ruby.git/ext/openssl/ossl_ssl.c, branch v3_2_11

[ruby/openssl] Undefine `OpenSSL::SSL` for no socket platforms

2022-12-23T00:39:15+00:00

This fixes a linkage error about `ossl_ssl_type` on platforms which do
not have socket, like WASI.

Even before this patch, some items are disabled under `OPENSSL_NO_SOCK` since
https://github.com/ruby/ruby/commit/ee22fad45d394818690c4a7586d7bb576ba67c56
However, due to some new use of OpenSSL::SSL::Socket over the past few years,
the build under `OPENSSL_NO_SOCK` had been broken.

This patch guards whole `OpenSSL::SSL` items by `OPENSSL_NO_SOCK`.

[ky: adjusted to apply on top of my previous commit that removed the
OpenSSL::ExtConfig, and added a guard to lib/openssl/ssl.rb.]

https://github.com/ruby/openssl/commit/b0cfac6a96

[ruby/openssl] ssl: remove OpenSSL::ExtConfig

2022-12-23T00:39:15+00:00

This module was introduced in 2015 for internal use within this library.
Neither of the two constants in it is used anymore. I don't think we
will be adding a new constant in the foreseeable future, either.

OPENSSL_NO_SOCK is unused since commit https://github.com/ruby/openssl/commit/998d66712a78 (r55191).
HAVE_TLSEXT_HOST_NAME is unused since commit https://github.com/ruby/openssl/commit/4eb4b3297a92.

https://github.com/ruby/openssl/commit/eed3894bda

[ruby/openssl] ssl: disable NPN support on LibreSSL

2022-12-23T00:39:15+00:00

As noted in commit https://github.com/ruby/openssl/commit/a2ed156cc9f1 ("test/test_ssl: do not run NPN tests
for LibreSSL >= 2.6.1", 2017-08-13), NPN is known not to work properly
on LibreSSL.

Disable NPN support on LibreSSL, whether OPENSSL_NO_NEXTPROTONEG is
defined or not.

NPN is less relevant today anyway. Let's also silence test suite when
it's not available.

https://github.com/ruby/openssl/commit/289f6e0e1f

[ruby/openssl] ssl: update TLS1_3_VERSION workaround for older LibreSSL versions

2022-12-23T00:39:15+00:00

The macro is now defined by default in LibreSSL 3.4+. Let's document it
for future readers.

https://github.com/ruby/openssl/commit/935698e9f9

[ruby/openssl] Constify when building with OpenSSL 3

2022-12-23T00:39:15+00:00

https://github.com/ruby/openssl/commit/c0023822fe

[ruby/openssl] Use default `IO#timeout` if possible.

2022-10-17T07:35:35+00:00

https://github.com/ruby/openssl/commit/471340f612

[ruby/openssl] Add support to SSL_CTX_set_keylog_callback

2022-10-17T07:35:35+00:00

- This callback is invoked when TLS key material is generated or
  received, in order to allow applications to store this keying material
  for debugging purposes.
- It is invoked with an `SSLSocket` and a string containing the key
  material in the format used by NSS for its SSLKEYLOGFILE debugging
  output.
- This commit adds the Ruby binding `keylog_cb` and the related tests
- It is only compatible with OpenSSL >= 1.1.1. Even if LibreSSL implements
  `SSL_CTX_set_keylog_callback()` from v3.4.2, it does nothing (see
  https://github.com/libressl-portable/openbsd/commit/648d39f0f035835d0653342d139883b9661e9cb6)

https://github.com/ruby/openssl/commit/3b63232cf1

[ruby/openssl] ssl: fix "warning: ‘ctx’ may be used uninitialized"

2022-10-17T07:35:35+00:00

The code was introduced by https://github.com/ruby/openssl/commit/65530b887e54 ("ssl: enable generating keying
material from SSL sessions", 2022-08-03).

This is harmless, but we should avoid it.

https://github.com/ruby/openssl/commit/f5b82e814b

[ruby/openssl] ssl: enable generating keying material from SSL sessions

2022-10-17T07:35:35+00:00

Add OpenSSL::SSL::SSLSocket#export_keying_material to support RFC 5705

https://github.com/ruby/openssl/commit/65530b887e

Simplify default argument specification. (#6507)

2022-10-07T09:51:27+00:00