Feature #4556: Please add option which enable SSLv2 support

• Status: Closed
• Priority: Normal
• Assignee: -
• Target version: -

[iwamatsu (Nobuhiro Iwamatsu)]

=begin
SSLv2 becomes disabled in much environment, because this has several vulnerabilities.
This patch disable SSLv2 in Ruby.
If user want to use SSLv2 in ruby, you need config with --enable-opensslv2.
The SSLv2 support is disable by default.

=end

[iwamatsu (Nobuhiro Iwamatsu)]

• File 0001-Add-option-which-enable-SSLv2-support.patch View added

=begin
Sorry, The first patch is broken.
I attched new patch.
=end

[iwamatsu (Nobuhiro Iwamatsu)]

=begin
Other patches exist.
https://github.com/spk/ruby/commit/dbe76bb2c83ed393c2aee09d6419b3d3062bbda3
=end

[iwamatsu (Nobuhiro Iwamatsu)]

• Status changed from Open to Closed
• % Done changed from 0 to 100

=begin
This issue was solved with changeset r31346.
Nobuhiro, thank you for reporting this issue.
Your contribution to Ruby is greatly appreciated.
May Ruby be with you.

---

• ext/openssl/extconf.rb: Should check SSLv2_*method. openssl compiled with "no-ssl2" the extconf don't fail when running `make' having this compilation errors. Patched by Laurent Arnoud. fixes #4562, #4556 =end