libmongocrypt-helper 1.7.0.0.1001 → 1.7.4.0.1000

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 974ee9ab1dfedee289b815b4ab1206a5ccb6bd9a7df5403850cd2ea09ee45409
-  data.tar.gz: d5b63fcc294b2ec9ce35fdb33ed63409c44d33752ea4f92633639c45895d64a6
+  metadata.gz: 5b50712da00a54726660812ecea89e7eefc7dd1acc3bd239f4e347faba050c7c
+  data.tar.gz: 65a04988a4fd54b3cc8095363f9bd7eccb5d4a3022375c2fcfca3ceb1a3546a1
 SHA512:
-  metadata.gz: 3020e20316a64493d3463db46a243eb6cb70dcca78f2e649d69ff223bb3b1305cb8703ca6612c5bee8afa56a09bde122f2ba37ec03992aa52ba132ef156ae7b6
-  data.tar.gz: 273e5413f799317c93400760bc325868e5e284d3dd0163ce28876243879b5b368f4b98a39aa261bec4867c2647171b60c94702ee46836db32bae6cb31b686022
+  metadata.gz: 0dadbbce3a9984be302dffd0a8178a61cb6fdd47418d934553fb6b1476695ef7338942d0812d86559e5b5fe4b7dabdd9f28321d91d7a6cba515a2fa74eb3aa89
+  data.tar.gz: 4c4144d5043a0ae45bd0d9b4619491cd0289c5236d66ba3d648544b562a8867396af629ab6aad83e28639ed6c8c8191316495079d5da5c8e99bff608aed2f450

data/ext/libmongocrypt/extconf.rb

@@ -0,0 +1,70 @@
+require 'mkmf'
+require 'rbconfig'
+require_relative '../../lib/libmongocrypt_helper/version.rb'
+
+CMAKE = find_executable('cmake')
+abort "ERROR: CMake is required to build libmongocrypt" unless CMAKE
+
+MAKE = find_executable('gmake') || find_executable('make')
+abort "ERROR: make is required to build libmongocrypt" unless MAKE
+
+# Specify the name of the C++ source file for the extension
+extension_name = 'libmongocrypt'
+
+# Specify the directory where the CMake project is located
+cmake_dir = File.join(File.expand_path(File.dirname(__FILE__)), extension_name)
+
+# Exclude C# bindings
+cmake_lists_file = File.join(cmake_dir, 'CMakeLists.txt')
+text = File.read(cmake_lists_file)
+File.open(cmake_lists_file, "w") do |file|
+  file << text.gsub(/^add_subdirectory \(bindings\/cs\)$/, "# add_subdirectory (bindings/cs)")
+end
+
+# Specify the build directory for CMake
+build_dir = File.join(cmake_dir, 'build')
+
+# Run CMake to generate the build files
+Dir.mkdir(build_dir) unless File.exist?(build_dir)
+cmake_opts = %w(
+  -DDISABLE_NATIVE_CRYPTO=1
+  -DMONGOCRYPT_CRYPTO=none
+  -DMONGOCRYPT_ENABLE_CRYPTO=0
+  -DBUILD_TESTING=0
+)
+cmake_opts << "-DBUILD_VERSION=#{LibmongocryptHelper::VERSION}"
+system("#{CMAKE} #{cmake_opts.join(' ')}  #{cmake_dir} -B#{build_dir}")
+
+# Check if the build directory was successfully generated
+unless File.exist?(File.join(build_dir, 'Makefile'))
+  abort "ERROR: CMake failed to generate Makefile in #{build_dir}"
+end
+
+# Change to the build directory and run make to build the extension
+Dir.chdir(build_dir) do
+  system(MAKE)
+end
+
+lib_file_extension = case RUBY_PLATFORM
+                     when /linux/ then "so"
+                     when /darwin/ then "dylib"
+                     else abort "ERROR: this gem supports only linux and macos"
+                     end
+
+lib_file = File.join(build_dir, "#{extension_name}.#{lib_file_extension}")
+
+# Check if the extension was successfully built
+unless File.exist?(lib_file)
+  abort "ERROR: Failed to build the extension in #{build_dir}"
+end
+
+# Copy the compiled extension library to the tmp directory
+dst_folder = File.join('..', '..', 'lib', 'libmongocrypt')
+FileUtils.mkdir_p(dst_folder) unless File.exist?(dst_folder)
+FileUtils.cp(
+  lib_file,
+  dst_folder
+)
+
+# Create the Makefile for the extension
+create_makefile(extension_name)

data/ext/libmongocrypt/libmongocrypt/CHANGELOG.md

@@ -0,0 +1,164 @@
+# ChangeLog
+## 1.7.4
+### Fixed
+- Fix build on macOS Ventura.
+## 1.7.3
+### Fixed
+- Fix KMIP Register request for versions 1.12-1.13.0 of Hashicorp Vault.
+- Fix possible memory leak when encrypting malformed BSON with Queryable Encryption.
+## 1.7.2
+### Improvements
+- Add toggle for Decimal128 Range Support.
+### Fixed
+- Fix i686 (32-bit) build.
+- Fix 32-bit ARM build.
+## 1.7.1
+### Improvements
+- Vendor Intel DFP library and allow using system DFP.
+### Fixed
+- Fix possible abort on base64 decode error of KMS messages.
+- Fix ILP32-target builds.
+- Fix LTO build.
+- Fix IntelDFP to not require Git.
+## 1.7.0
+### New Features
+- Add encryptExpression helper
+- Support for range index. NOTE: The Range algorithm is experimental only. It is not intended for public use.
+## 1.7.0-alpha2
+### New Features
+- Support range index for decimal128. NOTE: The Range algorithm is experimental only. It is not intended for public use.
+## 1.7.0-alpha1
+### New Features
+- Add encryptExpression helper
+## 1.7.0-alpha0
+### New Features
+- Support range index for int32, int64, double, and date. NOTE: The Range algorithm is experimental only. It is not intended for public use.
+
+## 1.6.2
+## Fixed
+- Fix build on FreeBSD.
+- Set context error state during KMS provider validation.
+## 1.6.1
+## Fixed
+- Fix libbson dependency in pkg-config for PPA.
+## 1.6.0
+## New Features
+- Support accessToken to authenticate with Azure.
+## Fixed
+- Use correct schema when `collMod` command includes `validator.$jsonSchema`.
+## 1.6.0-alpha0
+### New Features
+- Support accessToken to authenticate with GCP.
+### Improvements
+- Use CRLF, not LF, for HTTP request newlines.
+- Include full body of HTTP errors in `mongocrypt_status_t`.
+## 1.5.2
+### Fixed
+- Fix datakey decryption requiring multiple rounds of KMS requests.
+## 1.5.1
+## Warnings
+- This release has a severe bug in the context returned by `mongocrypt_ctx_rewrap_many_datakey_init` that may result in data corruption. Please upgrade to 1.5.2 before using `mongocrypt_ctx_rewrap_many_datakey_init`.
+### New Features
+- Update Java bindings to support remaining 1.5.0 API.
+
+## 1.5.0
+## Warnings
+- This release has a severe bug in the context returned by `mongocrypt_ctx_rewrap_many_datakey_init` that may result in data corruption. Please upgrade to 1.5.2 before using `mongocrypt_ctx_rewrap_many_datakey_init`.
+## Fixed
+- Update to use new payload for FLE 2.0 find. 
+- Require contention factor.
+## 1.5.0-rc2
+### Fixed
+- Fix handling of create command with $jsonSchema.
+- Fix leak on encrypt or decrypt error.
+## Improved
+- Accept string values for QueryType and IndexType.
+
+## 1.4.1
+### Fixed
+- Add missing MONGOCRYPT_EXPORT to mongocrypt_ctx_provide_kms_providers
+## 1.5.0-rc1
+## Fixed
+- Revert new payload for FLE 2.0 find.
+- Do not send "create" and "createIndexes" to mongocryptd when bypassing query analysis.
+
+## 1.5.0-rc0
+## Fixed
+- Account for shared library rename.
+- Update to use new payload for FLE 2.0 find. 
+
+## 1.5.0-alpha2
+## New Features
+- Fix explain when using csfle shared library.
+- Do not bypass "create" or "createIndexes" commands. Support "collMod".
+- Bypass "hello", "buildInfo", "getCmdLineOpts", and "getLog" commands.
+## Fixed
+- Preserve $db in output command.
+- Add missing MONGOCRYPT_EXPORT to mongocrypt_ctx_provide_kms_providers
+## 1.5.0-alpha1
+### Fixed
+- Pick a random contention factor on FLE 2.0 insert.
+
+## 1.5.0-alpha0
+### New Features
+- Support FLE 2.0.
+- Support FLE 1.0 Shared Library.
+- Support Key Management API.
+
+## 1.4.0
+### New Features
+- Support on-demand credentials with `MONGOCRYPT_CTX_NEED_KMS_CREDENTIALS` state and `mongocrypt_ctx_provide_kms_providers`.
+
+## 1.4.0-alpha0
+### New Features
+- Support on-demand AWS credentials with `MONGOCRYPT_CTX_NEED_KMS_CREDENTIALS` state and `mongocrypt_ctx_provide_kms_providers`.
+### Fixed
+- Resolve 32 bit Windows compile errors.
+
+## 1.3.1
+
+### New Features
+- Support custom key material through `mongocrypt_ctx_setopt_key_material`.
+### Fixed
+- Fix deprecation warnings with OpenSSL 3.0.
+- Resolve possible symbol conflicts with OpenSSL.
+
+## 1.3.0
+- Support "kmip" KMS provider.
+- Add mongocrypt_kms_ctx_get_kms_provider.
+- Apply default port to endpoints returned in mongocrypt_kms_ctx_endpoint
+## 1.2.2
+- Fix pkg-config and PPA build dependency on libbson.
+- Fix JSON schema caching behavior when server reports no JSON schema.
+
+## 1.2.1
+### Fixed
+- Fix possible crash when oauth credentials expire.
+
+## 1.2.0
+### Added
+- Support AWS temporary credentials via session token.
+
+### Fixed
+- Add "=" padding to base64url encoding.
+## 1.1.0
+### Added
+- Add ENABLE_PIC cmake option, set to ON by default, so static libraries build with -fPIC by default on relevant systems.
+
+### Fixed
+- Errors produced in all crypto callbacks are propagated to user.
+
+## 1.1.0-beta1
+### Deprecated
+- mongocrypt_setopt_kms_provider_aws and mongocrypt_setopt_kms_provider_local are deprecated in favor of the more flexible mongocrypt_setopt_kms_providers, which supports configuration of all KMS providers.
+- mongocrypt_ctx_setopt_masterkey_aws, mongocrypt_ctx_setopt_masterkey_aws_endpoint, and mongocrypt_ctx_setopt_masterkey_local are deprecated in favor of the more flexible mongocrypt_ctx_setopt_key_encryption_key, which supports configuration for all KMS providers.
+### Added
+- Introduces a new crypto hook for signing the JSON Web Token (JWT) for Google Cloud Platform (GCP) requests:
+    - mongocrypt_setopt_crypto_hook_sign_rsaes_pkcs1_v1_5
+- Introduces a CLI utility `csfle` to test the context state machine against live KMS, mongocryptd, and mongod. See ./test/util/README.md.
+- Introduces two new functions to the libmongocrypt API.
+    - mongocrypt_setopt_kms_providers
+        To set the KMS providers.
+    - mongocrypt_ctx_setopt_key_encryption_key
+        To set the key encryption key.
+- Adds support for Azure and GCP KMS providers.