ruby.git/test/openssl/test_ossl.rb, branch v3_3_11

Update openssl gem to 3.2.2

2025-10-11T07:53:43+00:00

[ruby/openssl] test/openssl/test_ossl.rb: relax assertion for error messages

2023-09-06T10:30:55+00:00

The test case test_error_data utilizes the error message generated by
X509V3_EXT_nconf_nid(). The next commit will use X509V3_EXT_nconf(),
which generates a slightly different error message. Let's adapt the
check to it.

https://github.com/ruby/openssl/commit/9cdfa3a4d1

[ruby/openssl] Include "additional data" message in OpenSSL errors

2023-08-16T05:48:41+00:00

Error entries in the OpenSSL error queue may contain additional
contextual information associated with the error, which can be helpful
when debugging.

This "additional data" is currently only printed to stderr when
OpenSSL.debug is enabled. Let's include this in the exception messages
raised with ossl_raise(), too.

	$ ruby -Ilib -ropenssl -e'OpenSSL.debug=true; OpenSSL::SSL::SSLContext.new.ecdh_curves="P-256:not-a-curve"'
	-e:1: warning: error on stack: error:0A080106:SSL routines:gid_cb:passed invalid argument (group 'not-a-curve' cannot be set)
	-e:1:in `ecdh_curves=': passed invalid argument (group 'not-a-curve' cannot be set) (OpenSSL::SSL::SSLError)
		from -e:1:in `'

https://github.com/ruby/openssl/commit/1c5bbdd68e

[ruby/openssl] Look up digest by name instead of constant

2020-05-13T06:47:51+00:00

https://github.com/ruby/openssl/commit/b28fb2f05c

Make OpenSSL::OSSL#test_memcmp_timing robust

2020-02-16T10:55:19+00:00

The test was too fragile.  Actually, it fails on one of our CIs
immediately after it was merged to ruby/ruby.

https://gist.github.com/ko1/7ea4a5826641f79e2f9e041d83e45dba#file-brlog-trunk_clang_40-20200216-101730-L532-L535
https://gist.github.com/ko1/1c657746092b871359d8bf9e0ad28921#file-brlog-trunk-test4-20200216-104518-L473-L476

* Two measurements, a-b and a-c, must be interative instead of
  sequential; the execution time will be easily affected by disturbance
  (say, cron job or some external process invoked during measurement)

* The comparison of the two results must be relative instead of
  absolute; slow machine may take several tens of seconds for each
  execution, and one delta second is too small.  The test cases of a, b,
  and c are very extreme, so if the target method has a bug, the two
  execution times would be very different.  So I think it is enough to
  check if the difference is less than 10 times.

This change is the same as https://github.com/ruby/openssl/pull/332

Import openssl-2.2.0 (#2693)

2020-02-16T06:21:29+00:00

Import the master branch of ruby/openssl for preparing to release openssl-2.2.0