<feed xmlns='http://www.w3.org/2005/Atom'>
<title>ruby.git/test/net/http/test_https.rb, branch v3_3_11</title>
<subtitle>The Ruby Programming Language</subtitle>
<link rel='alternate' type='text/html' href='https://git.ruby-lang.org/ruby.git/'/>
<entry>
<title>Use IPv4 for test server because TestNetHTTPS is failing with s390x</title>
<updated>2025-04-03T10:41:48+00:00</updated>
<author>
<name>Hiroshi SHIBATA</name>
<email>hsbt@ruby-lang.org</email>
</author>
<published>2025-04-03T05:18:55+00:00</published>
<link rel='alternate' type='text/html' href='https://git.ruby-lang.org/ruby.git/commit/?id=7065e60318c970655eb561829a2071c310b67e2d'/>
<id>7065e60318c970655eb561829a2071c310b67e2d</id>
<content type='text'>
https://rubyci.s3.amazonaws.com/s390x/ruby-3.2/log/20250403T005659Z.fail.html.gz
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
https://rubyci.s3.amazonaws.com/s390x/ruby-3.2/log/20250403T005659Z.fail.html.gz
</pre>
</div>
</content>
</entry>
<entry>
<title>[ruby/net-http] test_https.rb - fix test_session_reuse_but_expire</title>
<updated>2024-11-20T01:18:27+00:00</updated>
<author>
<name>MSP-Greg</name>
<email>Greg.mpls@gmail.com</email>
</author>
<published>2024-06-21T00:33:06+00:00</published>
<link rel='alternate' type='text/html' href='https://git.ruby-lang.org/ruby.git/commit/?id=5232e3ce3cdd69f9afaf5d34370f6ef3c84e4930'/>
<id>5232e3ce3cdd69f9afaf5d34370f6ef3c84e4930</id>
<content type='text'>
https://github.com/ruby/net-http/commit/5544243c41
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
https://github.com/ruby/net-http/commit/5544243c41
</pre>
</div>
</content>
</entry>
<entry>
<title>Skip tests that suddenly started failing for MinGW</title>
<updated>2024-11-05T00:00:11+00:00</updated>
<author>
<name>Takashi Kokubun</name>
<email>takashikkbn@gmail.com</email>
</author>
<published>2024-11-05T00:00:11+00:00</published>
<link rel='alternate' type='text/html' href='https://git.ruby-lang.org/ruby.git/commit/?id=f72eb702f29574b85889d3ea6447efa29c8a8789'/>
<id>f72eb702f29574b85889d3ea6447efa29c8a8789</id>
<content type='text'>
These test failures first appeared on irrelevant changes. It probably
came from changes in GitHub Actions instead of CRuby's.

Until we figure out how to fix these tests, let's skip them to make the
CI usable.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
These test failures first appeared on irrelevant changes. It probably
came from changes in GitHub Actions instead of CRuby's.

Until we figure out how to fix these tests, let's skip them to make the
CI usable.
</pre>
</div>
</content>
</entry>
<entry>
<title>[ruby/net-http] Skip test_session_reuse_but_expire with OpenSSL 3.3</title>
<updated>2024-04-30T05:02:50+00:00</updated>
<author>
<name>Xi Ruoyao</name>
<email>xry111@xry111.site</email>
</author>
<published>2024-04-24T05:42:09+00:00</published>
<link rel='alternate' type='text/html' href='https://git.ruby-lang.org/ruby.git/commit/?id=85863f4d4d6f798a3a2afc33be243e5604c222a6'/>
<id>85863f4d4d6f798a3a2afc33be243e5604c222a6</id>
<content type='text'>
OpenSSL 3.3.0 9 Apr 2024 is also broken.

Signed-off-by: Xi Ruoyao &lt;xry111@xry111.site&gt;

https://github.com/ruby/net-http/commit/ab525c956d
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
OpenSSL 3.3.0 9 Apr 2024 is also broken.

Signed-off-by: Xi Ruoyao &lt;xry111@xry111.site&gt;

https://github.com/ruby/net-http/commit/ab525c956d
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix test session reuse but expire (#9824)</title>
<updated>2024-02-03T13:35:44+00:00</updated>
<author>
<name>NARUSE, Yui</name>
<email>nurse@users.noreply.github.com</email>
</author>
<published>2024-02-03T13:35:44+00:00</published>
<link rel='alternate' type='text/html' href='https://git.ruby-lang.org/ruby.git/commit/?id=45064610725ddd81a5ea3775da35aa46985bc789'/>
<id>45064610725ddd81a5ea3775da35aa46985bc789</id>
<content type='text'>
* Show OpenSSL version in the error message of assert_equal

* OpenSSL 3.2.1 30 Jan 2024 is also broken</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
* Show OpenSSL version in the error message of assert_equal

* OpenSSL 3.2.1 30 Jan 2024 is also broken</pre>
</div>
</content>
</entry>
<entry>
<title>Omit test_session_reuse_but_expire if OpenSSL 3.2.0</title>
<updated>2023-11-25T16:18:48+00:00</updated>
<author>
<name>Nobuyoshi Nakada</name>
<email>nobu@ruby-lang.org</email>
</author>
<published>2023-11-25T16:18:48+00:00</published>
<link rel='alternate' type='text/html' href='https://git.ruby-lang.org/ruby.git/commit/?id=1b7376423d3bf79ba37856eae8f45d59ecc9c170'/>
<id>1b7376423d3bf79ba37856eae8f45d59ecc9c170</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Omit a broken https test on MinGW</title>
<updated>2023-11-25T05:43:34+00:00</updated>
<author>
<name>Takashi Kokubun</name>
<email>takashikkbn@gmail.com</email>
</author>
<published>2023-11-25T05:43:29+00:00</published>
<link rel='alternate' type='text/html' href='https://git.ruby-lang.org/ruby.git/commit/?id=de37b780508d4ced5837f39446d3c8c93ef9ec7c'/>
<id>de37b780508d4ced5837f39446d3c8c93ef9ec7c</id>
<content type='text'>
This started to reliably fail on MinGW at an irrelevant commit:
https://github.com/ruby/ruby/actions/runs/6981002841/job/18997302124
https://github.com/ruby/ruby/actions/runs/6981946473/job/19000104223
https://github.com/ruby/ruby/actions/runs/6983823136/job/19005613809
https://github.com/ruby/ruby/actions/runs/6983912116/job/19005844596
https://github.com/ruby/ruby/actions/runs/6984215921/job/19006649495
https://github.com/ruby/ruby/actions/runs/6984383103/job/19007100446
https://github.com/ruby/ruby/actions/runs/6986489509/job/19012000642

So this failure is not detecting a new bug. Let's skip this until we fix
this test for MinGW.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This started to reliably fail on MinGW at an irrelevant commit:
https://github.com/ruby/ruby/actions/runs/6981002841/job/18997302124
https://github.com/ruby/ruby/actions/runs/6981946473/job/19000104223
https://github.com/ruby/ruby/actions/runs/6983823136/job/19005613809
https://github.com/ruby/ruby/actions/runs/6983912116/job/19005844596
https://github.com/ruby/ruby/actions/runs/6984215921/job/19006649495
https://github.com/ruby/ruby/actions/runs/6984383103/job/19007100446
https://github.com/ruby/ruby/actions/runs/6986489509/job/19012000642

So this failure is not detecting a new bug. Let's skip this until we fix
this test for MinGW.
</pre>
</div>
</content>
</entry>
<entry>
<title>[ruby/net-http] Force TLS version to 1.2 when using LibreSSL</title>
<updated>2023-10-16T20:23:50+00:00</updated>
<author>
<name>Jeremy Evans</name>
<email>code@jeremyevans.net</email>
</author>
<published>2023-10-16T19:58:55+00:00</published>
<link rel='alternate' type='text/html' href='https://git.ruby-lang.org/ruby.git/commit/?id=3dec5dc3462286cdbdb53e496e6175a82bdc39b7'/>
<id>3dec5dc3462286cdbdb53e496e6175a82bdc39b7</id>
<content type='text'>
This comment previously specified TLS 1.2, but actually set the
version to TLS 1.0.  LibreSSL 3.8.1 (included in OpenBSD 7.4)
dropped support for TLS 1.0/1.1 for security reasons, which
broke this test.  Switch the test to use TLS 1.2 as documented
so it will continue to work on OpenBSD 7.4+.

https://github.com/ruby/net-http/commit/97be4de53a
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This comment previously specified TLS 1.2, but actually set the
version to TLS 1.0.  LibreSSL 3.8.1 (included in OpenBSD 7.4)
dropped support for TLS 1.0/1.1 for security reasons, which
broke this test.  Switch the test to use TLS 1.2 as documented
so it will continue to work on OpenBSD 7.4+.

https://github.com/ruby/net-http/commit/97be4de53a
</pre>
</div>
</content>
</entry>
<entry>
<title>[ruby/net-http] Feature detect to make net/http usable with JRuby</title>
<updated>2022-04-20T04:01:08+00:00</updated>
<author>
<name>Karol Bucek</name>
<email>kares@users.noreply.github.com</email>
</author>
<published>2022-04-20T04:01:02+00:00</published>
<link rel='alternate' type='text/html' href='https://git.ruby-lang.org/ruby.git/commit/?id=cf73cf5981802f2bcc30aba07914acf4286cda5a'/>
<id>cf73cf5981802f2bcc30aba07914acf4286cda5a</id>
<content type='text'>
Handle missing session_new_cb= and do not call
session_cache_mode=, as JRuby SSL does not support
these methods.

https://github.com/ruby/net-http/commit/3237ef4d8c
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Handle missing session_new_cb= and do not call
session_cache_mode=, as JRuby SSL does not support
these methods.

https://github.com/ruby/net-http/commit/3237ef4d8c
</pre>
</div>
</content>
</entry>
<entry>
<title>[ruby/net-http] Do not set SNI hostname if connecting to IP address</title>
<updated>2022-02-02T20:10:21+00:00</updated>
<author>
<name>Jeremy Evans</name>
<email>code@jeremyevans.net</email>
</author>
<published>2022-01-04T18:22:37+00:00</published>
<link rel='alternate' type='text/html' href='https://git.ruby-lang.org/ruby.git/commit/?id=7529c538915cd1765b0a362ca64e8f8ff439d7fc'/>
<id>7529c538915cd1765b0a362ca64e8f8ff439d7fc</id>
<content type='text'>
RFC 6066, section 3, explicitly disallows the use of an IP address
as an SNI server name.  So check if the connection is being made
to an IP address using the resolv regexps, and do not set an SNI
hostname in that case.

Recent changes to LibreSSL make it more strictly follow RFC 6066,
resulting an s.hostname= raising an error if passed an IP address.
When such verions of LibreSSL are used, this change not only fixes
the net/http tests, it also fixes tests for webrick and open-uri,
which both make SSL connections to 127.0.0.1 using net/http in
their tests.

Avoid warning in the openssl extension by unsetting
@ssl_context.verify_hostname if connecting to an IP address.
Make changes so that the post_connection_check still happens
when connecting to an IP address, which is necessary to keep
checking that the certificate returned includes the IP address,
which one of the tests depends on.

Revert the previous change that modified the regexp used for
checking the error message.

https://github.com/ruby/net-http/commit/fa68e64bee
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
RFC 6066, section 3, explicitly disallows the use of an IP address
as an SNI server name.  So check if the connection is being made
to an IP address using the resolv regexps, and do not set an SNI
hostname in that case.

Recent changes to LibreSSL make it more strictly follow RFC 6066,
resulting an s.hostname= raising an error if passed an IP address.
When such verions of LibreSSL are used, this change not only fixes
the net/http tests, it also fixes tests for webrick and open-uri,
which both make SSL connections to 127.0.0.1 using net/http in
their tests.

Avoid warning in the openssl extension by unsetting
@ssl_context.verify_hostname if connecting to an IP address.
Make changes so that the post_connection_check still happens
when connecting to an IP address, which is necessary to keep
checking that the certificate returned includes the IP address,
which one of the tests depends on.

Revert the previous change that modified the regexp used for
checking the error message.

https://github.com/ruby/net-http/commit/fa68e64bee
</pre>
</div>
</content>
</entry>
</feed>
