-
-
Notifications
You must be signed in to change notification settings - Fork 18
Expand file tree
/
Copy pathRELEASE_NOTES
More file actions
2873 lines (2772 loc) · 125 KB
/
RELEASE_NOTES
File metadata and controls
2873 lines (2772 loc) · 125 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
5.1.0
- 2026-04-13 Add EVP_AEAD-based detached AEAD module
- 2026-04-13 Add generic PKey private key generation API
- 2026-04-13 Add TLS 1.2 PRF module and bindings
- 2026-03-25 Add used_hello_retry_request
- 2026-03-28 Prebuilt lib export option
- 2026-03-27 Display sys crate errors using cargo::error
5.0.2
- 2026-02-13 Re-add fips-precompiled for v4 compat
- 2026-02-12 Don't add build/ to non-FIPS pre-built path
- 2026-02-13 Expose load_verify_locations like rust-openssl
- 2026-02-12 Support static MSVC runtime
5.0.1
- 2026-02-03 Make SslCredential optional
- 2026-02-10 Make ML-KEM optional
- 2026-02-10 Don't always require all headers from all versions of BoringSSL
- 2026-02-10 Ensure we don't leave unit memory if generate_key fails
5.0.0
- 2026-02-03 v5.0.0
- 2026-02-04 Update README
- 2026-02-03 rm symlink
- 2026-02-10 symm: Ensure `Cipher::from_nid()` handles GCM NIDs
- 2026-02-10 symm: Add regression test for cipher NIDs
- 2026-02-04 FIXMEs
- 2025-12-29 Handle overflows in FFI integer conversions
- 2026-02-03 Bump rust-version to 1.85
- 2026-01-30 Detect bad headers in boring-sys
- 2025-12-29 Use std helper methods for pointer casts
- 2025-12-29 mem::forget -= 1
- 2025-12-29 Avoid useless malloc for SSL_set_tlsext_status_ocsp_resp
- 2026-02-03 Allow pq-experimental for v4 back-compat
- 2026-02-03 Use separate MlKemPrivateKey/MlKemPublicKey instead of exposing slices
- 2026-02-03 Rename MlKem to Algorithm
- 2026-02-02 Skip MlKemParams
- 2026-02-02 Tests don't need AsRef and other accessors
- 2026-02-02 Use associated constants
- 2026-01-31 Expose a cipher's NID
- 2026-01-31 Add an init-update-finalize API for HMAC
- 2026-01-30 Add safe Rust wrappers for ML-KEM-268 and ML-KEM-1020
- 2026-01-27 feat(boring-sys): add mlkem.h to bindgen headers (#455)
- 2026-01-26 OpenBSD uses -lc++ as well
- 2026-01-06 More helpful build errors
- 2026-01-20 Handle broken include dirs
- 2026-01-26 Split SslCredential into a module
- 2026-01-23 Cache Windows builds harder
- 2025-12-29 Avoid cvt.map(drop)
- 2026-01-21 Cache test deps on Windows
- 2026-01-21 Fix docs warnings
- 2026-01-21 Fix docs.rs build
- 2026-01-16 Ensure dependency requirements are bumped
- 2026-01-20 Fix missing import in tests
- 2026-01-07 Upgrading to v5
- 2023-05-11 fix: BIO_set_retry_write when BIO_CTRL_FLUSH to allow writer returns WouldBlock on flush
- 2025-11-14 Remove blanket Eq from FFI types
- 2026-01-19 MaybeUninit is stable now
- 2026-01-06 Clippy
- 2025-12-29 Avoid unicode chars
- 2026-01-06 Cleaner include path check
- 2026-01-13 Test MinGW32
- 2026-01-05 Remove obsolete hack for OpenSSL 1.0.2
- 2026-01-20 Remove unnecessary as_mut
- 2026-01-20 Don't readd leaky set_ex_data
- 2026-01-20 Fix spki leak
- 2026-01-20 Use existing macro for ForeignType
- 2025-12-20 Rework SslMethod
- 2025-12-19 Update boring to a newer version
- 2026-01-20 Flip is_rpk to has_x509_support
- 2025-12-22 Fix MinGW builds
- 2025-12-22 Fix Android builds
- 2025-12-20 Never use the debug CRT on Windows
- 2025-12-20 Pass -msse2 to i686 platforms on CI
- 2025-12-20 Define __STDC_FORMAT_MACROS when cross-building from macOS to Linux
- 2026-01-19 Use fips-build-compatible ERR_add_error_data
- 2026-01-16 Include err.h in FFI bindings
- 2026-01-16 cargo publish is target-specific
- 2026-01-07 Cross-platform Cargo registry cache
- 2026-02-15 build: fix docs.rs build (#119)
- 2026-02-15 docs: clarify symbol conflict with OpenSSL (#118)
5.0.0-alpha.13
- 2026-02-13 v5.0.0-alpha.13
- 2026-02-13 build: fix docs.rs build (#116)
5.0.0-alpha.12
- 2026-01-17 v5.0.0-alpha.12
- 2026-01-17 build: warn instead of panic for unsupported `prefix_symbols` (#113)
- 2026-01-17 v5.0.0-alpha.11
- 2026-01-17 fix(test): fix build
- 2026-01-12 build(deps): bump actions/cache from 4 to 5 (#112)
- 2026-01-07 Warn about BORING_BSSL_FIPS_PATH vs BORING_BSSL_PATH
- 2026-01-07 Clippy CI blocker
- 2025-12-29 Fewer unwrap()s
- 2025-12-29 set_strict_cipher_list docs
- 2025-12-10 Cached index in tests
- 2025-12-10 Smaller cache, quicker rustup
- 2024-04-01 docs: add docs
- 2024-04-01 feat: support openharmony platform
- 2026-01-05 Remove deprecated X509CheckFlags flag
- 2026-01-05 Safe clone for X509Store
- 2026-01-05 Fix leak in set_ex_data
- 2025-12-12 Add boring specific api set_strict_cipher_list to SslContextBuilder
- 2026-01-01 Update README to remove usage section
- 2026-01-01 Delete scripts directory
- 2026-01-01 chore: drop maintenance of compio-boring2 crate (#111)
- 2026-01-01 Fix documentation typo in lib.rs
- 2026-01-01 build(boring-sys): simplify prefix_symbols build (#110)
- 2026-01-01 feat(tokio-boring): Overhaul crate API (#109)
- 2025-12-23 build: add loongarch conditional compilation patch (#108)
- 2025-12-23 Update README.md
- 2025-12-18 build(ci): fix https://github.com/cloudflare/boring/issues/414 (#107)
- 2025-12-18 build(compio/quinn/tokio): Add symbol prefixing feature for BoringSSL (#106)
- 2025-12-15 build(deps): bump actions/checkout from 5 to 6 (#104)
- 2025-12-15 build(deps): bump actions/cache from 4 to 5 (#105)
- 2025-12-14 Add symbol prefixing feature for BoringSSL (#103)
- 2025-12-10 Can't build with clang-12 to libc++ mismatch
- 2025-12-09 Update README.md
- 2025-11-25 Remove DerefMut for SslCipher
- 2025-11-24 Store a &'static SslCipherRef in SslCipher
- 2025-11-20 Introduce SslCipherRef::protocol_id
- 2025-11-12 Fix peer_cert_chain doc
- 2025-11-23 build(deps): bump actions/checkout from 4 to 6 (#100)
- 2025-11-23 build(deps): bump actions/setup-go from 5 to 6 (#101)
- 2025-11-23 build(deps): bump KyleMayes/install-llvm-action from 1 to 2 (#102)
- 2025-11-23 Update Dependabot configuration for GitHub Actions
- 2025-10-03 pq patch: also enable P256Kyber768Draft00 by default
- 2025-10-02 pq patch: enable PQ by default like upstream
- 2025-10-21 chore(ssl): remove deprecated code (#98)
- 2025-10-21 Modify prerelease condition in CI workflow
- 2025-10-14 Update main.rs
- 2025-09-30 Remove "pq-experimental", apply PQ patch by default
- 2025-10-01 Simplify Error::reason()
- 2025-10-01 Safer CryptoBufferBuilder::build
- 2025-10-01 ErrorStack ctor for custom errors
- 2025-10-01 Fix string data conversion in ErrorStack::put()
- 2025-10-01 Convert CipherCtx fns into a safe abstraction. Additional testing.
- 2025-10-01 Use Ref foreign type instead of forgetting
- 2025-09-30 Expose a safe Rust interface for the session resumption callback
- 2025-09-30 Use MaybeUninit for raw_ticket_key key/iv
- 2025-09-29 initialize key_name and iv. mark fn as _unsafe to allow for future changes to the api
- 2025-04-02 clippy
- 2025-04-02 simplify tests
- 2025-04-01 update documentation
- 2025-03-11 add test case for TicketKeyCallbackResult::Noop
- 2025-03-11 pr comments: safety, receive multiple nst, return status refactor
- 2025-03-08 Add set_ticket_key_callback (SSL_CTX_set_tlsext_ticket_key_cb)
- 2025-09-30 Add SslRef::curve_name()
- 2025-09-26 Make rpk feature flag additive
- 2025-09-30 Add back the `curve()` method on `SslRef`
- 2025-09-29 Remove outdated comments on FIPS API compatibility
- 2025-09-29 Remove `SslCurve` API
- 2025-09-30 pq: fix MSVC C4146 warning
- 2025-09-30 Remove the "kx-*" features
- 2025-02-19 X509Builder::append_extension2 -> X509Builder::append_extension
- 2025-02-19 `Ssl::new_from_ref` -> `Ssl::new()`
- 2025-02-19 Align SslStream APIs with upstream
- 2025-09-25 Clean-up legacy FIPS options
- 2025-06-13 Add more reliable library_reason()
- 2025-06-13 Ensure that ERR_LIB type can be named
- 2025-09-26 Remove support for Hyper v0
- 2025-09-26 Upgrade deps
- 2025-09-26 Skip Rust version detection for bindgen
- 2025-09-26 Style nits
- 2025-09-26 Deprecated GHA feature
- 2025-09-26 Ensure rustfmt and clippy are available
- 2025-08-26 Support TARGET_CC and CC_{target}
- 2025-08-26 Fix swapped host/target args
- 2025-06-13 CStr UTF-8 improvements
- 2025-09-21 Fix duplicate entry for RPK support in README
- 2025-09-21 Fix formatting in FUNDING.yml for ko-fi entry
- 2025-09-21 Update FUNDING.yml for sponsorship links
5.0.0-alpha.10
- 2025-09-19 v5.0.0-alpha.10
- 2025-09-19 feat: Add `set_preserve_tls13_cipher_list` method to `SslContextBuilder` (#97)
- 2025-09-12 Remove CI badge from README
5.0.0-alpha.9
- 2025-09-08 v5.0.0-alpha.9
4.19.0
- 2025-09-03 Add binding for X509_check_ip_asc
- 2025-09-08 build(deps): update compio requirement from 0.15.0 to 0.16.0 (#96)
- 2025-09-08 build(deps): update compio-io requirement from 0.7.0 to 0.8.0 (#95)
- 2025-06-13 Use ERR_clear_error
- 2025-06-13 Error descriptions and docs
- 2025-06-13 Boring doesn't use function codes
- 2025-09-03 Fix patched docs.rs builds
- 2025-09-03 Test docs.rs docs
- 2025-09-03 Fix doc links
4.18.0
- 2025-08-29 Bump
- 2025-08-26 Clippy
- 2025-09-04 Reapply "Don't link binaries on docs.rs" (#94)
- 2025-08-31 Fix grammar in README description
5.0.0-alpha.8
- 2025-08-31 v5.0.0-alpha.8
- 2025-08-31 Revert "Don't link binaries on docs.rs" (#94)
5.0.0-alpha.7
- 2025-08-21 v5.0.0-alpha.7
- 2025-08-21 boring-sys: Implement `MLKEM1024` for TLS (#93)
- 2025-07-28 build(deps): update hex-literal requirement from 0.4 to 1.0 (#89)
- 2025-07-28 build(deps): update rcgen requirement from 0.13 to 0.14 (#88)
- 2025-07-26 Create FUNDING.yml
- 2025-07-24 feat(boring): adapt boring2 for quinn (#87)
- 2025-07-21 Remove some comments referring to OpenSSL
- 2025-07-10 Update README.md
- 2025-07-07 chore(compio-boring): update homepage and docs
5.0.0-alpha.4
- 2025-07-07 v5.0.0-alpha.4
- 2025-07-07 chore(compio-boring2): remove unused docs
- 2025-07-07 chore: fix ci and docs
- 2025-07-07 docs: update README.md
- 2025-07-07 chore: update `compio-boring` version
- 2025-07-07 feat(boring): adapt `boring2` for compio async runtime (#85)
5.0.0-alpha.3
- 2025-07-06 v5.0.0-alpha.3
- 2025-07-06 feat: Add Hash impls for extension types (#84)
5.0.0-alpha.2
- 2025-06-23 v5.0.0-alpha.2
- 2025-06-23 feat: add support for FreeBSD (#83)
- 2025-06-21 docs(connector): update documents
- 2025-06-18 docs: update prefer chacha20 option docs
- 2025-06-18 docs: update prefer chacha20 option docs
- 2025-06-18 docs: update prefer chacha20 option docs (#81)
5.0.0-alpha.1
- 2025-06-18 v5.0.0-alpha.1
- 2025-06-18 feat(boring): sync updated extension permutation patch (#80)
- 2025-06-17 chore(boring): Remove deprecated or outdated APIs (#79)
- 2025-06-17 Update README.md
- 2025-06-17 test(boring): fix ech test (#77)
- 2025-06-17 revert(boring): Restore `src/x509/store.rs` to match upstream
- 2025-06-10 Use cargo:warning for warnings
- 2025-06-10 Don't link binaries on docs.rs
- 2025-06-13 Expose PKey::raw_{private,public}_key (#364)
- 2025-06-09 Upgrade bindgen to v0.72.0
- 2025-06-09 build(deps): update bindgen requirement from 0.71.1 to 0.72.0
- 2025-06-07 chore: remove dead code
- 2025-06-06 Expose SSL_set1_groups to Efficiently Set Curves on SSL Session (#346)
- 2025-06-05 Sprinkle #[must_use] (#368)
- 2025-06-04 Make X509Store shareable between contexts
- 2025-05-20 Clippy
- 2025-06-05 Don't unwrap when Result can be returned instead
- 2025-06-05 Avoid panicking in error handling
- 2025-06-04 Rename to reset_with_context_data
- 2025-06-02 Add X509StoreContextRef::init_without_cleanup
- 2025-06-02 Add mutable ex_data APIs for X509StoreContext
- 2025-06-02 Ensure we call X509_STORE_CTX_cleanup on error path too (#360)
- 2025-06-02 Fix X509VerifyContextRef::set_verify_param (#358)
- 2025-06-02 Add X509VerifyParamRef::copy_from (#361)
- 2025-05-28 Add support for X509_STORE_CTX_get0_untrusted
- 2025-05-30 sync upstream (#74)
- 2025-05-30 clippy fix
- 2025-05-30 Add set_verify_param
4.17.0
- 2025-05-27 Revert "feat(x509): Implement `Clone` for `X509Store` (#339)" (#353)
- 2025-05-14 Update bindgen from 0.70.1 -> 0.71.1.
- 2025-05-19 Add `X509_STORE_CTX_get0_cert` interface
- 2025-05-18 boring(ssl): use `corresponds` macro in `add_certificate_compression_algorithm`
- 2025-02-14 Update Cargo.toml
- 2025-02-13 build: Fix the build for 32-bit Linux platform
- 2025-05-20 rustfmt ;(
- 2025-05-20 Fix linking SystemFunction036 from advapi32 in Rust 1.87
- 2025-05-20 Clippy
- 2025-05-01 add SslCurve::X25519_MLKEM768 constant
- 2025-04-17 Use ubuntu-latest for all ci jobs
- 2025-04-16 fix clippy error
- 2025-04-15 expose SSL_set_compliance_policy
- 2025-04-07 feat(x509): Implement `Clone` for `X509Store` (#339)
4.16.0
- 2025-03-31 Add fips-precompiled feature to support newer versions of FIPS (#338)
- 2025-05-19 boring(ssl): add ZSTD to `CertificateCompressionAlgorithm` (#71)
- 2025-05-18 boring(ssl): use `corresponds` macro in `add_certificate_compression_algorithm` (#70)
- 2025-05-18 chore(boring): deprecate legacy `CertCompressionAlgorithm` API (#69)
- 2025-05-13 chore(boring): deprecate `set_verify_cert_store_ref` on `SslContextBuilder` (#68)
4.15.13
- 2025-04-27 v4.15.13
- 2025-04-27 feat: Add basic support for LoongArch (#67)
4.15.12
- 2025-04-23 v4.15.12
- 2025-04-23 ci: use ubuntu-latest (#66)
- 2025-04-23 docs(boring): fix doc warning (#65)
- 2025-04-23 build(deps): update brotli requirement from 7 to 8 (#64)
- 2025-04-05 Create dependabot.yml
4.15.11
- 2025-03-21 v4.15.11
- 2025-03-21 build: update workflows action (#61)
- 2025-03-21 chore: clippy fix
- 2025-03-21 Update issue templates
- 2025-03-21 Update ci.yml
- 2025-03-21 Delete .github/workflows/semgrep.yml
- 2025-03-21 Update README.md
- 2025-03-21 build: fix doc test
- 2025-03-21 build: Ignore tests that bundle with the upstream boringssl binary
- 2025-03-21 boring(x509): impl `Clone` of `X509Store` (#59)
- 2025-03-21 build: fix `pq-experimental` feature build
- 2025-03-18 Document linking to C++ standard library (#335)
- 2025-03-18 Revert "Remove "fips-no-compat", decouple "fips-compat" from "fips"" (#334)
- 2025-03-11 boring: Disable `SslCurve` API with "fips" feature
- 2025-03-11 boring-sys: Ignore patches when boringSSL is precompiled
- 2025-03-13 Remove "fips-no-compat", decouple "fips-compat" from "fips"
- 2025-03-14 Add feature "fips-no-compat"
- 2025-03-10 Advertise X25519MLKEM768 with "kx-client-pq-preferred" (#329)
- 2025-03-10 Update to actions/cache@v4 (#328)
- 2025-02-28 Add missing release notes entry (#324)
- 2025-02-27 Expose API to enable certificate compression. (#241)
- 2025-02-23 Fix lifetimes in ssl::select_next_proto
- 2025-02-23 Revert cmake bump (for now) as it is overly restrictive (#321)
- 2025-02-21 Introduce a builder pattern for SslEchKeys + make set_ech_keys take a reference (#320)
- 2025-02-21 Revert "Refactor!: Remove strict `TokioIo` response requirement from `hyper_boring::v1::HttpsConnector`"
- 2025-02-21 Revert "Refactor!: Introduce a Cargo feature for optional Hyper 0 support"
- 2025-02-21 Address clippy lints
- 2025-02-21 Actually expose SslEchKeys
4.14.0
- 2025-02-19 Bump cmake-rs to improve Mac OS build parallelism
- 2025-02-19 Expose SSL_CTX_set1_ech_keys from SslContextRef
- 2024-01-27 Set CMAKE_BUILD_PARALLEL_LEVEL to available_parallelism
- 2025-02-14 build: Fix the build for 32-bit Linux platform (#312)
- 2024-11-30 Use corresponds macro
- 2025-02-12 Expose SSL_set_enable_ech_grease
- 2025-02-12 Clean up ECH tests
- 2025-02-10 Expose client/server-side ECH
- 2025-02-10 Expose EVP_HPKE_KEY
- 2025-02-10 Clean up boring_sys::init()
- 2024-11-27 Detailed error codes
- 2025-02-04 chore: Fix docs on SslRef::replace_ex_data
- 2025-01-22 fix manual_c_str_literals clippy warning
- 2025-01-22 replace once_cell with LazyLock
- 2025-01-13 RTG-3333 Support X25519MLKEM768 by default, but don't sent it as client
- 2025-03-20 chore(boring): simplify extensions sort order calculation (#58)
4.15.9
- 2025-03-07 v4.15.9
- 2025-03-07 feat: Allow overriding AES encryption for Encrypted Client Hello (#57)
4.15.8
- 2025-02-24 v4.15.8
- 2025-02-24 Fix lifetimes in ssl::select_next_proto (#55)
4.15.7
- 2025-02-23 v4.15.7
- 2025-02-23 sync upstream (#54)
- 2025-02-23 fix(patch): Fix alps use new codepoint negotiation (#53)
4.15.6
- 2025-02-16 v4.15.6
- 2025-02-16 boring(patch): Fix `alps_use_new_codepoint` not initialized, may lead to undefined behavior, then get any value (#52)
- 2025-02-13 v4.15.5
- 2025-02-13 build: Fix 32-bit platform build (#51)
- 2025-02-13 Use corresponds macro (#50)
- 2025-02-13 Expose SSL_set_enable_ech_grease (#49)
- 2025-02-12 Expose client/server-side ECH (#48)
- 2025-02-12 Sync `Detailed error codes` and `Clean up boring_sys::init()` (#47)
4.15.3
- 2025-02-11 v4.15.3
- 2025-02-11 fix: Fix `key share` patch (#46)
4.15.2
- 2025-02-07 v4.15.2
- 2025-02-07 feat(boring): Add set_verify_cert_store_ref method to SslContextBuilder (#45)
- 2025-02-07 feat(boring): Add add_cert_compression_alg support (#44)
4.15.1
- 2025-02-07 v4.15.1
- 2025-02-07 chore: Removal unused deps
- 2025-02-07 feat: Add `set_options` binding function to ConnectConfiguration (#43)
- 2025-02-07 feat: Add new binding functions to `ConnectConfiguration` (#42)
- 2025-02-07 chore: update documentation link
- 2025-02-07 feat: Removal of `rpk` support
- 2025-02-07 feat: Removal of `rpk` support (#41)
- 2025-02-07 chore: remove unused `hyper-boring` crate
- 2025-02-07 chore: Fix docs on SslRef::replace_ex_data (#40)
4.15.0
- 2025-02-02 v4.15.0
- 2025-02-02 feat: Add ALPS use new endpoint (#39)
4.14.2
- 2025-01-23 v4.14.2
- 2025-01-23 feat: replace once_cell with LazyLock (#38)
4.14.1
- 2025-01-22 v4.14.1
- 2025-01-22 feat: deprecated `set_key_shares_length_limit` (#37)
- 2025-01-22 Update README.md
- 2025-01-22 feat: Add `kDHE` && `ffdhe2048`/`ffdhe3072` curves working implement (#36)
- 2025-01-14 RTG-3333 Support X25519MLKEM768 by default, but don't sent it as client (#35)
4.13.8
- 2025-01-13 v4.13.8
- 2025-01-13 docs: Fix docs build (#34)
- 2025-01-10 boring-sys: Optional SSL_OP_NO_RENEGOTIATION to disable client renegotiation extension (#33)
- 2024-07-31 Allow dead_code instead of disabling clippy entirely for bindgen
- 2024-11-12 Remove INVALID_CALL from mid-handshake error message
- 2024-08-16 Fix bug with accessing memzero'd X509StoreContext in tests
- 2024-08-16 Support linking with a runtime cpp library
4.13.6
- 2025-01-05 v4.13.6
- 2025-01-05 feat(boring): Add optional disable `PSK_DHE_KE` (#32)
4.13.5
- 2024-12-23 v4.13.5
- 2024-12-23 chore: Remove extended alignment bounds validation unless the user is knowledgeable (#31)
4.13.4
- 2024-12-20 v4.13.4
- 2024-12-20 chore: Disable extended permutation deduplication verification (#30)
- 2024-12-20 feat: Expose extended sorting from indices (#29)
4.13.3
- 2024-12-19 v4.13.3
- 2024-12-19 feat: Add setup extension permutation (#28)
- 2024-12-19 refactor: refactor `key_shares` length limit (#27)
- 2024-12-18 boring-sys: Add TLS extension zstd cert compression (#24)
- 2024-12-18 patch: Add enable three `key_shares` limit (#23)
- 2024-12-18 patch: Add option enable delegated_credentials (#22)
- 2024-12-18 patch: Add option enable record_size_limit (#21)
- 2024-12-18 boring: Add SslCurve `FFDHE2048`/`FFDHE3072` NID support (#20)
- 2024-12-17 boring: Add SslCurve `FFDHE2048`/`FFDHE3072` support (#19)
- 2024-12-17 boring: update old ciphers patch (#18)
- 2024-12-06 Refactor!: Introduce a Cargo feature for optional Hyper 0 support
- 2024-12-06 Refactor!: Remove strict `TokioIo` response requirement from `hyper_boring::v1::HttpsConnector`
4.13.2
- 2024-12-06 v4.13.2
- 2024-12-06 boring: Add SslConnector no default cert verify paths builder (#16)
- 2024-12-06 sync upstream
4.13.0
- 2024-11-26 Sync X509StoreBuilder with openssl
- 2024-11-26 Sync X509VerifyFlags with openssl
- 2021-11-21 More corresponds from openssl
- 2024-11-28 Work around Rust settings inconsistent iOS SDK version
- 2024-11-28 Clippy
- 2024-03-11 Fix Windows build
4.12.1
- 2024-11-27 v4.12.1
- 2024-11-27 Fix Windows build (#13)
4.12.0
- 2024-11-20 Add bindings for SSL_CB_ACCEPT_EXIT and SSL_CB_CONNECT_EXIT
- 2024-10-22 (ci): brew link x86 toolchain for macos13 runner
- 2024-10-22 Skip bindgen 0.70's layout tests before Rust 1.77
- 2024-10-18 Add `set_cert_verify_callback` (`SSL_CTX_set_cert_verify`)
4.11.0
- 2024-10-17 boring-sys: include HPKE header file for bindgen
- 2024-10-17 Add "fips-compat" feature (#286)
- 2024-09-25 Create semgrep.yml
4.10.3
- 2024-11-15 Update README.md
- 2024-11-15 Update README.md
- 2024-11-15 rename rboring to boring2
- 2024-11-15 rename tokio-rboring to tokio-boring2
- 2024-11-15 rename rboring-sys to boring-sys2
4.11.1
- 2024-11-03 v4.11.1
- 2024-11-03 Fix X25519_MLKEM768 mapper
- 2024-11-03 sync upstream (#12)
- 2024-11-03 feat(boring): Add SSL_CURVE_X25519_MLKEM768 curve binding (#11)
4.10.2
- 2024-09-22 Update docs link
- 2024-09-21 v4.10.2
- 2024-09-21 Set MSRV to 1.70 (#279)
- 2024-09-18 boring-pq.patch Fix by not updating crypto_test_data.cc
4.10.1
- 2024-09-18 Don't support X25519MLKEM768 by default (yet)
4.10.0
- 2024-09-18 Implement optional Hyper 1 support in hyper-boring (#246)
- 2024-09-17 Add post-quantum key agreement X25519MLKEM768
- 2024-09-10 Revert "PQ: fix timing sidechannels and add IPDWing"
- 2024-09-17 Update bindgen to 0.70.1
- 2024-09-17 Expose SSL(_CTX)_set1_curves_list (#270)
- 2024-09-11 Expose SSL_CTX_set_info_callback (#266)
- 2024-09-03 Use ForeignType::into_ptr wherever applicable
- 2024-08-19 Expose RSAPSS public key Id type
- 2024-08-15 Fix macos FIPS crossbuild
- 2024-08-15 Add tests for X509Ref::subject_key_id, X509Ref::authority_key_id, and X509NameRef::print_ex
- 2024-08-14 Expose X509NameRef::print_ex
- 2024-08-13 Introduce `corresponds` macro from openssl-macros
- 2024-08-14 Introduce ForeignTypeExt and ForeignTypeRefExt
- 2024-08-09 Expose mTLS related APIs
- 2024-08-14 chore(boring-sys): Fix git apply patch on Windows (#261)
4.9.1
- 2024-08-04 Properly handle `Option<i32>` in `SslRef::set_curves`
4.9.0
- 2024-08-02 Actually Release 4.9.0
- 2024-08-02 Guard against empty strings given to select_next_proto (#252)
- 2024-08-01 Document `SslCurve::nid()`
- 2024-08-01 Add SslCurve::to_nid() and remove SslCurveId
- 2024-07-23 Fix x509_check_host return value
- 2024-07-29 Fix clippy lints re: docs indentation + unused feature
- 2024-07-29 Ignore clippy / rustfmt on autogenerated code
- 2024-07-26 Clean up legacy const_fn feature gates
- 2024-07-23 Impl From for SslVersion
- 2024-06-03 Split SSL curve identifiers into a separate enum.
- 2024-07-23 (ci): Fix macos crossbuild action by forcing brew link w python@3.11
- 2024-07-09 Expose set_permute_extensions
- 2024-06-24 PQ: fix timing sidechannels and add IPDWing
4.8.0
- 2024-06-28 Expose hmac_sha1 function
- 2024-06-18 Fix workflows file, pin mac os FIPS crossbuild runner to macos-13
- 2024-06-18 clippy: *::max_value() -> *::MAX
- 2024-06-18 Expose X509_check_host
- 2024-06-18 Expose SSL_add1_chain_cert
- 2024-06-18 Expose SSL_{set|clear}_mode
- 2024-06-18 Expose SSL_{get|set}_{max|min}_proto_version
- 2024-06-18 Add APIs to expose client and server cipher lists
- 2024-06-18 Expose SSL_CIPHER_is_aead and SSL_CIPHER_auth_nid
- 2024-06-18 Add NIDs for cipher authentication types
- 2024-06-14 Impl From for SslSignatureAlgorithm
- 2024-03-27 Updates license field to valid SPDX format
4.7.0
- 2024-05-31 Fix crosscompile
- 2024-05-30 Expose hmac_sha256/512 functions
4.6.0
- 2024-04-09 Tweak cliff config to exclude merge and release commits from changelog
- 2023-12-04 builder
- 2023-12-01 HttpsLayerSettings
- 2022-11-28 bound session cache
- 2024-03-26 add get_curve (#226)
- 2024-03-24 Remove kx-safe-default gate on SslCurve
- 2024-02-06 Enable layout tests on iOS target
- 2024-03-23 Fix clippy lints
- 2024-03-21 Add getters for client hello message
- 2024-01-25 Removes vestigial build script
- 2024-02-02 Introduce and use read_uninit and write_uninit duplicated from openssl-0.10.61 and tokio-openssl-0.6.4
- 2024-02-07 Introduce SslRef::set_private_key
4.4.1
- 2024-02-02 Fix building with BORING_BSSL_PATH / BORING_BSSL_FIPS_PATH
- 2024-01-24 Fix building with non bazel commits of boringssl
4.4.0
- 2024-01-16 Expose `set_compliance_policy` and `get_ciphers`
- 2024-01-08 Expose SSL_get_error
- 2023-12-20 Fix support for fips-link-precompiled
4.3.0
- 2024-01-03 Introduce X509Flags
- 2024-01-03 Move x509 tests to a subdirectory
- 2024-01-02 Rearrange imports in x509 module
- 2023-12-20 Introduce HttpsLayer::set_ssl_callback
- 2023-12-20 Don't use self-signed certs in hyper-boring tests
- 2023-12-18 Introduce X509CheckFlags::UNDERSCORE_WILDCARDS
4.2.0
- 2023-12-13 Introduce set_custom_verify_callback and set_async_custom_verify_callback
- 2023-12-13 Restore rpk feature in tokio-boring
- 2023-12-13 Remove rpk from hyper docsrs features
- 2023-12-14 Introduce tokio_boring::SslStreamBuilder
- 2023-11-14 Swap build and run order; always build
- 2023-11-13 Remove unused target_env from boring-sys build config
- 2023-10-13 boring-sys: Blocklist max_align_t in bindgen
- 2023-10-14 boring-sys: Don't check for MSVC with target_env
- 2023-10-14 Use gcc/g++ as the compilers for windows-gnu, not Clang
- 2023-10-14 Always run tests in bash
- 2023-10-14 Add arm64-macos cross-compile to CI
- 2023-10-13 Add custom linker for Android cross-compilation
- 2023-10-13 Add custom environment for ARM Linux cross-compilation
- 2022-06-03 Build tests even for cross-compiling
- 2023-10-13 Remove musl test; there's no standard musl C++ setup for us to use
- 2022-06-03 Make arm and Android builds check-only
- 2022-06-03 Add matrix.apt_packages
- 2022-06-03 Refactor check-only and extra-test-args
- 2022-05-27 Add relevant `--target` to `cargo test` in CI
- 2023-12-07 Fix typos
- 2023-11-11 boring-sys: Don't use CMake cross-compilation for macOS->iOS
- 2023-11-27 Move async callbacks infra to boring itself
- 2023-11-17 Use replace_ex_data more
4.1.0
- 2023-11-16 Properly drop overwritten ex data
- 2023-11-16 Fix clippy lint
4.0.0-rc.2
- 2023-11-06 Update release notes
- 2023-11-06 Add cargo-release metadata
- 2023-11-02 Remove Sync trait bounds on callback futures
- 2023-10-30 Update Cargo.toml
- 2023-10-26 hyper and tokio "full" feature for dev builds only
4.0.0-rc.1
- 2023-10-26 Specify exact versions of dependent crates in the workspace manifest
- 2023-10-16 Add CI for cross-building from macOS
- 2023-10-16 Introduce BORING_BSSL_SYSROOT and BORING_BSSL_EXTERNAL_TOOLCHAIN
- 2023-10-16 Check for CMAKE_TOOLCHAIN_FILE when creating cmake config
- 2023-10-16 Introduce target-specific env vars
- 2023-10-16 Continue looping if candidate cxx isn't found in verify_fips_clang_version
- 2023-10-12 Introduce set_async_get_session_callback
- 2023-10-12 Allow returning GetSessionPendingError from get session callbacks
- 2023-10-24 Test set_get_session_callback
- 2023-10-24 Test new session callback on server side
- 2023-10-24 Move session tests to their own module
- 2023-10-11 Replace feature no-patches with BORING_BSSL{,_FIPS}_ASSUME_PATCHED
- 2023-10-11 Remove feature rpk from hyper-boring and tokio-boring
- 2023-10-10 Introduce a new set of env variables for FIPS-like builds
- 2023-10-10 Use prefix BORING_BSSL_ for all boringssl env variables
- 2023-10-10 Don't read BORINGSSL_BUILD_DIR anymore
- 2023-10-10 Don't use env::current_dir in build script
- 2023-10-10 Introduce struct Config in build script
- 2023-10-11 Change X509VerifyResult to Result<(), X509VerifyError>
- 2023-10-11 Introduce bindings for all X509_V_ERR_* constants
- 2023-02-17 Add SHA224, SHA512, SHA512-256 tests
- 2023-02-17 Expose SHA512-256
- 2023-10-09 Remove boring::fips::enable (fixes #150)
- 2023-10-09 Remove futures from ex data slots once they resolve
- 2023-10-06 Introduce SslSignatureAlgorithm::RSA_PKCS1_MD5_SHA1
- 2023-10-06 Introduce Ssl::set_certificate
- 2023-07-28 Introduce async callbacks
- 2023-08-02 Implement SslContextBuilder::set_private_key_method
- 2023-07-28 Change signature for set_select_certificate_callback
- 2023-08-04 Introduce AsyncStreamBridge
- 2023-06-23 Add a few WouldBlock cases
- 2023-08-04 Introduce helper module in tokio-boring tests
- 2023-08-03 Introduce setup_accept and setup_connect
- 2023-09-14 Panic on error when setting default curves list
- 2023-06-23 Introduce ssl::Error::would_block
- 2023-09-22 deps: update to bindgen 0.68
- 2023-10-06 Fix clippy lints
- 2023-08-15 Add new(), connect(), accept() and handshake() to SslStream
- 2023-09-18 Enable P-521 with "kx-safe-default"
- 2023-08-15 Provide into_ssl() for ConnectConfiguration
3.1.0
- 2023-09-13 Update Cargo.toml
- 2023-09-13 Update RELEASE_NOTES
- 2023-09-13 Update RELEASE_NOTES
- 2023-09-12 tweaks for ergonomic linking
- 2023-08-08 Use features to set key exchange preferences
- 2023-08-30 Introduce `no-patches` feature
- 2023-08-29 run `publish --dry-run` instead of `pacakge` on CI
- 2023-08-29 fix missing space in cargo package CI command
- 2023-08-25 ci: run the cargo package check for all targets
- 2023-08-25 boring-sys: include all files needed to build FIPS
- 2023-08-25 add CI jobs to run `cargo package`
- 2023-08-15 Fix -Z minimal-versions
- 2023-08-29 Separate `fips` and `fips-link-precompiled` features.
3.0.4
- 2023-08-05 Bump version in Cargo.toml
- 2023-08-05 Add missing cmake files to the package
3.0.3
- 2023-08-03 Fix missing .trim() when verifying FIPS module name
- 2023-08-03 Fix Diplay panics for HandshakeError with `rpk` (fixes #140)
3.0.2
- 2023-08-03 Fix feature gates for fips-link-precompiled
- 2023-07-28 Switch boring from lazy_static to once_cell
- 2023-08-01 Clean up and remove some unsafe code from ffi callbacks
3.0.1
- 2023-08-01 Reduce release bundle size by excluding PQ test data
- 2023-07-28 Adding hmac.h to included headers
- 2023-08-01 Reduce release bundle size by excluding PQ test data
- 2023-08-01 Fix builds for features that require git patches
3.0.0
- 2023-07-29 Fix publishing
- 2023-07-28 Add git-cliff configuration
- 2022-07-29 boring-sys: Handle cross-compiling macOS targets
- 2022-11-08 boring-sys: Add support for Linux ARM(v7)
- 2022-11-30 boring-sys: Update Android NDK sysroot path
- 2022-07-28 boring: Expose PKey::private_key_to_der_pkcs8(_passphrase)
- 2023-07-26 Add fips-link-precompiled feature
- 2023-07-14 Allow specifying a custom BoringSSL source directory
- 2023-07-10 Address review comments
- 2023-07-10 Update docs
- 2023-07-10 Use workspace metadata for crates
- 2023-07-07 Add RPK and PQ crypto features
- 2023-05-15 Revert "Merge pull request #108 from nox/store-clone"
- 2023-05-15 Fix build
- 2023-03-27 Implement ToOwned for X509StoreRef and Clone for X509Store
- 2023-03-22 Fix race condition with X509Name creation
- 2023-03-22 Document the horror show
- 2023-03-22 Always provide an X509V3Context in X509Extension::new because OpenSSL requires it for some extensions (and segfaults without)
- 2023-03-22 Resolve an injection vulnerability in EKU creation
- 2023-03-22 Resolve an injection vulnerability in SAN creation
- 2021-10-04 Add X509Name to/from DER methods
- 2020-11-12 Add additional function so that x509 name with specific type can be added
- 2022-07-01 boring: Fix memory leak in `Deriver`
- 2023-05-05 Update boringssl to latest upstream commit
- 2023-01-10 Update BoringCrypto to FIPS 140-2 certificate 4407.
- 2023-02-28 Add link in docs
- 2023-02-28 psuedo → pseudo
- 2023-04-27 Bump bindgen to 0.65.1
- 2023-03-27 Fix lints
- 2023-03-27 Fix google test
- 2023-03-27 Use ubuntu-20.04 image for FIPS build
- 2022-06-22 Add minimal cross-compilation support for Windows and AArch64 Linux
- 2022-09-16 bump version number for tokio-boring
2.1.0
- 2022-09-16 Update changelogs and bump version numbers
- 2022-09-07 Fix clippy warnings
- 2022-09-07 Remove uses of `mem::uninitialized`
- 2022-08-08 Remove T: Debug bound
- 2022-08-08 hyper-boring: Impl debug for MaybeHttpsStream
- 2022-07-25 boring-sys: Use the Android NDK sysroot when running bindgen
- 2022-06-17 MSVC generator hack should be only applied to MSVC
- 2022-06-07 chore: update to bindgen 1.60
- 2021-12-30 ci: Test builds for iOS targets
- 2021-12-30 ci: Don't run tests when targeting iOS
- 2022-01-01 boring-sys: Disable alignment tests for iOS ARM64 targets
- 2021-12-30 boring-sys: Configure "rustc-cdylib-link-arg" only for macOS targets
- 2021-12-30 boring-sys: Pass "-isysroot" to bindgen for iOS builds
- 2021-12-30 boring-sys: Support "aarch64-apple-ios-sim" targets
- 2021-12-30 boring-sys: Use TARGET to determine iOS CMake params
- 2021-12-30 boring-sys: Pull iOS CMake params into a function
- 2021-12-30 boring-sys: Pull Android CMake params into a function
- 2022-06-02 boring-sys: Save time by not building the bssl CLI utility
- 2022-04-28 ssl/test: fix UT expectations accordingly with boringssl change
- 2022-04-27 Update boringssl deps for quiche 0.12.0 compatibility
- 2022-02-12 boring: BigNumRef::to_vec_padded()
- 2022-01-31 Add fips-3678 feature (#52)
- 2021-12-30 boring: Suppress Clippy warnings about missing safety docs
- 2021-12-16 Add/update changelogs
- 2021-12-16 Bump versions for release
- 2021-10-06 Remove PasswordCallback
- 2021-11-04 Relax constraints on `Display for tokio-boring::HandshakeError`
- 2021-11-02 boring-sys: Disable unnecessary bindgen dependencies
- 2021-08-10 Remove unused and deprecated `tempdir` dependency
- 2021-08-09 Remove unused `*Ref` parameters to macro
- 2021-08-09 Update dependencies
- 2021-08-12 Switch to 2018 edition in boring
- 2021-08-12 Run `cargo fix --edition
- 2021-07-30 Remove unused attribute
- 2021-06-14 Remove unused dependency on bytes
- 2021-07-29 Update bindgen to 0.59 and bytes to 1
- 2021-07-29 Fix clippy warnings for 1.54
- 2021-07-28 Update documentation for tokio-boring
- 2021-07-27 Fetch git submodule automatically
- 2021-06-01 pre-built binaries: Update readme and fix clippy
- 2021-05-18 Check for env var for pre-built binaries of bssl
- 2021-07-27 Ignore bindgen warnings until they're fixed upstream
- 2021-04-16 Bump tokio-boring to 2.1.3
- 2021-04-16 Bump boring to 1.1.6
- 2021-04-16 Introduce ClientHello::client_version
- 2021-04-16 Introduce HandshakeError::code
- 2021-04-13 Bump boring to 1.1.5
- 2021-04-13 Allow retrieving the version string from early callback
- 2021-04-13 Allow returning the server name from the early callback
- 2021-04-06 Bump boring-sys to 1.1.1, tokio-boring to 2.1.2
- 2021-04-06 Allow uppercase acronyms
- 2021-04-06 Provide access to inner I/O error during handshake
- 2021-03-15 Bump boring to 1.1.4
- 2021-03-15 Use Display for ssl::Error in Display for ssl::HandshakeError
- 2021-03-15 Tweak yet again the boring error reporting
- 2021-03-11 Bump boring to 1.1.3
- 2021-03-11 Remove file/line from Display for HandshakeError
- 2021-03-09 Bump boring to 1.1.2, tokio-boring 2.1.1
- 2021-03-09 Add tokio_boring::HandshakeError::as_source_stream
- 2021-03-09 Introduce MidHandshakeSslStream::into_parts
- 2021-03-04 Print handshake errors in a better way
- 2021-03-04 Separate errors in an error stack better
- 2021-03-01 Bump boring to 1.1.1
- 2021-03-01 Make Display for Error more readable
- 2021-02-24 Bump feature version on all packages instead.
- 2021-02-24 Bump boring-sys to 1.0.5. Bump boring to 1.0.4
- 2021-02-20 Add support for SSL_CTX_set1_curves
- 2021-02-19 Enable various client features of bssl
- 2021-02-22 Introduce ExtensionType for the arg of get_extension
- 2021-02-19 Introduce ClientHello::get_extension
- 2021-02-19 Introduce set_select_certificate_callback
- 2021-02-11 Use bindgen to automatically generate boring-sys
- 2021-02-18 Sync upstream changes to support tokio 1.x
- 2021-02-11 Make new clippy happy
- 2021-02-11 Bump boring-sys to 1.0.4
- 2021-02-09 Update boringssl submodule pointer
- 2021-02-08 Bump boring-sys to 1.0.3
- 2021-01-28 Include .asm files required for Windows
- 2021-01-20 Bump hyper-boring version
- 2021-01-08 Fix clippy warning.
- 2021-01-08 Ensure the host can be parsed as an IPv6 address.
- 2020-12-23 Bump version
- 2020-12-23 Implement conversion of HandshakeError to the source stream
- 2020-12-03 Make clippy happy
- 2020-12-03 Add support for wss: scheme in hyper-boring
- 2020-11-13 Fix boring repository links.
- 2020-11-12 Add publish script
- 2020-11-12 Fix boring-sys linking. Bump version.
- 2020-11-11 Fix doc comment
- 2020-11-11 Fix docs
- 2020-11-11 Add hyper-boring
- 2020-11-11 Add tokio-boring
- 2020-11-11 Revive CI
- 2020-11-11 Fix doc comments
- 2020-11-11 Rename stuff
- 2020-11-11 Remove LibreSSL leftovers
- 2020-11-11 Remove ossl110 gate
- 2020-11-11 Remove ossl102 gate
- 2020-11-11 Remove ossl101 gate
- 2020-11-11 Remove ossl110f config gate
- 2020-11-11 Remove ossl110g feature gate
- 2020-11-11 Remove ossl111 feature gate
- 2020-11-11 Remove unimplemented OSSL111 stuff
- 2020-11-11 Remove LibreSSL-specific code
- 2020-11-11 Revive tests
- 2020-11-10 Fix compilation warnings
- 2020-11-10 Remove decrepit and unavaliable API and fix signatures
- 2020-11-08 BoringSSL
- 2020-10-12 Update to cfg-if 1.0
- 2020-10-10 Silence clippy::match_like_matches_macro (would require rust 1.42)
- 2020-10-10 Fix a typo
- 2020-09-27 Update some X509_CRL bindings for libressl281
- 2020-09-27 Add some X509_REVOKED bindings, make extensions field public
- 2020-09-27 Add more extension bindings for STACK_OF(X509_EXTENSION)
- 2020-09-28 Fix ASN1_OCTET_STRING in bindings
- 2020-08-09 Add AUTHORITY_KEYID struct
- 2020-08-09 Add bindings and consts for x509 extensions flags and (extended) key usage
- 2020-08-09 Add bindings to access x509 extensions in various types
- 2020-09-26 Add a few bindings for X509_REVOKED
- 2020-09-26 Add more bindings for X509_CRL
- 2019-06-10 Expose the X509Revoked type directly
- 2019-06-07 Add basic bindings to the API CRLs
- 2020-09-24 bump to 1.1.1f in CI
- 2020-09-13 Add ecx support
- 2020-09-03 Add constructor for creating Asn1Object from a textual OID representation
- 2020-08-31 Add from_der and to_der to PKCS7
- 2020-08-15 Test openssl-errors on windows
- 2020-08-12 Make openssl-errors tests work on Windows
- 2020-08-11 Update mod.rs
- 2020-08-11 Cast to u32
- 2020-03-06 Expose subject_name_hash
- 2020-07-27 Make openssl not cleanup at exit, which can lead to race conditions on openssl >= 1.1.1b.
- 2020-08-08 Stop testing 1024 bit DH keys
- 2020-07-28 Work around upstream base64 bug
- 2020-07-28 Fix EcdsaSig method flexibility
- 2020-07-22 Fix clippy
- 2020-07-03 Fix documentation for unwrap_key
- 2020-06-26 Fix changelog
- 2020-06-23 Add SslStream::from_raw_parts
- 2020-06-14 sign.rs: fix typo in comment
- 2020-06-06 Fix CI branch
- 2020-06-06 remove appveyor builds
- 2020-06-06 Ignore default verify paths test on windows
- 2020-06-06 test env lookup
- 2020-06-06 set vcpkg root
- 2020-06-06 run stuff
- 2020-06-06 update vcpkg
- 2020-06-06 Move vcpkg build to github actions
- 2020-06-04 Fix test.
- 2020-06-04 Make tests narrower.
- 2020-06-02 Write "error" when there is an error.
- 2020-06-01 Fixes in response to review feedback.
- 2020-05-30 Add Debug trait for X509 and other types.
- 2020-06-05 Fix readme link
- 2020-06-03 adding PKE interface
- 2020-06-05 Adds Debug derive for SslConnector
- 2020-06-05 Fix private key serializtion in HasPublic impl for DsaRef
- 2020-06-05 Add PEM/DER serialization for EC public key
- 2020-06-05 fix clippy
- 2020-06-03 Fix cache name
- 2020-06-02 Support LibreSSL 3.2.0
- 2020-05-26 fix syntax
- 2020-05-26 Move min-version to github actions
- 2020-05-26 asdf
- 2020-05-26 Add SslRef::set_mtu
- 2020-05-24 Run clippy
- 2020-05-24 Run rustfmt on github actions
- 2020-05-09 remove any from openssl110 cfgs
- 2020-05-08 ocb is only available in openssl 1.1 and later
- 2020-05-08 Add support for AES-OCB mode
- 2020-05-09 LibreSSL 3.1 branch marked as stable; add support
- 2020-05-02 Fix static build on windows-gnu targets
- 2020-04-28 Bump ci versions
- 2020-04-19 Support LibreSSL 3.1.0
- 2020-04-12 Fix function name in peer_finished documentation
- 2020-04-08 FIx build
- 2020-04-08 Deal with upstream archive location change
- 2020-04-08 Add SslContextBuilder::set_cert_store
- 2020-04-05 Update openssl/src/lib.rs
- 2020-04-05 Add documentation for OPENSSL_NO_VENDOR
- 2020-04-05 Add OPENSSL_NO_VENDOR env var check
- 2020-04-05 Bump CI version
- 2020-03-24 Update openssl/src/ssl/mod.rs
- 2020-03-24 Add man page links
- 2020-03-24 Add functions for SSL{_CTX}_get_verify_mode and SSL_is_init_finished
- 2020-03-24 Add SslMethod::tls_{client,server}
- 2020-03-24 Update openssl/src/x509/store.rs
- 2020-03-24 Add a shim for X509_STORE_get0_objects and X509_OBJECT_free
- 2020-03-23 Only have constants on < ossl110
- 2020-03-23 Skip X509_OBJECT_data systests
- 2020-03-23 Add x509_vfy.h header to systest
- 2020-03-23 Check null ptr for non-x509 X509Object
- 2020-03-23 Fix signedness issue
- 2020-03-23 Add a way to get the certificates stored in an X509Store
- 2020-03-21 Fix build on DragonFly
- 2020-03-19 Upgrade CI versions
- 2020-02-26 Fix the memory leak in `X509Builder::append_extension`.
- 2020-02-26 use library names supplied by vcpkg
- 2020-02-13 Tweak interface a bit
- 2020-02-05 adds ability access the internal &SslContext of an SslAcceptor and SslConnector
- 2020-02-11 Allow bad style on pkey.rs
- 2020-02-10 Attach cfg[allow_deprecated] to methods w/ uninitialized functionality
- 2020-02-04 Fix mutability of oneshot sign/verify methods
- 2020-02-03 Fix visibility of Signer::new_intern
- 2020-01-29 Fix changelog
- 2020-01-27 Add NO RENEGOTIATION option
- 2020-01-24 Add EVP_EncryptInit_ex/EVP_EncryptFinish_ex, and the equivalently named
- 2019-10-03 add SslStreamBuilder::set_dtls_mtu_size(usize)
- 2020-01-10 Update to autocfg 1.0
- 2019-12-27 Avoid false-failures if underlying network connection errors
- 2019-12-24 Upgrade 1.0.2 in CI
- 2019-12-17 Replace try!() with ?
- 2019-12-21 remove deprecated Error::description, replace deprecated cause with source
- 2019-12-20 In the documentation of SslContextBuilder::set_certificate, we had written
- 2019-12-20 In the documentation of SslContextBuilder::set_session_id_context, we had written
- 2019-12-20 In the documentation of SslContextBuilder::set_cipher_list, we had given
- 2019-12-12 Fix documentation typo of "chain"
- 2019-12-12 Fix link
- 2019-12-09 fix a typo in the description of `Asn1Time`
- 2019-12-04 Use d2i_PKCS8_PRIV_KEY_INFO instead of *_bio
- 2019-12-03 Pkey::private_key_from_pkcs8 free p8inf
- 2019-12-01 Fix pointer constness correctly
- 2019-12-01 Change *const to *mut to try if it fixes tests
- 2019-12-01 move EVP_PKCS82PKEY into evp module
- 2019-12-01 Support for PKCS#8 unencrypted private key deserialization
- 2019-11-23 Update openssl/src/hash.rs
- 2019-11-22 Add EVP_md_null() and MessageDigest::md_null()
- 2019-11-22 Fix up base64 docs
- 2019-11-22 Cleanup
- 2019-11-22 Fix IV handling in envelope
- 2019-11-13 Avoid initialization overhead for base64 coding
- 2019-11-13 Expose EVP_{Encode,Decode}Block interfaces for base64 coding
- 2019-11-13 Format code using 'cargo fmt'
- 2019-11-16 Remove busted windows build
- 2019-11-16 Allow configuration of EC groups and signature algorithms
- 2019-11-12 Added unit test to test that new cloning feature works as intended
- 2019-11-12 Changed all sha objects to be clonable per PR review suggestion.
- 2019-11-11 Added clonability for sha hash state. Useful for incremental hashing
- 2019-11-11 Add #[cfg(ossl110)]
- 2019-11-11 Add EC_GROUP_order_bits
- 2019-10-10 Add method to create Asn1Time from time_t value
- 2019-10-10 Add diff method and comparisons to Asn1TimeRef
- 2019-10-19 Support LibreSSL 3.0.2
- 2019-10-10 Fix changelog links
- 2019-10-10 Note openssl-sys support
- 2019-10-08 Fix rustc warnings
- 2019-10-03 Support LibreSSL 3.0.1
- 2019-10-02 Implement Clone for PKey
- 2019-10-01 Upgrade CI versions
- 2019-09-08 Ensure Signer::len has documentation
- 2019-08-16 Added support for Ed25519 and Ed448 signatures
- 2019-09-07 Bump MSRV again
- 2019-09-06 Bump MSRV
- 2019-09-06 Free r and s on ECDSA_SIG before overwriting them in ECDSA_SIG_set0
- 2019-08-07 Fix minimal version build
- 2019-08-07 Support LibreSSL 3.0.0
- 2019-07-19 Hack around an unpatched OpenSSL issue
- 2019-07-06 Add AES-192 tests in CTR, CFB, and OFB modes
- 2019-07-06 Add AES-192 and OFB mode
- 2019-06-30 Expose pem serialize function for DSA private key
- 2019-06-29 Don't depend on NO_SSL_MASK
- 2019-06-29 Minimize test duplication
- 2019-06-29 Add mozilla v5 configurations
- 2019-06-19 Expose EC_POINT_dup as EcPoint::to_owned
- 2019-06-14 Expose EC_GROUP_get_cofactor as EcGroup::cofactor
- 2019-06-13 Expose EC_GROUP_get0_generator as EcGroup::generator
- 2019-06-12 Conditionally compile PEM functions for CMS
- 2019-06-12 Extend CMS unit tests (pem/der conversions)
- 2019-06-12 Fix formatting in cms `to_der` implementation
- 2019-06-12 Add `CmsContentInfo` <-> PEM bindings
- 2019-06-10 Add Debug impl for EcKey
- 2019-06-08 Address comments
- 2019-06-06 Add AES_wrap_key and AES_unwrap_key functionality
- 2019-06-01 Report the vendored install location
- 2019-05-31 Fix constness for 1.1.1c
- 2019-05-31 Bump CI versions
- 2019-05-30 Display for Error was incorrectly showing func instead of reason.
- 2019-05-18 Fix handling of session callbacks