[PR #378] [CLOSED] Bump openssl from 0.9.24 to 0.10.5 #1398

New issue

Closed

opened 2026-03-16 02:04:19 +03:00 by kerem · 0 comments

kerem commented

2026-03-16 02:04:19 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/hickory-dns/hickory-dns/pull/378
Author: @dependabot-preview[bot]
Created: 4/5/2018
Status: ❌ Closed

Base: master ← Head: dependabot/cargo/openssl-0.10.5

📝 Commits (1)

c3f3f5b Bump openssl from 0.9.24 to 0.10.5

📊 Changes

8 files changed (+29 additions, -16 deletions)

View changed files

📝 Cargo.lock (+20 -7)
📝 client/Cargo.toml (+2 -2)
📝 compatibility-tests/Cargo.toml (+1 -1)
📝 integration-tests/Cargo.toml (+1 -1)
📝 openssl/Cargo.toml (+2 -2)
📝 proto/Cargo.toml (+1 -1)
📝 rustls/Cargo.toml (+1 -1)
📝 util/Cargo.toml (+1 -1)

📄 Description

Bumps openssl from 0.9.24 to 0.10.5.

Changelog

Sourced from openssl's changelog.

[v0.10.5] - 2018-02-28

Fixed

ErrorStack's Display implementation no longer writes an empty string if it contains no errors.

Added

Added SslRef::version2.

Added Cipher::des_ede3_cbc.

Added SslRef::export_keying_material.

Added the ability to push an Error or ErrorStack back onto OpenSSL's error stack. Various
callback bindings use this to propagate errors properly.

Added SslContextBuilder::set_cookie_generate_cb and SslContextBuilder::set_cookie_verify_cb.

Added SslContextBuilder::set_max_proto_version, SslContextBuilder::set_min_proto_version,
SslContextBuilder::max_proto_version, and SslContextBuilder::min_proto_version.

Changed

Updated SslConnector's default cipher list to match Python's.

Deprecated

SslRef::version has been deprecated. Use SslRef::version_str instead.

[v0.10.4] - 2018-02-18

Added

Added OpenSSL 1.1.1 support.

Added Rsa::public_key_from_pem_pkcs1.

Added SslOptions::NO_TLSV1_3. (OpenSSL 1.1.1 only)

Added SslVersion.

Added SslSessionCacheMode and SslContextBuilder::set_session_cache_mode.

Added SslContextBuilder::set_new_session_callback,
SslContextBuilder::set_remove_session_callback, and
SslContextBuilder::set_get_session_callback.

Added SslContextBuilder::set_keylog_callback. (OpenSSL 1.1.1 only)

Added SslRef::client_random and SslRef::server_random. (OpenSSL 1.1.0+ only)

Fixed

The SslAcceptorBuilder::mozilla_modern constructor now disables TLSv1.0 and TLSv1.1 in
accordance with Mozilla's recommendations.

[v0.10.3] - 2018-02-12

Added

OpenSSL is now automatically detected on FreeBSD systems.
... (truncated)

Commits

b6985c7 Release openssl v0.10.5
aa9addf Release openssl-sys 0.9.27
7fcd1ba Update changelog
65e1240 Merge pull request #854 from sfackler/error-description
85d8db2 Always include something in ErrorStack's Display
42ec251 Merge pull request #853 from sfackler/min-max-version
b7ba577 Add min/max protocol version support
d5dd657 Restore error stack in cookie callback
b94b0f6 Merge pull request #835 from Ralith/stateless
e04dbfa Expose cookie generate/verify callback setters
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Note: This repo was added to Dependabot recently, so you'll receive a maximum of 5 PRs for your first few update runs. Once an update run creates fewer than 5 PRs we'll remove that limit.

You can always request more updates by clicking Bump now in your Dependabot dashboard.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot ignore this [minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use [this|these] label[s] will set the current labels as the default for future PRs for this repo and language

Additionally, you can set the following in your Dependabot dashboard:

Update frequency (including time of day and day of week)
Automerge options (never/patch/minor, and dev/runtime dependencies)
Out-of-range updates (receive only lockfile updates, if desired)

Finally, you can contact us by mentioning @dependabot.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/hickory-dns/hickory-dns/pull/378 **Author:** [@dependabot-preview[bot]](https://github.com/apps/dependabot-preview) **Created:** 4/5/2018 **Status:** ❌ Closed **Base:** `master` ← **Head:** `dependabot/cargo/openssl-0.10.5` --- ### 📝 Commits (1) - [`c3f3f5b`](https://github.com/hickory-dns/hickory-dns/commit/c3f3f5b7c6d80880383b2dc05d127e81783fbc8b) Bump openssl from 0.9.24 to 0.10.5 ### 📊 Changes **8 files changed** (+29 additions, -16 deletions) <details> <summary>View changed files</summary> 📝 `Cargo.lock` (+20 -7) 📝 `client/Cargo.toml` (+2 -2) 📝 `compatibility-tests/Cargo.toml` (+1 -1) 📝 `integration-tests/Cargo.toml` (+1 -1) 📝 `openssl/Cargo.toml` (+2 -2) 📝 `proto/Cargo.toml` (+1 -1) 📝 `rustls/Cargo.toml` (+1 -1) 📝 `util/Cargo.toml` (+1 -1) </details> ### 📄 Description Bumps [openssl](https://github.com/sfackler/rust-openssl) from 0.9.24 to 0.10.5. <details> <summary>Changelog</summary> *Sourced from openssl's [changelog](https://github.com/sfackler/rust-openssl/blob/master/CHANGELOG.md).* > ## [v0.10.5] - 2018-02-28 > > ### Fixed > > * `ErrorStack`'s `Display` implementation no longer writes an empty string if it contains no errors. > > ### Added > > * Added `SslRef::version2`. > * Added `Cipher::des_ede3_cbc`. > * Added `SslRef::export_keying_material`. > * Added the ability to push an `Error` or `ErrorStack` back onto OpenSSL's error stack. Various > callback bindings use this to propagate errors properly. > * Added `SslContextBuilder::set_cookie_generate_cb` and `SslContextBuilder::set_cookie_verify_cb`. > * Added `SslContextBuilder::set_max_proto_version`, `SslContextBuilder::set_min_proto_version`, > `SslContextBuilder::max_proto_version`, and `SslContextBuilder::min_proto_version`. > > ### Changed > > * Updated `SslConnector`'s default cipher list to match Python's. > > ### Deprecated > > * `SslRef::version` has been deprecated. Use `SslRef::version_str` instead. > > ## [v0.10.4] - 2018-02-18 > > ### Added > > * Added OpenSSL 1.1.1 support. > * Added `Rsa::public_key_from_pem_pkcs1`. > * Added `SslOptions::NO_TLSV1_3`. (OpenSSL 1.1.1 only) > * Added `SslVersion`. > * Added `SslSessionCacheMode` and `SslContextBuilder::set_session_cache_mode`. > * Added `SslContextBuilder::set_new_session_callback`, > `SslContextBuilder::set_remove_session_callback`, and > `SslContextBuilder::set_get_session_callback`. > * Added `SslContextBuilder::set_keylog_callback`. (OpenSSL 1.1.1 only) > * Added `SslRef::client_random` and `SslRef::server_random`. (OpenSSL 1.1.0+ only) > > ### Fixed > > * The `SslAcceptorBuilder::mozilla_modern` constructor now disables TLSv1.0 and TLSv1.1 in > accordance with Mozilla's recommendations. > > ## [v0.10.3] - 2018-02-12 > > ### Added > > * OpenSSL is now automatically detected on FreeBSD systems. > ... (truncated) </details> <details> <summary>Commits</summary> - [`b6985c7`](https://github.com/sfackler/rust-openssl/commit/b6985c7e8dd092d58eeeb80145352613d581fbba) Release openssl v0.10.5 - [`aa9addf`](https://github.com/sfackler/rust-openssl/commit/aa9addf532403e40f4974962f77c22528ec02b13) Release openssl-sys 0.9.27 - [`7fcd1ba`](https://github.com/sfackler/rust-openssl/commit/7fcd1ba96deabc5f02a5f933ba74ca039e62d4e9) Update changelog - [`65e1240`](https://github.com/sfackler/rust-openssl/commit/65e124055ca035bd388f338f353cdf33a6932cd4) Merge pull request [#854](https://github-redirect.dependabot.com/sfackler/rust-openssl/issues/854) from sfackler/error-description - [`85d8db2`](https://github.com/sfackler/rust-openssl/commit/85d8db21d2e7617ade950e9cd4da64ec887671d4) Always include something in ErrorStack's Display - [`42ec251`](https://github.com/sfackler/rust-openssl/commit/42ec251b552fdeb1c0b005445b4bba05127b13e4) Merge pull request [#853](https://github-redirect.dependabot.com/sfackler/rust-openssl/issues/853) from sfackler/min-max-version - [`b7ba577`](https://github.com/sfackler/rust-openssl/commit/b7ba5773396fb4ba7fb1ff5d770b5b2632adc471) Add min/max protocol version support - [`d5dd657`](https://github.com/sfackler/rust-openssl/commit/d5dd6575c16a3eebc53b8d91b9642d3741b108cc) Restore error stack in cookie callback - [`b94b0f6`](https://github.com/sfackler/rust-openssl/commit/b94b0f67c5ddf47fda4a2856424a56e1b58f4a70) Merge pull request [#835](https://github-redirect.dependabot.com/sfackler/rust-openssl/issues/835) from Ralith/stateless - [`e04dbfa`](https://github.com/sfackler/rust-openssl/commit/e04dbfa3ee47741d7f74987803e0a8405550f5f3) Expose cookie generate/verify callback setters - Additional commits viewable in [compare view](https://github.com/sfackler/rust-openssl/compare/openssl-v0.9.24...openssl-v0.10.5) </details> <br /> [![Dependabot compatibility score](https://api.dependabot.com/badges/ci_status?dependency-name=openssl&package-manager=cargo&previous-version=0.9.24&new-version=0.10.5)](https://dependabot.com/compatibility-score.html?dependency-name=openssl&package-manager=cargo&previous-version=0.9.24&new-version=0.10.5) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. --- **Note:** This repo was added to Dependabot recently, so you'll receive a maximum of 5 PRs for your first few update runs. Once an update run creates fewer than 5 PRs we'll remove that limit. You can always request more updates by clicking `Bump now` in your [Dependabot dashboard](https://app.dependabot.com). <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot ignore this [minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use [this|these] label[s]` will set the current labels as the default for future PRs for this repo and language Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Automerge options (never/patch/minor, and dev/runtime dependencies) - Out-of-range updates (receive only lockfile updates, if desired) Finally, you can contact us by mentioning @dependabot. </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>