Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | net: don't call set_ecdh_auto for super old OpenSSL | Leorize | 2020-06-06 | 1 | -5/+3 | |
| | | | | | And the fun thing is that currently we use a super old OpenSSL on Windows. | |||||
* | wrappers/openssl: fix SSL_CTX_set_mode | Leorize | 2020-06-06 | 1 | -1/+1 | |
| | | | | Follow up of 794042080b270d9da8d64bb4285ce83787bdec7e | |||||
* | wrappers/openssl: getOpenSSLVersion is gcsafe | Leorize | 2020-06-06 | 1 | -3/+4 | |
| | | | | Yet another weird {.gcsafe.} triggering when it shouldn't. | |||||
* | net: enable automatic EC curve selection for OpenSSL 1.0.2 | Leorize | 2020-06-06 | 1 | -0/+16 | |
| | | | | | This setting is required for servers running OpenSSL < 1.1.0 to support EC-based secure ciphers that is now part of the default cipher list. | |||||
* | wrappers/openssl: fix SSL_CTX_ctrl signature | Leorize | 2020-06-06 | 1 | -1/+1 | |
| | ||||||
* | openssl: fix erroneous function signatures | Leorize | 2020-06-06 | 1 | -3/+3 | |
| | | | | Now matches the declaration in openssl/err.h | |||||
* | asyncnet, net: call SSL_shutdown only when connection established | Leorize | 2020-06-06 | 1 | -0/+28 | |
| | | | | | | This commit prevents "SSL_shutdown while in init" errors from happening. See https://github.com/openssl/openssl/issues/710#issuecomment-253897666 | |||||
* | fix #9771 (#14357) | Bung | 2020-05-15 | 1 | -12/+14 | |
| | | | | | | | * fix #9771 * map SQLLEN SQLULEN * fix proc params take TSqlLen Co-authored-by: bung87 <crc32@qq.com> | |||||
* | Add procedures to read RSA keys from BIO format (#14223) | PMunch | 2020-05-04 | 1 | -0/+4 | |
| | ||||||
* | Add RSA key reading and encrypt/decrypt to openssl (#14137) | PMunch | 2020-04-27 | 1 | -0/+23 | |
| | | | | This adds the procedures to read RSA keys and encrypt/decrypt messages with both public and private keys. | |||||
* | Fixes issues with dynamic loading OpenSSL. Fixes #13903. (#13919) [backport] | Dominik Picheta | 2020-04-08 | 1 | -19/+39 | |
| | | | | | | | | This fixes at least a couple of issues: * Procs loaded from the DLL being used even when the pointer is nil. * The actual issue (#13903) which appeared to cause stack corruption on Android 7.1.1 with OpenSSL 1.1.1f. The change that fixed this was the move to loading the procs in `sslSym`. | |||||
* | Deprecate DCE:on (#13839) | Juan Carlos | 2020-04-02 | 7 | -11/+0 | |
| | ||||||
* | introduce getPeerCertificates, fixes #13299 (#13650) | Christian Ulrich | 2020-03-22 | 1 | -22/+32 | |
| | | | | | | | | | | | | * make i2d_X509 and d2i_X509 always available i2d_X509 and d2i_X509 have been available in all versions of OpenSSL, so make them available even if nimDisableCertificateValidation is set. * introduce getPeerCertificates, fixes #13299 getPeerCertificates retrieves the verified certificate chain of the peer we are connected to through an SSL-wrapped Socket/AsyncSocket. This introduces the new type Certificate which stores a DER-encoded X509 certificate. | |||||
* | SSL certificate verify GitHub action (#13697) | Federico Ceratto | 2020-03-20 | 1 | -0/+71 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Implement SSL/TLS certificate checking #782 * SSL: Add nimDisableCertificateValidation Remove NIM_SSL_CERT_VALIDATION env var tests/untestable/thttpclient_ssl.nim ran successfully on Linux with libssl 1.1.1d * SSL: update integ test to skip flapping tests * Revert .travis.yml change * nimDisableCertificateValidation disable imports Prevent loading symbols that are not defined on older SSL libs * SSL: disable verification in net.nim ..when nimDisableCertificateValidation is set * Update changelog * Fix peername type * Add define check for windows * Disable test on windows * Add exprimental GitHub action CI for SSL * Test nimDisableCertificateValidation | |||||
* | adding sqlite3 backup functions (#13346) | pyloor | 2020-02-07 | 1 | -0/+17 | |
| | | | | | | * adding sqlite3 backup functions * changing sleep to sqlite3_sleep to prevent clashes | |||||
* | Expose more openSSL methods. (#13131) | treeform | 2020-01-13 | 1 | -0/+43 | |
| | ||||||
* | Remove some unused/disabled OpenSSL functions (#13106) | treeform | 2020-01-11 | 1 | -135/+0 | |
| | ||||||
* | add pqserverVersion,pqconnectionNeedsPassword,pqconnectionUsedPassword (#13060) | Bung | 2020-01-07 | 1 | -0/+6 | |
| | ||||||
* | [backport] Fix spelling typos (#12755) | Brian Wignall | 2019-11-28 | 1 | -1/+1 | |
| | ||||||
* | introduce csize_t instead of fixing csize (#12497) | Arne Döring | 2019-10-31 | 1 | -4/+4 | |
| | ||||||
* | fix several typos in documentation and comments (#12553) | Nindaleth | 2019-10-30 | 3 | -3/+3 | |
| | ||||||
* | Revert "Fixes #12187 (#12321)" (#12447) | Andreas Rumpf | 2019-10-18 | 1 | -2/+2 | |
| | | | This reverts commit 00c31e87660d9db813871f5aa23661bf6b9bbdcb. | |||||
* | Fixes #12187 (#12321) | Clyybber | 2019-10-08 | 1 | -2/+2 | |
| | | | | | | * Fixes #12187 * Point to fork of compactdict Since the original repo is now archived / read-only | |||||
* | [backport] fix #12278, don't expose internal PCRE documentation | narimiran | 2019-09-27 | 1 | -20/+20 | |
| | ||||||
* | Fix spellings (#12277) [backport] | Federico Ceratto | 2019-09-27 | 1 | -1/+1 | |
| | ||||||
* | prepare sqlite3 wrapper for static linking | Andreas Rumpf | 2019-09-03 | 1 | -97/+103 | |
| | ||||||
* | makes the -d:nimIncremental compiler mode compile again | Andreas Rumpf | 2019-07-27 | 1 | -52/+52 | |
| | ||||||
* | style improvements; fixes #11774 | Araq | 2019-07-19 | 1 | -1/+1 | |
| | ||||||
* | [bugfix] openssl styleCheck fix: consistent var naming (#11750) | Kaushal Modi | 2019-07-16 | 1 | -4/+4 | |
| | ||||||
* | minor style changes | Araq | 2019-07-11 | 6 | -87/+111 | |
| | ||||||
* | minor style changes | Araq | 2019-07-10 | 1 | -0/+4 | |
| | ||||||
* | [bugfix] Add `.47` as supported libssl version | SolitudeSF | 2019-06-14 | 1 | -2/+2 | |
| | ||||||
* | Add force openSSL version with -d:sslVersion=1.0.0 (#11272) | treeform | 2019-05-20 | 1 | -2/+25 | |
| | ||||||
* | Expose api to disable autoinitializing OpenSSL. (#11247) | Hitesh Jasani | 2019-05-14 | 1 | -0/+2 | |
| | ||||||
* | live with the hacks, PCRE's design is crap | Araq | 2019-03-19 | 1 | -2/+0 | |
| | ||||||
* | pcre.nim: added pcre_free and removed hacks in nre and re.nim | Andreas Rumpf | 2019-03-19 | 1 | -0/+2 | |
| | ||||||
* | Fix wrong integer types in odbcsql and db_odbc (#10419) | pgkos | 2019-01-22 | 1 | -1/+1 | |
| | | | | | * Fix wrong parameter type in SQLErr * Fix wrong types of integers passed to SQLGetData | |||||
* | fix #10281 (#10282) | Timothee Cour | 2019-01-12 | 1 | -1/+5 | |
| | ||||||
* | Fix libssl order. Newest one is 1.1 | Andre von Houck | 2019-01-08 | 1 | -1/+1 | |
| | ||||||
* | Better LibSSL search order. (#10230) | treeform | 2019-01-08 | 1 | -1/+1 | |
| | ||||||
* | removes deprecated T/P types | Araq | 2018-11-16 | 6 | -32/+0 | |
| | ||||||
* | Add `.46` as supported libssl version (#9704) | Solitude | 2018-11-15 | 1 | -1/+1 | |
| | ||||||
* | Allocate OpenSSL memory outside of the thread heap | LemonBoy | 2018-09-27 | 1 | -5/+5 | |
| | | | | | | | Prevent spurious segfaults when OpenSSL is used in multithreaded environments since the library isn't able to handle thread-local memory. Fixes #9016 | |||||
* | add SSL_set_SSL_CTX for SNI(Server Name Indication) (#8308) | momf | 2018-07-13 | 1 | -0/+1 | |
| | | | | | | * add SSL_set_SSL_CTX for SNI * fix SSL_set_SSL_CTX | |||||
* | Set Genode Openssl shared-object strings | Emery Hemingway | 2018-06-07 | 1 | -0/+4 | |
| | ||||||
* | SSL implementation: added nimNoAllocForSSL | Andreas Rumpf | 2018-05-27 | 1 | -2/+2 | |
| | ||||||
* | link against libssl.so.45 | SolitudeSF | 2018-04-26 | 1 | -1/+1 | |
| | ||||||
* | remove dead code elimination option (#7669) | Jacek Sieka | 2018-04-23 | 7 | -7/+7 | |
| | ||||||
* | mysql.nim: fixes how the DLL version loading works | Andreas Rumpf | 2018-03-24 | 1 | -2/+2 | |
| | ||||||
* | libssl.so.44 fix (#7358) | Solitude | 2018-03-20 | 1 | -1/+1 | |
| |