Feature #4556
Please add option which enable SSLv2 support
Status:
Closed
Priority:
Normal
Assignee:
-
Target version:
-
Description
=begin
SSLv2 becomes disabled in much environment, because this has several vulnerabilities.
This patch disable SSLv2 in Ruby.
If user want to use SSLv2 in ruby, you need config with --enable-opensslv2.
The SSLv2 support is disable by default.
=end
Related issues
Associated revisions
History
#1
Updated by iwamatsu (Nobuhiro Iwamatsu) over 6 years ago
Updated by - File 0001-Add-option-which-enable-SSLv2-support.patch 0001-Add-option-which-enable-SSLv2-support.patch added
=begin
Sorry, The first patch is broken.
I attched new patch.
=end
#2
[ruby-dev:43386]
Updated by iwamatsu (Nobuhiro Iwamatsu) over 6 years ago
=begin
Other patches exist.
https://github.com/spk/ruby/commit/dbe76bb2c83ed393c2aee09d6419b3d3062bbda3
=end
#3
Updated by iwamatsu (Nobuhiro Iwamatsu) about 6 years ago
- Status changed from Open to Closed
- % Done changed from 0 to 100
=begin
This issue was solved with changeset r31346.
Nobuhiro, thank you for reporting this issue.
Your contribution to Ruby is greatly appreciated.
May Ruby be with you.
* ext/openssl/extconf.rb: Should check SSLv2_*method.
openssl compiled with "no-ssl2" the extconf don't fail
when running `make' having this compilation errors.
Patched by Laurent Arnoud. fixes #4562, #4556