Danil Yarantsev
7f834c69fb
Free the certificate after checking in checkCertName ( #17558 ) [backport:1.2]
...
* Fix small leak in checkCertName
* Size is not needed either
* Free the certificate after checking
(cherry picked from commit b36182b0a4 )
2021-03-29 15:34:11 +02:00
Danil Yarantsev
76971596ad
Add support to the latest LibreSSL version ( #15715 ) [backport:1.2] [backport:1.4]
...
(cherry picked from commit b2740f5c63 )
2020-10-26 11:14:49 +01:00
cooldome
28bc815d3e
fix odbc regressions ( #15009 ) [backport]
...
* fix odbc regressions
* make only necessary changes
(cherry picked from commit edbbbdf1a8 )
2020-07-21 15:46:23 +02:00
Bung
e854d385f5
fix #9771 ( #14357 )
...
* fix #9771
* map SQLLEN SQLULEN
* fix proc params take TSqlLen
Co-authored-by: bung87 <crc32@qq.com >
(cherry picked from commit ce0552c100 )
2020-07-21 15:46:11 +02:00
Dominik Picheta
f1bf28d5de
Fixes issues with dynamic loading OpenSSL. Fixes #13903 . ( #13919 ) [backport]
...
This fixes at least a couple of issues:
* Procs loaded from the DLL being used even when the pointer is nil.
* The actual issue (#13903 ) which appeared to cause stack corruption on
Android 7.1.1 with OpenSSL 1.1.1f. The change that fixed this was the
move to loading the procs in `sslSym`.
(cherry picked from commit 350ee0308a )
2020-04-14 07:30:29 +02:00
Juan Carlos
46ca19ff18
Deprecate DCE:on ( #13839 )
2020-04-02 02:58:43 +02:00
Christian Ulrich
0ac9c7bb64
introduce getPeerCertificates, fixes #13299 ( #13650 )
...
* make i2d_X509 and d2i_X509 always available
i2d_X509 and d2i_X509 have been available in all versions of OpenSSL, so
make them available even if nimDisableCertificateValidation is set.
* introduce getPeerCertificates, fixes #13299
getPeerCertificates retrieves the verified certificate chain of the peer
we are connected to through an SSL-wrapped Socket/AsyncSocket. This
introduces the new type Certificate which stores a DER-encoded X509 certificate.
2020-03-22 21:00:37 +01:00
Federico Ceratto
5b85444244
SSL certificate verify GitHub action ( #13697 )
...
* Implement SSL/TLS certificate checking #782
* SSL: Add nimDisableCertificateValidation
Remove NIM_SSL_CERT_VALIDATION env var
tests/untestable/thttpclient_ssl.nim ran successfully on Linux with libssl 1.1.1d
* SSL: update integ test to skip flapping tests
* Revert .travis.yml change
* nimDisableCertificateValidation disable imports
Prevent loading symbols that are not defined on older SSL libs
* SSL: disable verification in net.nim
..when nimDisableCertificateValidation is set
* Update changelog
* Fix peername type
* Add define check for windows
* Disable test on windows
* Add exprimental GitHub action CI for SSL
* Test nimDisableCertificateValidation
2020-03-20 17:11:39 +01:00
pyloor
bf3f1c3762
adding sqlite3 backup functions ( #13346 )
...
* adding sqlite3 backup functions
* changing sleep to sqlite3_sleep to prevent clashes
2020-02-07 01:11:05 -05:00
treeform
d9640ed075
Expose more openSSL methods. ( #13131 )
2020-01-13 22:04:43 +01:00
treeform
01a89cc473
Remove some unused/disabled OpenSSL functions ( #13106 )
2020-01-11 10:58:38 +01:00
Bung
291608045c
add pqserverVersion,pqconnectionNeedsPassword,pqconnectionUsedPassword ( #13060 )
2020-01-07 10:52:02 +01:00
Brian Wignall
a7aeabb9d2
[backport] Fix spelling typos ( #12755 )
2019-11-28 08:30:55 +01:00
Arne Döring
99078d80d7
introduce csize_t instead of fixing csize ( #12497 )
2019-10-31 19:18:12 +01:00
Nindaleth
34dbc5699e
fix several typos in documentation and comments ( #12553 )
2019-10-30 09:08:45 +01:00
Andreas Rumpf
889b745b2b
Revert "Fixes #12187 ( #12321 )" ( #12447 )
...
This reverts commit 00c31e8766 .
2019-10-18 15:59:22 +02:00
Clyybber
00c31e8766
Fixes #12187 ( #12321 )
...
* Fixes #12187
* Point to fork of compactdict
Since the original repo is now archived / read-only
2019-10-08 14:15:47 +02:00
narimiran
e0cd52365c
[backport] fix #12278 , don't expose internal PCRE documentation
2019-09-27 10:13:04 +02:00
Federico Ceratto
39290cf88c
Fix spellings ( #12277 ) [backport]
2019-09-27 07:02:54 +02:00
Andreas Rumpf
ea1a26294f
prepare sqlite3 wrapper for static linking
2019-09-03 18:43:23 +02:00
Andreas Rumpf
25e6c53bb5
makes the -d:nimIncremental compiler mode compile again
2019-07-27 14:01:28 +02:00
Araq
5a020d641d
style improvements; fixes #11774
2019-07-19 17:25:04 +02:00
Kaushal Modi
3f7142fcfd
[bugfix] openssl styleCheck fix: consistent var naming ( #11750 )
2019-07-16 21:23:12 +02:00
Araq
cb3c3c306c
minor style changes
2019-07-11 00:28:20 +02:00
Araq
38bdf1cd7f
minor style changes
2019-07-10 23:55:56 +02:00
SolitudeSF
e96afd6324
[bugfix] Add .47 as supported libssl version
2019-06-14 20:00:23 +03:00
treeform
d490bc519a
Add force openSSL version with -d:sslVersion=1.0.0 ( #11272 )
2019-05-20 16:53:24 +02:00
Hitesh Jasani
0b41f26bd6
Expose api to disable autoinitializing OpenSSL. ( #11247 )
2019-05-14 17:08:52 +02:00
Araq
eeae88d81e
live with the hacks, PCRE's design is crap
2019-03-19 15:49:24 +01:00
Andreas Rumpf
cd9caf09d1
pcre.nim: added pcre_free and removed hacks in nre and re.nim
2019-03-19 12:48:54 +01:00
pgkos
a0c07ef863
Fix wrong integer types in odbcsql and db_odbc ( #10419 )
...
* Fix wrong parameter type in SQLErr
* Fix wrong types of integers passed to SQLGetData
2019-01-22 22:39:53 +01:00
Timothee Cour
98ef545bed
fix #10281 ( #10282 )
2019-01-12 08:18:04 +01:00
Andre von Houck
21078798ea
Fix libssl order. Newest one is 1.1
2019-01-08 10:30:22 -08:00
treeform
3ed833198b
Better LibSSL search order. ( #10230 )
2019-01-08 09:50:25 +01:00
Araq
3f6168b337
removes deprecated T/P types
2018-11-16 13:27:56 +01:00
Solitude
ae36dfb747
Add .46 as supported libssl version ( #9704 )
2018-11-15 09:04:30 +01:00
LemonBoy
907969d69b
Allocate OpenSSL memory outside of the thread heap
...
Prevent spurious segfaults when OpenSSL is used in multithreaded
environments since the library isn't able to handle thread-local memory.
Fixes #9016
2018-09-27 17:23:55 +02:00
momf
dd47013017
add SSL_set_SSL_CTX for SNI(Server Name Indication) ( #8308 )
...
* add SSL_set_SSL_CTX for SNI
* fix SSL_set_SSL_CTX
2018-07-13 17:09:22 +01:00
Emery Hemingway
5e54cd9fc9
Set Genode Openssl shared-object strings
2018-06-07 07:21:31 +02:00
Andreas Rumpf
7e8eadb6ba
SSL implementation: added nimNoAllocForSSL
2018-05-27 11:31:27 +02:00
SolitudeSF
d4867cbcbd
link against libssl.so.45
2018-04-26 23:08:57 +03:00
Jacek Sieka
72dfe176f5
remove dead code elimination option ( #7669 )
2018-04-23 11:02:38 +02:00
Andreas Rumpf
88d8a14fb4
mysql.nim: fixes how the DLL version loading works
2018-03-24 08:37:09 +01:00
Solitude
fc22627dbd
libssl.so.44 fix ( #7358 )
2018-03-20 11:15:21 +01:00
Dominik Picheta
5476a82c47
Move joyent_http_parser out of stdlib.
2018-02-17 17:53:32 +00:00
Dominik Picheta
fe204a5e73
Fixes #5786 .
2018-02-17 17:46:22 +00:00
Dennis Felsing
29226ce5b2
Enable mariadb shared libs for mysql as well ( #7199 )
2018-02-10 16:42:13 +01:00
Araq
7b2b0ebf7f
OpenSSL: 32bit DLL names on Windows lack the -x32 suffix
2018-02-09 16:47:30 +01:00
Araq
6dc8bedb98
OpenSSL: use modern DLLs on Windows; export DLLSSLName and DLLUtilName for modules that need to expand on the openssl wrapper
2018-02-09 16:38:39 +01:00
Dominik Picheta
cdc54bec6f
Add note about OpenSSL 1.0.x support to openssl module.
2018-01-20 17:36:38 +00:00