fork of boring2 with prefix patch

Go to file

Leo Blöcher baede6c0af Remove INVALID_CALL from mid-handshake error message Mid-handshake errors that occur before certificate verification currently look like this: ``` TLS handshake failed: cert verification failed - Invalid certificate verification context [WRONG_VERSION_NUMBER] ``` Despite no certificate even being received yet, the error complains about a failed verification. The cause here is that `cert verification failed` is only omitted if the verification result is `OK`. The default in BoringSSL before verification runs is `INVALID_CALL`, however. `INVALID_CALL` is set/returned in these places: - `44b3df6f03/src/ssl/internal.h (L3904)` - `44b3df6f03/src/ssl/ssl_session.cc (L396)` - `44b3df6f03/src/ssl/ssl_x509.cc (L713)` It is not used anywhere else as a verification result code. To improve the error message, this commit adds `INVALID_CALL` as a verification result for which no additional error is dislayed.		2025-01-06 16:12:05 +00:00
.github/workflows	Refactor!: Introduce a Cargo feature for optional Hyper 0 support	2024-12-07 21:07:31 +00:00
boring	Remove INVALID_CALL from mid-handshake error message	2025-01-06 16:12:05 +00:00
boring-sys	Support linking with a runtime cpp library	2025-01-06 16:08:33 +00:00
hyper-boring	Refactor!: Introduce a Cargo feature for optional Hyper 0 support	2024-12-07 21:07:31 +00:00
scripts	Add publish script	2020-11-12 13:08:13 +00:00
tokio-boring	Updates license field to valid SPDX format	2024-06-02 10:40:17 +01:00
.gitignore	Rename stuff	2020-11-11 17:47:30 +00:00
.gitmodules	Add fips-3678 feature (#52 )	2022-01-31 16:11:33 -06:00
.rusty-hook.toml	Add tokio-boring	2020-11-11 19:26:22 +00:00
Cargo.toml	Refactor!: Introduce a Cargo feature for optional Hyper 0 support	2024-12-07 21:07:31 +00:00
README.md	Update docs	2023-07-10 12:29:30 +01:00
RELEASE_NOTES	Release 4.13.0	2024-11-28 12:47:31 -08:00
THIRD_PARTY	Rename stuff	2020-11-11 17:47:30 +00:00
cliff.toml	Tweak cliff config to exclude merge and release commits from changelog	2024-04-09 11:18:05 +02:00

README.md

boring

BoringSSL bindings for the Rust programming language and TLS adapters for tokio and hyper built on top of it.

Documentation

Boring API: https://docs.rs/boring
tokio TLS adapters: https://docs.rs/tokio-boring
hyper HTTPS connector: https://docs.rs/hyper-boring
FFI bindings: https://docs.rs/boring-sys

Contribution

Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed under the terms of both the Apache License, Version 2.0 and the MIT license without any additional terms or conditions.

Accolades

The project is based on a fork of rust-openssl.