Ruby Issue Tracking System

02/28/2025

04:33 AM Ruby Revision a6da77c9 (git): [ruby/openssl] ssl: fix tests using TLS 1.1 or older

Commit https://github.com/ruby/openssl/commit/aa7f03e18f26 broke test_minmax_version and test_fallback_scsv
on system... rhenium (Kazuki Yamaguchi)

02/27/2025

05:18 PM Ruby Revision d4b8da66 (git): [ruby/openssl] ssl: refactor check_supported_protocol_versions

As reported in <https://github.com/ruby/ruby/pull/12823>,
check_supported_protocol_versions is unstable and occasiona... rhenium (Kazuki Yamaguchi)

05:04 PM Ruby Revision f5a74bd6 (git): [ruby/openssl] digest: always run SHA-3 and truncated SHA-2 tests

The "pend" are no longer necessary, as they work with all OpenSSL
variants we currently support. They were added in O... rhenium (Kazuki Yamaguchi)

05:04 PM Ruby Revision c0f3dcf7 (git): [ruby/openssl] digest: correct assert_equal usage in test_sha3

assert_equal accepts an expected value as the first argument.
https://github.com/ruby/openssl/commit/8faa1d89de rhenium (Kazuki Yamaguchi)

05:04 PM Ruby Revision 9994a957 (git): [ruby/openssl] ssl: manually craft invalid SAN extensions in tests

Starting with LibreSSL 3.5, OpenSSL::X509::ExtensionFactory refuses to
create SAN extensions that are not valid accor... rhenium (Kazuki Yamaguchi)

02/19/2025

05:08 PM Ruby Revision c515da3d (git): [ruby/openssl] ssl: remove cert_store from start_server test helper

OpenSSL::SSL::SSLContext#cert_store= uses SSL_CTX_set_cert_store(). The
store is used for verifying peer certificates... rhenium (Kazuki Yamaguchi)

02/11/2025

04:42 PM Ruby Revision 47cdf98f (git): [ruby/openssl] x509: do not check for negative return from X509_*_get_ext_count()

These functions wrap X509v3_get_ext_count(). The implementation can
never return a negative number, and this behavior... rhenium (Kazuki Yamaguchi)

04:42 PM Ruby Revision 4ac75f6f (git): [ruby/openssl] x509name: do not check for negative return from X509_NAME_entry_count()

The function never returns a negative number.
https://github.com/ruby/openssl/commit/895ce6fdfc rhenium (Kazuki Yamaguchi)

04:42 PM Ruby Revision dedd05e9 (git): [ruby/openssl] pkcs7: add a test case for the data content type

While it is not useful alone, it is still a valid content type. Some
methods on OpenSSL::PKCS7 are only meant to work... rhenium (Kazuki Yamaguchi)

04:42 PM Ruby Revision 8888ad69 (git): [ruby/openssl] ossl.c: avoid using sk_*() functions with NULL

Always use explicit NULL checks before interacting with STACK_OF(*).
Even though most OpenSSL functions named sk_*() ... rhenium (Kazuki Yamaguchi)