aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* | | | add X509_free and EVP_PKEY_freethekuwayama2020-01-251-7/+19
| | | |
* | | | check with EVP_PKEY_cmp in advancethekuwayama2020-01-251-2/+33
| | | |
* | | | modify ossl_sslctx_add_certificate_chain_file() to raise Error and to return ↵thekuwayama2020-01-252-11/+88
| | | | | | | | | | | | | | | | | | | | | | | | self add test_add_certificate_chain_file_multiple_certs
* | | | modify test_add_certificate_chain_file to check ssl.peer_cert and ↵thekuwayama2020-01-252-6/+28
| | | | | | | | | | | | | | | | ssl.peer_cert_chain
* | | | add pkey_path argument to ossl_sslctx_add_certificate_chain_file()thekuwayama2020-01-251-5/+35
| | | |
* | | | Merge pull request #310 from thekuwayama/fix__ocsp_extern_varSHIBATA Hiroshi2020-01-171-3/+3
|\ \ \ \ | | | | | | | | | | Fix typo of `OpenSSL::OCSP` extern var
| * | | | Fix typo of `OpenSSL::OCSP` extern varthekuwayama2020-01-161-3/+3
|/ / / /
* | | | Use default fetch-depth of 1Bart de Water2020-01-011-4/+0
| | | |
* | | | Update ActionsMSP-Greg2019-12-291-38/+85
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 1. Add Ubuntu rvm master and 2.3.8 2. Add MinGW master and 2.3.3 (last MinGW build) 3. Switch from Windows helper MSP-Greg/msys2-action to MSP-Greg/actions-ruby 4. MinGW installs current Rubies, not outdated Actions builds.
* | | | Remove 2.3 from test workflow.Samuel Williams2019-12-291-11/+5
| | | |
* | | | Remove out-of-scope test.Samuel Williams2019-12-291-12/+0
| | | |
* | | | Merge in changes to tests from ruby/test/openssl.Samuel Williams2019-12-295-13/+36
| | | |
* | | | Simplify handling of version constant.Samuel Williams2019-12-295-22/+9
| | | |
* | | | Prepend slashes to X509::Name.parse argument in examplesJoshua Stowers2019-12-142-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | Addresses [issue 15882](https://bugs.ruby-lang.org/issues/15882) with [Zach Rowe's patch.](https://bugs.ruby-lang.org/attachments/7810) The #parse_openssl method [expects a forward slash at the beginning of the argument](https://github.com/ruby/openssl/blob/master/lib/openssl/x509.rb#L302) if used as the delimiter.
* | | | modify the document about `CertificateId.new`thekuwayama2019-12-022-1/+4
| | | |
* | | | Restore compatibility with older versions of Ruby.Samuel Williams2019-11-271-9/+21
| | | | | | | | | | | | | | | | `RB_PASS_KEYWORDS` is not always available.
* | | | Pull relevant changes from `ruby/ext/openssl`.Samuel Williams2019-11-275-13/+25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Diff was generated: git diff --output openssl.patch 93bc10272734cbbb9197470ca629cc4ea019f6f0 ext/openssl/*.c ext/openssl/*.h ext/openssl/**/*.rb Appled using `patch -p1 < openssl.patch`.
* | | | Don't use require_relative to load `openssl.so`.Samuel Williams2019-11-271-1/+1
| | | | | | | | | | | | | | | | It breaks when compiled in ruby source tree.
* | | | Clarify in history that PKCS8 reading is also supported [ci skip]Bart de Water2019-11-271-2/+2
| | | |
* | | | Add PKCS8 changes to historyBart de Water2019-11-251-0/+3
| | | |
* | | | pkey: add support for PKCS #8 key serializationKazuki Yamaguchi2019-11-252-12/+219
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | OpenSSL::PKey::PKey#private_to_der, #private_to_pem are added to the generic PKey class. They serialize the private key to PKCS #8 {Encrypted,}PrivateKeyInfo format, in DER- and PEM- encoding, respectively. For symmetry, also add #public_to_der and #public_to_pem that serialize the public key into X.509 SubjectPublicKeyInfo format. OpenSSL::PKey.read now reads DER-encoded PKCS #8 keys as well as the "raw" private keys. PEM-encoded PKCS #8 keys have been already handled by PEM_read_bio_PrivateKey().
* | | | Update renegotiation_cb docstring to reflect its actual behavior in MRIOleg Pudeyev2019-11-221-7/+5
| | | | | | | | | | | | | | | | Closes #256
* | | | check AIA extension is criticalthekuwayama2019-11-192-7/+2
| | | |
* | | | clean parse_aia_asn1() private instance methodthekuwayama2019-11-191-9/+10
| | | |
* | | | add/update document about AuthorityInfoAccessthekuwayama2019-11-193-12/+16
| | | | | | | | | | | | | | | | add ca_issuer_uris and ocsp_uris description to the changelog
* | | | add helper to retrieve OCSP URIs from Certificatethekuwayama2019-11-192-2/+79
| | | | | | | | | | | | | | | | add helper to access information and services for the issuer of the Certificate
* | | | add crl_uris description to the changelogthekuwayama2019-11-111-1/+2
| | | |
* | | | raise ASN1Error using an idiomatic syntaxthekuwayama2019-11-111-3/+3
| | | |
* | | | add invalid extension testthekuwayama2019-11-111-0/+21
| | | |
* | | | call ASN1Error.new when certificati extension format is invalidthekuwayama2019-11-111-3/+3
| | | |
* | | | Add history for changes since 2.1.2Jeremy Evans2019-11-081-0/+49
| | | | | | | | | | | | | | | | | | | | | | | | Going forward, History.md should be updated for all significant new features, backwards compatibility issues, and performance improvements.
* | | | modify SSLServer#listen default argument value; Socket::SOMAXCONNthekuwayama2019-11-041-1/+2
| | | |
* | | | Use fixed_length_secure_compare in HKDF example [ci skip]Bart de Water2019-11-041-18/+2
| | | |
* | | | Make OpenSSL::HMAC#== compare in constant time instead of returning falseBart de Water2019-11-044-10/+26
| | | |
* | | | Use constant time compare in HMAC exampleBart de Water2019-11-041-9/+11
| | | |
* | | | Update to dist: xenial.Jun Aruga2019-11-011-6/+1
| | | | | | | | | | | | | | | | | | | | | | | | * docker-compose is pre-installed. * We can remove "group: edge", as it is added at https://github.com/ruby/openssl/commit/7568c6e
* | | | remove unneeded gem require for ipaddrnobletrout2019-11-011-1/+0
| | | | | | | | | | | | ipaddr is a builtin class for ruby, that is occasionally merged. If the version isn't specified by the runtime dependency, then it will default to needing the latest gem rather than the version that ships with that version of ruby. That will lead to all kinds of potential dependency fails that are most likely unneeded since this gem already requires ruby > 2.3.0
* | | | Add helper to retrieve CRL URIs from a certificateBart de Water2019-11-012-0/+50
| | | |
* | | | Separate cert generation and issuance test helpersBart de Water2019-11-011-3/+12
| | | |
* | | | Fix `const_get` in test.Samuel Williams2019-11-011-1/+1
| | | |
* | | | Remove MDC2.Samuel Williams2019-11-011-1/+1
| | | |
* | | | Add support for BLAKE digest.Samuel Williams2019-11-011-1/+1
| | | |
* | | | Remove unsupported DSS, DSS1 & SHA algorithms.Samuel Williams2019-11-012-6/+3
| | | |
* | | | Add support for SHA3. Resolves #272.Samuel Williams2019-11-012-14/+43
| | | |
* | | | Use `Gem::Specification.load` to load gemspec.Samuel Williams2019-10-311-1/+2
| | | |
* | | | Prefer `require_relative`.Samuel Williams2019-10-311-9/+9
| | | |
* | | | modify document of SSLSocket.openthekuwayama2019-10-311-2/+2
| | | |
* | | | update SSLSocket.open to match TCPSocket.open method signaturethekuwayama2019-10-312-9/+50
| | | |
* | | | add SSLSocket.openthekuwayama2019-10-312-14/+34
| | | |
* | | | add `SSLSocket.open` as alias of `SSLSocket.new`thekuwayama2019-10-312-0/+17
| | | |