-
Notifications
You must be signed in to change notification settings - Fork 123
/
Copy pathRELEASE_NOTES
2389 lines (2358 loc) · 108 KB
/
RELEASE_NOTES
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
4.16.0
- 2025-03-31 Add fips-precompiled feature to support newer versions of FIPS (#338)
- 2025-03-18 Document linking to C++ standard library (#335)
- 2025-03-18 Revert "Remove "fips-no-compat", decouple "fips-compat" from "fips"" (#334)
- 2025-03-11 boring: Disable `SslCurve` API with "fips" feature
- 2025-03-11 boring-sys: Ignore patches when boringSSL is precompiled
- 2025-03-13 Remove "fips-no-compat", decouple "fips-compat" from "fips"
- 2025-03-14 Add feature "fips-no-compat"
- 2025-03-10 Advertise X25519MLKEM768 with "kx-client-pq-preferred" (#329)
- 2025-03-10 Update to actions/cache@v4 (#328)
- 2025-02-28 Add missing release notes entry (#324)
4.15.0
- 2025-02-27 Expose API to enable certificate compression. (#241)
- 2025-02-23 Fix lifetimes in ssl::select_next_proto
- 2025-02-23 Revert cmake bump (for now) as it is overly restrictive (#321)
- 2025-02-21 Introduce a builder pattern for SslEchKeys + make set_ech_keys take a reference (#320)
- 2025-02-21 Revert "Refactor!: Remove strict `TokioIo` response requirement from `hyper_boring::v1::HttpsConnector`"
- 2025-02-21 Revert "Refactor!: Introduce a Cargo feature for optional Hyper 0 support"
- 2025-02-21 Address clippy lints
- 2025-02-21 Actually expose SslEchKeys
4.14.0
- 2025-02-19 Bump cmake-rs to improve Mac OS build parallelism
- 2025-02-19 Expose SSL_CTX_set1_ech_keys from SslContextRef
- 2024-01-27 Set CMAKE_BUILD_PARALLEL_LEVEL to available_parallelism
- 2025-02-14 build: Fix the build for 32-bit Linux platform (#312)
- 2024-11-30 Use corresponds macro
- 2025-02-12 Expose SSL_set_enable_ech_grease
- 2025-02-12 Clean up ECH tests
- 2025-02-10 Expose client/server-side ECH
- 2025-02-10 Expose EVP_HPKE_KEY
- 2025-02-10 Clean up boring_sys::init()
- 2024-11-27 Detailed error codes
- 2025-02-04 chore: Fix docs on SslRef::replace_ex_data
- 2025-01-22 fix manual_c_str_literals clippy warning
- 2025-01-22 replace once_cell with LazyLock
- 2025-01-13 RTG-3333 Support X25519MLKEM768 by default, but don't sent it as client
- 2024-07-31 Allow dead_code instead of disabling clippy entirely for bindgen
- 2024-11-12 Remove INVALID_CALL from mid-handshake error message
- 2024-08-16 Fix bug with accessing memzero'd X509StoreContext in tests
- 2024-08-16 Support linking with a runtime cpp library
- 2024-12-06 Refactor!: Introduce a Cargo feature for optional Hyper 0 support
- 2024-12-06 Refactor!: Remove strict `TokioIo` response requirement from `hyper_boring::v1::HttpsConnector`
4.13.0
- 2024-11-26 Sync X509StoreBuilder with openssl
- 2024-11-26 Sync X509VerifyFlags with openssl
- 2021-11-21 More corresponds from openssl
- 2024-11-28 Work around Rust settings inconsistent iOS SDK version
- 2024-11-28 Clippy
- 2024-03-11 Fix Windows build
4.12.0
- 2024-11-20 Add bindings for SSL_CB_ACCEPT_EXIT and SSL_CB_CONNECT_EXIT
- 2024-10-22 (ci): brew link x86 toolchain for macos13 runner
- 2024-10-22 Skip bindgen 0.70's layout tests before Rust 1.77
- 2024-10-18 Add `set_cert_verify_callback` (`SSL_CTX_set_cert_verify`)
4.11.0
- 2024-10-17 boring-sys: include HPKE header file for bindgen
- 2024-10-17 Add "fips-compat" feature (#286)
- 2024-09-25 Create semgrep.yml
4.10.3
- 2024-09-21 Set MSRV to 1.70 (#279)
4.10.2
- 2024-09-18 boring-pq.patch Fix by not updating crypto_test_data.cc
4.10.1
- 2024-09-18 Don't support X25519MLKEM768 by default (yet)
4.10.0
- 2024-09-18 Implement optional Hyper 1 support in hyper-boring (#246)
- 2024-09-17 Add post-quantum key agreement X25519MLKEM768
- 2024-09-10 Revert "PQ: fix timing sidechannels and add IPDWing"
- 2024-09-17 Update bindgen to 0.70.1
- 2024-09-17 Expose SSL(_CTX)_set1_curves_list (#270)
- 2024-09-11 Expose SSL_CTX_set_info_callback (#266)
- 2024-09-03 Use ForeignType::into_ptr wherever applicable
- 2024-08-19 Expose RSAPSS public key Id type
- 2024-08-15 Fix macos FIPS crossbuild
- 2024-08-15 Add tests for X509Ref::subject_key_id, X509Ref::authority_key_id, and X509NameRef::print_ex
- 2024-08-14 Expose X509NameRef::print_ex
- 2024-08-13 Introduce `corresponds` macro from openssl-macros
- 2024-08-14 Introduce ForeignTypeExt and ForeignTypeRefExt
- 2024-08-09 Expose mTLS related APIs
- 2024-08-14 chore(boring-sys): Fix git apply patch on Windows (#261)
4.9.1
- 2024-08-04 Properly handle `Option<i32>` in `SslRef::set_curves`
4.9.0
- 2024-08-02 Actually Release 4.9.0
- 2024-08-02 Guard against empty strings given to select_next_proto (#252)
- 2024-08-01 Document `SslCurve::nid()`
- 2024-08-01 Add SslCurve::to_nid() and remove SslCurveId
- 2024-07-23 Fix x509_check_host return value
- 2024-07-29 Fix clippy lints re: docs indentation + unused feature
- 2024-07-29 Ignore clippy / rustfmt on autogenerated code
- 2024-07-26 Clean up legacy const_fn feature gates
- 2024-07-23 Impl From for SslVersion
- 2024-06-03 Split SSL curve identifiers into a separate enum.
- 2024-07-23 (ci): Fix macos crossbuild action by forcing brew link w [email protected]
- 2024-07-09 Expose set_permute_extensions
- 2024-06-24 PQ: fix timing sidechannels and add IPDWing
4.8.0
- 2024-06-28 Expose hmac_sha1 function
- 2024-06-18 Fix workflows file, pin mac os FIPS crossbuild runner to macos-13
- 2024-06-18 clippy: *::max_value() -> *::MAX
- 2024-06-18 Expose X509_check_host
- 2024-06-18 Expose SSL_add1_chain_cert
- 2024-06-18 Expose SSL_{set|clear}_mode
- 2024-06-18 Expose SSL_{get|set}_{max|min}_proto_version
- 2024-06-18 Add APIs to expose client and server cipher lists
- 2024-06-18 Expose SSL_CIPHER_is_aead and SSL_CIPHER_auth_nid
- 2024-06-18 Add NIDs for cipher authentication types
- 2024-06-14 Impl From for SslSignatureAlgorithm
- 2024-03-27 Updates license field to valid SPDX format
4.7.0
- 2024-05-31 Fix crosscompile
- 2024-05-30 Expose hmac_sha256/512 functions
4.6.0
- 2024-04-09 Tweak cliff config to exclude merge and release commits from changelog
- 2023-12-04 builder
- 2023-12-01 HttpsLayerSettings
- 2022-11-28 bound session cache
- 2024-03-26 add get_curve (#226)
- 2024-03-24 Remove kx-safe-default gate on SslCurve
- 2024-02-06 Enable layout tests on iOS target
- 2024-03-23 Fix clippy lints
- 2024-03-21 Add getters for client hello message
- 2024-01-25 Removes vestigial build script
- 2024-02-02 Introduce and use read_uninit and write_uninit duplicated from openssl-0.10.61 and tokio-openssl-0.6.4
- 2024-02-07 Introduce SslRef::set_private_key
4.4.1
- 2024-02-02 Fix building with BORING_BSSL_PATH / BORING_BSSL_FIPS_PATH
- 2024-01-24 Fix building with non bazel commits of boringssl
4.4.0
- 2024-01-16 Expose `set_compliance_policy` and `get_ciphers`
- 2024-01-08 Expose SSL_get_error
- 2023-12-20 Fix support for fips-link-precompiled
4.3.0
- 2024-01-03 Introduce X509Flags
- 2024-01-03 Move x509 tests to a subdirectory
- 2024-01-02 Rearrange imports in x509 module
- 2023-12-20 Introduce HttpsLayer::set_ssl_callback
- 2023-12-20 Don't use self-signed certs in hyper-boring tests
- 2023-12-18 Introduce X509CheckFlags::UNDERSCORE_WILDCARDS
4.2.0
- 2023-12-13 Introduce set_custom_verify_callback and set_async_custom_verify_callback
- 2023-12-13 Restore rpk feature in tokio-boring
- 2023-12-13 Remove rpk from hyper docsrs features
- 2023-12-14 Introduce tokio_boring::SslStreamBuilder
- 2023-11-14 Swap build and run order; always build
- 2023-11-13 Remove unused target_env from boring-sys build config
- 2023-10-13 boring-sys: Blocklist max_align_t in bindgen
- 2023-10-14 boring-sys: Don't check for MSVC with target_env
- 2023-10-14 Use gcc/g++ as the compilers for windows-gnu, not Clang
- 2023-10-14 Always run tests in bash
- 2023-10-14 Add arm64-macos cross-compile to CI
- 2023-10-13 Add custom linker for Android cross-compilation
- 2023-10-13 Add custom environment for ARM Linux cross-compilation
- 2022-06-03 Build tests even for cross-compiling
- 2023-10-13 Remove musl test; there's no standard musl C++ setup for us to use
- 2022-06-03 Make arm and Android builds check-only
- 2022-06-03 Add matrix.apt_packages
- 2022-06-03 Refactor check-only and extra-test-args
- 2022-05-27 Add relevant `--target` to `cargo test` in CI
- 2023-12-07 Fix typos
- 2023-11-11 boring-sys: Don't use CMake cross-compilation for macOS->iOS
- 2023-11-27 Move async callbacks infra to boring itself
- 2023-11-17 Use replace_ex_data more
4.1.0
- 2023-11-16 Properly drop overwritten ex data
- 2023-11-16 Fix clippy lint
4.0.0-rc.2
- 2023-11-06 Update release notes
- 2023-11-06 Add cargo-release metadata
- 2023-11-02 Remove Sync trait bounds on callback futures
- 2023-10-30 Update Cargo.toml
- 2023-10-26 hyper and tokio "full" feature for dev builds only
4.0.0-rc.1
- 2023-10-26 Specify exact versions of dependent crates in the workspace manifest
- 2023-10-16 Add CI for cross-building from macOS
- 2023-10-16 Introduce BORING_BSSL_SYSROOT and BORING_BSSL_EXTERNAL_TOOLCHAIN
- 2023-10-16 Check for CMAKE_TOOLCHAIN_FILE when creating cmake config
- 2023-10-16 Introduce target-specific env vars
- 2023-10-16 Continue looping if candidate cxx isn't found in verify_fips_clang_version
- 2023-10-12 Introduce set_async_get_session_callback
- 2023-10-12 Allow returning GetSessionPendingError from get session callbacks
- 2023-10-24 Test set_get_session_callback
- 2023-10-24 Test new session callback on server side
- 2023-10-24 Move session tests to their own module
- 2023-10-11 Replace feature no-patches with BORING_BSSL{,_FIPS}_ASSUME_PATCHED
- 2023-10-11 Remove feature rpk from hyper-boring and tokio-boring
- 2023-10-10 Introduce a new set of env variables for FIPS-like builds
- 2023-10-10 Use prefix BORING_BSSL_ for all boringssl env variables
- 2023-10-10 Don't read BORINGSSL_BUILD_DIR anymore
- 2023-10-10 Don't use env::current_dir in build script
- 2023-10-10 Introduce struct Config in build script
- 2023-10-11 Change X509VerifyResult to Result<(), X509VerifyError>
- 2023-10-11 Introduce bindings for all X509_V_ERR_* constants
- 2023-02-17 Add SHA224, SHA512, SHA512-256 tests
- 2023-02-17 Expose SHA512-256
- 2023-10-09 Remove boring::fips::enable (fixes #150)
- 2023-10-09 Remove futures from ex data slots once they resolve
- 2023-10-06 Introduce SslSignatureAlgorithm::RSA_PKCS1_MD5_SHA1
- 2023-10-06 Introduce Ssl::set_certificate
- 2023-07-28 Introduce async callbacks
- 2023-08-02 Implement SslContextBuilder::set_private_key_method
- 2023-07-28 Change signature for set_select_certificate_callback
- 2023-08-04 Introduce AsyncStreamBridge
- 2023-06-23 Add a few WouldBlock cases
- 2023-08-04 Introduce helper module in tokio-boring tests
- 2023-08-03 Introduce setup_accept and setup_connect
- 2023-09-14 Panic on error when setting default curves list
- 2023-06-23 Introduce ssl::Error::would_block
- 2023-09-22 deps: update to bindgen 0.68
- 2023-10-06 Fix clippy lints
- 2023-08-15 Add new(), connect(), accept() and handshake() to SslStream
- 2023-09-18 Enable P-521 with "kx-safe-default"
- 2023-08-15 Provide into_ssl() for ConnectConfiguration
3.1.0
- 2023-09-13 Update Cargo.toml
- 2023-09-13 Update RELEASE_NOTES
- 2023-09-13 Update RELEASE_NOTES
- 2023-09-12 tweaks for ergonomic linking
- 2023-08-08 Use features to set key exchange preferences
- 2023-08-30 Introduce `no-patches` feature
- 2023-08-29 run `publish --dry-run` instead of `pacakge` on CI
- 2023-08-29 fix missing space in cargo package CI command
- 2023-08-25 ci: run the cargo package check for all targets
- 2023-08-25 boring-sys: include all files needed to build FIPS
- 2023-08-25 add CI jobs to run `cargo package`
- 2023-08-15 Fix -Z minimal-versions
- 2023-08-29 Separate `fips` and `fips-link-precompiled` features.
3.0.4
- 2023-08-05 Bump version in Cargo.toml
- 2023-08-05 Add missing cmake files to the package
3.0.3
- 2023-08-03 Fix missing .trim() when verifying FIPS module name
- 2023-08-03 Fix Diplay panics for HandshakeError with `rpk` (fixes #140)
3.0.2
- 2023-08-03 Fix feature gates for fips-link-precompiled
- 2023-07-28 Switch boring from lazy_static to once_cell
- 2023-08-01 Clean up and remove some unsafe code from ffi callbacks
3.0.1
- 2023-08-01 Reduce release bundle size by excluding PQ test data
- 2023-07-28 Adding hmac.h to included headers
- 2023-08-01 Reduce release bundle size by excluding PQ test data
- 2023-08-01 Fix builds for features that require git patches
3.0.0
- 2023-07-29 Fix publishing
- 2023-07-28 Add git-cliff configuration
- 2022-07-29 boring-sys: Handle cross-compiling macOS targets
- 2022-11-08 boring-sys: Add support for Linux ARM(v7)
- 2022-11-30 boring-sys: Update Android NDK sysroot path
- 2022-07-28 boring: Expose PKey::private_key_to_der_pkcs8(_passphrase)
- 2023-07-26 Add fips-link-precompiled feature
- 2023-07-14 Allow specifying a custom BoringSSL source directory
- 2023-07-10 Address review comments
- 2023-07-10 Update docs
- 2023-07-10 Use workspace metadata for crates
- 2023-07-07 Add RPK and PQ crypto features
- 2023-05-15 Revert "Merge pull request #108 from nox/store-clone"
- 2023-05-15 Fix build
- 2023-03-27 Implement ToOwned for X509StoreRef and Clone for X509Store
- 2023-03-22 Fix race condition with X509Name creation
- 2023-03-22 Document the horror show
- 2023-03-22 Always provide an X509V3Context in X509Extension::new because OpenSSL requires it for some extensions (and segfaults without)
- 2023-03-22 Resolve an injection vulnerability in EKU creation
- 2023-03-22 Resolve an injection vulnerability in SAN creation
- 2021-10-04 Add X509Name to/from DER methods
- 2020-11-12 Add additional function so that x509 name with specific type can be added
- 2022-07-01 boring: Fix memory leak in `Deriver`
- 2023-05-05 Update boringssl to latest upstream commit
- 2023-01-10 Update BoringCrypto to FIPS 140-2 certificate 4407.
- 2023-02-28 Add link in docs
- 2023-02-28 psuedo → pseudo
- 2023-04-27 Bump bindgen to 0.65.1
- 2023-03-27 Fix lints
- 2023-03-27 Fix google test
- 2023-03-27 Use ubuntu-20.04 image for FIPS build
- 2022-06-22 Add minimal cross-compilation support for Windows and AArch64 Linux
- 2022-09-16 bump version number for tokio-boring
2.1.0
- 2022-09-16 Update changelogs and bump version numbers
- 2022-09-07 Fix clippy warnings
- 2022-09-07 Remove uses of `mem::uninitialized`
- 2022-08-08 Remove T: Debug bound
- 2022-08-08 hyper-boring: Impl debug for MaybeHttpsStream
- 2022-07-25 boring-sys: Use the Android NDK sysroot when running bindgen
- 2022-06-17 MSVC generator hack should be only applied to MSVC
- 2022-06-07 chore: update to bindgen 1.60
- 2021-12-30 ci: Test builds for iOS targets
- 2021-12-30 ci: Don't run tests when targeting iOS
- 2022-01-01 boring-sys: Disable alignment tests for iOS ARM64 targets
- 2021-12-30 boring-sys: Configure "rustc-cdylib-link-arg" only for macOS targets
- 2021-12-30 boring-sys: Pass "-isysroot" to bindgen for iOS builds
- 2021-12-30 boring-sys: Support "aarch64-apple-ios-sim" targets
- 2021-12-30 boring-sys: Use TARGET to determine iOS CMake params
- 2021-12-30 boring-sys: Pull iOS CMake params into a function
- 2021-12-30 boring-sys: Pull Android CMake params into a function
- 2022-06-02 boring-sys: Save time by not building the bssl CLI utility
- 2022-04-28 ssl/test: fix UT expectations accordingly with boringssl change
- 2022-04-27 Update boringssl deps for quiche 0.12.0 compatibility
- 2022-02-12 boring: BigNumRef::to_vec_padded()
- 2022-01-31 Add fips-3678 feature (#52)
- 2021-12-30 boring: Suppress Clippy warnings about missing safety docs
- 2021-12-16 Add/update changelogs
- 2021-12-16 Bump versions for release
- 2021-10-06 Remove PasswordCallback
- 2021-11-04 Relax constraints on `Display for tokio-boring::HandshakeError`
- 2021-11-02 boring-sys: Disable unnecessary bindgen dependencies
- 2021-08-10 Remove unused and deprecated `tempdir` dependency
- 2021-08-09 Remove unused `*Ref` parameters to macro
- 2021-08-09 Update dependencies
- 2021-08-12 Switch to 2018 edition in boring
- 2021-08-12 Run `cargo fix --edition
- 2021-07-30 Remove unused attribute
- 2021-06-14 Remove unused dependency on bytes
- 2021-07-29 Update bindgen to 0.59 and bytes to 1
- 2021-07-29 Fix clippy warnings for 1.54
- 2021-07-28 Update documentation for tokio-boring
- 2021-07-27 Fetch git submodule automatically
- 2021-06-01 pre-built binaries: Update readme and fix clippy
- 2021-05-18 Check for env var for pre-built binaries of bssl
- 2021-07-27 Ignore bindgen warnings until they're fixed upstream
- 2021-04-16 Bump tokio-boring to 2.1.3
- 2021-04-16 Bump boring to 1.1.6
- 2021-04-16 Introduce ClientHello::client_version
- 2021-04-16 Introduce HandshakeError::code
- 2021-04-13 Bump boring to 1.1.5
- 2021-04-13 Allow retrieving the version string from early callback
- 2021-04-13 Allow returning the server name from the early callback
- 2021-04-06 Bump boring-sys to 1.1.1, tokio-boring to 2.1.2
- 2021-04-06 Allow uppercase acronyms
- 2021-04-06 Provide access to inner I/O error during handshake
- 2021-03-15 Bump boring to 1.1.4
- 2021-03-15 Use Display for ssl::Error in Display for ssl::HandshakeError
- 2021-03-15 Tweak yet again the boring error reporting
- 2021-03-11 Bump boring to 1.1.3
- 2021-03-11 Remove file/line from Display for HandshakeError
- 2021-03-09 Bump boring to 1.1.2, tokio-boring 2.1.1
- 2021-03-09 Add tokio_boring::HandshakeError::as_source_stream
- 2021-03-09 Introduce MidHandshakeSslStream::into_parts
- 2021-03-04 Print handshake errors in a better way
- 2021-03-04 Separate errors in an error stack better
- 2021-03-01 Bump boring to 1.1.1
- 2021-03-01 Make Display for Error more readable
- 2021-02-24 Bump feature version on all packages instead.
- 2021-02-24 Bump boring-sys to 1.0.5. Bump boring to 1.0.4
- 2021-02-20 Add support for SSL_CTX_set1_curves
- 2021-02-19 Enable various client features of bssl
- 2021-02-22 Introduce ExtensionType for the arg of get_extension
- 2021-02-19 Introduce ClientHello::get_extension
- 2021-02-19 Introduce set_select_certificate_callback
- 2021-02-11 Use bindgen to automatically generate boring-sys
- 2021-02-18 Sync upstream changes to support tokio 1.x
- 2021-02-11 Make new clippy happy
- 2021-02-11 Bump boring-sys to 1.0.4
- 2021-02-09 Update boringssl submodule pointer
- 2021-02-08 Bump boring-sys to 1.0.3
- 2021-01-28 Include .asm files required for Windows
- 2021-01-20 Bump hyper-boring version
- 2021-01-08 Fix clippy warning.
- 2021-01-08 Ensure the host can be parsed as an IPv6 address.
- 2020-12-23 Bump version
- 2020-12-23 Implement conversion of HandshakeError to the source stream
- 2020-12-03 Make clippy happy
- 2020-12-03 Add support for wss: scheme in hyper-boring
- 2020-11-13 Fix boring repository links.
- 2020-11-12 Add publish script
- 2020-11-12 Fix boring-sys linking. Bump version.
- 2020-11-11 Fix doc comment
- 2020-11-11 Fix docs
- 2020-11-11 Add hyper-boring
- 2020-11-11 Add tokio-boring
- 2020-11-11 Revive CI
- 2020-11-11 Fix doc comments
- 2020-11-11 Rename stuff
- 2020-11-11 Remove LibreSSL leftovers
- 2020-11-11 Remove ossl110 gate
- 2020-11-11 Remove ossl102 gate
- 2020-11-11 Remove ossl101 gate
- 2020-11-11 Remove ossl110f config gate
- 2020-11-11 Remove ossl110g feature gate
- 2020-11-11 Remove ossl111 feature gate
- 2020-11-11 Remove unimplemented OSSL111 stuff
- 2020-11-11 Remove LibreSSL-specific code
- 2020-11-11 Revive tests
- 2020-11-10 Fix compilation warnings
- 2020-11-10 Remove decrepit and unavaliable API and fix signatures
- 2020-11-08 BoringSSL
- 2020-10-12 Update to cfg-if 1.0
- 2020-10-10 Silence clippy::match_like_matches_macro (would require rust 1.42)
- 2020-10-10 Fix a typo
- 2020-09-27 Update some X509_CRL bindings for libressl281
- 2020-09-27 Add some X509_REVOKED bindings, make extensions field public
- 2020-09-27 Add more extension bindings for STACK_OF(X509_EXTENSION)
- 2020-09-28 Fix ASN1_OCTET_STRING in bindings
- 2020-08-09 Add AUTHORITY_KEYID struct
- 2020-08-09 Add bindings and consts for x509 extensions flags and (extended) key usage
- 2020-08-09 Add bindings to access x509 extensions in various types
- 2020-09-26 Add a few bindings for X509_REVOKED
- 2020-09-26 Add more bindings for X509_CRL
- 2019-06-10 Expose the X509Revoked type directly
- 2019-06-07 Add basic bindings to the API CRLs
- 2020-09-24 bump to 1.1.1f in CI
- 2020-09-13 Add ecx support
- 2020-09-03 Add constructor for creating Asn1Object from a textual OID representation
- 2020-08-31 Add from_der and to_der to PKCS7
- 2020-08-15 Test openssl-errors on windows
- 2020-08-12 Make openssl-errors tests work on Windows
- 2020-08-11 Update mod.rs
- 2020-08-11 Cast to u32
- 2020-03-06 Expose subject_name_hash
- 2020-07-27 Make openssl not cleanup at exit, which can lead to race conditions on openssl >= 1.1.1b.
- 2020-08-08 Stop testing 1024 bit DH keys
- 2020-07-28 Work around upstream base64 bug
- 2020-07-28 Fix EcdsaSig method flexibility
- 2020-07-22 Fix clippy
- 2020-07-03 Fix documentation for unwrap_key
- 2020-06-26 Fix changelog
- 2020-06-23 Add SslStream::from_raw_parts
- 2020-06-14 sign.rs: fix typo in comment
- 2020-06-06 Fix CI branch
- 2020-06-06 remove appveyor builds
- 2020-06-06 Ignore default verify paths test on windows
- 2020-06-06 test env lookup
- 2020-06-06 set vcpkg root
- 2020-06-06 run stuff
- 2020-06-06 update vcpkg
- 2020-06-06 Move vcpkg build to github actions
- 2020-06-04 Fix test.
- 2020-06-04 Make tests narrower.
- 2020-06-02 Write "error" when there is an error.
- 2020-06-01 Fixes in response to review feedback.
- 2020-05-30 Add Debug trait for X509 and other types.
- 2020-06-05 Fix readme link
- 2020-06-03 adding PKE interface
- 2020-06-05 Adds Debug derive for SslConnector
- 2020-06-05 Fix private key serializtion in HasPublic impl for DsaRef
- 2020-06-05 Add PEM/DER serialization for EC public key
- 2020-06-05 fix clippy
- 2020-06-03 Fix cache name
- 2020-06-02 Support LibreSSL 3.2.0
- 2020-05-26 fix syntax
- 2020-05-26 Move min-version to github actions
- 2020-05-26 asdf
- 2020-05-26 Add SslRef::set_mtu
- 2020-05-24 Run clippy
- 2020-05-24 Run rustfmt on github actions
- 2020-05-09 remove any from openssl110 cfgs
- 2020-05-08 ocb is only available in openssl 1.1 and later
- 2020-05-08 Add support for AES-OCB mode
- 2020-05-09 LibreSSL 3.1 branch marked as stable; add support
- 2020-05-02 Fix static build on windows-gnu targets
- 2020-04-28 Bump ci versions
- 2020-04-19 Support LibreSSL 3.1.0
- 2020-04-12 Fix function name in peer_finished documentation
- 2020-04-08 FIx build
- 2020-04-08 Deal with upstream archive location change
- 2020-04-08 Add SslContextBuilder::set_cert_store
- 2020-04-05 Update openssl/src/lib.rs
- 2020-04-05 Add documentation for OPENSSL_NO_VENDOR
- 2020-04-05 Add OPENSSL_NO_VENDOR env var check
- 2020-04-05 Bump CI version
- 2020-03-24 Update openssl/src/ssl/mod.rs
- 2020-03-24 Add man page links
- 2020-03-24 Add functions for SSL{_CTX}_get_verify_mode and SSL_is_init_finished
- 2020-03-24 Add SslMethod::tls_{client,server}
- 2020-03-24 Update openssl/src/x509/store.rs
- 2020-03-24 Add a shim for X509_STORE_get0_objects and X509_OBJECT_free
- 2020-03-23 Only have constants on < ossl110
- 2020-03-23 Skip X509_OBJECT_data systests
- 2020-03-23 Add x509_vfy.h header to systest
- 2020-03-23 Check null ptr for non-x509 X509Object
- 2020-03-23 Fix signedness issue
- 2020-03-23 Add a way to get the certificates stored in an X509Store
- 2020-03-21 Fix build on DragonFly
- 2020-03-19 Upgrade CI versions
- 2020-02-26 Fix the memory leak in `X509Builder::append_extension`.
- 2020-02-26 use library names supplied by vcpkg
- 2020-02-13 Tweak interface a bit
- 2020-02-05 adds ability access the internal &SslContext of an SslAcceptor and SslConnector
- 2020-02-11 Allow bad style on pkey.rs
- 2020-02-10 Attach cfg[allow_deprecated] to methods w/ uninitialized functionality
- 2020-02-04 Fix mutability of oneshot sign/verify methods
- 2020-02-03 Fix visibility of Signer::new_intern
- 2020-01-29 Fix changelog
- 2020-01-27 Add NO RENEGOTIATION option
- 2020-01-24 Add EVP_EncryptInit_ex/EVP_EncryptFinish_ex, and the equivalently named
- 2019-10-03 add SslStreamBuilder::set_dtls_mtu_size(usize)
- 2020-01-10 Update to autocfg 1.0
- 2019-12-27 Avoid false-failures if underlying network connection errors
- 2019-12-24 Upgrade 1.0.2 in CI
- 2019-12-17 Replace try!() with ?
- 2019-12-21 remove deprecated Error::description, replace deprecated cause with source
- 2019-12-20 In the documentation of SslContextBuilder::set_certificate, we had written
- 2019-12-20 In the documentation of SslContextBuilder::set_session_id_context, we had written
- 2019-12-20 In the documentation of SslContextBuilder::set_cipher_list, we had given
- 2019-12-12 Fix documentation typo of "chain"
- 2019-12-12 Fix link
- 2019-12-09 fix a typo in the description of `Asn1Time`
- 2019-12-04 Use d2i_PKCS8_PRIV_KEY_INFO instead of *_bio
- 2019-12-03 Pkey::private_key_from_pkcs8 free p8inf
- 2019-12-01 Fix pointer constness correctly
- 2019-12-01 Change *const to *mut to try if it fixes tests
- 2019-12-01 move EVP_PKCS82PKEY into evp module
- 2019-12-01 Support for PKCS#8 unencrypted private key deserialization
- 2019-11-23 Update openssl/src/hash.rs
- 2019-11-22 Add EVP_md_null() and MessageDigest::md_null()
- 2019-11-22 Fix up base64 docs
- 2019-11-22 Cleanup
- 2019-11-22 Fix IV handling in envelope
- 2019-11-13 Avoid initialization overhead for base64 coding
- 2019-11-13 Expose EVP_{Encode,Decode}Block interfaces for base64 coding
- 2019-11-13 Format code using 'cargo fmt'
- 2019-11-16 Remove busted windows build
- 2019-11-16 Allow configuration of EC groups and signature algorithms
- 2019-11-12 Added unit test to test that new cloning feature works as intended
- 2019-11-12 Changed all sha objects to be clonable per PR review suggestion.
- 2019-11-11 Added clonability for sha hash state. Useful for incremental hashing
- 2019-11-11 Add #[cfg(ossl110)]
- 2019-11-11 Add EC_GROUP_order_bits
- 2019-10-10 Add method to create Asn1Time from time_t value
- 2019-10-10 Add diff method and comparisons to Asn1TimeRef
- 2019-10-19 Support LibreSSL 3.0.2
- 2019-10-10 Fix changelog links
- 2019-10-10 Note openssl-sys support
- 2019-10-08 Fix rustc warnings
- 2019-10-03 Support LibreSSL 3.0.1
- 2019-10-02 Implement Clone for PKey
- 2019-10-01 Upgrade CI versions
- 2019-09-08 Ensure Signer::len has documentation
- 2019-08-16 Added support for Ed25519 and Ed448 signatures
- 2019-09-07 Bump MSRV again
- 2019-09-06 Bump MSRV
- 2019-09-06 Free r and s on ECDSA_SIG before overwriting them in ECDSA_SIG_set0
- 2019-08-07 Fix minimal version build
- 2019-08-07 Support LibreSSL 3.0.0
- 2019-07-19 Hack around an unpatched OpenSSL issue
- 2019-07-06 Add AES-192 tests in CTR, CFB, and OFB modes
- 2019-07-06 Add AES-192 and OFB mode
- 2019-06-30 Expose pem serialize function for DSA private key
- 2019-06-29 Don't depend on NO_SSL_MASK
- 2019-06-29 Minimize test duplication
- 2019-06-29 Add mozilla v5 configurations
- 2019-06-19 Expose EC_POINT_dup as EcPoint::to_owned
- 2019-06-14 Expose EC_GROUP_get_cofactor as EcGroup::cofactor
- 2019-06-13 Expose EC_GROUP_get0_generator as EcGroup::generator
- 2019-06-12 Conditionally compile PEM functions for CMS
- 2019-06-12 Extend CMS unit tests (pem/der conversions)
- 2019-06-12 Fix formatting in cms `to_der` implementation
- 2019-06-12 Add `CmsContentInfo` <-> PEM bindings
- 2019-06-10 Add Debug impl for EcKey
- 2019-06-08 Address comments
- 2019-06-06 Add AES_wrap_key and AES_unwrap_key functionality
- 2019-06-01 Report the vendored install location
- 2019-05-31 Fix constness for 1.1.1c
- 2019-05-31 Bump CI versions
- 2019-05-30 Display for Error was incorrectly showing func instead of reason.
- 2019-05-18 Fix handling of session callbacks
- 2019-05-13 Const-correctness
- 2019-05-13 Allow passing by non-owned reference
- 2019-05-13 Add SSL_CTX_add_client_CA on OpenSSL
- 2019-05-09 Ignore SRTP tests on libressl 2.9.1
- 2019-04-26 Whitelist future LibreSSL 2.9.x versions, as 2.9.1 is the first stable release.
- 2019-04-25 Reconcile exdata and version functions between libraries/versions.
- 2019-04-24 Add missing any() in the {,D}TLS_method usage logic.
- 2019-04-23 Support LibreSSL 2.9.1
- 2019-05-04 Revert "fix build err for taget `*-pc-windows-gnu`"
- 2019-05-03 Fix doc link bugs
- 2019-05-01 Switch from `rustc_version` to `autocfg`
- 2019-04-26 fix build err for taget `*-pc-windows-gnu`
- 2019-04-29 Fix output size check for stream ciphers
- 2019-04-25 Fix deprecation warnings in tests
- 2019-04-24 Clean up seal/open a bit
- 2019-04-23 Fix requiret ossl version for EVP_PKEY_size
- 2019-04-17 Remove unnecessary version req and clean up param names.
- 2019-04-17 Address comments.
- 2019-04-15 Remove nested groups in use.
- 2019-04-15 Add minimum ossl version.
- 2019-04-14 Add EVP_Seal and EVP_Open
- 2019-04-22 Don't set OPENSSL_VERSION for mingw build
- 2019-04-03 Tell dependencies if vendored OpenSSL was used
- 2019-03-20 Cleanup ssl tests
- 2019-03-17 Expose EC_GROUP_get_curve_name()
- 2019-03-17 Expose EVP_MD_type()
- 2019-03-17 Implement Eq for MessageDigest
- 2019-03-14 Move CHANGELOG.md into openssl
- 2019-03-14 Metadata
- 2019-03-13 Fix osx build
- 2019-03-13 Document openssl-errors
- 2019-03-13 Allow attributes on error items
- 2019-03-11 Add a crate to define custom error libraries
- 2019-03-12 Fix deprecation warning
- 2019-03-12 Upgrade ctest
- 2019-03-12 Fix synatx
- 2019-03-12 Build against modern rust by default
- 2019-03-12 Parameterize rust version in circle
- 2019-03-06 X.509: add verify methods
- 2019-03-01 CMS: add encrypt, from_der
- 2019-03-01 Update changelog
- 2019-03-01 Use into for infallible conversions
- 2019-03-01 Add session cache size accessors
- 2019-03-01 Add session info accessors
- 2019-03-01 Add SslCtx::{add,remove}_session
- 2019-02-28 Implement Clone for Dsa
- 2019-02-28 Add ERR_PACK
- 2019-02-28 Don't dynamically generate expando.c
- 2019-02-27 Add some debugability to build script env
- 2019-02-27 typo
- 2019-02-27 Fix const changes in 1.1.1b
- 2019-02-27 Update test versions
- 2019-02-22 Update changelog
- 2019-02-22 Fix cipher_name return value
- 2019-02-22 Update changelog
- 2019-02-22 Add standard ciphername support
- 2019-02-22 Rustfmt
- 2019-02-18 Change from EVP_des_ede3_cfb to EVP_des_ede3_cfb64
- 2019-02-17 Add des_ede3_cfb symm cipher
- 2019-01-30 Make Rsa::generate delegate to Rsa::generate_with_e
- 2019-01-29 add Rsa::generate_with_e(bits: u32, e: BigNum)
- 2019-01-27 ASN1_TIME_from_string_x509 was added in 1.1.1
- 2019-01-27 Add Asn1Time::from_str and Asn1Time::from_str_x509
- 2019-01-25 SRP_CTX doesn't exist when OPENSSL_NO_SRP is set
- 2019-01-23 Migrate circle config to 2.1 goodness
- 2019-01-22 Remove x86 windows msys build
- 2019-01-18 Add RsaRef::check_key
- 2019-01-18 Forward to BigNumRef::to_asn1_integer
- 2019-01-18 Add `Asn1Integer::from_bn`
- 2019-01-17 Implement AsRef<str/[u8]> for OpensslString{Ref}
- 2019-01-05 Drop data_encoding dev dependency
- 2019-01-04 Update bn.rs
- 2018-12-16 Update changelog
- 2018-12-03 Only run 2.9.0 tests.
- 2018-12-03 Explicitly support LibreSSL 2.9.0.
- 2018-11-24 Fix cargo dependency documentation
- 2018-11-22 Add bindings to RAND_keep_random_devices_open
- 2018-11-21 Bump OpenSSL versions on AppVeyor to 1.1.0j, 1.0.2q
- 2018-11-21 Bump minimum supported rustc to 1.24.1
- 2018-11-21 Add new SHAKE128/256 EVP message digest functions in OpenSSL 1.1.1, fixes #1017.
- 2018-11-21 Add new SHA3 EVP message digest functions in OpenSSL 1.1.1
- 2018-10-22 Implement DoubleEndedIterator for stack iters
- 2018-10-18 Fix some accidentally-public functions
- 2018-10-18 Support LibreSSL 2.8.x
- 2018-10-16 Bump dependency on openssl-src-rs
- 2018-10-14 Fix anchor link
- 2018-10-14 Update changelog for 0.10.13
- 2018-10-14 Add a note about release support.
- 2018-10-11 Cleanup
- 2018-10-03 Address comments.
- 2018-10-02 Refactor to match style and add documentation.
- 2017-11-24 PKCS7 Support
- 2018-10-08 Move README info into crate root docs
- 2018-10-01 Update the OCSP_cert_to_id() signature for LibreSSL 2.8.1
- 2018-09-29 Bump LibreSSL 2.8 version in CircleCI
- 2018-09-27 Only whitelist LibreSSL 2.8.0 and 2.8.1
- 2018-09-27 Support the rest of LibreSSL 2.8.x
- 2018-09-28 Add support for encoding and decoding ECDSA signatures
- 2018-09-17 Fix get session callback
- 2018-09-15 Support the client hello callback
- 2018-09-13 Fix typo
- 2018-09-13 Fix missing symbol
- 2018-09-13 Stop caching the registry on osx
- 2018-09-13 Support libressl 2.8.0
- 2018-09-09 Refactor openssl-sys
- 2018-09-11 Bump to 1.1.1 release
- 2018-09-02 clean up example
- 2018-09-02 Small cleanup
- 2018-08-29 Fix lookup errors with SNI callback.
- 2018-08-29 Bump Appveyor test versions
- 2018-08-28 Bump versions
- 2018-08-20 Fix doc reference
- 2018-08-20 SRTP cleanup
- 2018-08-09 Add methods for DTLS/SRTP key handshake
- 2018-08-08 Add get_shutdown and set_shutdown
- 2018-08-04 X509_V_ERR_UNSPECIFIED was added in 1.0.2f
- 2018-08-04 Update changelog
- 2018-07-31 Add some docs to the README about the vendored feature.
- 2018-07-27 Support builds of OpenSSL from vendored source (take 2)
- 2018-07-29 Fix tests when built with no-ec2m
- 2018-07-20 SslSessionRef methods return static strings
- 2018-07-14 Fix spelling in symm docs
- 2018-07-11 Add bindings for custom error definition
- 2018-07-08 Purge registry cache
- 2018-06-27 Only grab the name entry count when needed
- 2018-06-03 Rename X509NameRef::all_entries and refactor end-of-iterator checks
- 2018-05-28 Provide an Asn1Object getter method for X509NameEntryRef
- 2018-05-28 Make X509NameRef provide an iterator over all X509NameEntries
- 2018-07-05 Clean up IGE example
- 2018-06-29 Link all needed system libraries on Windows, when building statically
- 2018-06-28 Bump to openssl 1.1.1-pre8
- 2018-06-23 Simplify DSA from private components
- 2018-06-18 Fix fallback implementation of DSA utility methods
- 2018-06-18 Add tests for DSA key pairs
- 2018-06-18 Add Dsa::from_(private|public)_components
- 2018-06-18 Add methods to access private and public part of DSA keys
- 2018-06-21 Fix build with openssl 1.1.1 and no-psk
- 2018-06-17 Disable TLSv1.3 for psk_ciphers test
- 2018-06-02 Ensure psk test callbacks are called
- 2018-06-02 push PSK callback errors onto ErrorStack
- 2018-06-02 Change psk test cipher to PSK-AES128-CBC-SHA
- 2018-06-02 Use is_null()
- 2018-06-02 add test for psk; deprecated set_psk_callback
- 2018-05-16 Add wrapper for SSL_CTX_set_psk_server_callback
- 2018-06-10 Switch to accessors in libressl where possible
- 2018-06-09 Link to gdi32 on windows
- 2018-06-06 Update changelog
- 2018-06-05 Add SslRef::set_alpn_protos
- 2018-06-02 Update to 1.1.1-pre7
- 2018-05-31 Add an openssl-sys binding for RSA_padding_check_PKCS1_type_2.
- 2018-06-02 fix build on older rustc
- 2018-06-02 changelog
- 2018-06-02 Adjust Nid signature algorithm APIs
- 2018-06-02 Fix types
- 2018-06-02 Fix use-after-free in cms
- 2018-05-30 Add SslRef::verified_chain
- 2018-05-28 rewrite Nid::{long_name,short_name} to return Results instead of Options
- 2018-05-24 Get Nid string representations
- 2018-05-25 Rename X509Ref::fingerprint to X509Ref::digest and avoid allocating
- 2018-05-25 Add some digest support
- 2018-05-25 Don't panic on bogus servernames
- 2018-05-25 Add bindings to SSL_get_finished and SSL_get_peer_finished
- 2018-05-17 Expose early I/O
- 2018-05-17 Expose early keying material export
- 2018-05-17 Expose max TLS1.3 early data accessors
- 2018-05-21 Fix changelog
- 2018-05-21 Fix changelog
- 2018-05-21 Revert "Move proto version accessors to SslContextRef"
- 2018-05-21 Move proto version accessors to SslContextRef
- 2018-05-21 Changelog
- 2018-05-21 Improve error Display impls
- 2018-05-20 Make Stack Sync + Send
- 2018-05-20 Support ALPN on libressl
- 2018-05-20 Overhaul openssl cfgs
- 2018-05-20 Expose X509_VERIFY_PARAM on libressl
- 2018-05-20 Clean up openssl-sys cfgs
- 2018-05-20 Support min/max version in LibreSSL
- 2018-05-18 Find path prefix to OpenSSL installed by Homebrew.
- 2018-05-13 Some sys cleanup
- 2018-05-10 Gate away CMS_KEY_PARAM from OpenSSL 1.0.1
- 2018-05-10 Properly version-gate CMS constants
- 2018-05-10 Move CMS_* flags to the openssl-sys package
- 2018-04-26 Use bitflags for CMS options
- 2018-04-22 Implement CR suggestions
- 2018-04-20 Fix mutability issues with CMS_sign
- 2018-04-20 Add the CMS_sign and i2d_CMS_ContentInfo function bindings
- 2018-05-12 Implement Clone for Rsa
- 2018-05-12 Clean up SSL callbacks
- 2018-05-12 Disable tests that talk to Google on LibreSSL 2.5.0
- 2018-05-12 Change SslContext callback handling
- 2018-05-09 Fix base version for min/max proto accessors
- 2018-05-01 Fix changelog typo
- 2018-05-01 Flag off constants added in 1.0.2h
- 2018-05-01 Changelog
- 2018-04-29 Expose SslSession <-> DER conversion
- 2018-04-27 Some misc cleanup
- 2018-04-27 Reform version checking logic
- 2018-04-26 Remove Rsa::build
- 2018-04-18 Add RsaPrivateKeyBuilder
- 2018-04-21 Add functions to X509Req to obtain public key and extensions
- 2018-04-16 Document that encrypt/decrypt use padding
- 2018-04-11 Include information about development packages
- 2018-04-05 changelog
- 2018-04-05 Fix minor typo
- 2018-04-04 Return `PKey<Private>` from `private_key_from_der`
- 2018-04-03 Add LibreSSL 2.7.3
- 2018-04-03 Combine LibreSSL 2.7.x versions into one
- 2018-04-02 Add LibreSSL 2.7.2
- 2018-03-31 Add support for LibreSSL 2.7.1
- 2018-03-05 Add test for stateless connection
- 2018-03-04 Introduce SslStreamBuilder
- 2018-03-27 Update to OpenSSL 1.1.1-pre3
- 2018-03-31 Fix systest against vcpkg-sourced OpenSSL
- 2018-03-30 Remove unneeded build keys
- 2018-03-29 Don't enable features for docs anymore
- 2018-03-29 Fix a flag name
- 2018-03-29 Clean up a couple of holdovers from old features
- 2018-03-29 Upgrade 1.1.0 and 1.0.2 test versions
- 2018-03-28 Add Asn1IntegerRef::to_bn
- 2018-03-28 Add X509Ref::serial_number
- 2018-03-22 Support LibreSSL 2.7.0
- 2018-03-19 Remove a last couple features
- 2018-01-14 Make it possible to use cmac
- 2018-03-19 Remove version-specific features
- 2018-03-14 Expose additional cipher and digest accessors
- 2018-03-13 Change function name to be similar to RSA one
- 2018-03-09 Added a function to create a EC<Key> from its parts
- 2018-03-11 fixup! Implement AES-{128,256}-CCM bindings
- 2018-03-08 fixup! Implement AES-{128,256}-CCM bindings
- 2018-03-08 Implement AES-{128,256}-CCM bindings
- 2018-03-11 Add a Sync + Send bound to the custom ext type
- 2018-03-11 Some ECDSA fixes/tweaks
- 2018-03-11 Revert previous commit
- 2018-03-10 Arguments should be BigNumRef and not BigNum
- 2018-03-09 Remove unneeded paramter
- 2018-03-08 Changes as per PR feedback
- 2018-03-08 Get curves for OpenSSL tests itself
- 2018-03-08 Try out another curve
- 2018-03-08 Another try at using the correct curve
- 2018-03-08 Use examples listed in OpenSSL docs for testing
- 2018-03-08 Add support LibreSSL and remove OpenSSL binding which we aren't using
- 2018-03-08 Exposed some of ECDSA functions
- 2018-03-11 Tweak verify_cert's signature
- 2018-03-11 Changes `init` to take a closure which is called with the initialized context
- 2018-03-09 Moves store context init into its own function
- 2018-03-08 Extends the test to verify the certificate two times
- 2018-03-08 Moves `cleanup` into its own function
- 2018-03-07 Fixes the implementation of `X509StoreContextRef::verify_cert`
- 2017-03-26 delay return until after forgets
- 2017-03-26 cleanup and add negative test
- 2017-03-24 add cleanup ffi to store context
- 2017-03-24 restructure to self contained function
- 2017-03-21 Little tweaks
- 2017-03-21 convert to raw pass-through methods
- 2017-03-19 add comment about consuming self in verify_cert
- 2017-03-19 fix error check
- 2017-03-19 properly version library functions
- 2017-03-19 Fix memory mgmt
- 2017-03-19 add verify_cert and store_context_builder
- 2018-03-11 Rename Oid to Id
- 2018-03-09 Switches to new type wrapper for RsaPssSaltlen
- 2018-03-08 Adds `RsaPssSaltlen` enum to encode the special values
- 2018-03-08 Switches to newtype wrapper for Oid
- 2018-03-07 Adds more functions to `Verifier`/`Signer` for RSA keys
- 2018-03-07 Adds RSA PKCS1 PSS padding
- 2018-03-07 Adds `PKeyRef::get_id` to get the OID of a key
- 2018-03-11 Bump 1.1.1 to pre2
- 2018-03-10 Add one more set of impls
- 2018-03-10 Impl Sync and Send for various types
- 2018-03-06 Remove the x509 module-level example
- 2018-03-11 Generic custom extension add fn return type
- 2018-03-05 High-level API for OpenSSL 1.1.1 custom extension support
- 2018-03-05 FFI for OpenSSL 1.1.1 custom extension support
- 2018-03-03 Add SslOptions::ENABLE_MIDDLEBOX_COMPAT
- 2018-02-28 Update changelog
- 2018-02-27 Always include something in ErrorStack's Display
- 2018-02-26 Add min/max protocol version support
- 2018-02-26 Restore error stack in cookie callback
- 2018-02-26 Expose cookie generate/verify callback setters
- 2018-02-26 Expose FFI bindings needed for SSL_stateless
- 2018-02-25 Add the ability to push errors back onto the error stack.
- 2018-02-24 Add RFC 5705 support
- 2018-02-22 Actually add version stuff
- 2018-02-15 Added example/test in symm.rs for encrypting a private key with a symmetric cipher
- 2018-02-14 Add des_ede3_cbc cipher
- 2018-02-15 More tests for pem_pkcs1 methods
- 2018-02-22 Inline connector constants
- 2018-02-22 Don't special case 1.0.1
- 2018-02-21 Update SslConnector cipher list
- 2018-02-18 Update changelog
- 2018-02-18 Add some debugging-related bindings
- 2018-02-17 Add SSL_version binding
- 2018-02-17 Fix session cloning
- 2018-02-17 Fix libressl
- 2018-02-17 Bind remove and get session callbacks
- 2018-02-17 SSL session callbacks have always been around
- 2018-02-16 Fix symm decrypt documentation example
- 2018-02-16 Doc tweak
- 2018-02-16 Add more session cache support
- 2018-02-15 Tweak features
- 2018-02-15 Set ossl110 when version is 1.1.1
- 2018-02-15 Fix tests for TLS 1.3
- 2018-02-14 OpenSSL 1.1.1 support
- 2018-02-14 Added binding for PEM_read_bio_RSAPublicKey
- 2018-02-12 Don't leak X509s
- 2018-02-11 Use Padding constant in RSA docs example
- 2018-01-25 Add RSA docs
- 2018-02-11 Detect FreeBSD OpenSSL automatically
- 2018-02-04 Support EVP_des_ede3.
- 2018-01-25 Update version
- 2018-01-25 Fix diff link
- 2018-01-24 Add HMAC to Pkey docs
- 2018-01-24 Print the public key in PKey example
- 2018-01-07 Fix import in pkey docs
- 2018-01-07 Missing colon
- 2018-01-07 Add Pkey docs
- 2018-01-24 tests: if server failed to start, print exit code instead of timing out
- 2018-01-24 Evict registry cache
- 2018-01-24 Debug OSX build failures
- 2018-01-15 add support for rfc822Name (email) and uniformResourceIdentifier (uri) to GeneralName
- 2018-01-12 Add setters to ConnectConfiguration
- 2018-01-11 Add from conversion
- 2018-01-11 Bump release notes
- 2018-01-11 More changes
- 2018-01-09 One more changelog entry
- 2018-01-09 Add a couple more changes
- 2018-01-09 Add a changelog
- 2018-01-07 Adjust the SNI callback
- 2018-01-07 Fix docs
- 2018-01-07 Rename and document RSA accessors
- 2018-01-06 Rename key serialization/deserialization methods
- 2018-01-06 FIPS mode support
- 2018-01-01 Fix links in x509 module
- 2018-01-01 Fix x509 doc examples
- 2018-01-01 Add documentation for x509 module
- 2018-01-01 Misc cleanup
- 2018-01-01 Move X509Filetype to SslFiletype
- 2018-01-01 Bump hex to 0.3
- 2017-12-31 Parameterize keys over what they contain
- 2017-12-29 Add issuer name access.
- 2017-12-29 Remove `SslRef::compression`
- 2017-12-28 Add a parameter to servername
- 2017-12-27 Overhaul ALPN
- 2017-12-27 Overhaul ssl error
- 2017-12-26 Flag off constant
- 2017-12-26 Split X509StoreContextRef::ssl up
- 2017-12-26 Overhaul verify error type
- 2017-12-26 Adjust SslConnector and SslAcceptor construction
- 2017-12-26 Drop Any bounds
- 2017-12-26 Remove deprecated APIs
- 2017-12-26 Fix a bunch of FIXMEs
- 2017-12-26 Tweak default ssl options
- 2017-12-26 Fix tests
- 2017-12-26 Bump to 1.20.0
- 2017-12-26 Rename X509FileType to X509Filetype
- 2017-12-26 Move to associated consts
- 2017-12-26 Upgrade bitflags to 1.0
- 2017-12-26 Make Nid values associated constants
- 2017-12-24 Fix script
- 2017-12-23 Clean up 1.0.1 hostname verification
- 2017-12-23 Tweak test scripts a bit
- 2017-12-23 Allow SNI and hostname verification to be configured separately
- 2017-12-16 Bump CI versions
- 2017-12-13 Impl Send + Sync for x509 stuff
- 2017-12-12 Add crates.io badge
- 2017-12-09 Fix link
- 2017-12-05 Finish documentation for the ssl module
- 2017-12-04 Docs for the ssl module.
- 2017-12-04 Impl deref for acceptor/connector builders
- 2017-12-04 Documentation for the `sign` module.
- 2017-12-03 Rename Signer::finish to sign_to_vec
- 2017-12-03 Clean up tests
- 2017-12-03 Simplifying finish_into
- 2017-12-03 Splitting the sign::Signer::finish function, to avoid allocations
- 2017-12-02 Fixing the CI tests
- 2017-12-02 Adding dp(), dq() and qi() methods to RSA, to get the CRT parameters back
- 2017-11-30 bump lazy_static to 1
- 2017-11-27 Upgrade foreign-types
- 2017-11-21 Revert "Update foreign-types to 0.3"
- 2017-11-21 Update foreign-types to 0.3
- 2017-11-21 Remove travis badge
- 2017-11-21 Remove unused travis file
- 2017-11-17 Use CircleCI for MacOS builds
- 2017-11-14 Adjust libressl version detection
- 2017-11-14 Remove libressl 2.6.2 build
- 2017-10-23 Update CI to use LibreSSL 2.6.3
- 2017-10-23 Add support for LibreSSL 2.6.3
- 2017-11-10 Added a macro that wraps foreign type, and impl Send and Sync for both,
- 2017-10-16 Add an example of making a CA and certs and verifying.
- 2017-11-06 Fix LibreSSL cms.h detection
- 2017-11-05 Add a couple of FIXMEs
- 2017-11-04 fixed broken example and syntax error in module level documentation
- 2017-10-27 Error documentation improvement
- 2017-11-04 Handle local retries
- 2017-10-09 Move doc details into another paragraph
- 2017-10-03 Additional notes on Crypter
- 2017-10-03 Copy example to module level
- 2017-10-03 Add examples and more documentation to symm
- 2017-10-24 Update documentation for EC module
- 2017-10-11 Began EC documenation
- 2017-11-04 Update data-encoding major version
- 2017-11-04 Bump CI openssl versions
- 2017-10-18 Fixed a typo in an error message, WANT_WRITE -> WANT_READ
- 2017-10-16 Add an example of making a CA and certs and verifying.
- 2017-10-11 DSA size returns maximum size of signature
- 2017-10-09 Documentation improvements for DSA module
- 2017-10-04 Begun DSA documentation
- 2017-10-07 Include the hex crate and ToHex import to the second example
- 2017-10-07 Added module-level documentation for the `sha` module.
- 2017-10-07 Move OpenSSL implementation details into a normal comment
- 2017-10-03 Document conf module
- 2017-10-04 Describe return values of groups.
- 2017-10-03 Finished BigNum documentation
- 2017-09-29 removed deny missing docs
- 2017-09-29 WIP BigNum function documentation
- 2017-09-29 Began bn module documenation