Merge in upstream v5.0.0 - #41

Closed

jrose-signal wants to merge 112 commits into

mainfrom

jrose/boring-5.0.0

Commits on Sep 26, 2025

Remove support for Hyper v0

ghedo
authored and
kornelski
committed
b4bf601
Ensure that ERR_LIB type can be named
kornelski
committed
974c3d2
Add more reliable library_reason()
kornelski
committed
78b8cea
Clean-up legacy FIPS options
ghedo
committed
4cb7e26
Align SslStream APIs with upstream

rushilmehra
authored and
ghedo
committed
0fc992b
`Ssl::new_from_ref` -> `Ssl::new()`

rushilmehra
authored and
ghedo
committed
8abba36
X509Builder::append_extension2 -> X509Builder::append_extension

rushilmehra
authored and
ghedo
committed
646ae33

Commits on Sep 30, 2025

Remove the "kx-*" features

cjpatton
authored and
ghedo
committed
72dabe1
pq: fix MSVC C4146 warning
bwesterb
committed
21735ac
Remove `SslCurve` API

cjpatton
authored and
ghedo
committed
b46d770
Remove outdated comments on FIPS API compatibility

cjpatton
authored and
ghedo
committed
7078f61
Add back the `curve()` method on `SslRef`

cjpatton
authored and
ghedo
committed
1c51c7e
Make rpk feature flag additive

kornelski
authored and
ghedo
committed
4ce1308
Add SslRef::curve_name()
ghedo
committed
b3521e5

Commits on Oct 1, 2025

Add set_ticket_key_callback (SSL_CTX_set_tlsext_ticket_key_cb)

toidiu
authored and
kornelski
committed
c49282f
pr comments: safety, receive multiple nst, return status refactor

toidiu
authored and
kornelski
committed
ea1d120
add test case for TicketKeyCallbackResult::Noop

toidiu
authored and
kornelski
committed
ae783f8
update documentation

toidiu
authored and
kornelski
committed
f526b57
simplify tests

toidiu
authored and
kornelski
committed
ba85fbb
clippy

toidiu
authored and
kornelski
committed
b9af0ef
initialize key_name and iv. mark fn as _unsafe to allow for future changes to the api

toidiu
authored and
kornelski
committed
5cb35db
Use MaybeUninit for raw_ticket_key key/iv
kornelski
committed
ac1d71c
Expose a safe Rust interface for the session resumption callback

toidiu
authored and
kornelski
committed
ab8513e
Use Ref foreign type instead of forgetting
kornelski
committed
8773f0e
Convert CipherCtx fns into a safe abstraction. Additional testing.

toidiu
authored and
kornelski
committed
353ea62

Commits on Oct 2, 2025

Fix string data conversion in ErrorStack::put()
kornelski
committed
e399821
ErrorStack ctor for custom errors
kornelski
committed
5957ce9
Safer CryptoBufferBuilder::build
kornelski
committed
75ef523

Commits on Oct 15, 2025

Simplify Error::reason()

kornelski
authored and
ghedo
committed
77f612c
Remove "pq-experimental", apply PQ patch by default

cjpatton
authored and
ghedo
committed
5cd912d

Commits on Oct 16, 2025

Update main.rs

JAicewizard
authored and
kornelski
committed
e23d2d1

Commits on Oct 28, 2025

pq patch: enable PQ by default like upstream

bwesterb
authored and
ghedo
committed
410a967
pq patch: also enable P256Kyber768Draft00 by default

bwesterb
authored and
ghedo
committed
47c33f6

Commits on Nov 12, 2025

Fix peer_cert_chain doc

arjan-bal
authored and
kornelski
committed
a095d95

Commits on Nov 24, 2025

Introduce SslCipherRef::protocol_id
nox
committed
0c4062e

Commits on Nov 28, 2025

Store a &'static SslCipherRef in SslCipher
nox
committed
230f167
Remove DerefMut for SslCipher
nox
committed
7a0021e

Commits on Dec 10, 2025

Can't build with clang-12 to libc++ mismatch
kornelski
committed
76f47a7

Commits on Dec 29, 2025

Add boring specific api set_strict_cipher_list to SslContextBuilder

abernardeau-wallix
authored and
kornelski
committed
456836a

Commits on Jan 5, 2026

Fix leak in set_ex_data
kornelski
committed
2c7c9b7
Safe clone for X509Store
kornelski
committed
794d4d5
Remove deprecated X509CheckFlags flag
kornelski
committed
8dfa471

Commits on Jan 6, 2026

feat: support openharmony platform

richerfu
authored and
kornelski
committed
1999540
docs: add docs

richerfu
authored and
kornelski
committed
9fcdba8
Smaller cache, quicker rustup
kornelski
committed
2f53153
Cached index in tests
kornelski
committed
e98f428
set_strict_cipher_list docs
kornelski
committed
2d2052e
Fewer unwrap()s
kornelski
committed
04114a8

Commits on Jan 7, 2026

Clippy CI blocker
kornelski
committed
fc4ccbe
Warn about BORING_BSSL_FIPS_PATH vs BORING_BSSL_PATH
kornelski
committed
41b4d6b

Commits on Jan 20, 2026

Cross-platform Cargo registry cache
kornelski
committed
9bb2013
cargo publish is target-specific
kornelski
committed
a885419
Include err.h in FFI bindings
kornelski
committed
7cb075c
Use fips-build-compatible ERR_add_error_data
kornelski
committed
3cf9b4f
Define __STDC_FORMAT_MACROS when cross-building from macOS to Linux

nox
authored and
kornelski
committed
c5ed1d1
Pass -msse2 to i686 platforms on CI

nox
authored and
kornelski
committed
e348300
Never use the debug CRT on Windows

nox
authored and
kornelski
committed
c299b14
Fix Android builds

nox
authored and
kornelski
committed
3ac364a
Fix MinGW builds

nox
authored and
kornelski
committed
acd8cba
Flip is_rpk to has_x509_support
kornelski
committed
11fec56
Update boring to a newer version

nox
authored and
kornelski
committed
93d9018
Rework SslMethod

nox
authored and
kornelski
committed
c2f063c
Use existing macro for ForeignType
kornelski
committed
a2c57ec
Fix spki leak
kornelski
committed
b32059e
Don't readd leaky set_ex_data
kornelski
committed
968999c
Remove unnecessary as_mut
kornelski
committed
1ba3998
Remove obsolete hack for OpenSSL 1.0.2
kornelski
committed
4deec23
Test MinGW32
kornelski
committed
5948398
Cleaner include path check
kornelski
committed
13ef735
Avoid unicode chars
kornelski
committed
96b7d5f
Clippy
kornelski
committed
d322d3a
MaybeUninit is stable now
kornelski
committed
4ca7589
Remove blanket Eq from FFI types
kornelski
committed
b65a064
fix: BIO_set_retry_write when BIO_CTRL_FLUSH to allow writer returns WouldBlock on flush

ihciah
authored and
kornelski
committed
ed76885

Commits on Jan 21, 2026

Upgrading to v5
kornelski
committed
077f134
Fix missing import in tests
kornelski
committed
99dbbb3
Ensure dependency requirements are bumped
kornelski
committed
3751abe
Release 5.0.0-alpha.1
kornelski
committed
f4a7f8d
Fix docs.rs build
kornelski
committed
f10b986
Fix docs warnings
kornelski
committed
c13c69b

Commits on Jan 22, 2026

Cache test deps on Windows
kornelski
committed
3c33edf

Commits on Jan 23, 2026

Avoid cvt.map(drop)
kornelski
committed
6413deb

Commits on Jan 24, 2026

Cache Windows builds harder
kornelski
committed
6124273

Commits on Jan 26, 2026

Split SslCredential into a module
kornelski
committed
cc1881c
Handle broken include dirs
kornelski
committed
f76cdc7
More helpful build errors
kornelski
committed
48e27ae

Commits on Jan 27, 2026

OpenBSD uses -lc++ as well

catap
authored and
kornelski
committed
13b2db7
feat(boring-sys): add mlkem.h to bindgen headers (#455)
lbaquerofierro
authored
f4dba99

Commits on Jan 31, 2026

Add safe Rust wrappers for ML-KEM-268 and ML-KEM-1020

lbaquerofierro
authored and
kornelski
committed
8848196

Commits on Feb 3, 2026

Add an init-update-finalize API for HMAC

cjpatton
authored and
kornelski
committed
88961db
Expose a cipher's NID

cjpatton
authored and
kornelski
committed
531ac08
Use associated constants
kornelski
committed
c35cb1b
Tests don't need AsRef and other accessors
kornelski
committed
36d1836
Skip MlKemParams
kornelski
committed
241d05a
Rename MlKem to Algorithm
kornelski
committed
1722cc7
Use separate MlKemPrivateKey/MlKemPublicKey instead of exposing slices
kornelski
committed
9b098e6
Allow pq-experimental for v4 back-compat
kornelski
committed
8d35c78

Commits on Feb 4, 2026

Avoid useless malloc for SSL_set_tlsext_status_ocsp_resp
kornelski
committed
39e394f
mem::forget -= 1
kornelski
committed
bdc5e18
Use std helper methods for pointer casts
kornelski
committed
7298c9e
Detect bad headers in boring-sys
kornelski
committed
7cb4c89
Bump rust-version to 1.85
kornelski
committed
5f4cf54
Handle overflows in FFI integer conversions
kornelski
committed
06ca1fd

Commits on Feb 9, 2026

FIXMEs
kornelski
committed
d60c579

Commits on Feb 10, 2026

symm: Add regression test for cipher NIDs

cjpatton
authored and
kornelski
committed
7888b0f
symm: Ensure `Cipher::from_nid()` handles GCM NIDs

cjpatton
authored and
kornelski
committed
559fc27
rm symlink
kornelski
committed
8ba06e1
Update README
kornelski
committed
ae4a737
v5.0.0
kornelski
committed
d47684d

Commits on Feb 11, 2026

Merge tag 'v5.0.0'
jrose-signal
committed
ed051f3
Revert "Support TARGET_CC and CC_{target}"
jrose-signal
committed
43c8c27

Commits on Feb 12, 2026

boring-sys: Support static MSVC runtime
jrose-signal
committed
7d00036