[PR #382] [CLOSED] Bump openssl from 0.9.24 to 0.10.6 #1397

New issue

Closed

opened 2026-03-16 02:04:19 +03:00 by kerem · 0 comments

kerem commented

2026-03-16 02:04:19 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/hickory-dns/hickory-dns/pull/382
Author: @dependabot-preview[bot]
Created: 4/8/2018
Status: ❌ Closed

Base: master ← Head: dependabot/cargo/openssl-0.10.6

📝 Commits (1)

3534370 Bump openssl from 0.9.24 to 0.10.6

📊 Changes

8 files changed (+29 additions, -16 deletions)

View changed files

📝 Cargo.lock (+20 -7)
📝 client/Cargo.toml (+2 -2)
📝 compatibility-tests/Cargo.toml (+1 -1)
📝 integration-tests/Cargo.toml (+1 -1)
📝 openssl/Cargo.toml (+2 -2)
📝 proto/Cargo.toml (+1 -1)
📝 rustls/Cargo.toml (+1 -1)
📝 util/Cargo.toml (+1 -1)

📄 Description

Bumps openssl from 0.9.24 to 0.10.6.

Changelog

Sourced from openssl's changelog.

[v0.10.6] - 2018-03-05

Added

Added SslOptions::ENABLE_MIDDLEBOX_COMPAT.

Added more Sync and Send implementations.

Added PKeyRef::id.

Added Padding::PKCS1_PSS.

Added Signer::set_rsa_pss_saltlen, Signer::set_rsa_mgf1_md, Signer::set_rsa_pss_saltlen, and
Signer::set_rsa_mgf1_md

Added X509StoreContextRef::verify to directly verify certificates.

Added low level ECDSA support.

Added support for TLSv1.3 custom extensions. (OpenSSL 1.1.1 only)

Added AES-CCM support.

Added EcKey::from_private_components.

Added CMAC support.

Added support for LibreSSL 2.7.

Added X509Ref::serial_number.

Added Asn1IntegerRef::to_bn.

Added support for TLSv1.3 stateless handshakes. (OpenSSL 1.1.1 only)

Changed

The Cargo features previously used to gate access to version-specific OpenSSL APIs have been
removed. Those APIs will be available automatically when building against an appropriate OpenSSL
version.

Fixed PKey::private_key_from_der to return a PKey<Private> rather than a PKey<Public>. This
is technically a breaking change but the function was pretty useless previously.

Deprecated

X509CheckFlags::FLAG_NO_WILDCARDS has been renamed to X509CheckFlags::NO_WILDCARDS and the old
name deprecated.

[v0.10.5] - 2018-02-28

Fixed

ErrorStack's Display implementation no longer writes an empty string if it contains no errors.

Added

Added SslRef::version2.

Added Cipher::des_ede3_cbc.

Added SslRef::export_keying_material.

Added the ability to push an Error or ErrorStack back onto OpenSSL's error stack. Various
callback bindings use this to propagate errors properly.

Added SslContextBuilder::set_cookie_generate_cb and SslContextBuilder::set_cookie_verify_cb.

Added SslContextBuilder::set_max_proto_version, SslContextBuilder::set_min_proto_version,
SslContextBuilder::max_proto_version, and SslContextBuilder::min_proto_version.
... (truncated)

Commits

cab98be Release openssl v0.10.6
78d9142 Release openssl-sys 0.9.28
342e017 Merge pull request #894 from skade/patch-1
fd19f49 Fix minor typo
a586bdc Merge pull request #893 from bkchr/fix_private_key_from_der
75bf483 Return PKey<Private> from private_key_from_der
f63b9f0 Merge pull request #892 from oherrala/fix-libressl27
e3045dc Add LibreSSL 2.7.3
01855a4 Combine LibreSSL 2.7.x versions into one
03c6bcc Add LibreSSL 2.7.2
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Note: This repo was added to Dependabot recently, so you'll receive a maximum of 5 PRs for your first few update runs. Once an update run creates fewer than 5 PRs we'll remove that limit.

You can always request more updates by clicking Bump now in your Dependabot dashboard.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot ignore this [minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use [this|these] label[s] will set the current labels as the default for future PRs for this repo and language

Additionally, you can set the following in your Dependabot dashboard:

Update frequency (including time of day and day of week)
Automerge options (never/patch/minor, and dev/runtime dependencies)
Out-of-range updates (receive only lockfile updates, if desired)

Finally, you can contact us by mentioning @dependabot.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/hickory-dns/hickory-dns/pull/382 **Author:** [@dependabot-preview[bot]](https://github.com/apps/dependabot-preview) **Created:** 4/8/2018 **Status:** ❌ Closed **Base:** `master` ← **Head:** `dependabot/cargo/openssl-0.10.6` --- ### 📝 Commits (1) - [`3534370`](https://github.com/hickory-dns/hickory-dns/commit/3534370be9965ff4dbdbf0cea46b7ce923409c6e) Bump openssl from 0.9.24 to 0.10.6 ### 📊 Changes **8 files changed** (+29 additions, -16 deletions) <details> <summary>View changed files</summary> 📝 `Cargo.lock` (+20 -7) 📝 `client/Cargo.toml` (+2 -2) 📝 `compatibility-tests/Cargo.toml` (+1 -1) 📝 `integration-tests/Cargo.toml` (+1 -1) 📝 `openssl/Cargo.toml` (+2 -2) 📝 `proto/Cargo.toml` (+1 -1) 📝 `rustls/Cargo.toml` (+1 -1) 📝 `util/Cargo.toml` (+1 -1) </details> ### 📄 Description Bumps [openssl](https://github.com/sfackler/rust-openssl) from 0.9.24 to 0.10.6. <details> <summary>Changelog</summary> *Sourced from openssl's [changelog](https://github.com/sfackler/rust-openssl/blob/master/CHANGELOG.md).* > ## [v0.10.6] - 2018-03-05 > > ### Added > > * Added `SslOptions::ENABLE_MIDDLEBOX_COMPAT`. > * Added more `Sync` and `Send` implementations. > * Added `PKeyRef::id`. > * Added `Padding::PKCS1_PSS`. > * Added `Signer::set_rsa_pss_saltlen`, `Signer::set_rsa_mgf1_md`, `Signer::set_rsa_pss_saltlen`, and > `Signer::set_rsa_mgf1_md` > * Added `X509StoreContextRef::verify` to directly verify certificates. > * Added low level ECDSA support. > * Added support for TLSv1.3 custom extensions. (OpenSSL 1.1.1 only) > * Added AES-CCM support. > * Added `EcKey::from_private_components`. > * Added CMAC support. > * Added support for LibreSSL 2.7. > * Added `X509Ref::serial_number`. > * Added `Asn1IntegerRef::to_bn`. > * Added support for TLSv1.3 stateless handshakes. (OpenSSL 1.1.1 only) > > ### Changed > > * The Cargo features previously used to gate access to version-specific OpenSSL APIs have been > removed. Those APIs will be available automatically when building against an appropriate OpenSSL > version. > * Fixed `PKey::private_key_from_der` to return a `PKey<Private>` rather than a `PKey<Public>`. This > is technically a breaking change but the function was pretty useless previously. > > ### Deprecated > > * `X509CheckFlags::FLAG_NO_WILDCARDS` has been renamed to `X509CheckFlags::NO_WILDCARDS` and the old > name deprecated. > > ## [v0.10.5] - 2018-02-28 > > ### Fixed > > * `ErrorStack`'s `Display` implementation no longer writes an empty string if it contains no errors. > > ### Added > > * Added `SslRef::version2`. > * Added `Cipher::des_ede3_cbc`. > * Added `SslRef::export_keying_material`. > * Added the ability to push an `Error` or `ErrorStack` back onto OpenSSL's error stack. Various > callback bindings use this to propagate errors properly. > * Added `SslContextBuilder::set_cookie_generate_cb` and `SslContextBuilder::set_cookie_verify_cb`. > * Added `SslContextBuilder::set_max_proto_version`, `SslContextBuilder::set_min_proto_version`, > `SslContextBuilder::max_proto_version`, and `SslContextBuilder::min_proto_version`. > ... (truncated) </details> <details> <summary>Commits</summary> - [`cab98be`](https://github.com/sfackler/rust-openssl/commit/cab98be606dc3b6b5307e102e280f3c01c094d76) Release openssl v0.10.6 - [`78d9142`](https://github.com/sfackler/rust-openssl/commit/78d91428b5ffae3e33a8b0833ac0e58724d26e0e) Release openssl-sys 0.9.28 - [`342e017`](https://github.com/sfackler/rust-openssl/commit/342e0171f029663a960a697bce9d5310c3959c7d) Merge pull request [#894](https://github-redirect.dependabot.com/sfackler/rust-openssl/issues/894) from skade/patch-1 - [`fd19f49`](https://github.com/sfackler/rust-openssl/commit/fd19f49d7bd29dba0ca39cc75f1480034c86232a) Fix minor typo - [`a586bdc`](https://github.com/sfackler/rust-openssl/commit/a586bdc9409d0bd4c117cea58d295fa0670f1938) Merge pull request [#893](https://github-redirect.dependabot.com/sfackler/rust-openssl/issues/893) from bkchr/fix_private_key_from_der - [`75bf483`](https://github.com/sfackler/rust-openssl/commit/75bf48368d2a09dcad13248572534652a1baeec1) Return `PKey<Private>` from `private_key_from_der` - [`f63b9f0`](https://github.com/sfackler/rust-openssl/commit/f63b9f05a3b1114dc058e461da24a3c7d867f207) Merge pull request [#892](https://github-redirect.dependabot.com/sfackler/rust-openssl/issues/892) from oherrala/fix-libressl27 - [`e3045dc`](https://github.com/sfackler/rust-openssl/commit/e3045dc339010c4a8df91f9555658535eff077c2) Add LibreSSL 2.7.3 - [`01855a4`](https://github.com/sfackler/rust-openssl/commit/01855a4f6470db6d71bccece1db33bc4b89b4c9b) Combine LibreSSL 2.7.x versions into one - [`03c6bcc`](https://github.com/sfackler/rust-openssl/commit/03c6bcc159c5b987779da4f01c6f76bd77a13ce3) Add LibreSSL 2.7.2 - Additional commits viewable in [compare view](https://github.com/sfackler/rust-openssl/compare/openssl-v0.9.24...openssl-v0.10.6) </details> <br /> [![Dependabot compatibility score](https://api.dependabot.com/badges/ci_status?dependency-name=openssl&package-manager=cargo&previous-version=0.9.24&new-version=0.10.6)](https://dependabot.com/compatibility-score.html?dependency-name=openssl&package-manager=cargo&previous-version=0.9.24&new-version=0.10.6) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. --- **Note:** This repo was added to Dependabot recently, so you'll receive a maximum of 5 PRs for your first few update runs. Once an update run creates fewer than 5 PRs we'll remove that limit. You can always request more updates by clicking `Bump now` in your [Dependabot dashboard](https://app.dependabot.com). <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot ignore this [minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use [this|these] label[s]` will set the current labels as the default for future PRs for this repo and language Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Automerge options (never/patch/minor, and dev/runtime dependencies) - Out-of-range updates (receive only lockfile updates, if desired) Finally, you can contact us by mentioning @dependabot. </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>