ruby.git/test/openssl/test_ts.rb, branch v3_3_11

[ruby/openssl] fix segv in Timestamp::{Request,Response,TokenInfo}.new

2021-10-16T09:34:35+00:00

prevent `ossl_ts_*_free()` from calling when `d2i_TS_*_bio()` failed.

https://github.com/ruby/openssl/commit/b29e215786

[ruby/openssl] test: adjust test cases for LibreSSL 3.2.4

2021-03-16T10:37:06+00:00

LibreSSL 3.2.4 made the certificate verification logic back closer to
pre-3.2.2 one, which is more compatible with OpenSSL.

Part of the fixes added by commit a0e98d48c91f ("Enhance TLS 1.3 support
on LibreSSL 3.2/3.3", 2020-12-03) is required for 3.2.2 and 3.2.3 only
(and ~3.3.1, however 3.3 does not have a stable release yet). Since both
releases are security fix, it should be safe to remove those special
treatment from our test suite.

While we are at it, TestSSL#test_ecdh_curves is split into TLS 1.2 and
TLS 1.3 variants for clarity.

https://github.com/ruby/openssl/commit/a9954bac22

[ruby/openssl] Fixed the results of OpenSSL::Timestamp::Response#failure_info

2021-03-16T10:37:06+00:00

Made stored values `Symbol`s instead of `ID`s.

Fixes https://bugs.ruby-lang.org/issues/17625

Co-Authored-By: xtkoba (Tee KOBAYASHI) 

https://github.com/ruby/openssl/commit/f2d004679a

[ruby/openssl] Enhance TLS 1.3 support on LibreSSL 3.2/3.3

2021-03-16T10:37:06+00:00

This defines TLS1_3_VERSION when using LibreSSL 3.2+.  LibreSSL 3.2/3.3
doesn't advertise this by default, even though it will use TLS 1.3
in both client and server modes.

Changes between LibreSSL 3.1 and 3.2/3.3 broke a few tests, Defining
TLS1_3_VERSION by itself fixes 1 test failure.  A few tests now
fail on LibreSSL 3.2/3.3 unless TLS 1.2 is set as the maximum version,
and this adjusts those tests.  The client CA test doesn't work in
LibreSSL 3.2+, so I've marked that as pending.

For the hostname verification, LibreSSL 3.2.2+ has a new stricter
hostname verifier that doesn't like subjectAltName such as
c*.example.com and d.*.example.com, so adjust the related tests.

With these changes, the tests pass on LibreSSL 3.2/3.3.

https://github.com/ruby/openssl/commit/a0e98d48c9

[ruby/openssl] Look up digest by name instead of constant

2020-05-13T06:47:51+00:00

https://github.com/ruby/openssl/commit/b28fb2f05c

[ruby/openssl] ts: simplify OpenSSL::Timestamp::Request#algorithm

2020-02-17T11:50:47+00:00

Stop the special treatment of invalid hashAlgorithm of the message
imprint. Those invalid values can only appear after the object is
instantiated, before the user sets an actual message digest algorithm.

OpenSSL::Timestamp::TokenInfo#algorithm already does the same.

Also, remove the test case "test_create_request" since it does not make
much sense. Those fields are to be set by the user after creation of
the object and checking the initial value is pointless.

Fixes: https://github.com/ruby/openssl/issues/335

https://github.com/ruby/openssl/commit/890a6476fa

Revert "test/openssl/test_ts.rb: tentatively skip a failing test on CentOS 6.9"

2020-02-16T13:16:22+00:00

This reverts commit a6d007c70b3aa5b55c9ca774446130356bd36eac.

Unfortunately, the test fails on armv7l
https://rubyci.org/logs/rubyci.s3.amazonaws.com/scw-9d6766/ruby-master/log/20200216T091708Z.fail.html.gz

test/openssl/test_ts.rb: tentatively skip a failing test on CentOS 6.9

2020-02-16T12:20:09+00:00

CentOS 6.9 will be EOL at Nov.  Ruby 3.0 (or 2.8) release version will
not support CentOS 6.9, so I'll remove the environment after it become
green.

Import openssl-2.2.0 (#2693)

2020-02-16T06:21:29+00:00

Import the master branch of ruby/openssl for preparing to release openssl-2.2.0