crates.io · #352 most downloaded on crates.io

native-tls

0.2.18349M downloads/morust-native-tls/rust-native-tls ↗New releases in your daily digest, changelog included.

A wrapper over a platform's native TLS implementation

Last release 7 months ago
18 Feb 2026
Ships fairly regularly
a new release about every 8 months
Most releases are documented
notes for 18 of 24 stable releases
1 version withdrawn
withdrawn after publishing
10 years old
25 releases · first in 2016

Release timeline

25 releases since 2016

20162018202020222024

Releases

0.2.1818 Feb 2026
Fixed min/max protocol selection fallback for very old OpenSSL versions.
Fixed min/max protocol selection fallback for very old OpenSSL versions.
Open source →
0.2.1718 Feb 2026withdrawn
Added ALPN support to TlsAcceptor by @matszpk in #229 and @JohnGu9 in #363
What's Changed

Added ALPN support to TlsAcceptor by @matszpk in #229 and @JohnGu9 in #363

Full Changelog: v0.2.16...v0.2.17
Open source →

One column per quarter.

Additional notes

Added support for ALPN on the server side on non-Apple platforms.
Fixed iOS + ALPN feature flag.

Open source →

0.2.1613 Feb 2026

Added TLS 1.3 as an option on non-Apple platforms #353

Added TLS 1.3 as an option on non-Apple platforms #353
- Apple platforms will fall back to TLS 1.2 when it's allowed, or fail due to lack of TLS 1.3 in the Security.framework #357
Added stack_from_pem by @Keruspe in #168
Upgraded openssl-probe and Security.framework bindings #349
Simplified cfg()s to support all non-macOS Apple platforms.

Full Changelog: v0.2.15...v0.2.16

Open source →

Additional notes

Added TLS 1.3 as an option on non-Apple platforms. Apple platforms will fall back to TLS 1.2 when it's allowed, or fail due to lack of TLS 1.3 in the Security.framework.
Added stack_from_pem (except iOS).
Upgraded openssl-probe.
Upgraded Security.framework bindings.
Simplified cfg()s to support all non-macOS Apple platforms.

Open source →

0.2.1512 Feb 2026

Upgrade to Edition 2021 by @kornelski in #341

What's Changed

Upgrade to Edition 2021 by @kornelski in #341
Set default minimum protocol to TLS 1.2 by @Property404 in #293

New Contributors

@Property404 made their first contribution in #293

Full Changelog: v0.2.14...v0.2.15

Open source →

Additional notes

Set default minimum TLS version to 1.2 (TLS 1.1 has been deprecated since 2021)
Upgraded code to edition 2021

Open source →

0.2.1419 Feb 2025

Cache openssl cert lookup and don't bail on error by @sfackler in #324

What's Changed

Cache openssl cert lookup and don't bail on error by @sfackler in #324

Full Changelog: v0.2.13...v0.2.14

Open source →

0.2.1325 Jan 2025Deprecated

Stop using deprecated openssl-probe APIs by @sfackler in #316

What's Changed

chore: Bump openssl and openssl-sys by @rkrishn7 in #304
Stop using deprecated openssl-probe APIs by @sfackler in #316

New Contributors

@rkrishn7 made their first contribution in #304

Full Changelog: v0.2.12...v0.2.13

Open source →

0.2.1227 May 2024

Use SPDX license format by @jbtrystram in #247

What's Changed

Use SPDX license format by @jbtrystram in #247
Update test-cert-gen to no longer depend on remove_dir_all by @felipesere in #254
Exclude the leaf certificate from the chain when parsing PKCS#8 identities by @sfackler in #273
Replace lazy_static with once_cell by @daxpedda in #267
Update builders documentation by @rust1248 in #271
Remove once_cell by @tamird in #279
Add tvOS and watchOS support by @simlay in #285
Make tempfile be a macos-only dependency by @simlay in #295
Added visionos target support by @simlay in #294

New Contributors

@jbtrystram made their first contribution in #247
@felipesere made their first contribution in #254
@daxpedda made their first contribution in #267
@rust1248 made their first contribution in #271
@tamird made their first contribution in #279
@simlay made their first contribution in #285

Full Changelog: v0.2.11...v0.2.12

Open source →

Additional notes

Fixed

Stopped using a deprecated openssl-probe API.

Open source →

0.2.111 Nov 2022

Removed an unused build dependency.

Fixed

Removed an unused build dependency.

Open source →

0.2.1028 Mar 2022

### Fixed * Fixed the build for iOS.

Fixed

Fixed the build for iOS.

Open source →

0.2.927 Mar 2022

### Added * Added Identity::from_pkcs8.

Added

Added Identity::from_pkcs8.

Open source →

0.2.811 Aug 2021

Fixed an off by one error in the schannel backend's handling of max_protocol_version.

Fixed

Fixed an off by one error in the schannel backend's handling of max_protocol_version.

Open source →

0.2.729 Dec 2020

Added support for ALPN in client APIs flagged under the alpn Cargo feature.

Added

Added support for ALPN in client APIs flagged under the alpn Cargo feature.

Open source →

0.2.610 Nov 2020

### Fixed * Fixed compilation on iOS.

Fixed

Fixed compilation on iOS.

Open source →

0.2.56 Nov 2020

Added TlsConnectorBuilder::disable_built_in_roots to only trust root certificates explicitly added to the builder.

Added

Added TlsConnectorBuilder::disable_built_in_roots to only trust root certificates explicitly added to the builder.

Updated

Updated security-framework to 2.0.

Open source →

0.2.46 Mar 2020

Added a Clone implementation for Identity.

Added

Added a Clone implementation for Identity.

Updated

Updated security-framework to 0.4.

Open source →

0.2.327 Apr 2019

Adding an already-trusted certificate to the root certificate set no longer triggers an error with OpenSSL.

Fixed

Adding an already-trusted certificate to the root certificate set no longer triggers an error with OpenSSL.

Updated

Updated security-framework to 0.3.

Open source →

0.2.222 Oct 2018

Failure to load a root certificate on Android now logs a message rather than producing an error.

Fixed

Failure to load a root certificate on Android now logs a message rather than producing an error.
Fixed ordering of the certificate chain in the OpenSSL backend.

Open source →

0.2.15 Aug 2018

The vendored Cargo feature will cause the crate to compile and statically link to a vendored copy of OpenSSL on platforms that use that backend.

Added

The vendored Cargo feature will cause the crate to compile and statically link to a vendored copy of OpenSSL on platforms that use that backend.

Open source →

0.2.026 Jun 2018

The openssl_probe crate is now used with the OpenSSL backend so that trusted root certificates will automatically be detected when statically linking

Added

The openssl_probe crate is now used with the OpenSSL backend so that trusted root certificates will automatically be detected when statically linking to OpenSSL.
Root certificates are now automatically loaded from the Android trust root.
Added Certificate::to_der to serialize an X509 certificate to DER.
Added TlsConnectorBuilder::danger_accept_invalid_certs to disable certificate verification.
Added TlsAcceptor::new and TlsConnector::new to easily create an acceptor/connector with default settings.
Added TlsStream::peer_certificate to obtain the peer's leaf certificate.
Added TlsStream::tls_server_end_point to retrieve RFC 5929 tls-server-end-point channel binding data.

Changed

Upgraded to openssl 0.10 and security-framework 0.2.
Pkcs12 has been renamed to Identity, and Pkcs12::from_der has been renamed to Identity::from_pkcs12.
HandshakeError::Interrupted has been renamed to HandshakeError::WouldBlock.
TlsConnectorBuilder and TlsAcceptorBuilder are now "traditional"-style builders. Their methods are now infallible and return &mut Self to allow them to be chained together.
supported_protocols has been replaced by min_protocol_version and max_protocol_version on TlsConnectorBuilder and TlsAcceptorBuilder.
SNI and hostname verification are now configured separately via TlsConnectorBuilder::use_sni and TlsConnectorBuilder::danger_accept_invalid_hostnames. They replace the TlsConnector::danger_connect_without_providing_domain_for_certificate_verification_and_server_name_indication method, which has been removed.