boring

What's Changed

• CI improvements by @kornelski in #490
• unsafe_op_in_unsafe_fn by @kornelski in #493
• ci: add Semgrep OSS scanning workflow by @hrushikeshdeshpande in #501
• Expose DTLS version constants in SslVersion by @vynious in #503
• Let crates detect boring-sys version by @kornelski in #506
• Bump BoringSSL to latest and update patches by @cjpatton in #499
• boring-sys: Bump BoringSSL to e2a57cfb4 by @cjpatton in #509
• Fix dangling pointer in X509StoreContextRef::set_verify_param by @TheJokr in #508
• Pingora's patch disabling cert version validation for extensions by @kornelski in #495
• Expose TLS signature algorithm and per-connection sigalg preferences by @lukevalenta in #513
• MLDSA for Pingora by @kornelski in #497
• ci,mac: bew trust messense/macos-cross-toolchains by @bwesterb in #516
• ML-DSA: add private->public and public key marshalling by @bwesterb in #515
• Avoid panicking methods by @kornelski in #483
• boring-sys: add tvOS target support by @gengjiawen in #519

New Contributors

• @vynious made their first contribution in #503
• @lukevalenta made their first contribution in #513
• @gengjiawen made their first contribution in #519

Full Changelog: v5.1.0...v5.1.1

What's Changed

• CI improvements by @kornelski in #490
• unsafe_op_in_unsafe_fn by @kornelski in #493
• ci: add Semgrep OSS scanning workflow by @hrushikeshdeshpande in #501
• Expose DTLS version constants in SslVersion by @vynious in #503
• Let crates detect boring-sys version by @kornelski in #506
• Bump BoringSSL to latest and update patches by @cjpatton in #499
• boring-sys: Bump BoringSSL to e2a57cfb4 by @cjpatton in #509
• Fix dangling pointer in X509StoreContextRef::set_verify_param by @TheJokr in #508
• Pingora's patch disabling cert version validation for extensions by @kornelski in #495
• Expose TLS signature algorithm and per-connection sigalg preferences by @lukevalenta in #513
• MLDSA for Pingora by @kornelski in #497
• ci,mac: bew trust messense/macos-cross-toolchains by @bwesterb in #516
• ML-DSA: add private->public and public key marshalling by @bwesterb in #515
• Avoid panicking methods by @kornelski in #483
• boring-sys: add tvOS target support by @gengjiawen in #519
• Add relax-rsa-key-usage feature to restore historical RSA keyUsage by @johnhurt in #512

New Contributors

• @vynious made their first contribution in #503
• @lukevalenta made their first contribution in #513
• @gengjiawen made their first contribution in #519

Full Changelog: v5.1.0...v5.2.0

• 2026-05-21 Export DEP_BORINGSSL_VERSION_MAJOR var
• 2026-04-27 Expose DTLS version constants in SslVersion

What's Changed

• Added used_hello_retry_request function by @icrutche in #481
• Export pre-built libraries for packaging by @kornelski in #485
• Add TLS 1.2 PRF module and bindings by @janrueth in #487
• Add generic PKey private key generation API by @janrueth in #488
• Add EVP_AEAD-based detached AEAD module by @janrueth in #486

New Contributors

• @icrutche made their first contribution in #481
• @janrueth made their first contribution in #487

Full Changelog: v5.0.2...v5.1.0

• 2026-04-13 Add EVP_AEAD-based detached AEAD module
• 2026-04-13 Add generic PKey private key generation API
• 2026-04-13 Add TLS 1.2 PRF module and bindings
• 2026-03-25 Add used_hello_retry_request
• 2026-03-28 Prebuilt lib export option
• 2026-03-27 Display sys crate errors using cargo::error

What's Changed

• boring-sys: Support static MSVC runtime by @jrose-signal in #475
• Sync methods with rust-openssl by @kornelski in #477
• Don't add build/ to non-FIPS pre-built path + v4 compat alias by @kornelski in #474

For major changes in v5 see: https://github.com/cloudflare/boring/releases/tag/v5.0.0

Full Changelog: v5.0.1...v5.0.2

• 2026-02-13 Re-add fips-precompiled for v4 compat
• 2026-02-12 Don't add build/ to non-FIPS pre-built path
• 2026-02-13 Expose load_verify_locations like rust-openssl
• 2026-02-12 Support static MSVC runtime

• Improved building with older versions of upstream BoringSSL C headers #469
• Added mlkem and credential Cargo features for new BoringSSL APIs.

See v5.0.0 for major changes.

• 2026-02-03 Make SslCredential optional
• 2026-02-10 Make ML-KEM optional
• 2026-02-10 Don't always require all headers from all versions of BoringSSL
• 2026-02-10 Ensure we don't leave unit memory if generate_key fails

Breaking changes

Upgrade to 4.21.1 first and fix any deprecation warnings.

Cargo features removed/simplified

• FIPS only needs the fips Cargo feature, and the rest is customized via env vars (like BORING_BSSL_FIPS_PATH): #383
• Removed the "kx-*" features #393
• Post-quantum is enabled by default (X25519MLKEM768 and P256Kyber768Draft00) and the "pq-experimental" Cargo feature flag is not used any more.

Other semver changes

• Updated BoringSSL to a newer version with updated patches by @nox in #419
• Removed SslCurve API. Identifying curves by name is more reliable across different builds of BoringSSL. Use SslRef::curve_name() instead #390 #396
• Removed deprecated X509CheckFlags #425
• X509Store is now cheaply cloneable, but immutable. SslContextBuilder.cert_store_mut() can't be used after .set_cert_store(). If you need .cert_store_mut(), either don't overwrite the default store, or use .set_cert_store_builder() #426
• X509StoreBuilder::add_cert takes a reference.
• Hyper version upgraded from v0 to v1
• set_ex_data() will always Drop previous values #424
• Removed blanket Eq from FFI types
• BIO_set_retry_write on WouldBlock @ihciah in #118

Added

• Added ML-KEM-768 and ML-KEM-1024 support #455 #456 #462
• Added init-update-finalize API for HMAC #459
• set_strict_cipher_list by @abernardeau-wallix in #416
• Added set_ticket_key_callback by @toidiu in #330
• SslCipherRef::protocol_id by @nox in #409

Full Changelog: v4.20.0...v5.0.0

• 2025-12-19 Update vendored boring to a newer version (2023.11 to 2025.11)
• 2025-12-20 Rework RPK/SslMethod (c2f063cf4711f15b8b417b6926496fbf1c2a03ac)
• 2025-09-29 Remove SslCurve API
• 2025-09-30 Remove the "kx-*" features
• 2025-09-25 Remove legacy FIPS options (they're controlled via BORING_BSSL_ env vars instead)
• 2026-01-05 Remove deprecated X509CheckFlags flag
• 2025-09-30 Remove "pq-experimental" Cargo feature, apply PQ patch by default + P256Kyber768Draft00
• 2026-01-05 Safe clone for X509Store
• 2025-03-08 Add set_ticket_key_callback (SSL_CTX_set_tlsext_ticket_key_cb)
• 2025-09-30 Add SslRef::curve_name()
• 2025-09-30 Expose a safe Rust interface for the session resumption callback
• 2026-01-05 Fix leaky set_ex_data() API
• 2025-12-12 Add boring specific api set_strict_cipher_list to SslContextBuilder
• 2025-11-20 Introduce SslCipherRef::protocol_id
• 2023-05-11 fix: BIO_set_retry_write when BIO_CTRL_FLUSH to allow writer returns WouldBlock on flush
• 2025-11-14 Remove blanket Eq from FFI types
• 2025-12-20 Never use the debug CRT on Windows
• 2025-02-19 X509Builder::append_extension2 -> X509Builder::append_extension
• 2025-02-19 Ssl::new_from_ref -> Ssl::new()
• 2025-02-19 Align SslStream APIs with upstream
• 2025-09-26 Remove support for Hyper v0

• Added ML-KEM-768 and ML-KEM-1024 support #455 #456 #462
• Added init-update-finalize API for HMAC #459
• Re-added pq-experimental (no-op) Cargo feature flag to allow crates support both boring v4 and v5 #461
• OpenBSD build fix #454
• See previous release notes for major v5 changes: https://github.com/cloudflare/boring/releases/tag/v5.0.0-alpha.1

Full Changelog: v5.0.0-alpha.1...v5.0.0-alpha.3

• Deprecated APIs that were removed in v5.
• Fixed docs.rs build

• 2026-01-05 Warn about set_curves() removal
• 2026-01-05 Deprecate set_ex_data()
• 2026-01-05 Fix build with --no-default-features
• 2026-01-05 Make set_curves_list always available
• 2026-01-19 Use fips-build-compatible ERR_add_error_data

• 2025-08-26 Support TARGET_CC and CC_{target}
• 2025-08-26 Fix swapped host/target args
• 2025-06-13 CStr UTF-8 improvements
• 2025-09-26 Skip Rust version detection for bindgen
• 2025-09-26 Upgrade deps
• 2025-06-13 Ensure that ERR_LIB type can be named
• 2025-06-13 Add more reliable library_reason()
• 2025-09-30 pq: fix MSVC C4146 warning
• 2025-10-14 Freebsd build
• 2025-10-01 Fix string data conversion in ErrorStack::put()

• 2025-09-03 Add binding for X509_check_ip_asc
• 2025-06-13 Use ERR_clear_error
• 2025-06-13 Error descriptions and docs
• 2025-06-13 Boring doesn't use function codes
• 2025-09-03 Fix patched docs.rs builds
• 2025-09-03 Test docs.rs docs
• 2025-09-03 Fix doc links

• 2025-05-29 Add set_verify_param
• 2025-05-28 Add support for X509_STORE_CTX_get0_untrusted
• 2025-06-02 Add X509VerifyParamRef::copy_from (#361)
• 2025-06-02 Fix X509VerifyContextRef::set_verify_param (#358)
• 2025-06-02 Ensure we call X509_STORE_CTX_cleanup on error path too (#360)
• 2025-06-02 Add mutable ex_data APIs for X509StoreContext
• 2025-06-02 Add X509StoreContextRef::init_without_cleanup
• 2025-06-04 Rename to reset_with_context_data
• 2025-06-05 Avoid panicking in error handling
• 2025-06-05 Don't unwrap when Result can be returned instead
• 2025-06-04 Make X509Store shareable between contexts
• 2025-06-05 Sprinkle #[must_use] (#368)
• 2025-06-05 Expose SSL_set1_groups to Efficiently Set Curves on SSL Session (#346)
• 2025-06-09 Upgrade bindgen to v0.72.0
• 2025-06-13 Expose PKey::raw_{private,public}_key (#364)
• 2025-06-10 Don't link binaries on docs.rs
• 2025-06-11 Use cargo:warning for warnings

• 2025-05-27 Revert "feat(x509): Implement Clone for X509Store (#339)" (#353)
• 2025-05-14 Update bindgen from 0.70.1 -> 0.71.1.
• 2025-05-19 Add X509_STORE_CTX_get0_cert interface
• 2025-05-18 boring(ssl): use corresponds macro in add_certificate_compression_algorithm
• 2025-02-14 Update Cargo.toml
• 2025-02-13 build: Fix the build for 32-bit Linux platform
• 2025-05-20 rustfmt ;(
• 2025-05-20 Fix linking SystemFunction036 from advapi32 in Rust 1.87
• 2025-05-20 Clippy
• 2025-05-01 add SslCurve::X25519_MLKEM768 constant
• 2025-04-17 Use ubuntu-latest for all ci jobs
• 2025-04-16 fix clippy error
• 2025-04-15 expose SSL_set_compliance_policy
• 2025-04-07 feat(x509): Implement Clone for X509Store (#339)

• 2025-03-31 Add fips-precompiled feature to support newer versions of FIPS (#338)
• 2025-03-18 Document linking to C++ standard library (#335)
• 2025-03-18 Revert "Remove "fips-no-compat", decouple "fips-compat" from "fips"" (#334)
• 2025-03-11 boring: Disable SslCurve API with "fips" feature
• 2025-03-11 boring-sys: Ignore patches when boringSSL is precompiled
• 2025-03-13 Remove "fips-no-compat", decouple "fips-compat" from "fips"
• 2025-03-14 Add feature "fips-no-compat"
• 2025-03-10 Advertise X25519MLKEM768 with "kx-client-pq-preferred" (#329)
• 2025-03-10 Update to actions/cache@v4 (#328)
• 2025-02-28 Add missing release notes entry (#324)

• 2025-02-27 Expose API to enable certificate compression. (#241)
• 2025-02-23 Fix lifetimes in ssl::select_next_proto
• 2025-02-23 Revert cmake bump (for now) as it is overly restrictive (#321)
• 2025-02-21 Introduce a builder pattern for SslEchKeys + make set_ech_keys take a reference (#320)
• 2025-02-21 Revert "Refactor!: Remove strict TokioIo response requirement from hyper_boring::v1::HttpsConnector"
• 2025-02-21 Revert "Refactor!: Introduce a Cargo feature for optional Hyper 0 support"
• 2025-02-21 Address clippy lints
• 2025-02-21 Actually expose SslEchKeys

• 2025-02-19 Bump cmake-rs to improve Mac OS build parallelism
• 2025-02-19 Expose SSL_CTX_set1_ech_keys from SslContextRef
• 2024-01-27 Set CMAKE_BUILD_PARALLEL_LEVEL to available_parallelism
• 2025-02-14 build: Fix the build for 32-bit Linux platform (#312)
• 2024-11-30 Use corresponds macro
• 2025-02-12 Expose SSL_set_enable_ech_grease
• 2025-02-12 Clean up ECH tests
• 2025-02-10 Expose client/server-side ECH
• 2025-02-10 Expose EVP_HPKE_KEY
• 2025-02-10 Clean up boring_sys::init()
• 2024-11-27 Detailed error codes
• 2025-02-04 chore: Fix docs on SslRef::replace_ex_data
• 2025-01-22 fix manual_c_str_literals clippy warning
• 2025-01-22 replace once_cell with LazyLock
• 2025-01-13 RTG-3333 Support X25519MLKEM768 by default, but don't sent it as client
• 2024-07-31 Allow dead_code instead of disabling clippy entirely for bindgen
• 2024-11-12 Remove INVALID_CALL from mid-handshake error message
• 2024-08-16 Fix bug with accessing memzero'd X509StoreContext in tests
• 2024-08-16 Support linking with a runtime cpp library
• 2024-12-06 Refactor!: Introduce a Cargo feature for optional Hyper 0 support
• 2024-12-06 Refactor!: Remove strict TokioIo response requirement from hyper_boring::v1::HttpsConnector

• 2024-11-26 Sync X509StoreBuilder with openssl
• 2024-11-26 Sync X509VerifyFlags with openssl
• 2021-11-21 More corresponds from openssl
• 2024-11-28 Work around Rust settings inconsistent iOS SDK version
• 2024-11-28 Clippy
• 2024-03-11 Fix Windows build

• 2024-11-20 Add bindings for SSL_CB_ACCEPT_EXIT and SSL_CB_CONNECT_EXIT
• 2024-10-22 (ci): brew link x86 toolchain for macos13 runner
• 2024-10-22 Skip bindgen 0.70's layout tests before Rust 1.77
• 2024-10-18 Add set_cert_verify_callback (SSL_CTX_set_cert_verify)

• 2024-10-17 boring-sys: include HPKE header file for bindgen
• 2024-10-17 Add "fips-compat" feature (#286)
• 2024-09-25 Create semgrep.yml

• 2024-09-21 Set MSRV to 1.70 (#279)

• 2024-09-18 boring-pq.patch Fix by not updating crypto_test_data.cc

• 2024-09-18 Don't support X25519MLKEM768 by default (yet)

• 2024-09-18 Implement optional Hyper 1 support in hyper-boring (#246)
• 2024-09-17 Add post-quantum key agreement X25519MLKEM768
• 2024-09-10 Revert "PQ: fix timing sidechannels and add IPDWing"
• 2024-09-17 Update bindgen to 0.70.1
• 2024-09-17 Expose SSL(_CTX)_set1_curves_list (#270)
• 2024-09-11 Expose SSL_CTX_set_info_callback (#266)
• 2024-09-03 Use ForeignType::into_ptr wherever applicable
• 2024-08-19 Expose RSAPSS public key Id type
• 2024-08-15 Fix macos FIPS crossbuild
• 2024-08-15 Add tests for X509Ref::subject_key_id, X509Ref::authority_key_id, and X509NameRef::print_ex
• 2024-08-14 Expose X509NameRef::print_ex
• 2024-08-13 Introduce corresponds macro from openssl-macros
• 2024-08-14 Introduce ForeignTypeExt and ForeignTypeRefExt
• 2024-08-09 Expose mTLS related APIs
• 2024-08-14 chore(boring-sys): Fix git apply patch on Windows (#261)

• 2024-08-04 Properly handle Option<i32> in SslRef::set_curves

• 2024-08-02 Actually Release 4.9.0
• 2024-08-02 Guard against empty strings given to select_next_proto (#252)
• 2024-08-01 Document SslCurve::nid()
• 2024-08-01 Add SslCurve::to_nid() and remove SslCurveId
• 2024-07-23 Fix x509_check_host return value
• 2024-07-29 Fix clippy lints re: docs indentation + unused feature
• 2024-07-29 Ignore clippy / rustfmt on autogenerated code
• 2024-07-26 Clean up legacy const_fn feature gates
• 2024-07-23 Impl From for SslVersion
• 2024-06-03 Split SSL curve identifiers into a separate enum.
• 2024-07-23 (ci): Fix macos crossbuild action by forcing brew link w [email protected]
• 2024-07-09 Expose set_permute_extensions
• 2024-06-24 PQ: fix timing sidechannels and add IPDWing

• 2024-06-28 Expose hmac_sha1 function
• 2024-06-18 Fix workflows file, pin mac os FIPS crossbuild runner to macos-13
• 2024-06-18 clippy: *::max_value() -> *::MAX
• 2024-06-18 Expose X509_check_host
• 2024-06-18 Expose SSL_add1_chain_cert
• 2024-06-18 Expose SSL_{set|clear}_mode
• 2024-06-18 Expose SSL_{get|set}_{max|min}_proto_version
• 2024-06-18 Add APIs to expose client and server cipher lists
• 2024-06-18 Expose SSL_CIPHER_is_aead and SSL_CIPHER_auth_nid
• 2024-06-18 Add NIDs for cipher authentication types
• 2024-06-14 Impl From for SslSignatureAlgorithm
• 2024-03-27 Updates license field to valid SPDX format

• 2024-05-31 Fix crosscompile
• 2024-05-30 Expose hmac_sha256/512 functions

• 2024-04-09 Tweak cliff config to exclude merge and release commits from changelog
• 2023-12-04 builder
• 2023-12-01 HttpsLayerSettings
• 2022-11-28 bound session cache
• 2024-03-26 add get_curve (#226)
• 2024-03-24 Remove kx-safe-default gate on SslCurve
• 2024-02-06 Enable layout tests on iOS target
• 2024-03-23 Fix clippy lints
• 2024-03-21 Add getters for client hello message
• 2024-01-25 Removes vestigial build script
• 2024-02-02 Introduce and use read_uninit and write_uninit duplicated from openssl-0.10.61 and tokio-openssl-0.6.4
• 2024-02-07 Introduce SslRef::set_private_key

• 2024-02-02 Fix building with BORING_BSSL_PATH / BORING_BSSL_FIPS_PATH
• 2024-01-24 Fix building with non bazel commits of boringssl

• 2024-01-16 Expose set_compliance_policy and get_ciphers
• 2024-01-08 Expose SSL_get_error
• 2023-12-20 Fix support for fips-link-precompiled

• 2024-01-03 Introduce X509Flags
• 2024-01-03 Move x509 tests to a subdirectory
• 2024-01-02 Rearrange imports in x509 module
• 2023-12-20 Introduce HttpsLayer::set_ssl_callback
• 2023-12-20 Don't use self-signed certs in hyper-boring tests
• 2023-12-18 Introduce X509CheckFlags::UNDERSCORE_WILDCARDS

• 2023-12-13 Introduce set_custom_verify_callback and set_async_custom_verify_callback
• 2023-12-13 Restore rpk feature in tokio-boring
• 2023-12-13 Remove rpk from hyper docsrs features
• 2023-12-14 Introduce tokio_boring::SslStreamBuilder
• 2023-11-14 Swap build and run order; always build
• 2023-11-13 Remove unused target_env from boring-sys build config
• 2023-10-13 boring-sys: Blocklist max_align_t in bindgen
• 2023-10-14 boring-sys: Don't check for MSVC with target_env
• 2023-10-14 Use gcc/g++ as the compilers for windows-gnu, not Clang
• 2023-10-14 Always run tests in bash
• 2023-10-14 Add arm64-macos cross-compile to CI
• 2023-10-13 Add custom linker for Android cross-compilation
• 2023-10-13 Add custom environment for ARM Linux cross-compilation
• 2022-06-03 Build tests even for cross-compiling
• 2023-10-13 Remove musl test; there's no standard musl C++ setup for us to use
• 2022-06-03 Make arm and Android builds check-only
• 2022-06-03 Add matrix.apt_packages
• 2022-06-03 Refactor check-only and extra-test-args
• 2022-05-27 Add relevant --target to cargo test in CI
• 2023-12-07 Fix typos
• 2023-11-11 boring-sys: Don't use CMake cross-compilation for macOS->iOS
• 2023-11-27 Move async callbacks infra to boring itself
• 2023-11-17 Use replace_ex_data more

• 2023-11-16 Properly drop overwritten ex data
• 2023-11-16 Fix clippy lint

• 2023-11-06 Update release notes
• 2023-11-06 Add cargo-release metadata
• 2023-11-02 Remove Sync trait bounds on callback futures
• 2023-10-30 Update Cargo.toml
• 2023-10-26 hyper and tokio "full" feature for dev builds only

• 2023-10-26 Specify exact versions of dependent crates in the workspace manifest
• 2023-10-16 Add CI for cross-building from macOS
• 2023-10-16 Introduce BORING_BSSL_SYSROOT and BORING_BSSL_EXTERNAL_TOOLCHAIN
• 2023-10-16 Check for CMAKE_TOOLCHAIN_FILE when creating cmake config
• 2023-10-16 Introduce target-specific env vars
• 2023-10-16 Continue looping if candidate cxx isn't found in verify_fips_clang_version
• 2023-10-12 Introduce set_async_get_session_callback
• 2023-10-12 Allow returning GetSessionPendingError from get session callbacks
• 2023-10-24 Test set_get_session_callback
• 2023-10-24 Test new session callback on server side
• 2023-10-24 Move session tests to their own module
• 2023-10-11 Replace feature no-patches with BORING_BSSL{,_FIPS}_ASSUME_PATCHED
• 2023-10-11 Remove feature rpk from hyper-boring and tokio-boring
• 2023-10-10 Introduce a new set of env variables for FIPS-like builds
• 2023-10-10 Use prefix BORING_BSSL_ for all boringssl env variables
• 2023-10-10 Don't read BORINGSSL_BUILD_DIR anymore
• 2023-10-10 Don't use env::current_dir in build script
• 2023-10-10 Introduce struct Config in build script
• 2023-10-11 Change X509VerifyResult to Result<(), X509VerifyError>
• 2023-10-11 Introduce bindings for all X509_V_ERR_* constants
• 2023-02-17 Add SHA224, SHA512, SHA512-256 tests
• 2023-02-17 Expose SHA512-256
• 2023-10-09 Remove boring::fips::enable (fixes #150)
• 2023-10-09 Remove futures from ex data slots once they resolve
• 2023-10-06 Introduce SslSignatureAlgorithm::RSA_PKCS1_MD5_SHA1
• 2023-10-06 Introduce Ssl::set_certificate
• 2023-07-28 Introduce async callbacks
• 2023-08-02 Implement SslContextBuilder::set_private_key_method
• 2023-07-28 Change signature for set_select_certificate_callback
• 2023-08-04 Introduce AsyncStreamBridge
• 2023-06-23 Add a few WouldBlock cases
• 2023-08-04 Introduce helper module in tokio-boring tests
• 2023-08-03 Introduce setup_accept and setup_connect
• 2023-09-14 Panic on error when setting default curves list
• 2023-06-23 Introduce ssl::Error::would_block
• 2023-09-22 deps: update to bindgen 0.68
• 2023-10-06 Fix clippy lints
• 2023-08-15 Add new(), connect(), accept() and handshake() to SslStream
• 2023-09-18 Enable P-521 with "kx-safe-default"
• 2023-08-15 Provide into_ssl() for ConnectConfiguration

• 2023-09-13 Update Cargo.toml
• 2023-09-13 Update RELEASE_NOTES
• 2023-09-13 Update RELEASE_NOTES
• 2023-09-12 tweaks for ergonomic linking
• 2023-08-08 Use features to set key exchange preferences
• 2023-08-30 Introduce no-patches feature
• 2023-08-29 run publish --dry-run instead of pacakge on CI
• 2023-08-29 fix missing space in cargo package CI command
• 2023-08-25 ci: run the cargo package check for all targets
• 2023-08-25 boring-sys: include all files needed to build FIPS
• 2023-08-25 add CI jobs to run cargo package
• 2023-08-15 Fix -Z minimal-versions
• 2023-08-29 Separate fips and fips-link-precompiled features.

• 2023-08-05 Bump version in Cargo.toml
• 2023-08-05 Add missing cmake files to the package

• 2023-08-03 Fix missing .trim() when verifying FIPS module name
• 2023-08-03 Fix Diplay panics for HandshakeError with rpk (fixes #140)

• 2023-08-03 Fix feature gates for fips-link-precompiled
• 2023-07-28 Switch boring from lazy_static to once_cell
• 2023-08-01 Clean up and remove some unsafe code from ffi callbacks

• 2023-08-01 Reduce release bundle size by excluding PQ test data
• 2023-07-28 Adding hmac.h to included headers
• 2023-08-01 Reduce release bundle size by excluding PQ test data
• 2023-08-01 Fix builds for features that require git patches

• 2023-07-29 Fix publishing
• 2023-07-28 Add git-cliff configuration
• 2022-07-29 boring-sys: Handle cross-compiling macOS targets
• 2022-11-08 boring-sys: Add support for Linux ARM(v7)
• 2022-11-30 boring-sys: Update Android NDK sysroot path
• 2022-07-28 boring: Expose PKey::private_key_to_der_pkcs8(_passphrase)
• 2023-07-26 Add fips-link-precompiled feature
• 2023-07-14 Allow specifying a custom BoringSSL source directory
• 2023-07-10 Address review comments
• 2023-07-10 Update docs
• 2023-07-10 Use workspace metadata for crates
• 2023-07-07 Add RPK and PQ crypto features
• 2023-05-15 Revert "Merge pull request #108 from nox/store-clone"
• 2023-05-15 Fix build
• 2023-03-27 Implement ToOwned for X509StoreRef and Clone for X509Store
• 2023-03-22 Fix race condition with X509Name creation
• 2023-03-22 Document the horror show
• 2023-03-22 Always provide an X509V3Context in X509Extension::new because OpenSSL requires it for some extensions (and segfaults without)
• 2023-03-22 Resolve an injection vulnerability in EKU creation
• 2023-03-22 Resolve an injection vulnerability in SAN creation
• 2021-10-04 Add X509Name to/from DER methods
• 2020-11-12 Add additional function so that x509 name with specific type can be added
• 2022-07-01 boring: Fix memory leak in Deriver
• 2023-05-05 Update boringssl to latest upstream commit
• 2023-01-10 Update BoringCrypto to FIPS 140-2 certificate 4407.
• 2023-02-28 Add link in docs
• 2023-02-28 psuedo → pseudo
• 2023-04-27 Bump bindgen to 0.65.1
• 2023-03-27 Fix lints
• 2023-03-27 Fix google test
• 2023-03-27 Use ubuntu-20.04 image for FIPS build
• 2022-06-22 Add minimal cross-compilation support for Windows and AArch64 Linux
• 2022-09-16 bump version number for tokio-boring

• 2022-09-16 Update changelogs and bump version numbers
• 2022-09-07 Fix clippy warnings
• 2022-09-07 Remove uses of mem::uninitialized
• 2022-08-08 Remove T: Debug bound
• 2022-08-08 hyper-boring: Impl debug for MaybeHttpsStream
• 2022-07-25 boring-sys: Use the Android NDK sysroot when running bindgen
• 2022-06-17 MSVC generator hack should be only applied to MSVC
• 2022-06-07 chore: update to bindgen 1.60
• 2021-12-30 ci: Test builds for iOS targets
• 2021-12-30 ci: Don't run tests when targeting iOS
• 2022-01-01 boring-sys: Disable alignment tests for iOS ARM64 targets
• 2021-12-30 boring-sys: Configure "rustc-cdylib-link-arg" only for macOS targets
• 2021-12-30 boring-sys: Pass "-isysroot" to bindgen for iOS builds
• 2021-12-30 boring-sys: Support "aarch64-apple-ios-sim" targets
• 2021-12-30 boring-sys: Use TARGET to determine iOS CMake params
• 2021-12-30 boring-sys: Pull iOS CMake params into a function
• 2021-12-30 boring-sys: Pull Android CMake params into a function
• 2022-06-02 boring-sys: Save time by not building the bssl CLI utility
• 2022-04-28 ssl/test: fix UT expectations accordingly with boringssl change
• 2022-04-27 Update boringssl deps for quiche 0.12.0 compatibility
• 2022-02-12 boring: BigNumRef::to_vec_padded()
• 2022-01-31 Add fips-3678 feature (#52)
• 2021-12-30 boring: Suppress Clippy warnings about missing safety docs
• 2021-12-16 Add/update changelogs
• 2021-12-16 Bump versions for release
• 2021-10-06 Remove PasswordCallback
• 2021-11-04 Relax constraints on Display for tokio-boring::HandshakeError
• 2021-11-02 boring-sys: Disable unnecessary bindgen dependencies
• 2021-08-10 Remove unused and deprecated tempdir dependency
• 2021-08-09 Remove unused *Ref parameters to macro
• 2021-08-09 Update dependencies
• 2021-08-12 Switch to 2018 edition in boring
• 2021-08-12 Run `cargo fix --edition
• 2021-07-30 Remove unused attribute
• 2021-06-14 Remove unused dependency on bytes
• 2021-07-29 Update bindgen to 0.59 and bytes to 1
• 2021-07-29 Fix clippy warnings for 1.54
• 2021-07-28 Update documentation for tokio-boring
• 2021-07-27 Fetch git submodule automatically
• 2021-06-01 pre-built binaries: Update readme and fix clippy
• 2021-05-18 Check for env var for pre-built binaries of bssl
• 2021-07-27 Ignore bindgen warnings until they're fixed upstream
• 2021-04-16 Bump tokio-boring to 2.1.3
• 2021-04-16 Bump boring to 1.1.6
• 2021-04-16 Introduce ClientHello::client_version
• 2021-04-16 Introduce HandshakeError::code
• 2021-04-13 Bump boring to 1.1.5
• 2021-04-13 Allow retrieving the version string from early callback
• 2021-04-13 Allow returning the server name from the early callback
• 2021-04-06 Bump boring-sys to 1.1.1, tokio-boring to 2.1.2
• 2021-04-06 Allow uppercase acronyms
• 2021-04-06 Provide access to inner I/O error during handshake
• 2021-03-15 Bump boring to 1.1.4
• 2021-03-15 Use Display for ssl::Error in Display for ssl::HandshakeError
• 2021-03-15 Tweak yet again the boring error reporting
• 2021-03-11 Bump boring to 1.1.3
• 2021-03-11 Remove file/line from Display for HandshakeError
• 2021-03-09 Bump boring to 1.1.2, tokio-boring 2.1.1
• 2021-03-09 Add tokio_boring::HandshakeError::as_source_stream
• 2021-03-09 Introduce MidHandshakeSslStream::into_parts
• 2021-03-04 Print handshake errors in a better way
• 2021-03-04 Separate errors in an error stack better
• 2021-03-01 Bump boring to 1.1.1
• 2021-03-01 Make Display for Error more readable
• 2021-02-24 Bump feature version on all packages instead.
• 2021-02-24 Bump boring-sys to 1.0.5. Bump boring to 1.0.4
• 2021-02-20 Add support for SSL_CTX_set1_curves
• 2021-02-19 Enable various client features of bssl
• 2021-02-22 Introduce ExtensionType for the arg of get_extension
• 2021-02-19 Introduce ClientHello::get_extension
• 2021-02-19 Introduce set_select_certificate_callback
• 2021-02-11 Use bindgen to automatically generate boring-sys
• 2021-02-18 Sync upstream changes to support tokio 1.x
• 2021-02-11 Make new clippy happy
• 2021-02-11 Bump boring-sys to 1.0.4
• 2021-02-09 Update boringssl submodule pointer
• 2021-02-08 Bump boring-sys to 1.0.3
• 2021-01-28 Include .asm files required for Windows
• 2021-01-20 Bump hyper-boring version
• 2021-01-08 Fix clippy warning.
• 2021-01-08 Ensure the host can be parsed as an IPv6 address.
• 2020-12-23 Bump version
• 2020-12-23 Implement conversion of HandshakeError to the source stream
• 2020-12-03 Make clippy happy
• 2020-12-03 Add support for wss: scheme in hyper-boring
• 2020-11-13 Fix boring repository links.
• 2020-11-12 Add publish script
• 2020-11-12 Fix boring-sys linking. Bump version.
• 2020-11-11 Fix doc comment
• 2020-11-11 Fix docs
• 2020-11-11 Add hyper-boring
• 2020-11-11 Add tokio-boring
• 2020-11-11 Revive CI
• 2020-11-11 Fix doc comments
• 2020-11-11 Rename stuff
• 2020-11-11 Remove LibreSSL leftovers
• 2020-11-11 Remove ossl110 gate
• 2020-11-11 Remove ossl102 gate
• 2020-11-11 Remove ossl101 gate
• 2020-11-11 Remove ossl110f config gate
• 2020-11-11 Remove ossl110g feature gate
• 2020-11-11 Remove ossl111 feature gate
• 2020-11-11 Remove unimplemented OSSL111 stuff
• 2020-11-11 Remove LibreSSL-specific code
• 2020-11-11 Revive tests
• 2020-11-10 Fix compilation warnings
• 2020-11-10 Remove decrepit and unavaliable API and fix signatures
• 2020-11-08 BoringSSL
• 2020-10-12 Update to cfg-if 1.0
• 2020-10-10 Silence clippy::match_like_matches_macro (would require rust 1.42)
• 2020-10-10 Fix a typo
• 2020-09-27 Update some X509_CRL bindings for libressl281
• 2020-09-27 Add some X509_REVOKED bindings, make extensions field public
• 2020-09-27 Add more extension bindings for STACK_OF(X509_EXTENSION)
• 2020-09-28 Fix ASN1_OCTET_STRING in bindings
• 2020-08-09 Add AUTHORITY_KEYID struct
• 2020-08-09 Add bindings and consts for x509 extensions flags and (extended) key usage
• 2020-08-09 Add bindings to access x509 extensions in various types
• 2020-09-26 Add a few bindings for X509_REVOKED
• 2020-09-26 Add more bindings for X509_CRL
• 2019-06-10 Expose the X509Revoked type directly
• 2019-06-07 Add basic bindings to the API CRLs
• 2020-09-24 bump to 1.1.1f in CI
• 2020-09-13 Add ecx support
• 2020-09-03 Add constructor for creating Asn1Object from a textual OID representation
• 2020-08-31 Add from_der and to_der to PKCS7
• 2020-08-15 Test openssl-errors on windows
• 2020-08-12 Make openssl-errors tests work on Windows
• 2020-08-11 Update mod.rs
• 2020-08-11 Cast to u32
• 2020-03-06 Expose subject_name_hash
• 2020-07-27 Make openssl not cleanup at exit, which can lead to race conditions on openssl >= 1.1.1b.
• 2020-08-08 Stop testing 1024 bit DH keys
• 2020-07-28 Work around upstream base64 bug
• 2020-07-28 Fix EcdsaSig method flexibility
• 2020-07-22 Fix clippy
• 2020-07-03 Fix documentation for unwrap_key
• 2020-06-26 Fix changelog
• 2020-06-23 Add SslStream::from_raw_parts
• 2020-06-14 sign.rs: fix typo in comment
• 2020-06-06 Fix CI branch
• 2020-06-06 remove appveyor builds
• 2020-06-06 Ignore default verify paths test on windows
• 2020-06-06 test env lookup
• 2020-06-06 set vcpkg root
• 2020-06-06 run stuff
• 2020-06-06 update vcpkg
• 2020-06-06 Move vcpkg build to github actions
• 2020-06-04 Fix test.
• 2020-06-04 Make tests narrower.
• 2020-06-02 Write "error" when there is an error.
• 2020-06-01 Fixes in response to review feedback.
• 2020-05-30 Add Debug trait for X509 and other types.
• 2020-06-05 Fix readme link
• 2020-06-03 adding PKE interface
• 2020-06-05 Adds Debug derive for SslConnector
• 2020-06-05 Fix private key serializtion in HasPublic impl for DsaRef
• 2020-06-05 Add PEM/DER serialization for EC public key
• 2020-06-05 fix clippy
• 2020-06-03 Fix cache name
• 2020-06-02 Support LibreSSL 3.2.0
• 2020-05-26 fix syntax
• 2020-05-26 Move min-version to github actions
• 2020-05-26 asdf
• 2020-05-26 Add SslRef::set_mtu
• 2020-05-24 Run clippy
• 2020-05-24 Run rustfmt on github actions
• 2020-05-09 remove any from openssl110 cfgs
• 2020-05-08 ocb is only available in openssl 1.1 and later
• 2020-05-08 Add support for AES-OCB mode
• 2020-05-09 LibreSSL 3.1 branch marked as stable; add support
• 2020-05-02 Fix static build on windows-gnu targets
• 2020-04-28 Bump ci versions
• 2020-04-19 Support LibreSSL 3.1.0
• 2020-04-12 Fix function name in peer_finished documentation
• 2020-04-08 FIx build
• 2020-04-08 Deal with upstream archive location change
• 2020-04-08 Add SslContextBuilder::set_cert_store
• 2020-04-05 Update openssl/src/lib.rs
• 2020-04-05 Add documentation for OPENSSL_NO_VENDOR
• 2020-04-05 Add OPENSSL_NO_VENDOR env var check
• 2020-04-05 Bump CI version
• 2020-03-24 Update openssl/src/ssl/mod.rs
• 2020-03-24 Add man page links
• 2020-03-24 Add functions for SSL{_CTX}_get_verify_mode and SSL_is_init_finished
• 2020-03-24 Add SslMethod::tls_{client,server}
• 2020-03-24 Update openssl/src/x509/store.rs
• 2020-03-24 Add a shim for X509_STORE_get0_objects and X509_OBJECT_free
• 2020-03-23 Only have constants on < ossl110
• 2020-03-23 Skip X509_OBJECT_data systests
• 2020-03-23 Add x509_vfy.h header to systest
• 2020-03-23 Check null ptr for non-x509 X509Object
• 2020-03-23 Fix signedness issue
• 2020-03-23 Add a way to get the certificates stored in an X509Store
• 2020-03-21 Fix build on DragonFly
• 2020-03-19 Upgrade CI versions
• 2020-02-26 Fix the memory leak in X509Builder::append_extension.
• 2020-02-26 use library names supplied by vcpkg
• 2020-02-13 Tweak interface a bit
• 2020-02-05 adds ability access the internal &SslContext of an SslAcceptor and SslConnector
• 2020-02-11 Allow bad style on pkey.rs
• 2020-02-10 Attach cfg[allow_deprecated] to methods w/ uninitialized functionality
• 2020-02-04 Fix mutability of oneshot sign/verify methods
• 2020-02-03 Fix visibility of Signer::new_intern
• 2020-01-29 Fix changelog
• 2020-01-27 Add NO RENEGOTIATION option
• 2020-01-24 Add EVP_EncryptInit_ex/EVP_EncryptFinish_ex, and the equivalently named
• 2019-10-03 add SslStreamBuilder::set_dtls_mtu_size(usize)
• 2020-01-10 Update to autocfg 1.0
• 2019-12-27 Avoid false-failures if underlying network connection errors
• 2019-12-24 Upgrade 1.0.2 in CI
• 2019-12-17 Replace try!() with ?
• 2019-12-21 remove deprecated Error::description, replace deprecated cause with source
• 2019-12-20 In the documentation of SslContextBuilder::set_certificate, we had written
• 2019-12-20 In the documentation of SslContextBuilder::set_session_id_context, we had written
• 2019-12-20 In the documentation of SslContextBuilder::set_cipher_list, we had given
• 2019-12-12 Fix documentation typo of "chain"
• 2019-12-12 Fix link
• 2019-12-09 fix a typo in the description of Asn1Time
• 2019-12-04 Use d2i_PKCS8_PRIV_KEY_INFO instead of *_bio
• 2019-12-03 Pkey::private_key_from_pkcs8 free p8inf
• 2019-12-01 Fix pointer constness correctly
• 2019-12-01 Change *const to *mut to try if it fixes tests
• 2019-12-01 move EVP_PKCS82PKEY into evp module
• 2019-12-01 Support for PKCS#8 unencrypted private key deserialization
• 2019-11-23 Update openssl/src/hash.rs
• 2019-11-22 Add EVP_md_null() and MessageDigest::md_null()
• 2019-11-22 Fix up base64 docs
• 2019-11-22 Cleanup
• 2019-11-22 Fix IV handling in envelope
• 2019-11-13 Avoid initialization overhead for base64 coding
• 2019-11-13 Expose EVP_{Encode,Decode}Block interfaces for base64 coding
• 2019-11-13 Format code using 'cargo fmt'
• 2019-11-16 Remove busted windows build
• 2019-11-16 Allow configuration of EC groups and signature algorithms
• 2019-11-12 Added unit test to test that new cloning feature works as intended
• 2019-11-12 Changed all sha objects to be clonable per PR review suggestion.
• 2019-11-11 Added clonability for sha hash state. Useful for incremental hashing
• 2019-11-11 Add #[cfg(ossl110)]
• 2019-11-11 Add EC_GROUP_order_bits
• 2019-10-10 Add method to create Asn1Time from time_t value
• 2019-10-10 Add diff method and comparisons to Asn1TimeRef
• 2019-10-19 Support LibreSSL 3.0.2
• 2019-10-10 Fix changelog links
• 2019-10-10 Note openssl-sys support
• 2019-10-08 Fix rustc warnings
• 2019-10-03 Support LibreSSL 3.0.1
• 2019-10-02 Implement Clone for PKey
• 2019-10-01 Upgrade CI versions
• 2019-09-08 Ensure Signer::len has documentation
• 2019-08-16 Added support for Ed25519 and Ed448 signatures
• 2019-09-07 Bump MSRV again
• 2019-09-06 Bump MSRV
• 2019-09-06 Free r and s on ECDSA_SIG before overwriting them in ECDSA_SIG_set0
• 2019-08-07 Fix minimal version build
• 2019-08-07 Support LibreSSL 3.0.0
• 2019-07-19 Hack around an unpatched OpenSSL issue
• 2019-07-06 Add AES-192 tests in CTR, CFB, and OFB modes
• 2019-07-06 Add AES-192 and OFB mode
• 2019-06-30 Expose pem serialize function for DSA private key
• 2019-06-29 Don't depend on NO_SSL_MASK
• 2019-06-29 Minimize test duplication
• 2019-06-29 Add mozilla v5 configurations
• 2019-06-19 Expose EC_POINT_dup as EcPoint::to_owned
• 2019-06-14 Expose EC_GROUP_get_cofactor as EcGroup::cofactor
• 2019-06-13 Expose EC_GROUP_get0_generator as EcGroup::generator
• 2019-06-12 Conditionally compile PEM functions for CMS
• 2019-06-12 Extend CMS unit tests (pem/der conversions)
• 2019-06-12 Fix formatting in cms to_der implementation
• 2019-06-12 Add CmsContentInfo <-> PEM bindings
• 2019-06-10 Add Debug impl for EcKey
• 2019-06-08 Address comments
• 2019-06-06 Add AES_wrap_key and AES_unwrap_key functionality
• 2019-06-01 Report the vendored install location
• 2019-05-31 Fix constness for 1.1.1c
• 2019-05-31 Bump CI versions
• 2019-05-30 Display for Error was incorrectly showing func instead of reason.
• 2019-05-18 Fix handling of session callbacks
• 2019-05-13 Const-correctness
• 2019-05-13 Allow passing by non-owned reference
• 2019-05-13 Add SSL_CTX_add_client_CA on OpenSSL
• 2019-05-09 Ignore SRTP tests on libressl 2.9.1
• 2019-04-26 Whitelist future LibreSSL 2.9.x versions, as 2.9.1 is the first stable release.
• 2019-04-25 Reconcile exdata and version functions between libraries/versions.
• 2019-04-24 Add missing any() in the {,D}TLS_method usage logic.
• 2019-04-23 Support LibreSSL 2.9.1
• 2019-05-04 Revert "fix build err for taget *-pc-windows-gnu"
• 2019-05-03 Fix doc link bugs
• 2019-05-01 Switch from rustc_version to autocfg
• 2019-04-26 fix build err for taget *-pc-windows-gnu
• 2019-04-29 Fix output size check for stream ciphers
• 2019-04-25 Fix deprecation warnings in tests
• 2019-04-24 Clean up seal/open a bit
• 2019-04-23 Fix requiret ossl version for EVP_PKEY_size
• 2019-04-17 Remove unnecessary version req and clean up param names.
• 2019-04-17 Address comments.
• 2019-04-15 Remove nested groups in use.
• 2019-04-15 Add minimum ossl version.
• 2019-04-14 Add EVP_Seal and EVP_Open
• 2019-04-22 Don't set OPENSSL_VERSION for mingw build
• 2019-04-03 Tell dependencies if vendored OpenSSL was used
• 2019-03-20 Cleanup ssl tests
• 2019-03-17 Expose EC_GROUP_get_curve_name()
• 2019-03-17 Expose EVP_MD_type()
• 2019-03-17 Implement Eq for MessageDigest
• 2019-03-14 Move CHANGELOG.md into openssl
• 2019-03-14 Metadata
• 2019-03-13 Fix osx build
• 2019-03-13 Document openssl-errors
• 2019-03-13 Allow attributes on error items
• 2019-03-11 Add a crate to define custom error libraries
• 2019-03-12 Fix deprecation warning
• 2019-03-12 Upgrade ctest
• 2019-03-12 Fix synatx
• 2019-03-12 Build against modern rust by default
• 2019-03-12 Parameterize rust version in circle
• 2019-03-06 X.509: add verify methods
• 2019-03-01 CMS: add encrypt, from_der
• 2019-03-01 Update changelog
• 2019-03-01 Use into for infallible conversions
• 2019-03-01 Add session cache size accessors
• 2019-03-01 Add session info accessors
• 2019-03-01 Add SslCtx::{add,remove}_session
• 2019-02-28 Implement Clone for Dsa
• 2019-02-28 Add ERR_PACK
• 2019-02-28 Don't dynamically generate expando.c
• 2019-02-27 Add some debugability to build script env
• 2019-02-27 typo
• 2019-02-27 Fix const changes in 1.1.1b
• 2019-02-27 Update test versions
• 2019-02-22 Update changelog
• 2019-02-22 Fix cipher_name return value
• 2019-02-22 Update changelog
• 2019-02-22 Add standard ciphername support
• 2019-02-22 Rustfmt
• 2019-02-18 Change from EVP_des_ede3_cfb to EVP_des_ede3_cfb64
• 2019-02-17 Add des_ede3_cfb symm cipher
• 2019-01-30 Make Rsa::generate delegate to Rsa::generate_with_e
• 2019-01-29 add Rsa::generate_with_e(bits: u32, e: BigNum)
• 2019-01-27 ASN1_TIME_from_string_x509 was added in 1.1.1
• 2019-01-27 Add Asn1Time::from_str and Asn1Time::from_str_x509
• 2019-01-25 SRP_CTX doesn't exist when OPENSSL_NO_SRP is set
• 2019-01-23 Migrate circle config to 2.1 goodness
• 2019-01-22 Remove x86 windows msys build
• 2019-01-18 Add RsaRef::check_key
• 2019-01-18 Forward to BigNumRef::to_asn1_integer
• 2019-01-18 Add Asn1Integer::from_bn
• 2019-01-17 Implement AsRef<str/[u8]> for OpensslString{Ref}
• 2019-01-05 Drop data_encoding dev dependency
• 2019-01-04 Update bn.rs
• 2018-12-16 Update changelog
• 2018-12-03 Only run 2.9.0 tests.
• 2018-12-03 Explicitly support LibreSSL 2.9.0.
• 2018-11-24 Fix cargo dependency documentation
• 2018-11-22 Add bindings to RAND_keep_random_devices_open
• 2018-11-21 Bump OpenSSL versions on AppVeyor to 1.1.0j, 1.0.2q
• 2018-11-21 Bump minimum supported rustc to 1.24.1
• 2018-11-21 Add new SHAKE128/256 EVP message digest functions in OpenSSL 1.1.1, fixes #1017.
• 2018-11-21 Add new SHA3 EVP message digest functions in OpenSSL 1.1.1
• 2018-10-22 Implement DoubleEndedIterator for stack iters
• 2018-10-18 Fix some accidentally-public functions
• 2018-10-18 Support LibreSSL 2.8.x
• 2018-10-16 Bump dependency on openssl-src-rs
• 2018-10-14 Fix anchor link
• 2018-10-14 Update changelog for 0.10.13
• 2018-10-14 Add a note about release support.
• 2018-10-11 Cleanup
• 2018-10-03 Address comments.
• 2018-10-02 Refactor to match style and add documentation.
• 2017-11-24 PKCS7 Support
• 2018-10-08 Move README info into crate root docs
• 2018-10-01 Update the OCSP_cert_to_id() signature for LibreSSL 2.8.1
• 2018-09-29 Bump LibreSSL 2.8 version in CircleCI
• 2018-09-27 Only whitelist LibreSSL 2.8.0 and 2.8.1
• 2018-09-27 Support the rest of LibreSSL 2.8.x
• 2018-09-28 Add support for encoding and decoding ECDSA signatures
• 2018-09-17 Fix get session callback
• 2018-09-15 Support the client hello callback
• 2018-09-13 Fix typo
• 2018-09-13 Fix missing symbol
• 2018-09-13 Stop caching the registry on osx
• 2018-09-13 Support libressl 2.8.0
• 2018-09-09 Refactor openssl-sys
• 2018-09-11 Bump to 1.1.1 release
• 2018-09-02 clean up example
• 2018-09-02 Small cleanup
• 2018-08-29 Fix lookup errors with SNI callback.
• 2018-08-29 Bump Appveyor test versions
• 2018-08-28 Bump versions
• 2018-08-20 Fix doc reference
• 2018-08-20 SRTP cleanup
• 2018-08-09 Add methods for DTLS/SRTP key handshake
• 2018-08-08 Add get_shutdown and set_shutdown
• 2018-08-04 X509_V_ERR_UNSPECIFIED was added in 1.0.2f
• 2018-08-04 Update changelog
• 2018-07-31 Add some docs to the README about the vendored feature.
• 2018-07-27 Support builds of OpenSSL from vendored source (take 2)
• 2018-07-29 Fix tests when built with no-ec2m
• 2018-07-20 SslSessionRef methods return static strings
• 2018-07-14 Fix spelling in symm docs
• 2018-07-11 Add bindings for custom error definition
• 2018-07-08 Purge registry cache
• 2018-06-27 Only grab the name entry count when needed
• 2018-06-03 Rename X509NameRef::all_entries and refactor end-of-iterator checks
• 2018-05-28 Provide an Asn1Object getter method for X509NameEntryRef
• 2018-05-28 Make X509NameRef provide an iterator over all X509NameEntries
• 2018-07-05 Clean up IGE example
• 2018-06-29 Link all needed system libraries on Windows, when building statically
• 2018-06-28 Bump to openssl 1.1.1-pre8
• 2018-06-23 Simplify DSA from private components
• 2018-06-18 Fix fallback implementation of DSA utility methods
• 2018-06-18 Add tests for DSA key pairs
• 2018-06-18 Add Dsa::from_(private|public)_components
• 2018-06-18 Add methods to access private and public part of DSA keys
• 2018-06-21 Fix build with openssl 1.1.1 and no-psk
• 2018-06-17 Disable TLSv1.3 for psk_ciphers test
• 2018-06-02 Ensure psk test callbacks are called
• 2018-06-02 push PSK callback errors onto ErrorStack
• 2018-06-02 Change psk test cipher to PSK-AES128-CBC-SHA
• 2018-06-02 Use is_null()
• 2018-06-02 add test for psk; deprecated set_psk_callback
• 2018-05-16 Add wrapper for SSL_CTX_set_psk_server_callback
• 2018-06-10 Switch to accessors in libressl where possible
• 2018-06-09 Link to gdi32 on windows
• 2018-06-06 Update changelog
• 2018-06-05 Add SslRef::set_alpn_protos
• 2018-06-02 Update to 1.1.1-pre7
• 2018-05-31 Add an openssl-sys binding for RSA_padding_check_PKCS1_type_2.
• 2018-06-02 fix build on older rustc
• 2018-06-02 changelog
• 2018-06-02 Adjust Nid signature algorithm APIs
• 2018-06-02 Fix types
• 2018-06-02 Fix use-after-free in cms
• 2018-05-30 Add SslRef::verified_chain
• 2018-05-28 rewrite Nid::{long_name,short_name} to return Results instead of Options
• 2018-05-24 Get Nid string representations
• 2018-05-25 Rename X509Ref::fingerprint to X509Ref::digest and avoid allocating
• 2018-05-25 Add some digest support
• 2018-05-25 Don't panic on bogus servernames
• 2018-05-25 Add bindings to SSL_get_finished and SSL_get_peer_finished
• 2018-05-17 Expose early I/O
• 2018-05-17 Expose early keying material export
• 2018-05-17 Expose max TLS1.3 early data accessors
• 2018-05-21 Fix changelog
• 2018-05-21 Fix changelog
• 2018-05-21 Revert "Move proto version accessors to SslContextRef"
• 2018-05-21 Move proto version accessors to SslContextRef
• 2018-05-21 Changelog
• 2018-05-21 Improve error Display impls
• 2018-05-20 Make Stack Sync + Send
• 2018-05-20 Support ALPN on libressl
• 2018-05-20 Overhaul openssl cfgs
• 2018-05-20 Expose X509_VERIFY_PARAM on libressl
• 2018-05-20 Clean up openssl-sys cfgs
• 2018-05-20 Support min/max version in LibreSSL
• 2018-05-18 Find path prefix to OpenSSL installed by Homebrew.
• 2018-05-13 Some sys cleanup
• 2018-05-10 Gate away CMS_KEY_PARAM from OpenSSL 1.0.1
• 2018-05-10 Properly version-gate CMS constants
• 2018-05-10 Move CMS_* flags to the openssl-sys package
• 2018-04-26 Use bitflags for CMS options
• 2018-04-22 Implement CR suggestions
• 2018-04-20 Fix mutability issues with CMS_sign
• 2018-04-20 Add the CMS_sign and i2d_CMS_ContentInfo function bindings
• 2018-05-12 Implement Clone for Rsa
• 2018-05-12 Clean up SSL callbacks
• 2018-05-12 Disable tests that talk to Google on LibreSSL 2.5.0
• 2018-05-12 Change SslContext callback handling
• 2018-05-09 Fix base version for min/max proto accessors
• 2018-05-01 Fix changelog typo
• 2018-05-01 Flag off constants added in 1.0.2h
• 2018-05-01 Changelog
• 2018-04-29 Expose SslSession <-> DER conversion
• 2018-04-27 Some misc cleanup
• 2018-04-27 Reform version checking logic
• 2018-04-26 Remove Rsa::build
• 2018-04-18 Add RsaPrivateKeyBuilder
• 2018-04-21 Add functions to X509Req to obtain public key and extensions
• 2018-04-16 Document that encrypt/decrypt use padding
• 2018-04-11 Include information about development packages
• 2018-04-05 changelog
• 2018-04-05 Fix minor typo
• 2018-04-04 Return PKey<Private> from private_key_from_der
• 2018-04-03 Add LibreSSL 2.7.3
• 2018-04-03 Combine LibreSSL 2.7.x versions into one
• 2018-04-02 Add LibreSSL 2.7.2
• 2018-03-31 Add support for LibreSSL 2.7.1
• 2018-03-05 Add test for stateless connection
• 2018-03-04 Introduce SslStreamBuilder
• 2018-03-27 Update to OpenSSL 1.1.1-pre3
• 2018-03-31 Fix systest against vcpkg-sourced OpenSSL
• 2018-03-30 Remove unneeded build keys
• 2018-03-29 Don't enable features for docs anymore
• 2018-03-29 Fix a flag name
• 2018-03-29 Clean up a couple of holdovers from old features
• 2018-03-29 Upgrade 1.1.0 and 1.0.2 test versions
• 2018-03-28 Add Asn1IntegerRef::to_bn
• 2018-03-28 Add X509Ref::serial_number
• 2018-03-22 Support LibreSSL 2.7.0
• 2018-03-19 Remove a last couple features
• 2018-01-14 Make it possible to use cmac
• 2018-03-19 Remove version-specific features
• 2018-03-14 Expose additional cipher and digest accessors
• 2018-03-13 Change function name to be similar to RSA one
• 2018-03-09 Added a function to create a EC<Key> from its parts
• 2018-03-11 fixup! Implement AES-{128,256}-CCM bindings
• 2018-03-08 fixup! Implement AES-{128,256}-CCM bindings
• 2018-03-08 Implement AES-{128,256}-CCM bindings
• 2018-03-11 Add a Sync + Send bound to the custom ext type
• 2018-03-11 Some ECDSA fixes/tweaks
• 2018-03-11 Revert previous commit
• 2018-03-10 Arguments should be BigNumRef and not BigNum
• 2018-03-09 Remove unneeded paramter
• 2018-03-08 Changes as per PR feedback
• 2018-03-08 Get curves for OpenSSL tests itself
• 2018-03-08 Try out another curve
• 2018-03-08 Another try at using the correct curve
• 2018-03-08 Use examples listed in OpenSSL docs for testing
• 2018-03-08 Add support LibreSSL and remove OpenSSL binding which we aren't using
• 2018-03-08 Exposed some of ECDSA functions
• 2018-03-11 Tweak verify_cert's signature
• 2018-03-11 Changes init to take a closure which is called with the initialized context
• 2018-03-09 Moves store context init into its own function
• 2018-03-08 Extends the test to verify the certificate two times
• 2018-03-08 Moves cleanup into its own function
• 2018-03-07 Fixes the implementation of X509StoreContextRef::verify_cert
• 2017-03-26 delay return until after forgets
• 2017-03-26 cleanup and add negative test
• 2017-03-24 add cleanup ffi to store context
• 2017-03-24 restructure to self contained function
• 2017-03-21 Little tweaks
• 2017-03-21 convert to raw pass-through methods
• 2017-03-19 add comment about consuming self in verify_cert
• 2017-03-19 fix error check
• 2017-03-19 properly version library functions
• 2017-03-19 Fix memory mgmt
• 2017-03-19 add verify_cert and store_context_builder
• 2018-03-11 Rename Oid to Id
• 2018-03-09 Switches to new type wrapper for RsaPssSaltlen
• 2018-03-08 Adds RsaPssSaltlen enum to encode the special values
• 2018-03-08 Switches to newtype wrapper for Oid
• 2018-03-07 Adds more functions to Verifier/Signer for RSA keys
• 2018-03-07 Adds RSA PKCS1 PSS padding
• 2018-03-07 Adds PKeyRef::get_id to get the OID of a key
• 2018-03-11 Bump 1.1.1 to pre2
• 2018-03-10 Add one more set of impls
• 2018-03-10 Impl Sync and Send for various types
• 2018-03-06 Remove the x509 module-level example
• 2018-03-11 Generic custom extension add fn return type
• 2018-03-05 High-level API for OpenSSL 1.1.1 custom extension support
• 2018-03-05 FFI for OpenSSL 1.1.1 custom extension support
• 2018-03-03 Add SslOptions::ENABLE_MIDDLEBOX_COMPAT
• 2018-02-28 Update changelog
• 2018-02-27 Always include something in ErrorStack's Display
• 2018-02-26 Add min/max protocol version support
• 2018-02-26 Restore error stack in cookie callback
• 2018-02-26 Expose cookie generate/verify callback setters
• 2018-02-26 Expose FFI bindings needed for SSL_stateless
• 2018-02-25 Add the ability to push errors back onto the error stack.
• 2018-02-24 Add RFC 5705 support
• 2018-02-22 Actually add version stuff
• 2018-02-15 Added example/test in symm.rs for encrypting a private key with a symmetric cipher
• 2018-02-14 Add des_ede3_cbc cipher
• 2018-02-15 More tests for pem_pkcs1 methods
• 2018-02-22 Inline connector constants
• 2018-02-22 Don't special case 1.0.1
• 2018-02-21 Update SslConnector cipher list
• 2018-02-18 Update changelog
• 2018-02-18 Add some debugging-related bindings
• 2018-02-17 Add SSL_version binding
• 2018-02-17 Fix session cloning
• 2018-02-17 Fix libressl
• 2018-02-17 Bind remove and get session callbacks
• 2018-02-17 SSL session callbacks have always been around
• 2018-02-16 Fix symm decrypt documentation example
• 2018-02-16 Doc tweak
• 2018-02-16 Add more session cache support
• 2018-02-15 Tweak features
• 2018-02-15 Set ossl110 when version is 1.1.1
• 2018-02-15 Fix tests for TLS 1.3
• 2018-02-14 OpenSSL 1.1.1 support
• 2018-02-14 Added binding for PEM_read_bio_RSAPublicKey
• 2018-02-12 Don't leak X509s
• 2018-02-11 Use Padding constant in RSA docs example
• 2018-01-25 Add RSA docs
• 2018-02-11 Detect FreeBSD OpenSSL automatically
• 2018-02-04 Support EVP_des_ede3.
• 2018-01-25 Update version
• 2018-01-25 Fix diff link
• 2018-01-24 Add HMAC to Pkey docs
• 2018-01-24 Print the public key in PKey example
• 2018-01-07 Fix import in pkey docs
• 2018-01-07 Missing colon
• 2018-01-07 Add Pkey docs
• 2018-01-24 tests: if server failed to start, print exit code instead of timing out
• 2018-01-24 Evict registry cache
• 2018-01-24 Debug OSX build failures
• 2018-01-15 add support for rfc822Name (email) and uniformResourceIdentifier (uri) to GeneralName
• 2018-01-12 Add setters to ConnectConfiguration
• 2018-01-11 Add from conversion
• 2018-01-11 Bump release notes
• 2018-01-11 More changes
• 2018-01-09 One more changelog entry
• 2018-01-09 Add a couple more changes
• 2018-01-09 Add a changelog
• 2018-01-07 Adjust the SNI callback
• 2018-01-07 Fix docs
• 2018-01-07 Rename and document RSA accessors
• 2018-01-06 Rename key serialization/deserialization methods
• 2018-01-06 FIPS mode support
• 2018-01-01 Fix links in x509 module
• 2018-01-01 Fix x509 doc examples
• 2018-01-01 Add documentation for x509 module
• 2018-01-01 Misc cleanup
• 2018-01-01 Move X509Filetype to SslFiletype
• 2018-01-01 Bump hex to 0.3
• 2017-12-31 Parameterize keys over what they contain
• 2017-12-29 Add issuer name access.
• 2017-12-29 Remove SslRef::compression
• 2017-12-28 Add a parameter to servername
• 2017-12-27 Overhaul ALPN
• 2017-12-27 Overhaul ssl error
• 2017-12-26 Flag off constant
• 2017-12-26 Split X509StoreContextRef::ssl up
• 2017-12-26 Overhaul verify error type
• 2017-12-26 Adjust SslConnector and SslAcceptor construction
• 2017-12-26 Drop Any bounds
• 2017-12-26 Remove deprecated APIs
• 2017-12-26 Fix a bunch of FIXMEs
• 2017-12-26 Tweak default ssl options
• 2017-12-26 Fix tests
• 2017-12-26 Bump to 1.20.0
• 2017-12-26 Rename X509FileType to X509Filetype
• 2017-12-26 Move to associated consts
• 2017-12-26 Upgrade bitflags to 1.0
• 2017-12-26 Make Nid values associated constants
• 2017-12-24 Fix script
• 2017-12-23 Clean up 1.0.1 hostname verification
• 2017-12-23 Tweak test scripts a bit
• 2017-12-23 Allow SNI and hostname verification to be configured separately
• 2017-12-16 Bump CI versions
• 2017-12-13 Impl Send + Sync for x509 stuff
• 2017-12-12 Add crates.io badge
• 2017-12-09 Fix link
• 2017-12-05 Finish documentation for the ssl module
• 2017-12-04 Docs for the ssl module.
• 2017-12-04 Impl deref for acceptor/connector builders
• 2017-12-04 Documentation for the sign module.
• 2017-12-03 Rename Signer::finish to sign_to_vec
• 2017-12-03 Clean up tests
• 2017-12-03 Simplifying finish_into
• 2017-12-03 Splitting the sign::Signer::finish function, to avoid allocations
• 2017-12-02 Fixing the CI tests
• 2017-12-02 Adding dp(), dq() and qi() methods to RSA, to get the CRT parameters back
• 2017-11-30 bump lazy_static to 1
• 2017-11-27 Upgrade foreign-types
• 2017-11-21 Revert "Update foreign-types to 0.3"
• 2017-11-21 Update foreign-types to 0.3
• 2017-11-21 Remove travis badge
• 2017-11-21 Remove unused travis file
• 2017-11-17 Use CircleCI for MacOS builds
• 2017-11-14 Adjust libressl version detection
• 2017-11-14 Remove libressl 2.6.2 build
• 2017-10-23 Update CI to use LibreSSL 2.6.3
• 2017-10-23 Add support for LibreSSL 2.6.3
• 2017-11-10 Added a macro that wraps foreign type, and impl Send and Sync for both,
• 2017-10-16 Add an example of making a CA and certs and verifying.
• 2017-11-06 Fix LibreSSL cms.h detection
• 2017-11-05 Add a couple of FIXMEs
• 2017-11-04 fixed broken example and syntax error in module level documentation
• 2017-10-27 Error documentation improvement
• 2017-11-04 Handle local retries
• 2017-10-09 Move doc details into another paragraph
• 2017-10-03 Additional notes on Crypter
• 2017-10-03 Copy example to module level
• 2017-10-03 Add examples and more documentation to symm
• 2017-10-24 Update documentation for EC module
• 2017-10-11 Began EC documenation
• 2017-11-04 Update data-encoding major version
• 2017-11-04 Bump CI openssl versions
• 2017-10-18 Fixed a typo in an error message, WANT_WRITE -> WANT_READ
• 2017-10-16 Add an example of making a CA and certs and verifying.
• 2017-10-11 DSA size returns maximum size of signature
• 2017-10-09 Documentation improvements for DSA module
• 2017-10-04 Begun DSA documentation
• 2017-10-07 Include the hex crate and ToHex import to the second example
• 2017-10-07 Added module-level documentation for the sha module.
• 2017-10-07 Move OpenSSL implementation details into a normal comment
• 2017-10-03 Document conf module
• 2017-10-04 Describe return values of groups.
• 2017-10-03 Finished BigNum documentation
• 2017-09-29 removed deny missing docs
• 2017-09-29 WIP BigNum function documentation
• 2017-09-29 Began bn module documenation
• 2017-10-04 Module level documentaiton rewrite
• 2017-10-03 CMS module documentation
• 2017-10-04 Fix cfgs for libressl262
• 2017-10-04 Update CI to use LibreSSL 2.6.2
• 2017-10-04 Add support for LibreSSL 2.6.2
• 2017-10-03 Convert try! usage to ?
• 2017-09-29 Changed Asn1Object documentation to include references to Nid
• 2017-09-28 documented and example for ASN1 module
• 2017-09-28 WIP ASN.1 documentation
• 2017-10-01 Deprecate crypto module
• 2017-09-30 Hide deprecated crypto module from docs
• 2017-09-28 Hide ec_key module in docs because it is deprecated
• 2017-09-28 Fix doc test and move external documentation link to rand_bytes function
• 2017-09-28 Fix typos
• 2017-09-28 Document rand module
• 2017-09-28 Add instructions for adding OpenSSL DLLs to PATH if needed during install
• 2017-09-28 Add instructions for adding OpenSSL DLLs to PATH if needed during install
• 2017-09-28 Document nid module
• 2017-09-28 Moved details about function and reworded block requirements
• 2017-09-27 Preface with links to conventional AES
• 2017-09-26 AES (IGE) encryption documentation
• 2017-09-26 AES Module level docs and example
• 2017-09-26 WIP: document AES
• 2017-09-20 Fix rerun logic
• 2017-09-20 Unpin ctest
• 2017-09-20 Properly handle IPs in hostname verification
• 2017-09-20 Update to cc 1.0
• 2017-09-20 Pin ctest version to work around panic
• 2017-09-18 openssl-sys: Fix typo in libressl_version definition
• 2017-09-17 openssl: ecdh_tmp_callback doesn't work with libressl 2.6.1
• 2017-09-17 openssl: libressl 2.6.1 dropped suuport for npn
• 2017-09-17 opensslè-sys: adjust some constants to libressl 2.6.1
• 2017-09-14 systest: don't include cms.h for libressl 2.6.1
• 2017-09-17 openssl-sys: define libressl version
• 2017-09-17 ci: use libressl 2.6.1
• 2017-09-14 openssl-sys: support libressl 2.6.1
• 2017-09-16 Update default client cipher list
• 2017-09-16 Fix indentation
• 2017-09-16 Mention target specific env vars
• 2017-09-14 Extract prefixed environment variables into helper function.
• 2017-09-13 Use target name in variables when cross-compiling.
• 2017-04-22 Allow overriding lib/include dirs when cross-compiling.
• 2017-09-15 Set SSL_MODE_RELEASE_BUFFERS by default
• 2017-09-04 Fix build note for MinGW
• 2017-08-30 Update version in README
• 2017-08-27 Simplify circle config a bit
• 2017-08-21 Symlink README in place
• 2017-08-21 Rename function, removing get_
• 2017-08-21 Add ability to get affine coordinates from EcPoint
• 2017-08-17 Add SHA384 and SHA512
• 2017-08-17 Add SHA1 an SHA224 hashers
• 2017-08-15 Add a stateful SHA256 hasher
• 2017-08-14 avoid interactive prompts when setting up vcpkg in appveyor
• 2017-08-12 Update README.md
• 2017-06-16 msvc/vcpkg dynamic builds now require explicit opt-in
• 2017-06-07 for msvc abi builds, allow use of openssl libs from vcpkg
• 2017-08-11 Fully wrap feature checks
• 2017-08-11 Actually save the registry cache
• 2017-08-11 Move circle config to new location
• 2017-08-11 Switch to official circle image
• 2017-08-08 added cms decryption
• 2017-08-09 Delete DTLS tests
• 2017-08-09 Refine sig for set_public_key_affine_coordinates
• 2017-08-09 Fix EC_KEY_set_public_key_affine_coordinates
• 2017-08-09 Set the private key within EcKeyBuilder
• 2017-08-09 Support for EcKey creation from affine coordinates
• 2017-07-30 Init in bn_ctx constructor
• 2017-07-30 Init in Dh constructors
• 2017-07-30 Delete old script
• 2017-07-29 Add peer_cert_chain
• 2017-07-29 Ignore dtls tests
• 2017-07-29 Fix cache detection
• 2017-07-28 Little circle cleanup
• 2017-07-27 Tweak formatting on cipher list
• 2017-07-26 Initialize OpenSSL in DSA constructor
• 2017-07-26 Fix build
• 2017-07-26 Fix build
• 2017-07-26 Abort on bad unlock and safe core dumps
• 2017-07-26 Always apt-get update
• 2017-07-26 Only install curl when building openssl
• 2017-07-25 Remove unused environment variable
• 2017-07-25 Sync deps key with rust version
• 2017-07-25 Run systest for ARM targets
• 2017-07-22 Drop to just -g
• 2017-07-22 Build OpenSSL with debuginfo
• 2017-07-22 Set RUST_BACKTRACE=1 on tests
• 2017-07-22 Mention Debian for apt-get instructions
• 2017-07-20 Forbid LibreSSL 2.5.6+
• 2017-07-20 Fix X509::clone impl
• 2017-07-17 Support for LibreSSL 2.5.5
• 2017-07-16 Test against libressl 2.6.0
• 2017-07-16 Remove unused import
• 2017-07-16 Add badges to README
• 2017-07-16 Switch over Linux tests to CircleCI
• 2017-07-16 Tell docs.rs to build with all features
• 2017-07-16 Use foreign-type's Opaque
• 2017-07-16 Rustfmt
• 2017-07-16 Init before creating ex indexes
• 2017-07-16 Fix build
• 2017-07-15 Don't overwrite the configured verify mode
• 2017-07-15 Add an API to install extra data
• 2017-07-15 Move callbacks to a submodule
• 2017-07-05 Support PKCS#1 RSA public keys
• 2017-07-05 Inform cargo about which env vars we care about
• 2017-06-02 Make some changes for review comments
• 2017-05-26 Expose PSK via a SslContextBuilder::set_psk_callback method
• 2017-06-25 Enable build on LibreSSL 5.6.0 development branch.
• 2017-06-24 Add PKey::private_key_from_der
• 2017-06-15 Properly reexport ConnectConfiguration
• 2017-06-10 Fix documentation typo
• 2017-06-07 remove unused dependencies on windows
• 2017-06-06 Fix for changes in OpenSSL 1.1.0f
• 2017-06-03 Add pkg-config
• 2017-05-30 Little docs fix
• 2017-05-30 Add a fixme
• 2017-05-22 Update bitflags 0.8 -> 0.9
• 2017-05-20 Explicitly initialize OpenSSL 1.1.0
• 2017-05-20 Rustfmt
• 2017-05-12 Test LibreSSL 2.5.4
• 2017-05-12 Fix support for LibreSSL versions other than 2.5.0
• 2017-05-11 use appveyor DownloadFile to download cacert.pem
• 2017-05-07 Drop x86 macOS build
• 2017-05-07 Set LD_LIBRARY_PATH when using custom build
• 2017-05-06 Support public key decode from DER
• 2017-05-06 Add a note to rename variant
• 2017-05-03 Clarify use of ssl::HandshakeError::Interrupted
• 2017-04-15 Expose the lower level SHA functions
• 2017-04-12 Don't force allocation for message digests
• 2017-04-11 (issues-600) Avoid compiling ec2m code against no-ec2m openssl
• 2017-04-04 Add new EC/PKEY methods to permit deriving shared secrets.
• 2017-04-04 Don't exclude test data from package
• 2017-04-03 bump bitflags to 0.8
• 2017-03-29 show help message when pkg-config is missing
• 2017-03-25 Fix order of arguments to BN_rand_range and BN_pseudo_rand_range
• 2017-03-25 Logic to support client-side session reuse
• 2017-03-16 Panic if lock managed by locking_function is doubly unlocked
• 2017-03-13 (maint) Recreate ability to pass in OPENSSL_LIBS variable
• 2017-03-07 Don't allow Stacks to be allocated with a null-ptr
• 2017-03-06 Fix for empty stacks
• 2017-03-06 Add test to run into issue with stack.len()
• 2017-02-23 mention the common fields
• 2017-02-20 some helpful documentation and example.
• 2017-03-01 Fix Shr trait impl for BigNum: was using shl
• 2017-02-26 Fix dangling reference
• 2017-02-25 License all future contributions properly
• 2017-02-22 scrypt support
• 2017-02-20 Expose more error information
• 2017-02-19 Add a fixme to drop const prefixes
• 2017-02-19 Add note about needing pkg-config
• 2017-02-19 Tweaks
• 2017-02-17 add Ok to result
• 2017-02-16 review fixes: reorder forget()
• 2017-02-15 fix versions for sys as well
• 2017-02-15 fix cfg options for v102 and v110
• 2017-02-15 add set_verify_cert_store() to ssl ctx
• 2017-02-17 only forget in non-error condition
• 2017-02-16 review fixes: reorder forget()
• 2017-02-15 fix versions for sys as well
• 2017-02-15 fix cfg options for v102 and v110
• 2017-02-15 add set_verify_cert_store() to ssl ctx
• 2017-02-16 Update 1.1.0 version
• 2017-02-15 De-quote README line
• 2017-02-15 Support PKCS#8 private key deserialization
• 2017-02-11 Fix for libressl
• 2017-02-11 Update deprecation version
• 2017-02-11 Use published foreign_types
• 2017-02-11 Remove X509Req setters
• 2017-02-11 Re-add reexport
• 2017-02-11 X509 signature algorithm access
• 2017-02-11 X509 signature access
• 2017-02-11 Add Asn1BitString
• 2017-02-08 complication -> compilation
• 2017-02-08 Add MacOS and XCode hint
• 2017-02-07 Make it compile again.
• 2017-02-03 Switch to foreign_types
• 2017-02-03 Clean up pkg-config logic
• 2017-01-31 Fixed constant names from openssl/rsa.h
• 2017-01-31 Adding suggestions from review.
• 2017-01-30 Fixing typo
• 2017-01-30 Small amount of docs.
• 2017-01-30 Simplify protocol based on the semantics defined by openssl.
• 2017-01-30 Simplify code, so that openssl-sys really doesn't contain anything aside
• 2017-01-30 Testing first version that works with signer.
• 2017-01-28 Add the necessary constants to access the pkey ctx stuff.
• 2017-01-29 Bump test versions
• 2017-01-29 Macro-expand OpenSSL headers for feature checks
• 2017-01-27 Add setters to new getter-functions in X509ReqRef
• 2017-01-27 Style changes according to review
• 2017-01-26 Added X509ReqRef.subject_name and X509ReqRef.version
• 2017-01-25 Pkcs12Builder tweaks
• 2017-01-24 Make sure to not add system dirs to linkage
• 2017-01-24 fix multi-version compat
• 2017-01-23 fix ptr types
• 2017-01-05 libressl: make set_ecdh_auto available
• 2017-01-05 libressl: mark unavailable flags as such
• 2017-01-22 Support EC_GROUP_set_asn1_flag
• 2017-01-21 Fix test warnings
• 2017-01-21 Support chacha20 and chacha20_poly1305
• 2017-01-20 Support AES IGE
• 2017-01-23 add some documentation
• 2017-01-23 add pkcs12_create and to_der funcs
• 2017-01-20 Add categories
• 2017-01-14 OCSP functionality
• 2017-01-08 Fix typo
• 2017-01-08 Add methods to construct SslAcceptorBuilder without key and cert
• 2017-01-07 Adjust minimum pkg-config version
• 2017-01-05 Fix time type
• 2017-01-05 Provide master key access
• 2017-01-05 Add basic session tests
• 2017-01-05 session is nullable
• 2017-01-05 Provide access to the session ID
• 2017-01-05 Types and accessor for SslSession
• 2017-01-05 Add SSL_SESSION functions
• 2017-01-05 Add SSL_SESSION
• 2017-01-03 Clean up EcKey example a bit
• 2017-01-03 Add X509::stack_from_pem
• 2016-12-31 add EcKey creation from EcPoint, public_key
• 2017-01-03 Tweak layout a little bit
• 2017-01-03 Pointer from PKey docs to sign module.
• 2017-01-03 Improving missing OpenSSL message on Linux
• 2017-01-02 Typo
• 2017-01-01 Some readme tweaks
• 2017-01-01 Little cleanup
• 2017-01-01 Clean up bio
• 2017-01-01 Stick tag description on the right function
• 2017-01-01 Fix docs
• 2017-01-01 Fix doc reference
• 2016-12-31 Indicate that memcmp::eq should be used for HMACs
• 2016-12-24 Use metadeps to specify pkg-config dependencies declaratively
• 2016-12-20 Add Travis build against LibreSSL
• 2016-12-21 Add LibreSSL 2.5.0 support
• 2016-12-21 duplicate ossl10x.rs to libressl.rs
• 2016-12-20 Handle zero-length reads/writes
• 2016-12-14 Explain how to install trusted root certificates
• 2016-12-12 Allow OPENSSL_{LIB,INCLUDE}_DIR to override OPENSSL_DIR
• 2016-12-10 Switch to docs.rs for docs
• 2016-12-10 Fix ErrorStack display
• 2016-12-09 Add Blowfish tests
• 2016-12-09 Use EVP_bf_cfb64 instead of EVP_bf_cfb
• 2016-12-09 Add Blowfish support
• 2016-12-02 Update README.md
• 2016-11-28 Implement Clone for SslConnector and SslAcceptor
• 2016-11-19 Cleanup
• 2016-11-16 Return Option from group
• 2016-11-16 Remove EcGroup constructors
• 2016-11-15 Test elliptic curve signatures
• 2016-11-15 Add a test for mul_generator
• 2016-11-15 Turns out yet another variant of EC_POINT_mul is allowed!
• 2016-11-15 Add a note that the systest logic is kind of busted
• 2016-11-14 Rename ec_key to ec
• 2016-11-14 Split EcKey::mul
• 2016-11-14 Add EcPoint::invert
• 2016-11-14 Fix non-static EcGroup method locations
• 2016-11-13 Remove EC_METHOD functions
• 2016-11-13 Add EcKey::check_key
• 2016-11-13 More functionality
• 2016-11-13 More functionality
• 2016-11-13 Public keys are not always present
• 2016-11-13 Rename new_by_curve_name to from_curve_name
• 2016-11-13 Add Some more elliptic curve functionality
• 2016-11-13 Remove some stray manual impls
• 2016-11-13 Macroise from_pem
• 2016-11-13 Macroise to_pem
• 2016-11-13 Macroise from_der
• 2016-11-13 Macroise to_der
• 2016-11-13 Make password callback return a Result
• 2016-11-13 Support serialization of encrypted private keys
• 2016-11-13 Add private_key_from_pem_passphrase
• 2016-11-13 Macro-implement private_key_to_pem
• 2016-11-13 Some serialization support for EcKey
• 2016-11-13 No need to use a raw string anymore
• 2016-11-12 Use ffdhe2048 in mozilla_intermediate
• 2016-11-12 Be a bit more emphatic about the danger
• 2016-11-12 Add a connect method that does not perform hostname verification
• 2016-11-12 Simplify test logic a bit
• 2016-11-12 Add a missing init
• 2016-11-12 Add constructors for various standard primes
• 2016-11-12 Add SslRef::set_{tmp_dh,tmp_ecdh,ecdh_auto}
• 2016-11-12 Pick different cipher lists on 1.0.1 and 1.0.2
• 2016-11-12 Adjust cipher lists to work on older versions
• 2016-11-12 Add SslRef::set_tmp_{ec,}dh_calback
• 2016-11-12 Add SslContextBuilder::set_tmp_{ec,}dh_callback
• 2016-11-12 Drop bits to u32
• 2016-11-12 Add PKey::bits
• 2016-11-12 Fix function signature
• 2016-11-12 Add basic X509_STORE access
• 2016-11-11 Consistently support both PEM and DER encodings
• 2016-11-11 Add EcKey <-> PKey conversions
• 2016-11-11 PKey <-> DH conversions
• 2016-11-11 Add PKey::dsa
• 2016-11-11 Don't test 32 bit osx openssl install
• 2016-11-11 Move osx builds to top of list
• 2016-11-11 Fix EOF detection
• 2016-11-11 Update to 1.1.0c for tests
• 2016-11-09 Bump minimum version
• 2016-11-09 Drop rustc-serialize dependency
• 2016-11-09 Better docs for AEAD tag
• 2016-11-08 Make sure to override SslContext verify callback always
• 2016-11-08 Add convenience functions for AEAD encryption/decryption
• 2016-11-08 Actually support AES GCM
• 2016-11-08 Don't recommend light version on Windows
• 2016-11-08 Docs
• 2016-11-07 Deprecate X509Generator
• 2016-11-07 Use X509Builder in X509Generator
• 2016-11-07 Add init calls to new constructors
• 2016-11-07 Add an X509ReqBuilder
• 2016-11-07 Add stack creation and push
• 2016-11-07 Add SubjectAlternativeName
• 2016-11-07 More extension progress
• 2016-11-07 Start of extension support
• 2016-11-06 Add conf module
• 2016-11-06 Start on an X509Builder
• 2016-11-06 Support client CA advertisement
• 2016-11-06 Fix build on 1.0.1
• 2016-11-06 Add accessors for cert and private key
• 2016-11-06 Provide a tailored error message on Linux
• 2016-11-06 Fixes
• 2016-11-06 Remove set_rsa
• 2016-11-06 Implement Pkcs12 via type_!
• 2016-11-06 Re-adjust BigNum API
• 2016-11-05 Return a Stack in Pkcs12
• 2016-11-05 Add Stack::pop
• 2016-11-05 More cleanup
• 2016-11-05 Simplify destructor a bit
• 2016-11-05 Add a consuming iterator for Stacks
• 2016-11-05 Rustfmt
• 2016-11-05 Remove unused dependency
• 2016-11-05 Rename accessors
• 2016-11-05 Fix systest
• 2016-11-05 Always dump openssl confs
• 2016-11-05 More buildscript tweaks
• 2016-11-05 Improve buildscript logic
• 2016-11-04 Get rid of Ref
• 2016-11-04 Make utility functions private
• 2016-11-04 Remove an enum
• 2016-11-04 Clean up some bignum APIs
• 2016-11-04 Rename BnCtx
• 2016-11-04 Avoid lhash weirdness
• 2016-11-02 Fix signature
• 2016-11-02 Use built in DH parameters when available
• 2016-11-02 Don't clear BigNums in destructor
• 2016-11-02 Fix docs
• 2016-11-02 Fix stack signatures
• 2016-11-02 Cleanup X509StoreContext::chain
• 2016-11-02 More minor cleanup
• 2016-11-02 Clean up stack
• 2016-11-02 Clean up stack destructor
• 2016-10-31 Implement X509StoreContextRef::get_chain
• 2016-10-31 Replace GeneralNames by the new Stack API
• 2016-10-31 Implement a generic Stack API to deal with OpenSSL stacks
• 2016-11-01 Add method to encode a public key as a DER blob
• 2016-11-01 Avoid extra allocations in Asn1Time Display impl
• 2016-11-01 Fix 1.1.0 build
• 2016-11-01 Little cfg cleanup
• 2016-11-01 Clean up x509 name entries
• 2016-11-01 Documentation
• 2016-11-01 Remove Opaque
• 2016-11-01 Update x509
• 2016-11-01 Update ssl
• 2016-11-01 Update verify
• 2016-11-01 Update Rsa
• 2016-11-01 Update PKey
• 2016-11-01 Update EcKey
• 2016-11-01 Update Dsa
• 2016-11-01 Convert Dh
• 2016-11-01 Convert Asn1Time
• 2016-11-01 Update bignum
• 2016-11-01 Add a generic Ref type
• 2016-11-01 Mention 0.7 README
• 2016-10-31 Return an SslRef
• 2016-10-31 Expose SSL_MODEs
• 2016-10-31 Rename set_CA_file
• 2016-10-31 Impl Sync and Send for SslContextBuilder
• 2016-10-31 Rename connectors
• 2016-10-31 Move HandshakeError to submodule
• 2016-10-31 Remove DsaParams
• 2016-10-30 Add RsaRef
• 2016-10-30 Add DsaRef
• 2016-10-30 Rustfmt
• 2016-10-30 Remove out of date comment
• 2016-10-30 Use Python's cipher list on the client side.
• 2016-10-30 Update docs
• 2016-10-30 Add a mozilla modern profile
• 2016-10-30 Rename nwe to mozilla_intermediate
• 2016-10-30 Pass SslMethod into constructors
• 2016-10-30 Enable single ECDH use
• 2016-10-30 Configure ECDH parameters in connector
• 2016-10-30 Implement EcKey
• 2016-10-30 Clean up generics a bit
• 2016-10-30 Pull Curl's CA list for Windows tests
• 2016-10-30 Add module level docs
• 2016-10-29 Use PKeyRef in X509Generator
• 2016-10-29 Move docs
• 2016-10-29 Fix reexport
• 2016-10-29 Docs for connectors
• 2016-10-29 Add PKeyRef
• 2016-10-29 Implement client and server connectors
• 2016-10-29 Make verification unconditionally exposed internally
• 2016-10-28 Remove private field in ParsedPkcs12
• 2016-10-28 Camel case DH
• 2016-10-28 Make padding types consts
• 2016-10-28 Add a macro definition
• 2016-10-27 Fix description
• 2016-10-27 Stop returning an Option from cipher description
• 2016-10-27 Fix drop signature
• 2016-10-27 Remove macros module
• 2016-10-27 Don't double-allocate strings
• 2016-10-27 Move SslString to a shared location
• 2016-10-27 Add SslMethod::from_ptr
• 2016-10-26 Don't allow mutation of SslContexts
• 2016-10-26 Support AES GCM
• 2016-10-26 Add a shutdown method
• 2016-10-26 Fix ordering
• 2016-10-24 Add into_error
• 2016-10-24 Fix Send + Sync-ness of SslStream
• 2016-10-23 Remove NIDs only defined in 1.0.2+
• 2016-10-22 Fix tests
• 2016-10-22 Use constants rather than constructors for Nid
• 2016-10-22 Camel case Rsa
• 2016-10-22 Camel case Dsa
• 2016-10-22 De-enumify Nid
• 2016-10-22 Fix hasher docs
• 2016-10-22 Flatten crypto module
• 2016-10-22 Properly propagate panics
• 2016-10-22 Borrow compression string
• 2016-10-22 Rename SslContextOptions
• 2016-10-22 Fix X509StoreContext
• 2016-10-22 Update BigNumRef
• 2016-10-22 Convert X509VerifyParamRef
• 2016-10-22 Borrowed servername
• 2016-10-22 Convert SslCipherRef
• 2016-10-22 Convert SslRef
• 2016-10-22 Convert SslContextRef
• 2016-10-22 Update Asn1TimeRef
• 2016-10-22 Convert X509Ref
• 2016-10-21 Switch X509Name over to new borrow setup
• 2016-10-21 Store a MidHandshakeSslStream in fatal errors
• 2016-10-21 Redo SslStream construction
• 2016-10-19 Allow the X509 verify error to be read from an SslRef
• 2016-10-19 De-enumify X509ValidationError
• 2016-10-19 Drop lifetime on GeneralNames
• 2016-10-19 Callback cleanup
• 2016-10-19 Don't ignore errors in NPN/ALPN logic
• 2016-10-18 Implement new feature setup
• 2016-10-17 Fix missing import
• 2016-10-17 Fix algorithm field
• 2016-10-17 Finish BN overhaul
• 2016-10-17 Finish error overhaul
• 2016-10-17 ssl error handling cleanup
• 2016-10-17 Finish crypto error cleanup
• 2016-10-17 More error cleanup
• 2016-10-16 Continue error handling cleanup
• 2016-10-16 Start on error + BN refactor
• 2016-10-15 Fix set_read_ahead signature
• 2016-10-15 Always build updated OpenSSL
• 2016-10-15 De-enumify Padding
• 2016-10-15 De-enumify SslMethod
• 2016-10-15 De-enumify Cipher
• 2016-10-15 De-enumify message digests
• 2016-10-15 Migrate DSA sign/verify to EVP APIs
• 2016-10-15 Correctly bind BIO_new_mem_buf
• 2016-10-15 Fix EVP_DigestVerifyFinal version support
• 2016-10-15 Add examples to crypto::sign
• 2016-10-15 Fix typo
• 2016-10-15 Distinguish between verification errors and "other" errors.
• 2016-10-15 Fix signature of EVP_DigestVerifyFinal on 1.0.1
• 2016-10-15 Support HMAC PKeys and remove hmac module
• 2016-10-15 Remove old RSA sign and verify methods
• 2016-10-15 Signature and verification support
• 2016-10-15 Add digest signature methods
• 2016-10-15 Handle OPENSSL_NO_COMP
• 2016-10-15 Check feature compatibility in build script
• 2016-10-15 Prefer 1.1 when looking for Homebrew installs
• 2016-10-15 Don't run test on ARM
• 2016-10-15 Fix test_alpn_server_select_none
• 2016-10-15 Respect osslconf in systest
• 2016-10-15 Enable hostname verification on 1.0.2
• 2016-10-15 Support hostname verification
• 2016-10-14 Remove link_name usage
• 2016-10-14 Ignore DTLS tests on Windows/ARM for now
• 2016-10-14 Cleanup
• 2016-10-14 Use stdlib logic for udp
• 2016-10-14 Fix windows for real
• 2016-10-14 Disable npn tests on < 1.0.2
• 2016-10-14 Fix tests on windows
• 2016-10-14 Reenable dtls tests
• 2016-10-14 Clean up features
• 2016-10-14 Correct feature selection in tests
• 2016-10-14 Flag off dtls and mask ssl_ops
• 2016-10-13 Tweak some comments in Cargo.toml
• 2016-10-13 Ignore a test on OpenSSL 1.1.0
• 2016-10-13 Add remaining SSL_OP constants
• 2016-09-30 Add support for OpenSSL 1.1.0
• 2016-10-07 Rename NoPadding to None
• 2016-10-07 Rename EncryptionPadding to Padding
• 2016-10-07 Removed max_size; removed all encrypt/decrypt methods except private/public encrypt/decrypt which take the padding
• 2016-10-04 added try_ssl_size, which handles -1 as error and returns the value otherwise; added RSA private_decrypt and public encrypt
• 2016-10-01 Add RAND_status()
• 2016-10-01 Add RSA_*_PADDING constants
• 2016-09-28 Make sure private component exists when signing
• 2016-09-08 Fix password callback on ARM
• 2016-09-01 Implement Clone for openssl::error::ErrorStack
• 2016-08-30 Add description about how to solve openssl issue
• 2016-08-30 Add cargo clean in the list
• 2016-08-20 Re-enable 64 bit MSVC
• 2016-08-18 Fix SslContext::add_extra_chain_cert
• 2016-08-17 Ignore flickering test on windows
• 2016-08-17 Get rid of use Asn1TimeRef warning for some builds
• 2016-08-17 Be explicit regarding Asn1TimeRef lifetimes
• 2016-08-17 Fix docs
• 2016-08-17 Add x509_validity feature to travis tests
• 2016-08-17 Add test for "x509_validity" feature
• 2016-08-17 Add "x509_expiry" feature flag
• 2016-08-08 Introduce Asn1TimeRef
• 2016-08-03 Progress on asn1 expiry
• 2016-08-17 Fix finicky sha1 stdin format
• 2016-08-17 Improve build script
• 2016-08-16 Add a little comment to sketchy transmute
• 2016-08-14 Initialize algorithms in init
• 2016-08-14 Docs for pkcs12
• 2016-08-14 Fix memory leak in general name stack
• 2016-08-14 PKCS #12 support
• 2016-08-14 More test fixes
• 2016-08-14 Fix tests
• 2016-08-14 Start on PKCS #12 support
• 2016-08-13 Mangle c helper functions
• 2016-08-12 Require bitflags 7
• 2016-08-11 Undelete bogus extern declaration
• 2016-08-11 Use new target syntax for windows stuff
• 2016-08-11 Fix tests
• 2016-08-11 Little tweaks
• 2016-08-11 Fix build
• 2016-08-11 Method renames
• 2016-08-11 Tweaks
• 2016-08-11 More API cleanup
• 2016-08-11 Asn1 and Bignum renames
• 2016-08-10 Fix workspace declaration
• 2016-08-10 Fix build
• 2016-08-10 Test hmac features
• 2016-08-10 Make hmac support optional and remove openssl-sys-extras
• 2016-08-10 Fix build
• 2016-08-10 Move X509_get_extensions to openssl helpers
• 2016-08-10 Make c_helpers optional
• 2016-08-10 Remove rust_SSL_clone
• 2016-08-09 Docs for Crypter::new
• 2016-08-09 Fix size check
• 2016-08-09 symm reform
• 2016-08-09 Copy over getter macros
• 2016-08-09 Remove symm_internal
• 2016-08-09 Clean up RSA and DSA accessors
• 2016-08-08 Fix build on 1.9
• 2016-08-08 Add PKey::from_rsa
• 2016-08-08 Remove X509Generator::bitlenth
• 2016-08-08 Fix example
• 2016-08-08 Restore disabled tests
• 2016-08-08 Add RSA::generate
• 2016-08-08 Move init to crate root
• 2016-08-08 x509 cleanup
• 2016-08-08 get_error -> error
• 2016-08-08 DH cleanup
• 2016-08-08 pkcs5 reform
• 2016-08-08 PKey reform
• 2016-08-08 Fix RSA::verify
• 2016-08-08 Fix bn tests on 32 bit
• 2016-08-08 Take a c_ulong directly in BN construction
• 2016-08-07 Hash reform
• 2016-08-07 Refactor BigNum
• 2016-08-07 Clean up asn1time
• 2016-08-06 get_handle -> handle
• 2016-08-06 Fix pkey method safety
• 2016-08-06 Clean up x509
• 2016-08-06 Make x509 constructors unsafe
• 2016-08-05 Move SSL_CTX_set_ecdh_auto to -sys
• 2016-08-05 Mvoe SSL_CTX_add_extra_chain_cert to -sys
• 2016-08-05 Move SSL_CTX_set_tmp_dh to -sys
• 2016-08-05 Move SSL_CTX_set_read_ahead to -sys
• 2016-08-05 Move SSL_CTX_set_tlsext_servername_callback to -sys
• 2016-08-05 Move SSL_set_tlsext_host_name to -sys
• 2016-08-05 Move BIO macros into -sys
• 2016-08-05 Stop once-ing init wrapper
• 2016-08-05 Support basic SSL options without C shims
• 2016-08-03 Define SSL_CTX_set_mode in openssl-sys
• 2016-08-03 Restructure PEM input/output methods
• 2016-07-31 Drop unused feature gate
• 2016-07-27 Add MidHandshakeSslStream
• 2016-07-31 Fix appveyor
• 2016-07-31 Fix weird inference issue on 1.9
• 2016-07-31 Build against 1.9
• 2016-07-31 Fix catch_unwind feature and drop feature gate
• 2016-07-31 Fix build with dtls
• 2016-07-31 Revert "Add a new trait based Nid setup"
• 2016-06-02 Fix a few mutable types for self parameters.
• 2016-05-04 Add a new trait based Nid setup
• 2016-05-03 Remove AsRaw{Fd, Socket} impls
• 2016-05-03 Remove silly internal error enum
• 2016-05-03 Drop MaybeSslStream
• 2016-05-03 Drop is_dtls methods on SslMethod
• 2016-05-02 Clean up SNI APIs
• 2016-05-02 Move SslContext::set_verify to a closure based API
• 2016-05-02 Rename getters in line with conventions
• 2016-02-09 Adjust set_ssl_context API
• 2016-01-30 Error reform
• 2016-01-30 Remove deprecated methods
• 2016-01-30 Remove NonblockingSslStream
• 2016-08-01 BigNum binary operators with different lifetimes.
• 2016-05-17 add low level dsa primitives
• 2016-07-29 add RUST_BACKTRACE=1 to make debugging ci failures easier
• 2016-07-30 improve error handling in rsa
• 2016-07-29 start using cargo workspaces
• 2016-07-29 Implement save_der for X509 and X509Req
• 2016-07-29 Implement get_handle for X509Req
• 2016-07-22 Set SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER flag
• 2016-06-26 FnMut -> FnOnce, update docs
• 2016-06-26 Put the test behind the catch_unwind feature
• 2016-06-22 Add an RSA key decryption test
• 2016-06-22 Put password callbacks behind a cargo feature
• 2016-06-22 Make the callback take a &mut [c_char]
• 2016-06-14 Add RSA::private_key_from_pem_cb
• 2016-06-14 Move into utility module
• 2016-06-13 Try to propagate callback panics
• 2016-06-13 Add PKey::private_key_from_pem_cb
• 2016-07-01 Set auto retry
• 2016-06-26 Test on 1.8
• 2016-06-13 Document BigNum
• 2016-05-19 Update user32-sys and gdi32-sys to 0.2
• 2016-05-17 Rustfmt
• 2016-05-17 Clean up RSA signature API
• 2016-03-14 Fix order of 32- and 64-bit for mingw toolchain
• 2016-03-13 Clarify windows build instructions
• 2016-05-15 Allow bitflags 0.7
• 2016-05-16 Update cert
• 2016-05-09 Downgrade bitflags on travis to build on 1.7
• 2016-05-05 add rsa signature tests
• 2016-05-04 add missing NIDs and use Nid as input to signing
• 2016-05-03 take enum instead of ints from openssl header file
• 2016-05-03 add constr