Ruby Issue Tracking System

04/20/2025

07:41 AM Ruby Revision 93afcfcd (git): [ruby/openssl] asn1: check for missing EOC in indefinite length encoding

EOC octets are required at the end of contents of a constructed encoding
that uses the indefinite length form. This c... rhenium (Kazuki Yamaguchi)

04/16/2025

03:16 PM Ruby Revision 0a8a641d (git): [ruby/openssl] ssl: fix SSLSocket#syswrite with String-convertible objects

Correctly pass the new object assigned by StringValue() to
ossl_ssl_write_internal_safe().
This is a follow-up to co... rhenium (Kazuki Yamaguchi)

04/03/2025

05:58 PM Ruby Revision 6b5e187d (git): [ruby/openssl] pkcs7: fix test failure on RHEL 9

The test case test_split_content fails on RHEL 9 and Fedora 41 because
their OpenSSL packages do not accept SHA-1 sig... rhenium (Kazuki Yamaguchi)

05:58 PM Ruby Revision 3911113b (git): [ruby/openssl] pkcs7: update test case test_graceful_parsing_failure

Using test_pkcs7.rb as an example invalid input is not reliable because
we may happen to include a valid PKCS#7 PEM b... rhenium (Kazuki Yamaguchi)

02/28/2025

04:33 AM Ruby Revision a6da77c9 (git): [ruby/openssl] ssl: fix tests using TLS 1.1 or older

Commit https://github.com/ruby/openssl/commit/aa7f03e18f26 broke test_minmax_version and test_fallback_scsv
on system... rhenium (Kazuki Yamaguchi)

02/27/2025

05:18 PM Ruby Revision d4b8da66 (git): [ruby/openssl] ssl: refactor check_supported_protocol_versions

As reported in <https://github.com/ruby/ruby/pull/12823>,
check_supported_protocol_versions is unstable and occasiona... rhenium (Kazuki Yamaguchi)

05:04 PM Ruby Revision f5a74bd6 (git): [ruby/openssl] digest: always run SHA-3 and truncated SHA-2 tests

The "pend" are no longer necessary, as they work with all OpenSSL
variants we currently support. They were added in O... rhenium (Kazuki Yamaguchi)

05:04 PM Ruby Revision c0f3dcf7 (git): [ruby/openssl] digest: correct assert_equal usage in test_sha3

assert_equal accepts an expected value as the first argument.
https://github.com/ruby/openssl/commit/8faa1d89de rhenium (Kazuki Yamaguchi)

05:04 PM Ruby Revision 9994a957 (git): [ruby/openssl] ssl: manually craft invalid SAN extensions in tests

Starting with LibreSSL 3.5, OpenSSL::X509::ExtensionFactory refuses to
create SAN extensions that are not valid accor... rhenium (Kazuki Yamaguchi)

02/19/2025

05:08 PM Ruby Revision c515da3d (git): [ruby/openssl] ssl: remove cert_store from start_server test helper

OpenSSL::SSL::SSLContext#cert_store= uses SSL_CTX_set_cert_store(). The
store is used for verifying peer certificates... rhenium (Kazuki Yamaguchi)