package conduit-mirage

v7.1.0 (2024-09-19)

• Support TLS tunnel over Lwt_io.channel (#428, @art-w)

v7.0.0 (2024-08-29)

• adapt to TLS 1.0.0 API changes, bump OCaml lower bound to 4.13 (#432 @hannesm)

• conduit-lwt-unix: improve the no TLS error message (#431 @filipeom)

• Remove 4.12 CI runners, add 5.2 (#433 @art-w)

• Update GitHub actions (#429 @smorimoto)

• use failwith instead of Lwt.fail_with, use Lwt.reraise (#430 @MisterDA)

• switch to sexplib0 instead of sexplib for lighter dependencies (#427 @emillon)

v6.2.3 (2024-06-13)

• conduit-mirage: adapt to dns-client 8.0.0 API changes (#426 @hannesm)

• conduit-async: removed misplaced deprecation attribute (OCaml 5 complains about) (#426 @hannesm)

v6.2.2 (2024-04-30)

• conduit-mirage: IPv6 literal * DNS support for default resolver (#425 @Firobe)

• conduit-mirage: adapt to mirage-flow 4 API, requiring tls 0.17.4, vchan 6.0.2 (#424 @hannesm)

• conduit-lwt-unix: disable deprecation alert (#424 @hannesm)

v6.2.1 (2023-11-28)

• conduit-mirage: adapt to tls 0.17.0 API changes (no more sexplib converters) #421 @hannesm

v6.2.0 (2023-02-17)

• conduit-lwt-unix: adapt tls 0.16 split: tls.lwt is now tls-lwt (#419 @hannesm)

• conduit-mirage: adapt dns-client 7.0.0 split: dns-client-mirage (#419 @hannesm)

v6.1.0 (2022-12-15)

done by @psafont in #417:

• conduit-lwt-unix-ssl: allow users to create a client ssl_context and use it for any connections. This allows users to manage the lifecycle of the context.

• conduit-lwt-unix-ssl: domain name verification can be disabled by users, it's enabled by default. The library returns an error when the hostname verification is turned on but it cannot be performed, this follows the TLS implementation.

• conduit-lwt-unix-ssl: IP verification can be enabled by users, it's disabled by default.

• conduit-lwt-unix-ssl: SNI is not sent when there isn't a domain name available

• conduit-lwt-unix: avoid direct use of Ssl in conduit_lwt_unix (#418 @psafont)

v6.0.1 (2022-10-25)

• conduit-mirage: adapt to dns 6.4.0 changes, Resolver_mirage.v is now in Lwt.t monad (#416 @hannesm)

v6.0.0 (2022-10-11)

• conduit-mirage: delay parsing of nameservers (#415 @reynir, review by @dinosaure)

v5.1.1 (2022-07-04)

• conduit-mirage: pass peer name to Tls.Config.client, fixes mirleft/ocaml-tls#474 reported by @palainp (#414 @hannesm)

• conduit-async: update to jane street v0.15 (#414 @hannesm)

v5.1.0 (2022-03-02)

• conduit-mirage: avoid exception in TLS.listen (#413 @hannesm)

• conduit-mirage: update to tcpip 7.0.0 and remove mirage-stack dependency (#413 @hannesm)

v5.0.0 (2021-10-20)

• change the type of Conduit_lwt_tls.X509.default_authenticator and Conduit_lwt_unix.default_ctx to be lazy, avoiding various side-effects (system interactions, logging) due to constructing these values at initialisation time. (@craigfe, #395 #404)

• Adapt conduit-mirage to dns-client 6.0.0 API (#406 @hannesm)

• Use Lwt.pause instead of Lwt_unix.yield (#403 @MisterDA)

• Avoid deprecated Fmt.kstrf (#407 @hannesm)

v4.0.2 (2021-10-09)

• Adapt conduit-mirage to tls 0.15.0 (@hannesm #404)

• Remove Conduit_mirage.Endpoint.ok_authenticator (@hannesm #404)

• Now Conduit_mirage.Endpoint.server does not use an authenticator - and thus not request a client certificate (@hannesm #404)

v4.0.1 (2021-08-06)

• Add missing ipaddr-sexp dependency on conduit-async (#385, @anmonteiro)

• Update the link of the documentation (959f57a & #398, reported by @misterfish, @zshipko, @dinosaure)

• Gitignore opam/ even if it is a symlink (#394, @CraigFe, @avsm)

• Adapt conduit-lwt-unix to tls.0.14.0 (#396, @hannesm, @dinosaure)

v4.0.0 (2021-04-15)

• conduit-mirage: replace the alias X509_lwt.priv by Tls.Config.certchain (@dinosaure, @samoht, #381)

• conduit-mirage: Upgrade to dns.5.0.0 and use Mirage_stack.V4V6 instead of Mirage_stack.V4 - by this way, conduit-mirage supports IPv6 connection

• conduit.3.0.0 will be unavailable with this release. The design discussion did not reach consensus and conduit.3.0.0 is unmaintained. We advise use to use conduit.2.* or conduit.4.* then and discard the migration process between conduit.2.* and conduit.3.*.

v2.3.0 (2020-02-06)

• conduit-mirage: simplify the API to not mix functors and first-class modules anymore. We just use functors now and rely on the mirage tool to apply them properly (#376, @samoht)

• add client-side TLS certificate validation using OS trust anchors for conduit-lwt-unix and Mozilla's NSS for conduit-mirage (#375, @samoht)

v2.2.2 (2020-06-14)

• conduit-lwt-unix no longer calls Mirage_crypto_rng_unix.initialize, and is compatible with tls 0.12.1 (#317 @hannesm)

v2.2.1 (2020-05-20)

• conduit-mirage requires mirage-time (fix opam and dune) (#315 @hannesm)

v2.2.0 (2020-05-12)

• conduit-mirage adapt to dns-client 4.5.0 (#314 @hannesm)

v2.1.0 (2020-03-14)

• port to tls.0.11.0 interfaces which also uses mirage-crypto (#309 @hannesm)

• do not use deprecated ppx sexplib declarations (#309 @avsm)

• replace Appveyor CI with GitHub Actions (#309 @avsm)

v2.0.2 (2019-11-02)

• mirage: do not raise exceptions in DNS lookup (#305 @hannesm)

• mirage: adapt to mirage-stack/mirage-time/mirage-flow/mirage-random 2.0.0 interfaces (#306 #hannesm)

• mirage: adapt to dns 4.1.0 changes (#306 @hannesm)

• mirage: adapt to vchan 5.0.0 changes (#306 @hannesm)

v2.0.1 (2019-08-19)

• lwt-unix: fix compilation with lwt_ssl and fix tests to correctly exercise this part of the codepath (#304 @avsm).

v2.0.0 (2019-08-17)

• lwt-unix: obtain client IP correctly when using TLS connections (#277 @victorgomes)

• lwt-unix: replace the dune/ocaml file with a (select) build form. This avoids invoking ocamlfind from the build, and fits in with the rest of dune builds much more naturally (@avsm).

• lwt-unix: force callers to give a custom callback on_exn in case of exceptions to avoid random crashes (#261 @kit-ty-kate)

• mirage: use dns-client>=4.0.0 which is the udns implementation (#290 @hannesm)

• mirage: rename mirage-conduit to conduit-mirage to fit the naming structure of this library suite more. All new users of Mirage should use conduit-mirage, and migrating should involve simply swapping the name in your dune and opam files (#302 @hannesm @avsm)

• async: expose verify_mode correctly in Conduit_async (#298 @brendanlong)

v1.5.0

• lwt-unix: Do not close file descriptors more than once, which led to a lot of log spam due to EBADF (#294 @hcarty @avsm)

• lwt-unix: Always close channels after handling an event (#283 @hcarty)

• Allow TCP to be established from existing file descriptors (for example, an inherited systemd socket) (#144 @SGrondin #282 @timbertson)

• async: add Conduit_async.V3 which provides convenience functions for resolving URIs to addresses (#287 @vbmithr)

• Lwt_ssl: Enable certification validation (#291 @vouillon)

• Async_ssl: fix exception raised when other side disconnects due to sharing underlying fd (#295 @bogdan2412)

v1.4.0

• Use Ipaddr 3.0.0+ interfaces (#284 by @avsm).

• Update opam metadata files to the opam 2.0 format (#284 by @avsm)

• Hook in an introduction ocamldoc page to the conduit odoc (#284 by @avsm)

v1.3.0 (2018-10-19)

• Mark ppx_sexp_conv as not just a build dependency.

• Switch build to dune from jbuilder.

• Depend on more precise versions of mirage-types instead of just the generic package.

• Fix ocamldoc headings to work with latest odoc (level 2 not 1).

v1.2.0 (2018-08-06)

• Correct depopt for conduit-lwt-unix (#260, @dra27)

• async: provide all Async_ssl options at config (#263, @vbmithr)

• async: add a V2 module for a new versioned API (#265, @rgrinberg)

• lwt-unix: do not link with tls.lwt on windows (#267, @samoht)

v1.1.0 (2018-03-22)

• Implement SNI (Server Name Indication) for SSL backend (#255 by @vouillon)

• Make hostname optional in Conduit_lwt_unix_ssl.Client.connect (#255 by @vouillon)

• Fix file descriptor leakage on EADDRINUSE for the Lwt backend (#257 by @rixed)

v1.0.3 (2018-01-06)

• Favour resolving over IPv4 instead of IPv6, if both are available and one has to be chosen. (#245 via @rixed)

• Fix some warnings with the dummy Lwt_unix_ssl module.

• Add a direct dependency on xenstore for mirage-conduit.

• Support latest Async v0.10.0 interfaces (no more Async.Std).

v1.0.2 (2017-09-13)

• Fix regression with TLS/SSL backend: there is no need to set CONDUIT_TLS manually when using tls (#234, @hcarty)

• Update to lwt.3.0.0 (#236, #241, @rgrinberg and @samoht)

• Fix regression in linking with the launchd backend (#240, @samoht)

v1.0.1 (2017-07-25)

• Fix linkage of mirage-conduit with apps, as a tls.mirage dependency was missing in the mirage-conduit-3.0.0 release (#232 by @samoht)

v1.0.0 (2017-07-22)

Details on changes: https://discuss.ocaml.org/t/ann-major-releases-of-cohttp-conduit-dns-tcpip/571

Port build to jbuilder, and break up OPAM packages into multiple independent packages instead of being optional dependencies against the main conduit package. This makes it significantly easier to depend on precisely the libraries you need, but requires porting applications to use the new ocamlfind and opam scheme.

The new package layout is:

• conduit: the main Conduit module

• conduit-lwt: the portable Lwt implementation

• conduit-lwt-unix: the Lwt/Unix implementation

• conduit-async the Jane Street Async implementation

• mirage-conduit: the MirageOS compatible implementation

In each of these packages, the opam and ocamlfind package names are now the same, so you will need to rename the former subpackages such as conduit.async to conduit-async. The implementation is otherwise the same, so no other code changes should be required.

In return for these breaking changes to the packaging, it is now significantly easier to depend on a particular backend, also for us to rev the interfaces towards a stable 1.0 release. Jbuilder also builds the source tree around 4x faster than it did previously.

There are still some optional dependencies remaining, most notably the tls and ssl packages. If they are present, then conduit will be compiled with TLS support.

0.15.4 (2017-05-31)

• Lwt: Fix meta file and building with lwt_ssl (#222, @dkim)

0.15.3 (2017-05-04)

• Lwt: lwt 3.0 support for the tls backend too (#219, @@rgrinberg)

0.15.2 (2017-05-02)

• Move cstruct dependency from conduit to mirage-conduit

0.15.1 (2017-04-25)

• Lwt: Lwt 3.0 support (#214)

• Async: with_connection (#211)

0.15.0 (2017-02-23)

• support MirageOS 3, and drop support for earlier versions (#203, #202)

0.14.5 (2017-01-24)

• Fix exception swallowing (#206)

0.14.4 (2017-01-03)

• Fix tests (#195)

0.14.3 (2017-01-03)

• Fix mirage-conduit (@samoht, #188)

• Use ppx_driver's ocamlbuild plugin (@rgrinberg, #193)

0.14.2 (2017-01-01)

• Fix discover.ml (#191)

0.14.1 (2016-12-29)

• Tests: do not link with lwt.ssl if it is not installed (#186)

0.14.0 (2016-12-25)

• Add listening backlog option and increase it to 128 by deafult (#151)

• Add IP based URI support

• Fix server stop issues for all Lwt servers

• Add Logs based logging to Lwt server errors (#172)

• Add on_exn hook to Lwt servers (#181)

• Limit maximum number of active connections (#116)

0.13.0 (2016-09-18):

• Fix build system to stop compiling things twice (#137)

• Lwt: pass uncaught exceptions in server callback to async_exception_hook (#143)

• Lwt: stop printing stuff to stdout (#143)

• Async: fix swallowing of exceptions

• Async: add backlog argument to serve

0.12.0 (2016-04-30):

• Convert build system to use PPX instead of Camlp4.

• Call set_close_on_exec on Lwt_unix listen sockets (#123)

0.11.0 (2016-03-25):

• Minimum OCaml version is now 4.02.0

• Add multi-distro Travis testing script.

• Switch to using pa_sexp_conv for latest sexp.

• Support Core/Async >=113.24

• Fix vchan example code, and use functoria-style mirage for it (#108 via @jonludlam)

• [async] Add an Ssl_unsupported exception for Async rather than just raising Failure

• Workaround for infinite loop when failing to accept new connections (Edwin Torok #115)

• Support TLSv1.1 and TLSv1.2 with openssl backend (Edwin Torok #115)

• Fix FD leak with the openssl backend (Edwin Torok #115)

0.10.0 (2015-12-25):

• Add support for CA certificates in [Conduit_async.serve] (#98).

• Fix file descriptor leak in Lwt backend (#101 from @hannesm).

• Server in Conduit_lwt_tls waits for a user callback to finish before accepting more connections. Instead, it should only wait until the connection is accepted and detach client callback (#97).

• Close socket when ssl_accept fails, e.g. when cipher negotiation mismatch (#104).

0.9.0 (2015-10-14):

• Add a Launchd argument for the Conduit_lwt_unix server listener to support the MacOSX service launcher (#96).

0.8.8 (2015-09-15):

• Expose a new functor Conduit_mirage.With_tcp (#92, by @Drup)

• Expose a new functor: Resolver_mirage.Make_with_stack to build a DNS resolver using an existing network stack (#92, by @Drup)

• Expose Resolver_mirage.S, the signature for Mirage's conduit resolvers than can perform DNS lookups. These resolvers now expose their DNS implmentation as a submodule (#92, by @Drup)

• Expose a ?version arg in Conduit_async_ssl.ssl_listen, default being TLS 1.2 (#94, by @vbmithr)

0.8.7 (2015-08-18):

• Do not ignore custom context when calling Conduit_lwt_unix_ssl.accept (reported by @jrb467 in #88)

• Conduit_lwt_unix.Serve now passes the client flow to the server callback instead of the listening server one. This lets servers retrieve the peer endpoint correctly (reported by @fxfactorial in #87)

0.8.6 (2015-07-14)

• Add a Conduit_mirage.Context, a functor for creating HTTP(s) conduit contexts (with a DNS resolver).

0.8.5 (2015-07-12)

• Fix client-side https:// resolution for Conduit_mirage

0.8.4 (2015-05-29):

• Full support for ocaml-tls.0.5.0

• Breaking API change for mirage-conduit. Now all the flows are dynamic, the functors are becoming first-class values so no big functor to build first.

0.8.3 (2015-05-04):

• Partial support for ocaml-tls.0.5.0

• setsockopt TCP_NODELAY fails on a Unix domain socket (#63 by @djs55)

0.8.2 (2015-04-18):

• Make TLS optional in Conduit_mirage, and disable it by default so that it is a developer-only option until it is properly released. It can be enabled by setting the HAVE_MIRAGE_LWT env variable.

0.8.1 (2015-04-17):

• Support Async_SSL version 112.24.00 and higher.

• Add a TLS echo server in tests/async/

• [lwt] Do not leak socket fd when a connect or handshake operation fails (#56 via Edwin Torok).

• [async] Do not leak pipes in SSL handling (#54 from Trevor Smith).

0.8.0 (2015-03-27):

• Add TLS client support for Mirage (#50)

• Do not overwrite the default name resolver for Mirage (#49)

• Add TLS support using the pure OCaml TLS stack (#46).

• Replace the Mirage Make_flow functor with Dynamic_flow that is easier to extend with more flow types.

0.7.2 (2015-01-26):

• Add an error_message function to simplify error display (#38).

• Improvements to documentation (#37).

0.7.1 (2014-12-05):

• Do not emit debug output when the CONDUIT_DEBUG variable is not set.

• Do not create symlinks in a local build, which helps with OPAM pins.

• Improve ocamldoc for Conduit_lwt_unix.

0.7.0 (2014-12-04):

• Add Lwt-unix support for the native OCaml/TLS stack as an alternative to OpenSSL. This can be activated by setting the CONDUIT_TLS environment variable to native. If this is not set and OpenSSL is available, then OpenSSL is used by in preference to the pure OCaml implementation.

• Add sexp convertors for Conduit_lwt_unix.ctx and Conduit_mirage.ctx and the Resolver service types.

• Fix the Mirage tests to the Mirage 2.0.1+ Conduit interfaces.

• Add more debugging output when the CONDUIT_DEBUG variable is set on Unix.

• Interface breaking: The client and server types in Conduit_lwt_unix now explicitly label the fields of the tuples with a polymorphic variant. This allows them to remain independent of this library but still be more self-descriptive (i.e. Port of int instead of just int).

0.6.1 (2014-11-07):

• When terminating conduits, always close the output channel first before the input channel, so that any pending data in the underlying fd is flushed.

0.6.0 (2014-11-04):

• Add an explicit ctx content to track every conduit's runtime state.

• Allow the source interface for a conduit to be set.

• Support a password callback for the SSL layer (#4).

• [lwt] Add stop parameters in main-loop of the server (#5).

• Add Conduit_mirage with Mirage functor suport.

• Add ocamldoc of most interfaces.

• Add a CONDUIT_DEBUG environment variable to the Unix backends for live debugging.

• Add a conn value to the callback to query more information about the current connection (#2).

• Expose the representation of Conduit_lwt_unix.flow in the external signature. This lets library users obtain the original Lwt_unix.file_descr when using Conduit libraries like Cohttp.

0.5.1 (2014-08-07):

• Reenable Async SSL by default.

0.5.0 (2014-04-13):

• First public release.