aboutsummaryrefslogtreecommitdiffstats
path: root/History.md
Commit message (Collapse)AuthorAgeFilesLines
* Ruby/OpenSSL 2.2.0v2.2.0ky/release-2.2.0Kazuki Yamaguchi2020-05-131-1/+1
|
* Add Marshal support to PKey objectsBart de Water2020-04-191-1/+2
|
* config: deprecate OpenSSL::Config#add_value and #[]=ky/config-deprecate-modifyKazuki Yamaguchi2020-02-191-0/+2
| | | | | | | | | | | | | | OpenSSL::Config is currently implemented in Ruby, but we plan to revert back to use OpenSSL API, just as it did before r28632 (in ruby_1_8; r29048 in trunk). It's not clear what was the issue with Windows, but the CONF library should work on Windows too. Modifying a CONF object is not possible in OpenSSL API. Actually, it was possible in previous versions of OpenSSL, but we used their internal functions that are not exposed in shared libraries anymore. Accordingly, OpenSSL::Config#add_value and #[]= have to be removed. As a first step towards the change, let's deprecate those methods.
* History.md: add missing references to GitHub issuesKazuki Yamaguchi2020-02-191-10/+31
| | | | | | | Add links to GitHub issues or pull requests. Also, move incompatible changes to a separate section for better visibility.
* Revert add_certificate_chain_file changes (#320)Hiroshi SHIBATA2020-02-161-2/+0
| | | | | | | | | | | | | Revert SSLContext#add_certificate_chain_file changes * 0da0dfaf09f549b2b2cd984627b321b7908d1186. * 8d12f0f6ca944212cb8000e689469d7aaa8190d7. * 49f42ad5f82f8b61f51a16e3a6df1ab0d5307d5f. * 5ee295ab8e37c8ffc6eb8c1b7b79ec024f3253e4. * 8b4fa5e336c7544ea677ccee160ec6d221559e10. * 443d13e9b2c127230fde2733959eaa4d41eb355d. * 5d866038920edf2729865653d6dc9309589f089a. * f18559acf97a6f6aaf3d253417eb0100b262cbc6.
* Clarify in history that PKCS8 reading is also supported [ci skip]Bart de Water2019-11-271-2/+2
|
* Add PKCS8 changes to historyBart de Water2019-11-251-0/+3
|
* add/update document about AuthorityInfoAccessthekuwayama2019-11-191-3/+5
| | | | add ca_issuer_uris and ocsp_uris description to the changelog
* add crl_uris description to the changelogthekuwayama2019-11-111-1/+2
|
* Add history for changes since 2.1.2Jeremy Evans2019-11-081-0/+49
| | | | | | Going forward, History.md should be updated for all significant new features, backwards compatibility issues, and performance improvements.
* Ruby/OpenSSL 2.1.2v2.1.2Kazuki Yamaguchi2018-10-171-0/+12
|
* Merge branch 'maint-2.0' into maintKazuki Yamaguchi2018-10-171-0/+23
|\ | | | | | | | | | | | | * maint-2.0: Ruby/OpenSSL 2.0.9 needs openssl/opensslv.h x509name: fix OpenSSL::X509::Name#{cmp,<=>}
| * Ruby/OpenSSL 2.0.9v2.0.9Kazuki Yamaguchi2018-10-171-0/+23
| |
* | Merge branch 'maint-2.0' into maintKazuki Yamaguchi2018-05-121-0/+14
|\| | | | | | | | | | | | | | | | | | | * maint-2.0: Ruby/OpenSSL 2.0.8 test/test_ssl_session: set client protocol version explicitly test/test_pkey_rsa: fix test failure with OpenSSL 1.1.1 extconf.rb: fix build with LibreSSL 2.7.0 cipher: validate iterations argument for Cipher#pkcs5_keyivgen test/utils: disable Thread's report_on_exception in start_server
| * Ruby/OpenSSL 2.0.8v2.0.8Kazuki Yamaguchi2018-05-121-0/+14
| |
* | Ruby/OpenSSL 2.1.0v2.1.0ky/release-2.1.0Kazuki Yamaguchi2017-12-141-2/+5
| |
* | Merge branch 'maint'Kazuki Yamaguchi2017-12-141-0/+15
|\| | | | | | | | | | | | | * maint: Ruby/OpenSSL 2.0.7 asn1: fix docs ssl: remove unreachable code
| * Ruby/OpenSSL 2.0.7v2.0.7ky/release-2.0.7Kazuki Yamaguchi2017-12-141-0/+15
| |
* | Ruby/OpenSSL 2.1.0.beta2v2.1.0.beta2ky/release-2.1.0.beta2Kazuki Yamaguchi2017-11-251-5/+28
| |
* | Merge branch 'maint'Kazuki Yamaguchi2017-11-251-1/+1
|\| | | | | | | | | | | | | | | | | | | | | * maint: History.md: fix a typo x509cert, x509crl, x509req, ns_spki: check sanity of public key pkey: make pkey_check_public_key() non-static test/test_cipher: fix test_non_aead_cipher_set_auth_data failure cipher: disallow setting AAD for non-AEAD ciphers test/test_ssl_session: skip tests for session_remove_cb appveyor.yml: remove 'openssl version' line
| * History.md: fix a typoKazuki Yamaguchi2017-11-251-1/+1
| |
* | Merge branch 'maint'Kazuki Yamaguchi2017-09-241-0/+20
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * maint: Ruby/OpenSSL 2.0.6 test/test_engine: check if RC4 is supported test/test_engine: suppress stderr ossl.c: make legacy locking callbacks reentrant ossl.c: use struct CRYPTO_dynlock_value for non-dynamic locks ssl: prevent SSLSocket#sysread* from leaking uninitialized data test/test_pair: replace sleep with IO.select tool/ruby-openssl-docker: update test/test_ssl: do not run NPN tests for LibreSSL >= 2.6.1 test/test_ssl: skip tmp_ecdh_callback test for LibreSSL >= 2.6.1 test/test_pair: disable compression test/test_ssl: suppress warning in test_alpn_protocol_selection_cancel ruby.h: unnormalized Fixnum value test/test_pair: fix test_write_nonblock{,_no_exceptions}
| * Ruby/OpenSSL 2.0.6v2.0.6ky/release-2.0.6Kazuki Yamaguchi2017-09-241-0/+20
| |
* | Ruby/OpenSSL 2.1.0.beta1v2.1.0.beta1ky/release-2.1.0.beta1Kazuki Yamaguchi2017-09-031-19/+25
| |
* | Merge branch 'maint'Kazuki Yamaguchi2017-08-081-0/+13
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * maint: Ruby/OpenSSL 2.0.5 ssl: fix compile error with OpenSSL 1.0.0 ssl: remove unsupported TLS versions from SSLContext::METHODS Add msys2 library dependency tag in gem metadata ossl_pem_passwd_cb: handle nil from the block explicitly ossl_pem_passwd_cb: do not check for taintedness ossl_pem_passwd_cb: relax passphrase length constraint appveyor.yml: test against Ruby 2.4 Rakefile: install_dependencies: install only when needed bio: do not use the FILE BIO method in ossl_obj2bio() bio: prevent possible GC issue in ossl_obj2bio() test/test_ssl: allow 3DES cipher suites in test_sslctx_set_params
| * Ruby/OpenSSL 2.0.5v2.0.5Kazuki Yamaguchi2017-08-081-0/+13
| |
* | Merge branch 'maint'bpointKazuki Yamaguchi2017-06-141-1/+49
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * maint: Ruby/OpenSSL 2.0.4 History.md: add entries for 2.0.1-2.0.3 History.md: wrap at 80 characters extconf.rb: simplify searching libraries logic Search SSL libraries by testing various filename patterns openssl: fix broken openssl check openssl: fix broken openssl check x509store: clear error queue after calling X509_LOOKUP_load_file() tool/sync-with-trunk: 'LASY' -> 'LAST' Update .travis.yml and Dockerfile test/test_x509store: skip OpenSSL::TestX509Store#test_set_errors Fix documentation for OpenSSL::Cipher#final Fix typos ssl: check return value of SSL_set_fd() test/test_ssl: fix typo in test_sysread_and_syswrite Fix typos test/test_pkey_ec: do not use dummy 0 order
| * Ruby/OpenSSL 2.0.4v2.0.4Kazuki Yamaguchi2017-06-141-0/+12
| |
| * History.md: add entries for 2.0.1-2.0.3Kazuki Yamaguchi2017-06-141-0/+35
| |
| * History.md: wrap at 80 charactersKazuki Yamaguchi2017-06-141-1/+2
| |
* | Remove support for OpenSSL 0.9.8 and 1.0.0topic/drop-openssl-098-and-100Kazuki Yamaguchi2016-12-221-1/+3
| | | | | | | | | | | | | | | | | | | | They are no longer receiving security updates from the OpenSSL development team since 2015-12. We have kept basic compatibility until now because RHEL 5 still uses an (heavily modified) OpenSSL 0.9.8e. The RHEL 5 will reach EOL on 2017-03, thus it is now safe to assume nobody is still using such old versions of OpenSSL.
* | Start preparing for 2.1.0Kazuki Yamaguchi2016-12-211-0/+23
|/
* Drop support for LibreSSL < 2.3topic/docker-image-updateKazuki Yamaguchi2016-10-171-1/+1
| | | | | | | | | | | | | | | | | We have changed the support policy for LibreSSL: we now support only maintained stable branches. Quoting from libressl.org[1]: > LibreSSL transitions to a new stable release branch every 6 months in > coordination with the OpenBSD development schedule. LibreSSL stable > branches are updated for 1 year after their corresponding OpenBSD > branch is tagged for release. So, LibreSSL 2.2, which was shipped by OpenBSD 5.8 released on 2015-08, is no longer supported officially by the OpenBSD team. [1] http://www.libressl.org/releases.html
* Merge branch 'topic/pkey-ec-conversion-form'Kazuki Yamaguchi2016-10-091-0/+3
|\ | | | | | | | | * topic/pkey-ec-conversion-form: pkey: allow specifying conversion form in EC::Point#to_bn
| * pkey: allow specifying conversion form in EC::Point#to_bntopic/pkey-ec-conversion-formKazuki Yamaguchi2016-09-281-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, when we want to convert a point data into an octet string with non-default conversion form, we have to set the desirable form to the associated EC::Group beforehand. This is inconvenient and counterintuitive because the conversion form is not actually related to the EC group. point = ... point.group.point_conversion_form = :compressed point.to_bn So, allow specifying the form as an optional parameter, like this: point = ... point.to_bn(:compressed)
* | Remove trailing spacesKazuki Yamaguchi2016-09-081-5/+5
|/
* pkey: make OpenSSL::PKey::EC::Group wrap an EC_GROUP directlytopic/pkey-ec-unlinkKazuki Yamaguchi2016-09-071-6/+12
| | | | | | | | | | | | | | | | | | | | | As done for EC::Point, remove ossl_ec_group struct. This contains a breaking change. Modifications to an EC::Group returned by EC#group no longer affects the EC object unless set to the key explicitly using EC#group=. This is the common behavior in Ruby/OpenSSL, including other getter methods of EC such as EC#public_key. EC#group currently returns a EC::Group linked with the key, i.e. the EC::Group object holds a reference to an EC_GROUP that the EC_KEY owns. We use some ugly workaround - the ossl_ec_group struct has a flag 'dont_free' that indicates we must not free the EC_GROUP. But it is still not possible to control OpenSSL of free'ing the EC_GROUP, so, for example, the following code behaves strangely: ec = OpenSSL::PKey::EC.generate("prime256v1") group = ec.group p group.curve_name #=> "prime256v1" ec.group = OpenSSL::PKey::EC::Group.new("prime256v1") p group.curve_name #=> nil
* Revert "Add #18 to History"Zachary Scott2016-08-291-2/+0
| | | | This reverts commit 59b22d480400e77109fe5c380f5e057ab857b4fb.
* Add #18 to HistoryZachary Scott2016-08-291-0/+2
| | | | /cc #61
* Missed 2 more links! :bomb: [ci skip]Zachary Scott2016-08-291-2/+4
|
* Missed 2 links, and :nail_care: [ci skip]Zachary Scott2016-08-291-15/+16
|
* commas [ci skip]Zachary Scott2016-08-291-5/+5
|
* Linkify History.md for release 2.0.0 [ci skip]Zachary Scott2016-08-291-7/+14
|
* Ruby/OpenSSL 2.0.0.beta.1v2.0.0.beta.1Kazuki Yamaguchi2016-08-291-1/+1
|
* Merge branch 'topic/cipher-auth-tag-len'Kazuki Yamaguchi2016-08-261-0/+3
| | | | | * topic/cipher-auth-tag-len: cipher: add Cipher#auth_tag_len=
* Rename History.rdoc to History.mdKazuki Yamaguchi2016-08-261-0/+115
It's written in rather Markdown.