Ruby Issue Tracking System

07/21/2025

02:31 PM Ruby Revision 090825f5 (git): [ruby/openssl] Move slow tests to OSSL_TEST_ALL=1 only

Update GitHub Actions workflows to set OSSL_TEST_ALL=1.
Exclude a few slow tests that are not critical for local dev... rhenium (Kazuki Yamaguchi)

02:31 PM Ruby Revision d4621b42 (git): [ruby/openssl] test/openssl/test_ossl.rb: fix style issues

Use OpenSSL::TestCase instead of OpenSSL::SSLTestCase.
Prefer assert_true and assert_false over the bare assert and ... rhenium (Kazuki Yamaguchi)

02:31 PM Ruby Revision 03812917 (git): [ruby/openssl] test/openssl/test_ts.rb: make assert_raise blocks smaller

https://github.com/ruby/openssl/commit/dbfcc44b37 rhenium (Kazuki Yamaguchi)

07/12/2025

01:25 PM Ruby Revision 753e3b7a (git): [ruby/openssl] asn1: align UTCTime year range with RFC 5280

ASN.1 UTCTime uses two-digit years. While X.680 does not specify how to
map them as far as I can tell, X.509/PKIX use... rhenium (Kazuki Yamaguchi)

07/05/2025

02:03 PM Ruby Revision b6817392 (git): [ruby/openssl] pkey/ec: avoid calling SYM2ID() on user-supplied objects

Compare by the VALUE value instead of ID. Calling SYM2ID() on a dynamic
symbol will pin a permanent ID.
These method... rhenium (Kazuki Yamaguchi)

07/04/2025

09:17 AM Ruby Revision 38993efb (git): [ruby/openssl] ssl: rename SSLContext#ecdh_curves= to #groups=

TLS 1.3 renamed the "elliptic_curves" extension to "supported_groups"
to reflect that it now covers more than just EC... rhenium (Kazuki Yamaguchi)

06/25/2025

05:13 PM Ruby Revision 0c6075bd (git): [ruby/openssl] pkey: handle EVP_PKEY_KEYMGMT return by EVP_PKEY_id()

For algorithms implemented solely in an OpenSSL 3 provider, without an
associated EVP_PKEY_METHOD, EVP_PKEY_id() retu... rhenium (Kazuki Yamaguchi)

05:13 PM Ruby Revision a1996b32 (git): [ruby/openssl] pkey: use EVP_PKEY_new_raw_{private,public}_key_ex() if available

Algorithms implemented only in OpenSSL 3 providers may not have a
corresponding NID. The *_ex() variants have been ad... rhenium (Kazuki Yamaguchi)

05:13 PM Ruby Revision ca0a315f (git): [ruby/openssl] ossl.h: include <openssl/provider.h> in ossl.h

Move the #include from ossl_provider.c to ossl.h. As OpenSSL 3 provider
functions will be used in multiple source fil... rhenium (Kazuki Yamaguchi)

06/21/2025

10:57 AM Ruby Revision 0cec4a14 (git): Restore getrandom(2) path for Linux with glibc 2.36 or later

This is a follow-up to commit b120f5e38d9c (avoid fork-unsafe arc4random
implementations, 2018-09-04).
Avoid definin... rhenium (Kazuki Yamaguchi)