Jordan Rose
2c157897fe
Merge in upstream v5.0.2
CI / Test (true, map[CC:gcc CPLUS_INCLUDE_PATH:C:\msys64\usr\include CXX:g++ C_INCLUDE_PATH:C:\msys64\usr\include LIBRARY_PATH:C:\msys64\usr\lib RUSTC_BOOTSTRAP:1], --workspace --exclude tokio-boring --exclude hyper-boring -Z checksum-freshness, windows-lat… (push) Has been cancelled
CI / Test (true, map[CMAKE_GENERATOR:MinGW Makefiles COLLECT_GCC:<nil> RUSTC_BOOTSTRAP:1], --workspace --exclude tokio-boring --exclude hyper-boring -Z checksum-freshness, windows-latest, stable, i686-pc-windows-gnu, i686-mingw) (push) Has been cancelled
CI / Test (true, map[CXXFLAGS:-msse2], ubuntu-latest, stable, i686-linux-android, i686-android) (push) Has been cancelled
CI / Test (true, map[IPHONEOS_DEPLOYMENT_TARGET:17.5], macos-latest, aarch64-apple-ios, aarch64-ios) (push) Has been cancelled
CI / Test (true, map[IPHONEOS_DEPLOYMENT_TARGET:17.5], macos-latest, aarch64-apple-ios-sim, aarch64-ios-sim) (push) Has been cancelled
CI / Test (true, map[IPHONEOS_DEPLOYMENT_TARGET:17.5], macos-latest, x86_64-apple-ios, x86_64-ios) (push) Has been cancelled
CI / Test (true, ubuntu-latest, stable, aarch64-linux-android, arm64-android) (push) Has been cancelled
CI / Test (true, ubuntu-latest, stable, armv7-linux-androideabi, arm-android) (push) Has been cancelled
CI / Test (true, ubuntu-latest, stable, x86_64-linux-android, x86_64-android) (push) Has been cancelled
CI / Test (ubuntu-latest, stable, x86_64-unknown-linux-gnu, stable) (push) Has been cancelled
CI / Test (macos-latest, stable, x86_64-apple-darwin, x86_64-macos) (push) Has been cancelled
CI / Test (map[CXXFLAGS:-msse2 RUSTC_BOOTSTRAP:1], --workspace --exclude tokio-boring --exclude hyper-boring -Z checksum-freshness, windows-latest, stable-x86_64-msvc, i686-pc-windows-msvc, i686-msvc) (push) Has been cancelled
CI / Test (map[RUSTC_BOOTSTRAP:1 RUSTFLAGS:-Dwarnings -C target-feature=+crt-static], --workspace --exclude tokio-boring --exclude hyper-boring -Z checksum-freshness, windows-latest, stable-x86_64-msvc, x86_64-pc-windows-msvc, x86_64-msvc-static) (push) Has been cancelled
CI / Test (map[RUSTC_BOOTSTRAP:1], --workspace --exclude tokio-boring --exclude hyper-boring -Z checksum-freshness, windows-latest, stable-x86_64-msvc, x86_64-pc-windows-msvc, x86_64-msvc) (push) Has been cancelled
CI / Test (map[]) (push) Has been cancelled
CI / Test (true, macos-latest, stable, aarch64-apple-darwin, arm64-macos) (push) Has been cancelled
CI / rustfmt (push) Has been cancelled
CI / clippy (push) Has been cancelled
CI / Test () (push) Has been cancelled
CI / Test (crossbuild-essential-arm64, true, map[CARGO_TARGET_AARCH64_UNKNOWN_LINUX_GNU_LINKER:aarch64-linux-gnu-g++ CC:aarch64-linux-gnu-gcc CXX:aarch64-linux-gnu-g++], ubuntu-latest, stable, aarch64-unknown-linux-gnu, aarch64-linux) (push) Has been cancelled
CI / Test (false) (push) Has been cancelled
CI / Test (gcc-arm-linux-gnueabi g++-arm-linux-gnueabi, true, map[CARGO_TARGET_ARM_UNKNOWN_LINUX_GNUEABI_LINKER:arm-linux-gnueabi-g++ CC:arm-linux-gnueabi-gcc CXX:arm-linux-gnueabi-g++], ubuntu-latest, stable, arm-unknown-linux-gnueabi, arm-linux) (push) Has been cancelled
CI / Test (gcc-multilib g++-multilib, map[CXXFLAGS:-msse2], ubuntu-latest, stable, i686-unknown-linux-gnu, i686-linux) (push) Has been cancelled
CI / Test FIPS integration (push) Has been cancelled
CI / Cross build from macOS to Linux (x86_64-unknown-linux-gnu) (push) Has been cancelled
CI / Test features (push) Has been cancelled
2026-02-18 17:24:41 -08:00
Kornel
e71b24328f
Re-add fips-precompiled for v4 compat
2026-02-17 19:59:23 +00:00
Kornel
1f8a1041df
Don't add build/ to non-FIPS pre-built path
2026-02-17 19:59:23 +00:00
Kornel
fa3a4ca915
Expose load_verify_locations like rust-openssl
2026-02-17 13:35:27 +00:00
Kornel
434585d90d
Fix null handling, sync with rust-openssl
2026-02-17 13:35:27 +00:00
Jordan Rose
ee95e2060a
boring-sys: Support static MSVC runtime
2026-02-13 01:51:50 +00:00
Kornel
f19374dfad
Bump
2026-02-12 13:29:59 +00:00
Kornel
5bd645077b
README links
2026-02-12 13:29:59 +00:00
Jordan Rose
c740bd7715
Revert "Support TARGET_CC and CC_{target}"
...
This reverts commit a50a39fde7
2026-02-11 13:37:41 -08:00
Kornel
144b67bb10
Support building without default features
2026-02-11 21:00:08 +00:00
Kornel
484afea507
Make SslCredential optional
2026-02-11 21:00:08 +00:00
Kornel
a40cba6cd6
Make ML-KEM optional
2026-02-11 21:00:08 +00:00
Kornel
9cc97c87c7
Don't always require all headers from all versions of BoringSSL
2026-02-11 21:00:08 +00:00
Kornel
d0973d7617
Backwards-compatible add_cert()
2026-02-11 21:00:08 +00:00
Kornel
e65f394509
Ensure we don't leave unit memory if generate_key fails
2026-02-11 20:59:52 +00:00
Kornel
fc02d4a47c
Add missing error handling in ML-KEM generate
2026-02-11 20:59:52 +00:00
Kornel
532003e437
Don't always require all headers from all versions of BoringSSL
2026-02-11 16:22:11 +00:00
Kornel
c3f96c9cb0
Make ML-KEM optional
2026-02-11 16:22:11 +00:00
Kornel
d47684d087
v5.0.0
2026-02-10 16:28:54 +00:00
Kornel
ae4a737426
Update README
2026-02-10 16:28:54 +00:00
Kornel
8ba06e1974
rm symlink
2026-02-10 16:28:54 +00:00
Christopher Patton
559fc27ba1
symm: Ensure Cipher::from_nid() handles GCM NIDs
...
This method returns `None` for the GCM NIDs.
It appears to be implemented incorrectly: It first calls
`OBJ_nid2sn(nid)` to get the NID's short name, then calls
`EVP_get_cipherbyname(name)`. The documentation isn't clear as to
whether `name` should be the short or long name, but it appears to
expect the long name. At least, changing to `OBJ_nid2sn()` to
`OBJ_nid2ln()` makes the method work properly,
To fix this, this commit calls `EVP_get_cipherbynid()`, which is is more
direct.
Note that the method still returns `None` on the 3DES NID, but we're not
likely to encounter this one in practice.
2026-02-10 16:26:57 +00:00
Christopher Patton
7888b0fb91
symm: Add regression test for cipher NIDs
2026-02-10 16:26:57 +00:00
Kornel
d60c579bfd
FIXMEs
2026-02-09 20:19:14 +00:00
Kornel
06ca1fd746
Handle overflows in FFI integer conversions
2026-02-04 16:37:34 +00:00
Kornel
5f4cf54cc5
Bump rust-version to 1.85
2026-02-04 00:54:35 +00:00
Kornel
7cb4c89550
Detect bad headers in boring-sys
2026-02-04 00:54:35 +00:00
Kornel
7298c9e0f0
Use std helper methods for pointer casts
2026-02-04 00:54:25 +00:00
Kornel
bdc5e1864c
mem::forget -= 1
2026-02-04 00:54:25 +00:00
Kornel
39e394f37f
Avoid useless malloc for SSL_set_tlsext_status_ocsp_resp
2026-02-04 00:54:25 +00:00
Kornel
8d35c787e7
Allow pq-experimental for v4 back-compat
2026-02-03 14:43:34 +00:00
Kornel
9b098e6bb7
Use separate MlKemPrivateKey/MlKemPublicKey instead of exposing slices
2026-02-03 14:43:07 +00:00
Kornel
1722cc7317
Rename MlKem to Algorithm
2026-02-03 14:41:44 +00:00
Kornel
241d05aea8
Skip MlKemParams
2026-02-03 14:41:44 +00:00
Kornel
36d18367f3
Tests don't need AsRef and other accessors
2026-02-03 14:41:44 +00:00
Kornel
c35cb1bb9f
Use associated constants
2026-02-03 14:41:44 +00:00
Andrew
a721d89d08
Merge in upstream v4.21.1
2026-02-02 22:39:20 -05:00
Christopher Patton
531ac086f4
Expose a cipher's NID
2026-02-03 01:50:26 +00:00
Christopher Patton
88961db064
Add an init-update-finalize API for HMAC
2026-02-03 01:50:26 +00:00
Lina Baquero
884819622a
Add safe Rust wrappers for ML-KEM-268 and ML-KEM-1020
2026-01-31 13:24:34 +00:00
Lina Baquero
f4dba99cd3
feat(boring-sys): add mlkem.h to bindgen headers ( #455 )
...
This enables rust bindings for BoringSSL's ML-KEM pq key encapsulation
including MLKEM758 and MLKEM1024
2026-01-27 06:10:37 -08:00
Kirill A. Korinsky
13b2db754d
OpenBSD uses -lc++ as well
2026-01-27 00:59:21 +00:00
Kornel
48e27ae5a3
More helpful build errors
2026-01-26 15:29:07 +00:00
Kornel
f76cdc7502
Handle broken include dirs
2026-01-26 15:29:07 +00:00
Kornel
cc1881c71e
Split SslCredential into a module
2026-01-26 12:26:24 +00:00
Kornel
6124273c4d
Cache Windows builds harder
2026-01-24 11:41:09 +00:00
Kornel
395f57810b
v4.21.1
...
Only fixes docs.rs builds
2026-01-23 13:21:20 +00:00
Kornel
64b3e14976
Fix docs.rs build
2026-01-23 13:03:08 +00:00
Kornel
6413deb356
Avoid cvt.map(drop)
2026-01-23 12:57:22 +00:00
Kornel
3c33edfd43
Cache test deps on Windows
2026-01-22 11:42:39 +00:00
