Releases: plabayo/rama-boring
Release list
rama-boring* v0.6.6
Clarify DNS and IP peer identity handling. DNS names are
verified and sent as SNI, while IP addresses are verified
against iPAddress SANs without SNI. Add IPv4 and IPv6
coverage and renew expired test certificates.
rama-boring* v0.6.5
Send raw cipher lists verbatim in the ClientHello,
fixing TLS 1.3-only fingerprints that ended up with an
empty cipher suite vector. Also follow Rust crt-static
to pick the matching MSVC CRT.
rama-boring* v0.6.4
Support newer Windows builds and fix BORINGSSL_PREFIX
handling when the build platform differs from the target
platform.
rama-boring* v0.6.3
Add SslConnector::no_default_verify_builder, a variant of
builder that skips the eager set_default_verify_paths so
callers supplying their own (or a shared) verify store, or
disabling verification, avoid the per-build OS trust store
parse.
rama-boring* v0.6.2
Use custom BORING prefix to prevent colission with
other openssl libraries and the like, a trick used also
by aws-lc
rama-boring* v0.6.1
- add X509Ref::pubkey_digest (wraps X509_pubkey_digest)
- replace ramaproxy_org_no_sni live-network test with a local one
rama-boring* v0.6.0
- make SNI optional for connect (breaking change)
- 1st class support for ed25519 / x25519
- extend x509 and pkey capabilities
rama-boring* v0.5.12
- improve android builds
- CI-test android builds with explicit toolchains
- disable test/fuzz/benchmarking build instructions
in boringssl cmake (improves ability to cross-compile
rama-boring* v0.5.11
- support ALPS (contributed by @ntrippar)
- sync with rama-boringssl (v0.3.4)
rama-boring* v0.5.10
Expose SSL Errors for handshake errors.