boring

boring copied to clipboard

Bump BoringSSL version to `fips-20220613` to match upstream Go

3

Upstream Go is [bumping the BoringSSL FIPS version](https://github.com/golang/go/issues/64717) used for BoringCrypto in order to pull in support for TLS 1.3 prior to the [NIST SP 800-52 Rev. 2](https://csrc.nist.gov/pubs/sp/800/52/r2/final) deadline of...

reedloden

Set CMAKE_BUILD_PARALLEL_LEVEL to num_cpus

1

cmake-rs' jobserver doesn't work reliably, if at all. One workaround is to set CMAKE_BUILD_PARALLEL_LEVEL to num_cpus. On my machine it makes builds over 3x faster

rushilmehra

Update `boringssl-fips` to `fips-20220613` tag

4

Go's BoringCrypto has moved to using BoringSSL's `fips-20220613` tag. Swap to using the same tag, which requires using Clang 14.0.x and Ninja. This also enables the FIPS compliance policy by...

reedloden

ability to set ALPS Application Settings

2

One can already set the ALPN (application layer protocol negotation settings). However, we cannot yet set the ALPS (Application Settings), e.g. to h2.

GlenDC

Prefixing BoringSSL symbols

1

It looks like importing `boring-sys` in a project that also depends on `openssl-sys` can cause [linking errors](https://github.com/jedisct1/rust-jwt-simple/issues/102). In order to avoid collisions with other libraries, or other versions of BoringSSL,...

jedisct1

https://docs.rs/hyper-boring/ They haven't since 3.1.0, unfortunately.

kayabaNerve

Crypto provider for Rustls

3

Recently, Rustls was updated to have allow a pluggable crypto provider: https://github.com/rustls/rustls/pull/1405/files. I believe it would now be possible to plugin `boring` into this. This is appealing as we get...

howardjohn

boring: Support validating certificates against CRLs

1

Adds CRL types and validation of certificates against CRLs with a `X509Store/X509StoreContext`. Also enables customizing verification flags on the `X509Store`, required to enable CRL checking. Apologies for dropping such a...

ravi-signal

Add bindings for `SPAKE2_CTX_new`, `SPAKE2_generate_msg`, etc to boring. These are curve25519 related stuff in https://github.com/google/boringssl/blob/master/include/openssl/curve25519.h

4o3F

missing private key method in the SslContext

1

the boring-sys has the c-bindings for "[SSL_CTX_set_private_key_method](https://docs.rs/boring-sys/2.1.0/boring_sys/fn.SSL_CTX_set_private_key_method.html)" and "[SSL_set_private_key_method](https://docs.rs/boring-sys/2.1.0/boring_sys/fn.SSL_set_private_key_method.html)" but missing in the SslContextBuilder "https://github.com/cloudflare/boring/blob/master/boring/src/ssl/mod.rs" Is this by design of just a missing implementation? These private key method is used...

KfreeZ