| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | openssl: use explicit result for SSL_in_init (#14597) | alaviss | 2020-06-08 | 1 | -2/+2 |
| | | | | | | | | Sometimes the analysis might get funky and decide that the if-expression below is not an if-expression. Details of how this can happen is largely unknown, but it's easy to prevent so we will just go forward with that. Fix #14591 | ||||
| * | wrappers/openssl: defer loading SSL_CTX_set_ciphersuites | Leorize | 2020-06-06 | 1 | -1/+3 |
| | | |||||
| * | net: also set TLSv1.3 cipher suites | Leorize | 2020-06-06 | 1 | -0/+5 |
| | | |||||
| * | wrappers/openssl: mark casts as gcsafe | Leorize | 2020-06-06 | 1 | -17/+13 |
| | | | | | Nim will pretend that these proc are not gcsafe if they are not marked. | ||||
| * | wrappers/openssl: enable SSL_CTX_set_ecdh_auto for LibreSSL | Leorize | 2020-06-06 | 1 | -1/+1 |
| | | | | | | | This procedure is not no-op for older LibreSSL, and the ABI is kept for newer versions, so there's no harm in enabling it unconditionally for all LibreSSL versions. | ||||
| * | wrappers/openssl: the version number comes from the utility library | Leorize | 2020-06-06 | 1 | -9/+20 |
| | | | | | | Previously we loaded the SSL library for this, but that's not where the symbol resides. | ||||
| * | net: don't call set_ecdh_auto for super old OpenSSL | Leorize | 2020-06-06 | 1 | -5/+3 |
| | | | | | | And the fun thing is that currently we use a super old OpenSSL on Windows. | ||||
| * | wrappers/openssl: fix SSL_CTX_set_mode | Leorize | 2020-06-06 | 1 | -1/+1 |
| | | | | | Follow up of 794042080b270d9da8d64bb4285ce83787bdec7e | ||||
| * | wrappers/openssl: getOpenSSLVersion is gcsafe | Leorize | 2020-06-06 | 1 | -3/+4 |
| | | | | | Yet another weird {.gcsafe.} triggering when it shouldn't. | ||||
| * | net: enable automatic EC curve selection for OpenSSL 1.0.2 | Leorize | 2020-06-06 | 1 | -0/+16 |
| | | | | | | This setting is required for servers running OpenSSL < 1.1.0 to support EC-based secure ciphers that is now part of the default cipher list. | ||||
| * | wrappers/openssl: fix SSL_CTX_ctrl signature | Leorize | 2020-06-06 | 1 | -1/+1 |
| | | |||||
| * | openssl: fix erroneous function signatures | Leorize | 2020-06-06 | 1 | -3/+3 |
| | | | | | Now matches the declaration in openssl/err.h | ||||
| * | asyncnet, net: call SSL_shutdown only when connection established | Leorize | 2020-06-06 | 1 | -0/+28 |
| | | | | | | | This commit prevents "SSL_shutdown while in init" errors from happening. See https://github.com/openssl/openssl/issues/710#issuecomment-253897666 | ||||
| * | fix #9771 (#14357) | Bung | 2020-05-15 | 1 | -12/+14 |
| | | | | | | | | * fix #9771 * map SQLLEN SQLULEN * fix proc params take TSqlLen Co-authored-by: bung87 <crc32@qq.com> | ||||
| * | Add procedures to read RSA keys from BIO format (#14223) | PMunch | 2020-05-04 | 1 | -0/+4 |
| | | |||||
| * | Add RSA key reading and encrypt/decrypt to openssl (#14137) | PMunch | 2020-04-27 | 1 | -0/+23 |
| | | | | | This adds the procedures to read RSA keys and encrypt/decrypt messages with both public and private keys. | ||||
| * | Fixes issues with dynamic loading OpenSSL. Fixes #13903. (#13919) [backport] | Dominik Picheta | 2020-04-08 | 1 | -19/+39 |
| | | | | | | | | | This fixes at least a couple of issues: * Procs loaded from the DLL being used even when the pointer is nil. * The actual issue (#13903) which appeared to cause stack corruption on Android 7.1.1 with OpenSSL 1.1.1f. The change that fixed this was the move to loading the procs in `sslSym`. | ||||
| * | Deprecate DCE:on (#13839) | Juan Carlos | 2020-04-02 | 7 | -11/+0 |
| | | |||||
| * | introduce getPeerCertificates, fixes #13299 (#13650) | Christian Ulrich | 2020-03-22 | 1 | -22/+32 |
| | | | | | | | | | | | | | * make i2d_X509 and d2i_X509 always available i2d_X509 and d2i_X509 have been available in all versions of OpenSSL, so make them available even if nimDisableCertificateValidation is set. * introduce getPeerCertificates, fixes #13299 getPeerCertificates retrieves the verified certificate chain of the peer we are connected to through an SSL-wrapped Socket/AsyncSocket. This introduces the new type Certificate which stores a DER-encoded X509 certificate. | ||||
| * | SSL certificate verify GitHub action (#13697) | Federico Ceratto | 2020-03-20 | 1 | -0/+71 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Implement SSL/TLS certificate checking #782 * SSL: Add nimDisableCertificateValidation Remove NIM_SSL_CERT_VALIDATION env var tests/untestable/thttpclient_ssl.nim ran successfully on Linux with libssl 1.1.1d * SSL: update integ test to skip flapping tests * Revert .travis.yml change * nimDisableCertificateValidation disable imports Prevent loading symbols that are not defined on older SSL libs * SSL: disable verification in net.nim ..when nimDisableCertificateValidation is set * Update changelog * Fix peername type * Add define check for windows * Disable test on windows * Add exprimental GitHub action CI for SSL * Test nimDisableCertificateValidation | ||||
| * | adding sqlite3 backup functions (#13346) | pyloor | 2020-02-07 | 1 | -0/+17 |
| | | | | | | | * adding sqlite3 backup functions * changing sleep to sqlite3_sleep to prevent clashes | ||||
| * | Expose more openSSL methods. (#13131) | treeform | 2020-01-13 | 1 | -0/+43 |
| | | |||||
| * | Remove some unused/disabled OpenSSL functions (#13106) | treeform | 2020-01-11 | 1 | -135/+0 |
| | | |||||
| * | add pqserverVersion,pqconnectionNeedsPassword,pqconnectionUsedPassword (#13060) | Bung | 2020-01-07 | 1 | -0/+6 |
| | | |||||
| * | [backport] Fix spelling typos (#12755) | Brian Wignall | 2019-11-28 | 1 | -1/+1 |
| | | |||||
| * | introduce csize_t instead of fixing csize (#12497) | Arne Döring | 2019-10-31 | 1 | -4/+4 |
| | | |||||
| * | fix several typos in documentation and comments (#12553) | Nindaleth | 2019-10-30 | 3 | -3/+3 |
| | | |||||
| * | Revert "Fixes #12187 (#12321)" (#12447) | Andreas Rumpf | 2019-10-18 | 1 | -2/+2 |
| | | | | This reverts commit 00c31e87660d9db813871f5aa23661bf6b9bbdcb. | ||||
| * | Fixes #12187 (#12321) | Clyybber | 2019-10-08 | 1 | -2/+2 |
| | | | | | | | * Fixes #12187 * Point to fork of compactdict Since the original repo is now archived / read-only | ||||
| * | [backport] fix #12278, don't expose internal PCRE documentation | narimiran | 2019-09-27 | 1 | -20/+20 |
| | | |||||
| * | Fix spellings (#12277) [backport] | Federico Ceratto | 2019-09-27 | 1 | -1/+1 |
| | | |||||
| * | prepare sqlite3 wrapper for static linking | Andreas Rumpf | 2019-09-03 | 1 | -97/+103 |
| | | |||||
| * | makes the -d:nimIncremental compiler mode compile again | Andreas Rumpf | 2019-07-27 | 1 | -52/+52 |
| | | |||||
| * | style improvements; fixes #11774 | Araq | 2019-07-19 | 1 | -1/+1 |
| | | |||||
| * | [bugfix] openssl styleCheck fix: consistent var naming (#11750) | Kaushal Modi | 2019-07-16 | 1 | -4/+4 |
| | | |||||
| * | minor style changes | Araq | 2019-07-11 | 6 | -87/+111 |
| | | |||||
| * | minor style changes | Araq | 2019-07-10 | 1 | -0/+4 |
| | | |||||
| * | [bugfix] Add `.47` as supported libssl version | SolitudeSF | 2019-06-14 | 1 | -2/+2 |
| | | |||||
| * | Add force openSSL version with -d:sslVersion=1.0.0 (#11272) | treeform | 2019-05-20 | 1 | -2/+25 |
| | | |||||
| * | Expose api to disable autoinitializing OpenSSL. (#11247) | Hitesh Jasani | 2019-05-14 | 1 | -0/+2 |
| | | |||||
| * | live with the hacks, PCRE's design is crap | Araq | 2019-03-19 | 1 | -2/+0 |
| | | |||||
| * | pcre.nim: added pcre_free and removed hacks in nre and re.nim | Andreas Rumpf | 2019-03-19 | 1 | -0/+2 |
| | | |||||
| * | Fix wrong integer types in odbcsql and db_odbc (#10419) | pgkos | 2019-01-22 | 1 | -1/+1 |
| | | | | | | * Fix wrong parameter type in SQLErr * Fix wrong types of integers passed to SQLGetData | ||||
| * | fix #10281 (#10282) | Timothee Cour | 2019-01-12 | 1 | -1/+5 |
| | | |||||
| * | Fix libssl order. Newest one is 1.1 | Andre von Houck | 2019-01-08 | 1 | -1/+1 |
| | | |||||
| * | Better LibSSL search order. (#10230) | treeform | 2019-01-08 | 1 | -1/+1 |
| | | |||||
| * | removes deprecated T/P types | Araq | 2018-11-16 | 6 | -32/+0 |
| | | |||||
| * | Add `.46` as supported libssl version (#9704) | Solitude | 2018-11-15 | 1 | -1/+1 |
| | | |||||
| * | Allocate OpenSSL memory outside of the thread heap | LemonBoy | 2018-09-27 | 1 | -5/+5 |
| | | | | | | | | Prevent spurious segfaults when OpenSSL is used in multithreaded environments since the library isn't able to handle thread-local memory. Fixes #9016 | ||||
| * | add SSL_set_SSL_CTX for SNI(Server Name Indication) (#8308) | momf | 2018-07-13 | 1 | -0/+1 |
| | | | | | | | * add SSL_set_SSL_CTX for SNI * fix SSL_set_SSL_CTX | ||||