59:33 -07:00
8ae761063c
Address comments.
2018-10-02 22:53:03 -04:00
2dd3736444
Refactor to match style and add documentation.
2018-10-02 17:25:18 -04:00
cd1d1955d9
PKCS7 Support
...
(Rebased onto latest version)
2018-10-02 17:25:18 -04:00
18dfc9b6b2
Add support for encoding and decoding ECDSA signatures
2018-09-28 14:43:33 +02:00
5894cdfdc5
Fix get session callback
...
This could previously open up the possibility of a double-free!
Closes #996
2018-09-17 09:30:16 -07:00
22231d7547
Support the client hello callback
2018-09-15 13:29:18 -07:00
a548913e44
Release openssl 0.10.12
2018-09-13 19:23:09 -07:00
348cb7391b
Fix typo
...
Fix typo in docs for openssl::rsa::Rsa::from_private_components
2018-09-13 12:39:57 -10:00
8c6bc774db
Support libressl 2.8.0
...
Closes #988
2018-09-12 20:44:22 -07:00
ea18d84de3
clean up example
2018-09-02 14:51:08 -07:00
947dfbd143
Small cleanup
...
Closes #981
2018-09-02 14:26:27 -07:00
bc4e47a321
Fix lookup errors with SNI callback.
...
The job of an SNI callback is typically to swap out the context
associated with an SSL depending on the domain the client is trying to
talk to. Typically, only the callbacks associated with the current
context are used, but this is not the case for the SNI callback.
If SNI is run for a second time on a connection (i.e. in a
renegotiation) and the context was replaced with one that didn't itself
register an SNI callback, the old callback would run but wouldn't be
able to find its state in the context's ex data. To work around this, we
pass the pointer to the callback data directly to the callback to make
sure it's always available. It still lives in ex data to handle the
lifetime management.
Closes #979
2018-08-31 20:23:55 -07:00
2df87cfd59
Fix doc reference
2018-08-19 20:19:10 -07:00
ef7721092d
SRTP cleanup
2018-08-19 18:50:11 -07:00
59c578cf04
Add methods for DTLS/SRTP key handshake
2018-08-14 16:04:33 +02:00
1396143c66
Add get_shutdown and set_shutdown
2018-08-08 13:19:55 -07:00
ef69870ea2
Release openssl 0.10.11
2018-08-04 10:12:12 -07:00
71ee9439ca
Support builds of OpenSSL from vendored source (take 2)
...
This is a revival of #684 to see if I can help push it across the finish line!
Closes #580
2018-07-30 15:15:24 -07:00
415f399b2c
Fix tests when built with no-ec2m
...
The other curve identifier isn't valid, at least in some contexts so
just ignore the test in those cases.
Closes #964
2018-07-29 09:48:03 -07:00
ee5215bd31
SslSessionRef methods return static strings
...
Closes #961
2018-07-19 20:22:57 -07:00
a964d05d4a
Fix spelling in symm docs
2018-07-14 11:54:26 -10:00
1392b006e2
Merge pull request #937 from marcoh00/iterable-x509names
...
X509NameRef: Provide an iterator over all entries
2018-07-07 20:20:45 -07:00
6422ffb1b2
Clean up IGE example
...
Closes #955
2018-07-04 23:15:33 -07:00
07c49e517e
Only grab the name entry count when needed
2018-06-26 22:31:10 -07:00
4c1891cc10
Merge pull request #950 from WanzenBug/master
...
Add access to private/public components of DSA key pairs.
2018-06-23 23:53:09 -04:00
339d09fbf3
Simplify DSA from private components
2018-06-23 18:16:32 +02:00
321c076ab3
Fix build with openssl 1.1.1 and no-psk
...
I used this as build flags for openssl 1.1.1:
```
/usr/bin/perl ./Configure linux-x86_64 no-shared no-zlib no-psk no-srp no-weak-ssl-ciphers no-idea
```
rust-openssl crashed with this error:
```
Compiling openssl v0.10.10
error[E0433]: failed to resolve. Use of undeclared type or module `CStr`
--> /home/stefan/.cargo/registry/src/github.com-1ecc6299db9ec823/openssl-0.10.10/src/ssl/callbacks.rs:386:16
|
386 | let line = CStr::from_ptr(line).to_bytes();
| ^^^^ Use of undeclared type or module `CStr`
error[E0412]: cannot find type `c_char` in this scope
--> /home/stefan/.cargo/registry/src/github.com-1ecc6299db9ec823/openssl-0.10.10/src/ssl/callbacks.rs:377:75
|
377 | pub unsafe extern "C" fn raw_keylog<F>(ssl: *const ffi::SSL, line: *const c_char)
| ^^^^^^ did you mean `c_uchar`?
help: possible candidates are found in other modules, you can import them into scope
|
1 | use libc::c_char;
|
1 | use std::os::raw::c_char;
|
error: aborting due to 2 previous errors
Some errors occurred: E0412, E0433.
For more information about an error, try `rustc --explain E0412`.
error: Could not compile `openssl`.
warning: build failed, waiting for other jobs to finish...
```
this patch fixes the problem
2018-06-21 22:19:29 +02:00
c624427e31
Fix fallback implementation of DSA utility methods
2018-06-18 20:32:34 +02:00
0390aba73b
Add tests for DSA key pairs
2018-06-18 18:12:34 +02:00
4994e75d2c
Add Dsa::from_(private|public)_components
...
Add 2 methods to create a DSA key pair from its raw components.
2018-06-18 18:10:02 +02:00
52c942f4b3
Add methods to access private and public part of DSA keys
2018-06-18 11:39:15 +02:00
6440ee04ef
Merge pull request #943 from lolzballs/master
...
Add wrapper for SSL_CTX_set_psk_server_callback
2018-06-17 15:47:00 -07:00
bf86580bec
Disable TLSv1.3 for psk_ciphers test
2018-06-17 17:00:22 -04:00
115cb730b0
Switch to accessors in libressl where possible
...
Some accessors are mysteriously still macros so we can't make everything
opaque yet, unfortunately.
cc #909
2018-06-09 21:49:36 -07:00
6834b97ff4
Release openssl v0.10.10
2018-06-06 13:37:25 -07:00
d82a49bee2
Release openssl-sys 0.9.33
2018-06-06 13:36:24 -07:00
cdc90c7e9d
Add SslRef::set_alpn_protos
2018-06-04 20:19:27 -07:00
14b5439347
Rename X509NameRef::all_entries and refactor end-of-iterator checks
2018-06-03 15:38:46 +02:00
f5e6d57c47
Provide an Asn1Object getter method for X509NameEntryRef
2018-06-03 15:38:46 +02:00
2afdc16fc9
Make X509NameRef provide an iterator over all X509NameEntries
2018-06-03 15:38:46 +02:00
0745d66927
Update to 1.1.1-pre7
...
The initial session ticket is now sent as part of SSL_accept, so some
tests need to write a single byte through the stream to make sure that
both ends have fully completed to avoid test flakes.
TLSv1.3 cipher suite control has been extracted from the normal cipher
list into a separate method: SslContextBuilder::set_ciphersuites.
2018-06-02 13:58:56 -07:00
88c61d252f
Ensure psk test callbacks are called
2018-06-02 15:50:24 -04:00
285884c925
push PSK callback errors onto ErrorStack
2018-06-02 15:49:59 -04:00
bcc4ca0285
Change psk test cipher to PSK-AES128-CBC-SHA
...
Hopefully it works on CI servers now
2018-06-02 13:59:04 -04:00
b1c77a7ea5
Use is_null()
2018-06-02 13:49:42 -04:00
5d8a44612d
add test for psk; deprecated set_psk_callback
2018-06-02 13:47:52 -04:00
b1eb1224f5
Merge remote-tracking branch 'origin/master'
2018-06-02 10:56:31 -04:00
83767b861e
Release openssl v0.10.9
2018-06-01 20:59:26 -07:00
52f581ffc9
Release openssl-sys v0.9.32
2018-06-01 20:57:09 -07:00
a3a2605115
fix build on older rustc
2018-06-01 20:47:46 -07:00
10b2a34529
Adjust Nid signature algorithm APIs
2018-06-01 20:36:19 -07:00
c2145384a9
Fix types
2018-06-01 20:07:13 -07:00
15cb335e66
Fix use-after-free in cms
...
Closes #941
2018-06-01 19:38:52 -07:00
3456add537
Add SslRef::verified_chain
2018-05-29 21:53:22 -07:00
2977f6ed30
rewrite Nid::{long_name,short_name} to return Results instead of Options
2018-05-28 12:15:05 +02:00
b8de619fbe
Get Nid string representations
2018-05-28 12:13:40 +02:00
a774c0c5f2
Rename X509Ref::fingerprint to X509Ref::digest and avoid allocating
2018-05-24 21:07:36 -07:00
772e1c003f
Add some digest support
2018-05-24 21:06:11 -07:00
3cd33cdd8b
Don't panic on bogus servernames
...
Also add a second version of the method to avoid filtering out non-utf8
names.
Closes #930
2018-05-24 20:22:15 -07:00
c0876cc8c6
Add bindings to SSL_get_finished and SSL_get_peer_finished
...
These are used for the tls-unique SCRAM channel binding mode.
2018-05-24 20:00:28 -07:00
c7db3d18ad
Merge pull request #920 from Ralith/max-early-data-accessors
...
TLS1.3 early data support
2018-05-22 20:42:46 -07:00
2e478fdcf4
Expose early I/O
2018-05-22 20:25:28 -07:00
b187eb0ee3
Release openssl v0.10.8
2018-05-20 21:03:16 -07:00
25df3c8b51
Release openssl-sys 0.9.31
2018-05-20 21:02:12 -07:00
7a7f98a32c
Revert "Move proto version accessors to SslContextRef"
2018-05-20 20:55:20 -07:00
b976b5fd52
Move proto version accessors to SslContextRef
...
Add a Derf impl for SslContextBuilder so existing use still works.
2018-05-20 20:47:00 -07:00
f0347fbce8
Improve error Display impls
2018-05-20 19:37:19 -07:00
3ab1cc7a8f
Make Stack Sync + Send
2018-05-20 15:24:38 -07:00
4c1fdf1d81
Support ALPN on libressl
...
Closes #690
2018-05-20 12:52:49 -07:00
a6fcef01c0
Overhaul openssl cfgs
...
Also expose hostname verification on libressl
2018-05-20 12:33:02 -07:00
d991566f2b
Support min/max version in LibreSSL
...
Their implementations of the accessors don't behave expected with no
bounds, so we ignore those bits of the tests.
2018-05-19 19:57:12 -07:00
69c75a178b
Expose early keying material export
2018-05-17 13:16:41 -07:00
d5d414b16f
Expose max TLS1.3 early data accessors
2018-05-17 12:02:32 -07:00
47a68e2929
Add wrapper for SSL_CTX_set_psk_server_callback
2018-05-16 17:49:36 -04:00
53671518fd
Merge pull request #902 from ur0/CMS_sign
...
Add the CMS_sign and i2d_CMS_ContentInfo function bindings
2018-05-13 15:53:49 +01:00
b1e5c8b1ed
Implement Clone for Rsa
...
Closes #917
2018-05-12 16:34:47 -07:00
ff2c7ffefd
Merge Ssl impl blocks
2018-05-12 16:50:50 +01:00
c25b6f3e26
Clean up SSL callbacks
...
Also add an Arc to avoid a weird use after free edge case if a callback
changes a callback.
2018-05-12 15:02:53 +01:00
5cfbe7ac6a
Disable tests that talk to Google on LibreSSL 2.5.0
...
They're flickering, and I'm assuming it's just because that version is
so old.
2018-05-12 13:59:22 +01:00
e5d65306e7
Change SslContext callback handling
...
Use the existing infrastructure!
2018-05-12 13:19:01 +01:00
afaa2387c8
Gate away CMS_KEY_PARAM from OpenSSL 1.0.1
2018-05-10 21:41:59 +05:30
541458c1c1
Properly version-gate CMS constants
2018-05-10 21:20:32 +05:30
90898e99c9
Move CMS_* flags to the openssl-sys package
...
Also renames attributes in the bitflags struct.
2018-05-10 20:26:57 +05:30
7a1b59d605
Fix base version for min/max proto accessors
...
Closes #911
2018-05-09 20:04:43 +01:00
42cbd0111b
Release openssl v0.10.7
2018-04-30 20:41:23 -07:00
25e3f66e3e
Release openssl-sys v0.9.30
2018-04-30 20:40:29 -07:00
47431f66bb
Expose SslSession <-> DER conversion
2018-04-29 01:54:16 -07:00
aa619c81c0
Some misc cleanup
2018-04-27 15:41:12 -07:00
043ad63a52
Use bitflags for CMS options
2018-04-26 09:15:29 +05:30
24ece94e99
Remove Rsa::build
...
It could be a bit confusing since it only works for private keys.
2018-04-25 19:55:35 -07:00
261463542f
Merge pull request #901 from eoger/rsa-from-builder
...
Add RsaPrivateKeyBuilder
2018-04-25 14:51:02 -07:00
9a83e3350b
Add RsaPrivateKeyBuilder
...
Fixes #837
2018-04-25 11:18:57 -04:00
13caf731a2
Implement CR suggestions
...
* Don't do un-necessary heap pointer gymnastics
* Use the to_der! macro instead of a manually written impl
* Allow optional arguments for CMS_sign
2018-04-22 10:57:09 +05:30
5bb89d7552
Add functions to X509Req to obtain public key and extensions
...
This allows for basic CSR signing.
2018-04-21 23:14:48 +02:00
8ce5dee00d
Add the CMS_sign and i2d_CMS_ContentInfo function bindings
...
This adds the CMS_sign and i2d_CMS_ContentInfo bindings in the
openssl-sys crate and Rusty wrappers in the openssl crate.
2018-04-20 17:15:04 +05:30
973a3fede1
Document that encrypt/decrypt use padding
2018-04-16 14:45:56 +01:00
cab98be606
Release openssl v0.10.6
2018-04-05 11:12:06 -07:00
78d91428b5
Release openssl-sys 0.9.28
2018-04-05 11:09:36 -07:00
75bf48368d
Return `PKey<Private>` from `private_key_from_der`
2018-04-04 14:58:52 +02:00
e423da2d12
Merge pull request #858 from Ralith/stateless-api
...
Introduce SslStreamBuilder
2018-03-31 11:28:03 -07:00
5c317d5a35
Remove unneeded build keys
2018-03-30 11:32:57 +02:00
a14b7cc276
Don't enable features for docs anymore
2018-03-29 22:41:40 +02:00
ac950b28aa
Fix a flag name
2018-03-29 10:26:43 +02:00
1bbe1b6a8f
Clean up a couple of holdovers from old features
2018-03-29 10:20:18 +02:00
f99c101559
Add test for stateless connection
2018-03-28 18:14:48 -07:00
99fdb2bd0b
Introduce SslStreamBuilder
2018-03-28 18:14:48 -07:00
bbb1cb61f6
Update to OpenSSL 1.1.1-pre3
2018-03-28 18:14:44 -07:00
c82a87a18e
Add Asn1IntegerRef::to_bn
...
Also deprecate Asn1IntegerRef since it's just asking for trouble.
2018-03-28 20:48:28 +02:00
7890672725
Add X509Ref::serial_number
2018-03-28 20:41:28 +02:00
d49e496940
Remove a last couple features
2018-03-19 20:41:08 +00:00
063186b62e
Merge pull request #856 from Flakebi/master
...
Make it possible to use cmac
2018-03-19 13:22:51 -07:00
0860115156
Make it possible to use cmac
...
This adds Signer::new_without_digest to create Signers which don't have
a digest (like cmac, which is based on aes).
As openssl supports cmac since version 1.1.0, the functions are behind
the ossl110 feature.
This allows building CMAC/OMAC1 and the EAX AEAD on top of this library.
2018-03-19 21:02:46 +01:00
7c33346960
Remove version-specific features
...
Closes #852
2018-03-19 00:41:33 -07:00
cf658e4c5c
Merge pull request #875 from Ralith/hash-extras
...
Expose cipher digests and digest sizes
2018-03-16 22:00:59 -07:00
09b1fe9a0d
Expose additional cipher and digest accessors
2018-03-16 20:33:23 -07:00
66a2ad76b7
Merge pull request #874 from rohit-lshift/priv-key-from-num
...
Added a function to create a EcKey<Private> from its parts
2018-03-13 21:50:17 -07:00
e3a657d22b
Change function name to be similar to RSA one
2018-03-13 08:57:35 +00:00
9452c01672
Merge pull request #864 from mlen/aes-ccm-bindings
...
Implement AES-{128,256}-CCM bindings
2018-03-11 16:30:37 -07:00
170adae336
Merge pull request #873 from sfackler/tweaks
...
Add a Sync + Send bound to the custom ext type
2018-03-11 16:10:54 -07:00
7edecbd3a8
Merge pull request #872 from sfackler/tweaks
...
Some ECDSA fixes/tweaks
2018-03-11 15:37:28 -07:00
9f5ef88880
Add a Sync + Send bound to the custom ext type
...
It's stored inside of the Ssl, so this is probably tecnically
necessarly?
2018-03-11 15:36:47 -07:00
d0329473bd
Merge branch 'master' into custom-extensions
2018-03-11 15:27:28 -07:00
c9ef7f3cd5
Some ECDSA fixes/tweaks
2018-03-11 15:23:23 -07:00
1b830c3fb7
Merge pull request #863 from rohit-lshift/master
...
Exposed some of ECDSA functions
2018-03-11 15:08:16 -07:00
Steven Fackler