Commit Graph

331 Commits

Author SHA1 Message Date
PMunch
2f1aad0264 Add RSA key reading and encrypt/decrypt to openssl (#14137)
This adds the procedures to read RSA keys and encrypt/decrypt messages
with both public and private keys.
2020-04-27 21:01:56 +02:00
Dominik Picheta
350ee0308a Fixes issues with dynamic loading OpenSSL. Fixes #13903. (#13919) [backport]
This fixes at least a couple of issues:

* Procs loaded from the DLL being used even when the pointer is nil.
* The actual issue (#13903) which appeared to cause stack corruption on
  Android 7.1.1 with OpenSSL 1.1.1f. The change that fixed this was the
  move to loading the procs in `sslSym`.
2020-04-08 14:37:00 +02:00
Juan Carlos
46ca19ff18 Deprecate DCE:on (#13839) 2020-04-02 02:58:43 +02:00
Christian Ulrich
0ac9c7bb64 introduce getPeerCertificates, fixes #13299 (#13650)
* make i2d_X509 and d2i_X509 always available

i2d_X509 and d2i_X509 have been available in all versions of OpenSSL, so
make them available even if nimDisableCertificateValidation is set.

* introduce getPeerCertificates, fixes #13299

getPeerCertificates retrieves the verified certificate chain of the peer
we are connected to through an SSL-wrapped Socket/AsyncSocket. This
introduces the new type Certificate which stores a DER-encoded X509 certificate.
2020-03-22 21:00:37 +01:00
Federico Ceratto
5b85444244 SSL certificate verify GitHub action (#13697)
* Implement SSL/TLS certificate checking #782

* SSL: Add nimDisableCertificateValidation

Remove NIM_SSL_CERT_VALIDATION env var
tests/untestable/thttpclient_ssl.nim ran successfully on Linux with libssl 1.1.1d

* SSL: update integ test to skip flapping tests

* Revert .travis.yml change

* nimDisableCertificateValidation disable imports

Prevent loading symbols that are not defined on older SSL libs

* SSL: disable verification in net.nim

..when nimDisableCertificateValidation is set

* Update changelog

* Fix peername type

* Add define check for windows

* Disable test on windows

* Add exprimental GitHub action CI for SSL

* Test nimDisableCertificateValidation
2020-03-20 17:11:39 +01:00
pyloor
bf3f1c3762 adding sqlite3 backup functions (#13346)
* adding sqlite3 backup functions

* changing sleep to sqlite3_sleep to prevent clashes
2020-02-07 01:11:05 -05:00
treeform
d9640ed075 Expose more openSSL methods. (#13131) 2020-01-13 22:04:43 +01:00
treeform
01a89cc473 Remove some unused/disabled OpenSSL functions (#13106) 2020-01-11 10:58:38 +01:00
Bung
291608045c add pqserverVersion,pqconnectionNeedsPassword,pqconnectionUsedPassword (#13060) 2020-01-07 10:52:02 +01:00
Brian Wignall
a7aeabb9d2 [backport] Fix spelling typos (#12755) 2019-11-28 08:30:55 +01:00
Arne Döring
99078d80d7 introduce csize_t instead of fixing csize (#12497) 2019-10-31 19:18:12 +01:00
Nindaleth
34dbc5699e fix several typos in documentation and comments (#12553) 2019-10-30 09:08:45 +01:00
Andreas Rumpf
889b745b2b Revert "Fixes #12187 (#12321)" (#12447)
This reverts commit 00c31e8766.
2019-10-18 15:59:22 +02:00
Clyybber
00c31e8766 Fixes #12187 (#12321)
* Fixes #12187
* Point to fork of compactdict
Since the original repo is now archived / read-only
2019-10-08 14:15:47 +02:00
narimiran
e0cd52365c [backport] fix #12278, don't expose internal PCRE documentation 2019-09-27 10:13:04 +02:00
Federico Ceratto
39290cf88c Fix spellings (#12277) [backport] 2019-09-27 07:02:54 +02:00
Andreas Rumpf
ea1a26294f prepare sqlite3 wrapper for static linking 2019-09-03 18:43:23 +02:00
Andreas Rumpf
25e6c53bb5 makes the -d:nimIncremental compiler mode compile again 2019-07-27 14:01:28 +02:00
Araq
5a020d641d style improvements; fixes #11774 2019-07-19 17:25:04 +02:00
Kaushal Modi
3f7142fcfd [bugfix] openssl styleCheck fix: consistent var naming (#11750) 2019-07-16 21:23:12 +02:00
Araq
cb3c3c306c minor style changes 2019-07-11 00:28:20 +02:00
Araq
38bdf1cd7f minor style changes 2019-07-10 23:55:56 +02:00
SolitudeSF
e96afd6324 [bugfix] Add .47 as supported libssl version 2019-06-14 20:00:23 +03:00
treeform
d490bc519a Add force openSSL version with -d:sslVersion=1.0.0 (#11272) 2019-05-20 16:53:24 +02:00
Hitesh Jasani
0b41f26bd6 Expose api to disable autoinitializing OpenSSL. (#11247) 2019-05-14 17:08:52 +02:00
Araq
eeae88d81e live with the hacks, PCRE's design is crap 2019-03-19 15:49:24 +01:00
Andreas Rumpf
cd9caf09d1 pcre.nim: added pcre_free and removed hacks in nre and re.nim 2019-03-19 12:48:54 +01:00
pgkos
a0c07ef863 Fix wrong integer types in odbcsql and db_odbc (#10419)
* Fix wrong parameter type in SQLErr
* Fix wrong types of integers passed to SQLGetData
2019-01-22 22:39:53 +01:00
Timothee Cour
98ef545bed fix #10281 (#10282) 2019-01-12 08:18:04 +01:00
Andre von Houck
21078798ea Fix libssl order. Newest one is 1.1 2019-01-08 10:30:22 -08:00
treeform
3ed833198b Better LibSSL search order. (#10230) 2019-01-08 09:50:25 +01:00
Araq
3f6168b337 removes deprecated T/P types 2018-11-16 13:27:56 +01:00
Solitude
ae36dfb747 Add .46 as supported libssl version (#9704) 2018-11-15 09:04:30 +01:00
LemonBoy
907969d69b Allocate OpenSSL memory outside of the thread heap
Prevent spurious segfaults when OpenSSL is used in multithreaded
environments since the library isn't able to handle thread-local memory.

Fixes #9016
2018-09-27 17:23:55 +02:00
momf
dd47013017 add SSL_set_SSL_CTX for SNI(Server Name Indication) (#8308)
* add SSL_set_SSL_CTX for SNI

* fix SSL_set_SSL_CTX
2018-07-13 17:09:22 +01:00
Emery Hemingway
5e54cd9fc9 Set Genode Openssl shared-object strings 2018-06-07 07:21:31 +02:00
Andreas Rumpf
7e8eadb6ba SSL implementation: added nimNoAllocForSSL 2018-05-27 11:31:27 +02:00
SolitudeSF
d4867cbcbd link against libssl.so.45 2018-04-26 23:08:57 +03:00
Jacek Sieka
72dfe176f5 remove dead code elimination option (#7669) 2018-04-23 11:02:38 +02:00
Andreas Rumpf
88d8a14fb4 mysql.nim: fixes how the DLL version loading works 2018-03-24 08:37:09 +01:00
Solitude
fc22627dbd libssl.so.44 fix (#7358) 2018-03-20 11:15:21 +01:00
Dominik Picheta
5476a82c47 Move joyent_http_parser out of stdlib. 2018-02-17 17:53:32 +00:00
Dominik Picheta
fe204a5e73 Fixes #5786. 2018-02-17 17:46:22 +00:00
Dennis Felsing
29226ce5b2 Enable mariadb shared libs for mysql as well (#7199) 2018-02-10 16:42:13 +01:00
Araq
7b2b0ebf7f OpenSSL: 32bit DLL names on Windows lack the -x32 suffix 2018-02-09 16:47:30 +01:00
Araq
6dc8bedb98 OpenSSL: use modern DLLs on Windows; export DLLSSLName and DLLUtilName for modules that need to expand on the openssl wrapper 2018-02-09 16:38:39 +01:00
Dominik Picheta
cdc54bec6f Add note about OpenSSL 1.0.x support to openssl module. 2018-01-20 17:36:38 +00:00
Ruslan Mustakov
be2db6d67a Allow static linking with OpenSSL 1.0.x
This commit basically returns the code that was removed in
a78d7a31f7, but under 'openssl10'
define symbol. OpenSSL 1.0.2 is still actively maintained, so there is
no point in dropping support of it.
2018-01-20 19:26:00 +07:00
Andreas Rumpf
76df554dc4 make MySQL client work with MariaDB; prefer newer versions over older 2018-01-18 11:32:43 +01:00
Federico Ceratto
a78d7a31f7 Add OpenSSL 1.1.0 support #5000
Add a simple online test
2017-12-28 21:57:43 +00:00