Ruby Issue Tracking System

Today

05:58 PM Ruby Revision 0d75dd1f (git): [ruby/openssl] ssl: update rdoc for SSLContext#ciphers= and #ciphersuites=

https://github.com/ruby/openssl/commit/54f22395e7 rhenium (Kazuki Yamaguchi)

05:58 PM Ruby Revision 112ba706 (git): [ruby/openssl] ssl: add SSLContext#sigalgs= and #client_sigalgs=

Add methods for setting supported signature algorithms, corresponding
to SSL_CTX_set1_sigalgs_list() and SSL_CTX_set1... rhenium (Kazuki Yamaguchi)

05:58 PM Ruby Revision 444b94c0 (git): [ruby/openssl] ssl: correct array index type in build_cipher_string()

https://github.com/ruby/openssl/commit/9c9333c07d rhenium (Kazuki Yamaguchi)

03:03 PM Ruby Bug #21448 (Open): Random.urandom may fail to fall back to reading /dev/urandom on Linux < 3.17

Origianlly reported for tmpdir: https://github.com/ruby/tmpdir/issues/50
On Linux, `Random.urandom` is expected to... rhenium (Kazuki Yamaguchi)

05/15/2025

04:51 PM Ruby Revision 06a56a7f (git): [ruby/openssl] ssl: fix potential memory leak in SSLContext#setup

If SSL_CTX_add_extra_chain_cert() fails, the refcount of x509 must be
handled by the caller. This should only occur d... rhenium (Kazuki Yamaguchi)

04:50 PM Ruby Revision b43c7cf8 (git): [ruby/openssl] cipher: remove Cipher#encrypt(password, iv) form

OpenSSL::Cipher#encrypt and #decrypt have long supported a hidden
feature to derive a key and an IV from the String a... rhenium (Kazuki Yamaguchi)

04/20/2025

07:41 AM Ruby Revision 93afcfcd (git): [ruby/openssl] asn1: check for missing EOC in indefinite length encoding

EOC octets are required at the end of contents of a constructed encoding
that uses the indefinite length form. This c... rhenium (Kazuki Yamaguchi)

04/16/2025

03:16 PM Ruby Revision 0a8a641d (git): [ruby/openssl] ssl: fix SSLSocket#syswrite with String-convertible objects

Correctly pass the new object assigned by StringValue() to
ossl_ssl_write_internal_safe().
This is a follow-up to co... rhenium (Kazuki Yamaguchi)

04/03/2025

05:58 PM Ruby Revision 6b5e187d (git): [ruby/openssl] pkcs7: fix test failure on RHEL 9

The test case test_split_content fails on RHEL 9 and Fedora 41 because
their OpenSSL packages do not accept SHA-1 sig... rhenium (Kazuki Yamaguchi)

05:58 PM Ruby Revision 3911113b (git): [ruby/openssl] pkcs7: update test case test_graceful_parsing_failure

Using test_pkcs7.rb as an example invalid input is not reliable because
we may happen to include a valid PKCS#7 PEM b... rhenium (Kazuki Yamaguchi)