7 ### Added  subsection
9 * Added `PkeyCtxRef::{nonce_type, set_nonce_type}`.
10 * Added `X509Ref::alias`.
15 ### Added  subsection
17 * Added `Pkcs7Ref::{type_,signed}`.
18 * Added `Pkcs7SignedRef::certificates`.
19 * Added `Cipher::{aes_256_xts,des_ede3_ecb,des_ede3_cfb8,des_ede3_ofb,camellia128_ofb,camellia192_o…
20 * Added `PKey::from_dhx`
21 * Added `PKey::{public_key_from_pem_passphrase,public_key_from_pem_callback}`.
30 ### Added  subsection
32 * Added `Nid::BRAINPOOL_P320R1`
33 * Added `rand_priv_bytes`
45 ### Added  subsection
47 * Added `SslStream::{read_uninit, ssl_read_uninit}`.
59 ### Added  subsection
61 * Added `X509StoreRef::all_certificates`
62 * Added `cipher::Cipher::{camellia128_cbc,camellia192_cbc,camellia256_cbc,cast5_cbc,idea_cbc}`
63 * Added `symm::Cipher::{des_ede3_ecb,des_ede3_cfb8,des_ede3_ofb,camellia_128_ecb,camellia_128_ofb,c…
64 * Added `Crypter::update_unchecked`
65 * Added `SslRef::{peer_tmp_key,tmp_key}`
74 ### Added  subsection
76 * Added `Nid::CHACHA20_POLY1305`
84 ### Added  subsection
86 * Added `Id::{RSA_PSS,DHX}` constants
87 * Added `SslContextBuilder::set_security_level`
88 * Added `SslContextRef::security_level`
89 * Added `SslRef::set_security_level`, `SslRef::security_level`
90 * Added `Cipher::{camellia_128_cbc, camellia_192_cbc, camellia_256_cbc, cast5_cbc, idea_cbc}`
91 * Added `X509CrlRef::extension`
92 * Added `X509PurposeId::CODE_SIGN`
102 ### Added  subsection
103 * Added `X509VerifyParam::set_email`
105 * Added `CipherCtx::copy`
112 ## Added  section in Change Log
114 * Added `BigNumRef::mod_sqrt`.
115 * Added `PkeyCtxRef::set_signature_md` and `PkeyCtxRef::set_rsa_pss_saltlen`.
116 * Added `PkeyCtxRef::verify_recover_init` and `PkeyCtxRef::verify_recover`.
117 * Added `BigNumRef::is_even` and `BigNumRef::is_odd`.
118 * Added `EcPointRef::to_hex_str` and `EcPoint::from_hex_str`.
119 * Added support for AES key wrap and wrap pad.
129 ### Added  subsection
131 * Added `Deriver::set_peer_ex`.
132 * Added `EcGroupRef::asn1_flag`.
134 * Added `Nid::SM2` and `Id::SM2`
144 ### Added  subsection
146 * Added `Dsa::from_pqg`, `Dsa::generate_key`, and `Dsa::generate_params`.
147 * Added `SslRef::bytes_to_cipher_list`.
148 * Added `SubjectAlternativeName::other_name2`
152 ### Added  subsection
154 * Added `DhRef::check_key`.
155 * Added `Id::POLY1305`.
156 * Added `X509Ref::subject_key_id`, `X509Ref::authority_key_id`, `X509Ref::authority_issuer`, and `X…
161 ### Added  subsection
163 * Added `X509RevokedRef::issuer_name` and `X509RevokedRef::reason_code`.
164 * Added `Dh::set_key` and `Dh::set_public_key`
165 * Added `Asn1OctetString` and `Asn1OctetStringRef1`
166 * Added `X509Extension::new_from_der`
175 ### Added  subsection
177 * Added `CipherCtxRef::cipher_update_inplace`.
185 ### Added  subsection
188 * Added `X509Ref::crl_distribution_points`, and `DistPoint`.
202 ### Added  subsection
204 * Added support for X25519 and Ed25519 on LibreSSL and BoringSSL.
205 * Added `Error::library_code` and `Error::reason_code`.
221 ### Added  subsection
223 * Added `X509VerifyParamRef::set_auth_level`, `X509VerifyParamRef::auth_level`, and `X509VerifyPara…
224 * Added `X509PurposeId` and `X509Purpose`.
225 * Added `X509NameBuilder::append_entry`.
226 * Added `PKeyRef::private_key_to_pkcs8`.
227 * Added `X509LookupRef::load_crl_file`.
228 * Added `Pkcs12Builder::name`, `Pkcs12Builder::pkey`, and `Pkcs12Builder::cert`.
229 * Added `SslRef::set_method`, `SslRef::set_private_key_file`, `SslRef::set_private_key`, `SslRef::s…
230 * Added `X509NameRef::to_owned`.
231 * Added `SslContextBuilder::set_num_tickets`, `SslContextRef::num_tickets`, `SslRef::set_num_ticket…
232 * Added `CmsContentInfo::verify`.
239 * Added `NO_DEPRECATED_3_0` cfg checks for more APIs.
241 ### Added  subsection
243 * Added `SslRef::add_chain_cert`.
244 * Added `PKeyRef::security_bits`.
245 * Added `Provider::set_default_search_path`.
246 * Added `CipherCtxRef::cipher_final_unchecked`.
250 ### Added  subsection
252 * Added `CipherCtxRef::num`, `CipherCtxRef::minimal_output_size`, and `CipherCtxRef::cipher_update_…
254 * Added `X509Lookup::file` and `X509LookupRef::load_cert_file`.
258 ### Added  subsection
260 * Added `Nid::BRAINPOOL_P256R1`, `Nid::BRAINPOOL_P384R1`, `Nid::BRAINPOOL_P512R1`.
261 * Added `BigNumRef::copy_from_slice`.
262 * Added `Cipher` constructors for Camellia, CAST5, and IDEA ciphers.
263 * Added `DsaSig`.
264 * Added `X509StoreBuilderRef::set_param`.
265 * Added `X509VerifyParam::new`, `X509VerifyParamRef::set_time`, and `X509VerifyParamRef::set_depth`.
269 ### Added  subsection
271 * Added `SslRef::psk_identity_hint` and  `SslRef::psk_identity`.
272 * Added SHA-3 constants to `Nid`.
273 * Added `SslOptions::PRIORITIZE_CHACHA`.
274 * Added `X509ReqRef::to_text`.
275 * Added `MdCtxRef::size`.
276 * Added `X509NameRef::try_cmp`.
277 * Added `MdCtxRef::reset`.
278 * Added experimental, unstable support for BoringSSL.
290 ### Added  subsection
292 * Added `MessageDigest::block_size` and `MdRef::block_size`.
294 * Added `X509Extension::add_alias`.
295 * Added SM4 support.
296 * Added `EcGroup::from_components` `EcGropuRef::set_generator`, and `EcPointRef::set_affine_coordin…
310 ### Added  subsection
312 * Added `SslRef::extms_support`.
313 * Added `Nid::create`.
314 * Added `CipherCtx`, which exposes a more direct interface to `EVP_CIPHER_CTX`.
315 * Added `PkeyCtx`, which exposes a more direct interface to `EVP_PKEY_CTX`.
316 * Added `MdCtx`, which exposes a more direct interface to `EVP_MD_CTX`.
317 * Added `Pkcs12Builder::mac_md`.
318 * Added `Provider`.
319 * Added `X509Ref::issuer_name_hash`.
320 * Added `Decrypter::set_rsa_oaep_label`.
321 * Added `X509Ref::to_text`.
325 ### Added  subsection
327 * Added `Pkey::ec_gen`.
335 ### Added  subsection
337 * Added `BigNumRef::to_vec_padded`.
338 * Added `X509Name::from_der` and `X509NameRef::to_der`.
339 * Added `BigNum::new_secure`, `BigNumReef::set_const_time`, `BigNumref::is_const_time`, and `BigNum…
343 ### Added  subsection
345 * Added `Asn1Object::as_slice`.
346 * Added `PKeyRef::{raw_public_key, raw_private_key, private_key_to_pkcs8_passphrase}` and
348 * Added `Cipher::{seed_cbc, seed_cfb128, seed_ecb, seed_ofb}`.
356 ### Added  subsection
358 * Added support for OpenSSL 3.x.x.
359 * Added `SslStream::peek`.
363 ### Added  subsection
365 * Added `Dh::set_private_key` and `DhRef::private_key`.
366 * Added `EcPointRef::affine_coordinates`.
367 * Added `TryFrom` implementations to convert between `PKey` and specific key types.
368 * Added `X509StoreBuilderRef::set_flags`.
376 ### Added  subsection
378 * Added `Asn1Type`.
379 * Added `CmsContentInfoRef::decrypt_without_cert_check`.
380 * Added `EcPointRef::{is_infinity, is_on_curve}`.
381 * Added `Encrypter::set_rsa_oaep_label`.
382 * Added `MessageDigest::sm3`.
383 * Added `Pkcs7Ref::signers`.
384 * Added `Cipher::nid`.
385 * Added `X509Ref::authority_info` and `AccessDescription::{method, location}`.
386 * Added `X509NameBuilder::{append_entry_by_text_with_type, append_entry_by_nid_with_type}`.
394 ### Added  subsection
396 * Added the `encrypt` module to support asymmetric encryption and decryption with `PKey`s.
397 * Added `MessageDigest::from_name`.
398 * Added `ConnectConfiguration::into_ssl`.
399 * Added the ability to create unconnected `SslStream`s directly from an `Ssl` and transport stream
401 * Added `SslStream::{read_early_data, write_early_data, connect, accept, do_handshake, stateless}`.
403 * Added `SslRef::{set_connect_state, set_accept_state}`.
412 ### Added  subsection
414 * Added `Asn1Object::from_str`.
415 * Added `Dh::from_pgq`, `DhRef::prime_p`, `DhRef::prime_q`, `DhRef::generator`, `DhRef::generate_pa…
417 * Added `Pkcs7::from_der` and `Pkcs7Ref::to_der`.
418 * Added `Id::X25519`, `Id::X448`, `PKey::generate_x25519`, and `PKey::generate_x448`.
419 * Added `SrtpProfileId::SRTP_AEAD_AES_128_GCM` and `SrtpProfileId::SRTP_AEAD_AES_256_GCM`.
420 * Added `SslContextBuilder::verify_param` and `SslContextBuilder::verify_param_mut`.
421 * Added `X509Ref::subject_name_hash` and `X509Ref::version`.
422 * Added `X509StoreBuilderRef::add_lookup`, and the `X509Lookup` type.
423 * Added `X509VerifyFlags`, `X509VerifyParamRef::set_flags`, `X509VerifyParamRef::clear_flags`
436 ### Added  subsection
438 * Added `is_empty` implementations for `Asn1StringRef` and `Asn1BitStringRef`.
439 * Added `EcPointRef::{to_pem, to_dir}` and `EcKeyRef::{public_key_from_pem, public_key_from_der}`.
440 * Added `Default` implementations for many types.
441 * Added `Debug` implementations for many types.
442 * Added `SslStream::from_raw_parts`.
443 * Added `SslRef::set_mtu`.
444 * Added `Cipher::{aes_128_ocb, aes_192_ocb, aes_256_ocb}`.
456 ### Added  subsection
458 * Added `SslConnector::into_context` and `SslConnector::context`.
459 * Added `SslAcceptor::into_context` and `SslAcceptor::context`.
460 * Added `SslMethod::tls_client` and `SslMethod::tls_server`.
461 * Added `SslContextBuilder::set_cert_store`.
462 * Added `SslContextRef::verify_mode` and `SslRef::verify_mode`.
463 * Added `SslRef::is_init_finished`.
464 * Added `X509Object`.
465 * Added `X509StoreRef::objects`.
476 ### Added  subsection
478 * Added `MessageDigest::null`.
479 * Added `PKey::private_key_from_pkcs8`.
480 * Added `SslOptions::NO_RENEGOTIATION`.
481 * Added `SslStreamBuilder::set_dtls_mtu_size`.
489 ### Added  subsection
491 * Added `Asn1TimeRef::{diff, compare}`.
492 * Added `Asn1Time::from_unix`.
493 * Added `PartialEq` and `PartialOrd` implementations for `Asn1Time` and `Asn1TimeRef`.
494 * Added `base64::{encode_block, decode_block}`.
495 * Added `EcGroupRef::order_bits`.
496 * Added `Clone` implementations for `Sha1`, `Sha224`, `Sha256`, `Sha384`, and `Sha512`.
497 * Added `SslContextBuilder::{set_sigalgs_list, set_groups_list}`.
505 ### Added  subsection
507 * Added support for Ed25519 and Ed448 keys.
516 ### Added  subsection
518 * Added `aes::{wrap_key, unwrap_key}`.
519 * Added `CmsContentInfoRef::to_pem` and `CmsContentInfo::from_pem`.
520 * Added `DsaRef::private_key_to_pem`.
521 * Added `EcGroupRef::{cofactor, generator}`.
522 * Added `EcPointRef::to_owned`.
523 * Added a `Debug` implementation for `EcKey`.
524 * Added `SslAcceptor::{mozilla_intermediate_v5, mozilla_modern_v5}`.
525 * Added `Cipher::{aes_128_ofb, aes_192_ecb, aes_192_cbc, aes_192_ctr, aes_192_cfb1, aes_192_cfb128,…
534 ### Added  subsection
536 * Added `SslContextBuilder::add_client_ca`.
540 ### Added  subsection
542 * Added support for the LibreSSL 2.9.x series.
550 ### Added  subsection
552 * Added bindings to envelope encryption APIs.
553 * Added `PkeyRef::size`.
557 ### Added  subsection
559 * Added `CmsContentInfo::from_der` and `CmsContentInfo::encrypt`.
560 * Added `X509Ref::verify` and `X509ReqRef::verify`.
562 * Added `MessageDigest::type_` and `EcGroupRef::curve_name`.
566 ### Added  subsection
569 * Added `ERR_PACK` to openssl-sys.
572 * Added `SslContextRef::add_session` and `SslContextRef::remove_session`.
573 * Added `SslSessionRef::time`, `SslSessionRef::timeout`, and `SslSessionRef::protocol_version`.
574 * Added `SslContextBuilder::set_session_cache_size` and `SslContextRef::session_cache_size`.
584 ### Added  subsection
587 * Added `Asn1Integer::from_bn`.
588 * Added `RsaRef::check_key`.
589 * Added `Asn1Time::from_str` and `Asn1Time::from_str_x509`.
590 * Added `Rsa::generate_with_e`.
591 * Added `Cipher::des_ede3_cfb64`.
592 * Added `SslCipherRef::standard_name` and `ssl::cipher_name`.
596 ### Added  subsection
598 * Added SHA3 and SHAKE to `MessageDigest`.
599 * Added `rand::keep_random_devices_open`.
600 * Added support for LibreSSL 2.9.0.
604 ### Added  subsection
614 ### Added  subsection
616 * Added support for LibreSSL 2.8.
628 ### Added  subsection
630 * Added `SslContextBuilder::set_client_hello_callback`.
631 * Added support for LibreSSL 2.8.1.
632 * Added `EcdsaSig::from_der` and `EcdsaSig::to_der`.
633 * Added PKCS#7 support.
641 ### Added  subsection
643 * Added `SslRef::get_shutdown` and `SslRef::set_shutdown`.
644 * Added support for SRTP in DTLS sessions.
645 * Added support for LibreSSL 2.8.0.
649 ### Added  subsection
653 * Added `SslContextBuilder::set_psk_server_callback`.
654 * Added `DsaRef::pub_key` and `DsaRef::priv_key`.
655 * Added `Dsa::from_private_components` and `Dsa::from_public_components`.
656 * Added `X509NameRef::entries`.
665 ### Added  subsection
667 * Added `SslRef::set_alpn_protos`.
668 * Added `SslContextBuilder::set_ciphersuites`.
677 ### Added  subsection
679 * Added `MessageDigest::from_nid`.
680 * Added `Nid::signature_algorithms`, `Nid::long_name`, and `Nid::short_name`.
681 * Added early data and early keying material export support for TLS 1.3.
682 * Added `SslRef::verified_chain`.
683 * Added `SslRef::servername_raw` which returns a `&[u8]` rather than `&str`.
684 * Added `SslRef::finished` and `SslRef::peer_finished`.
685 * Added `X509Ref::digest` to replace `X509Ref::fingerprint`.
704 ### Added  subsection
706 * Added `CmsContentInfo::sign`.
707 * Added `Clone` and `ToOwned` implementations to `Rsa` and `RsaRef` respectively.
716 ### Added  subsection
718 * Added `X509Req::public_key` and `X509Req::extensions`.
719 * Added `RsaPrivateKeyBuilder` to allow control over initialization of optional components of an RSA
721 * Added DER encode/decode support to `SslSession`.
729 ### Added  subsection
731 * Added `SslOptions::ENABLE_MIDDLEBOX_COMPAT`.
732 * Added more `Sync` and `Send` implementations.
733 * Added `PKeyRef::id`.
734 * Added `Padding::PKCS1_PSS`.
735 * Added `Signer::set_rsa_pss_saltlen`, `Signer::set_rsa_mgf1_md`, `Signer::set_rsa_pss_saltlen`, and
737 * Added `X509StoreContextRef::verify` to directly verify certificates.
738 * Added low level ECDSA support.
739 * Added support for TLSv1.3 custom extensions. (OpenSSL 1.1.1 only)
740 * Added AES-CCM support.
741 * Added `EcKey::from_private_components`.
742 * Added CMAC support.
743 * Added support for LibreSSL 2.7.
744 * Added `X509Ref::serial_number`.
745 * Added `Asn1IntegerRef::to_bn`.
746 * Added support for TLSv1.3 stateless handshakes. (OpenSSL 1.1.1 only)
767 ### Added  subsection
769 * Added `SslRef::version2`.
770 * Added `Cipher::des_ede3_cbc`.
771 * Added `SslRef::export_keying_material`.
772 * Added the ability to push an `Error` or `ErrorStack` back onto OpenSSL's error stack. Various
774 * Added `SslContextBuilder::set_cookie_generate_cb` and `SslContextBuilder::set_cookie_verify_cb`.
775 * Added `SslContextBuilder::set_max_proto_version`, `SslContextBuilder::set_min_proto_version`,
788 ### Added  subsection
790 * Added OpenSSL 1.1.1 support.
791 * Added `Rsa::public_key_from_pem_pkcs1`.
792 * Added `SslOptions::NO_TLSV1_3`. (OpenSSL 1.1.1 only)
793 * Added `SslVersion`.
794 * Added `SslSessionCacheMode` and `SslContextBuilder::set_session_cache_mode`.
795 * Added `SslContextBuilder::set_new_session_callback`,
798 * Added `SslContextBuilder::set_keylog_callback`. (OpenSSL 1.1.1 only)
799 * Added `SslRef::client_random` and `SslRef::server_random`. (OpenSSL 1.1.0+ only)
808 ### Added  subsection
811 * Added `GeneralName` accessors for `rfc822Name` and `uri` variants.
812 * Added DES-EDE3 support.
820 ### Added  subsection
822 * Added `ConnectConfiguration::set_use_server_name_indication` and
828 ### Added  subsection
830 * Added a `From<ErrorStack> for ssl::Error` implementation.
838 ### Added  subsection