Skip to content

stable->dev back-sync#51

Merged
liquidsec merged 2 commits into
devfrom
stable
Jun 18, 2026
Merged

stable->dev back-sync#51
liquidsec merged 2 commits into
devfrom
stable

Conversation

@liquidsec

Copy link
Copy Markdown
Collaborator

No description provided.

liquidsec and others added 2 commits June 3, 2026 12:26
* chore(deps): bump http from 1.4.1 to 1.4.2

Bumps [http](https://github.com/hyperium/http) from 1.4.1 to 1.4.2.
- [Release notes](https://github.com/hyperium/http/releases)
- [Changelog](https://github.com/hyperium/http/blob/master/CHANGELOG.md)
- [Commits](hyperium/http@v1.4.1...v1.4.2)

---
updated-dependencies:
- dependency-name: http
  dependency-version: 1.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps-dev): bump ruff from 0.15.15 to 0.15.17

Bumps [ruff](https://github.com/astral-sh/ruff) from 0.15.15 to 0.15.17.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.15...0.15.17)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.15.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump version to 0.9.0

* chore(deps): bump openssl from 0.10.80 to 0.10.81 (#45)

Bumps [openssl](https://github.com/rust-openssl/rust-openssl) from 0.10.80 to 0.10.81.
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases)
- [Commits](rust-openssl/rust-openssl@openssl-v0.10.80...openssl-v0.10.81)

---
updated-dependencies:
- dependency-name: openssl
  dependency-version: 0.10.81
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Fix SSL certificate verification (#47)

* Fix SSL certificate verification (verify_certs=True)

- Load system CA certs explicitly instead of relying on
  set_default_verify_paths(), which fails when OpenSSL is vendored
  (compiled-in OPENSSLDIR points to nonexistent path)
- Include verify_certs in ConnMode cache key so connections with
  different verify settings don't share a cached hyper Client
- Add timeout parameter to raw_connect Python binding
- Wrap TCP connect in a timeout (was missing, causing hangs)
- Add Rust and Python tests for all connection types

* Replace deprecated as_utf8() with to_string()

* Update Cargo.lock for 0.9.0

* Add hostname verification, timeout coverage, and TLS cache key fixes

F1: verify_certs=True now checks hostname (set_host/set_ip on both TLS paths)
F2: TLS and proxy handshakes bounded by connect timeout (pooled + raw paths)
F3: ConnMode cache key includes cipher_string, TLS versions, and ALPN
F4: load_system_ca_certs tracks dir loading to avoid unnecessary fallback

* Fix rustfmt in tls_server.rs

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@liquidsec
liquidsec merged commit 342a21d into dev Jun 18, 2026
30 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant