Feature #11524: Use TLS 1.2 to default version of OpenSSL

• Status: Closed
• Assignee: -
• Target version: -

[hsbt (Hiroshi SHIBATA)]

OpenSSL on trunk still use SSL version 3 with default option. but SSLv3 have some vulnerability.

I propose to use TLS 1.2 with default on OpenSSL library.

see original proposal: https://github.com/ruby/ruby/pull/873

In other side, HTTP/2 must be required TLS 1.2 protocol. We should change it before http client
author put ctx.ssl_version = :TLSv1_2 every their code.

ref. https://http2.github.io/http2-spec/#TLSUsage

[zzak (zzak _)]

• Assignee changed from hsbt (Hiroshi SHIBATA) to 7150

[zzak (zzak _)]

• Status changed from Open to Closed

Applied in changeset r52082.

---

• ext/openssl/lib/openssl/ssl.rb: Default to TLSv1.2 and drop TLS v1
  Patch provided by @claudijd [Fixes GH-873] [Feature #11524]:
  https://github.com/ruby/ruby/pull/873