package ssl

CHANGES

0.5.8 (2019-07-03)
=====
* Better error reporting.
* Add support for hostname validation (#49).
* Add ALPN support (#37, #38, #48).

0.5.7 (2018-10-25)
=====
* Correctly set #defines (#40).
* Correctly deal with non-existent directories for Homebrew (#42).

0.5.6 (2018-09-12)
=====
* Switch to the dune build system.

0.5.5 (2017-10-13)
=====
* Make sure that LDFLAGS is honored during build.

0.5.4 (2017-10-02)
=====
* Enable safe-string compatibility (#32).
* Add -std=c99 to CFLAGS (#29).

0.5.3 (2016-11-08)
=====
* Remove -ansi flag to be compatible with OCaml 4.04 (thanks Mark Shinwell).
* Use accessor functions for X509_STORE_CTX.
* Change CLIBS order to allow static linking.

0.5.2 (2015-11-23)
=====
* Add OPENSSL_NO_SSL3 preprocessor flag to disable SSLv3 (thanks Jérémie
  Courrèges-Anglas).

0.5.1 (2015-05-27)
=====
* Fix META file for versions of OCaml older than 4.02.0 (thanks Anil
  Madhavapeddy, closes #20).

0.5.0 (2015-05-18)
=====
* Allow to honor server cipher preferences (thanks mfp, closes #18).
* Add functions for reading into/writing from bigarrays, avoiding copy (thanks
  mfp, closes #15).
* Support disabling SSL protocol versions (thanks Edwin Török, closes #13).
* Use Bytes instead of String for read and write, changes the ABI thus the
  version bump (thanks Vincent Bernardoff, closes #16, and mfp, closes #19).
* Make verbosity of client_verify_callback configurable (thanks Nicolas Trangez,
  closes #12).
* Fix build with old versions of SSL (thanks Edwin Török, closes #10).

0.4.7 (2014-04-21)
=====

* Add support for TLS1.1 and TLS1.2 (thanks Thomas Calderon).
* Add function to initialize Diffie-Hellman and elliptic curve parameters
  (thanks Thomas Calderon and Edwin Török).
* Add set_client_SNI_hostname to specify client-side SNI hostname (thanks
  Mauricio Fernandez).
* Fix double leave of blocking section in ocaml_ssl_accept (thanks Edwin Török).
* Check for errors in SSL_connect/SSL_accept (thanks Jérôme Vouillon).
* Clear the error queue before calling SSL_read and similar functions;
  SSL_get_error does not work reliably otherwise (thanks Jérôme Vouillon).
* Allow static linking on Mingw64 (thanks schadinger).

0.4.6 (2011-10-16)
=====
* Added write_certificate function.
* Remove support for SSLv2, which was dropped upstream (thanks Dario Teixeira).
* Added support for compiling under Win32 (thanks David Allsopp), see
  README.win32.
* Check for pthreads in configure.

0.4.5 (2011-03-01)
=====
* Use pthread mutexes for locking thread-safe version of ssl.

0.4.4 (2010-01-06)
=====
* Use SSL_CTX_use_certificate_chain_file instead of
  SSL_CTX_use_certificate_file.
* Added support for --enable-debugging configure option.
* Don't link with unix library and don't build in custom mode.

0.4.3 (2008-12-18)
=====
* Don't use blocking sections in finalizers since it causes segfaults (thanks
  Grégoire Henry and Stéphane Glondu).

0.4.2 (2007-03-29)
=====
* Added some missing blocking sections (reported by Oscar Hellström).

0.4.1 (2007-02-21)
=====
* file_descr_of_socket is not marked as deprecated anymore.
* Patched the Makefile to be compatible with FreeBSD (thanks Jaap Boender).
* Explicitely link with libcrypto since we use it. Compilation should now work
  on Mac OS X too (thanks Janne Hellsten).

0.4.0 (2006-09-09)
=====
* Using caml_alloc_custom and Data_custom_val to access custom blocks.
* Added set_password_callback function.
* Integrated a big patch from Chris Waterson:
- Added get_error_string function.
- Read and write are not blocking anymore, use Unix.select and
  file_descr_of_socket if you want blocking functions.
- Fix SSL_CTX initialization to call SSL_CTX_set_mode(3) with
  SSL_MODE_AUTO_RETRY flag. This causes SSL_read and SSL_write to "hide" the
  SSL_ERROR_WANT_(READ|WRITE) errors that may occur during renegotiation on a
  blocking socket.
- Fix SSL_CTX initialization to call SSL_CTX_set_mode(3) with
  SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER flag. This allows for a different buffer
  address to be passed to a restarted non-blocking write operation, which is
  useful since the OCaml garbage collector may move buffers around between
  calls.
- We do not need to store explicitely the file descriptor for SSL sockets.
* Corrected checking of errors in ocaml_ssl_read (thanks Vincent Balat and
  Nataliya Guts).
* input_char now raises End_of_file when no byte could be read (thanks Nataliya
  Guts).

0.3.1 (2005-07-21)
=====
* The library is now under the LGPL licence + linking exception + linking with
  openssl exception (see COPYING for more details).

0.3.0 (2005-06-01)
=====
* Added Ssl_threads.init function to make the library thread-safe.
* Put connect, accept and flush (and all other functions) in blocking_section to
  allow other threads to run in the meantime.
* Unified the three context creation functions in create_context, the
  certificate to use should now be sepcified with use_certificate (sorry for the
  API-breakage).
* Added the get_verify_result function.
* Using Store_field instead of Field(...) = ...
* Using caml namespace functions.

0.2.0 (2004-12-18)
=====
* Many thanks to Thomas Fischbacher for his patches:
- Corrected int / val bugs when raising exceptions from C (those where found by
  Mike Furr too, thanks).
- Added many fonctions (but in Caml instead of C).
* Context creation functions now take the protocol as argument.
* Added the create_context function (for client and server connections).
* Added functions for verifying certificates: client_verify_callback,
  set_verify, set_verify_depth, verify.
* The cipher now has its own type.
* Added functions to handle ciphers: get_current_cipher, get_cipher_description,
  get_cipher_name, get_cipher_version, set_cipher_list.
* Added the read_certificate and load_verify_locations functions.
* Added the open_connection_with_context and flush functions.
* read and write functions are now thread-safe.
* Cleaned the stubs (function prototypes, comments, etc.).
* Updated OCamlMakefile and improved build system.

0.1.0 (2004-02-05)
=====
* Initial release.