boring
boring copied to clipboard
BoringSSL bindings for the Rust programming language.
I have many issues with the various `Error` types we define and how `HttpsConnector` ultimately just uses `BoxError` for its `Service` error type, I'll try to summarize them here. First,...
Currently, the `HandshakeError` type in `tokio-boring` provides a `std::error::Error` implementation and an `as_io_error` method that returns an `Option`, as the only ways to access the potentially underlying error. There are...
In `boring/src/ssl/mod.rs` we have ```rust /// Sets the list of supported ciphers for protocols before TLSv1.3. /// /// The `set_ciphersuites` method controls the cipher suites for TLSv1.3. /// /// See...
I am writing a wrapper for tokio's `UdpSocket` to enable use via `tokio-boring`. There are two use cases for DTLS connections, one with a one-to-one connection where each partner can...
I first introduce `setup_accept` and `setup_connect` to simplify looping over an interrupted handshake. This led me to the realisation that removing `accept` and `connect` both simplifies the handshake error type...
This would allow us to check which key exchange algorithm was used during the TLS handshake. In particular this would allow us to verify that a PQ algorithm was chosen...
Hello. Trying to build an app with `boring-sys` for Windows using `x86_64-pc-windows-gnu` target from Manjaro (based on Archlinux). I have mingw packages installed (mingw-w64-gcc, mingw-w64-binutils, mingw-w64-crt, mingw-w64-headers, mingw-w64-winpthreads). Tried with...
I find that the nodejs library does support setting multiple independent certificate chains for a single SSL context. However it seems that the methods in this library don't support it....
A fix for rust-openssl can be found at https://github.com/sfackler/rust-openssl/pull/1922 This PR fixes a BIO_flush related issue. According to openssl doc([link](https://www.openssl.org/docs/man1.0.2/man3/BIO_flush.html)): BIO_flush(), because it can write data may return 0 or...