Ruby Issue Tracking System

06/25/2025

05:13 PM Ruby Revision 0c6075bd (git): [ruby/openssl] pkey: handle EVP_PKEY_KEYMGMT return by EVP_PKEY_id()

For algorithms implemented solely in an OpenSSL 3 provider, without an
associated EVP_PKEY_METHOD, EVP_PKEY_id() retu... rhenium (Kazuki Yamaguchi)

05:13 PM Ruby Revision a1996b32 (git): [ruby/openssl] pkey: use EVP_PKEY_new_raw_{private,public}_key_ex() if available

Algorithms implemented only in OpenSSL 3 providers may not have a
corresponding NID. The *_ex() variants have been ad... rhenium (Kazuki Yamaguchi)

05:13 PM Ruby Revision ca0a315f (git): [ruby/openssl] ossl.h: include <openssl/provider.h> in ossl.h

Move the #include from ossl_provider.c to ossl.h. As OpenSSL 3 provider
functions will be used in multiple source fil... rhenium (Kazuki Yamaguchi)

06/21/2025

10:57 AM Ruby Revision 0cec4a14 (git): Restore getrandom(2) path for Linux with glibc 2.36 or later

This is a follow-up to commit b120f5e38d9c (avoid fork-unsafe arc4random
implementations, 2018-09-04).
Avoid definin... rhenium (Kazuki Yamaguchi)

08:24 AM Ruby Bug #21448: Random.urandom may fail to fall back to reading /dev/urandom on Linux < 3.17

FWIW `getentropy()` has recently made it into POSIX (with a slight difference in errno behavior compared to existing ... rhenium (Kazuki Yamaguchi)

06/20/2025

05:58 PM Ruby Revision 0d75dd1f (git): [ruby/openssl] ssl: update rdoc for SSLContext#ciphers= and #ciphersuites=

https://github.com/ruby/openssl/commit/54f22395e7 rhenium (Kazuki Yamaguchi)

05:58 PM Ruby Revision 112ba706 (git): [ruby/openssl] ssl: add SSLContext#sigalgs= and #client_sigalgs=

Add methods for setting supported signature algorithms, corresponding
to SSL_CTX_set1_sigalgs_list() and SSL_CTX_set1... rhenium (Kazuki Yamaguchi)

05:58 PM Ruby Revision 444b94c0 (git): [ruby/openssl] ssl: correct array index type in build_cipher_string()

https://github.com/ruby/openssl/commit/9c9333c07d rhenium (Kazuki Yamaguchi)

03:03 PM Ruby Bug #21448 (Closed): Random.urandom may fail to fall back to reading /dev/urandom on Linux < 3.17

Origianlly reported for tmpdir: https://github.com/ruby/tmpdir/issues/50
On Linux, `Random.urandom` is expected to... rhenium (Kazuki Yamaguchi)

05/15/2025

04:51 PM Ruby Revision 06a56a7f (git): [ruby/openssl] ssl: fix potential memory leak in SSLContext#setup

If SSL_CTX_add_extra_chain_cert() fails, the refcount of x509 must be
handled by the caller. This should only occur d... rhenium (Kazuki Yamaguchi)