ruby.git/test/openssl/test_pkey.rb, branch ruby_3_3

Merge openssl-3.2.4

2026-05-14T04:59:53+00:00

The changes can be found at:

    https://github.com/ruby/openssl/compare/v3.2.3...v3.2.4

[ruby/openssl] test_pkey.rb: Refactor the test_ed25519 on FIPS.

2023-09-21T18:04:55+00:00

* Split the test in the FIPS case as another test.
* test/openssl/utils.rb: Add omit_on_fips and omit_on_non_fips methods.

https://github.com/ruby/openssl/commit/4d64c38ed0

[ruby/openssl] Remove the pending logics by the pend_on_openssl_issue_21493.

2023-08-28T03:05:32+00:00

Because we will add a workaround to avoid this issue.

https://github.com/ruby/openssl/commit/d157ba1d3b

[ruby/openssl] test/openssl/test_pkey.rb: Fix pending tests in FIPS case.

2023-08-16T05:48:42+00:00

https://github.com/ruby/openssl/commit/f9980d88aa

[ruby/openssl] Use openssl? instead of OpenSSL::OPENSSL_VERSION_NUMBER.

2023-08-16T05:48:42+00:00

Update the `openssl?` method by adding status argument.

Note the format is below.

* OpenSSL 3: 0xMNN00PP0 (major minor 00 patch 0)
* OpenSSL 1: 0xMNNFFPPS (major minor fix patch status)

See 
for details.

https://github.com/ruby/openssl/commit/db8deaacd3

[ruby/openssl] Add support for raw private/public keys

2023-07-12T14:40:58+00:00

(https://github.com/ruby/openssl/pull/646)

Add OpenSSL::PKey.new_raw_private_key, #raw_private_key and public
equivalents. These methods are useful for importing and exporting keys
that support "raw private/public key". Currently, OpenSSL implements
X25519/X448 and Ed25519/Ed448 keys.

[rhe: rewrote commit message]

https://github.com/ruby/openssl/commit/3f29525618

Co-authored-by: Bart de Water

[ruby/openssl] CI: Add the test/openssl/test_pkey.rb on the FIPS mode case.

2023-06-18T16:57:09+00:00

It's to test the `OpenSSL::PKey.read` in the `test/openssl/test_pkey.rb`.

I added the pending status to the following tests failing on the FIPS mode
case in the `test/openssl/test_pkey.rb`.

* `test_ed25519`
* `test_x25519`
* `test_compare?`

https://github.com/ruby/openssl/commit/8149cdf6e8

[ruby/openssl] test/openssl/test_pkey.rb: allow failures in test_s_generate_parameters

2022-12-26T06:09:21+00:00

Commit https://github.com/ruby/openssl/commit/f2e2a5e5ed8e ("test/openssl/test_pkey.rb: allow failures in
test_s_generate_parameters", 2022-12-23) was completely bogus. The
problem in OpenSSL 3.0.0-3.0.5 is that errors from the callback are
sometimes silently suppressed.

https://github.com/ruby/openssl/commit/ccc1594492

[ruby/openssl] test/openssl/test_pkey.rb: allow failures in test_s_generate_parameters

2022-12-23T00:39:15+00:00

The root cause has been fixed by OpenSSL 3.0.6, but Ubuntu 22.04's
OpenSSL package has not backported the patch yet.

Reference: https://github.com/ruby/openssl/issues/492

https://github.com/ruby/openssl/commit/f2e2a5e5ed

[ruby/openssl] test/openssl/test_pkey: use EC keys for PKey.generate_parameters tests

2021-10-23T04:38:39+00:00

OpenSSL 3.0 refuses to generate DSA parameters shorter than 2048 bits,
but generating 2048 bits parameters takes very long time. Let's use EC
in these test cases instead.

https://github.com/ruby/openssl/commit/c732387ee5