ruby.git/test/openssl/utils.rb, branch v3_2_11 The Ruby Programming Language [ruby/openssl] test/openssl/test_ssl: assume ECC support 2021-10-23T04:38:37+00:00 Kazuki Yamaguchi k@rhe.jp 2021-09-27T06:34:28+00:00 5a8e1c520ac71c76f6424f9ef5aef64a79527f78 Disabling ECC support of OpenSSL is impractical nowadays. We still try to have the C extension compile on no-ec builds (as well as no-dh or no-engine, etc.) as long as we can, but keeping test cases for such an extreme scenario is not worth the effort. https://github.com/ruby/openssl/commit/2cd01d4676 
Disabling ECC support of OpenSSL is impractical nowadays.

We still try to have the C extension compile on no-ec builds (as well
as no-dh or no-engine, etc.) as long as we can, but keeping test cases
for such an extreme scenario is not worth the effort.

https://github.com/ruby/openssl/commit/2cd01d4676
[ruby/openssl] test/openssl/test_ssl: assume TLS 1.2 support 2021-10-23T04:38:36+00:00 Kazuki Yamaguchi k@rhe.jp 2021-09-27T06:32:39+00:00 0e805e73cedbce3748c979049c17c74f3f0eca43 Current versions of OpenSSL and LibreSSL all support TLS 1.2, so there is no need for checking the availability. https://github.com/ruby/openssl/commit/a175a41529 
Current versions of OpenSSL and LibreSSL all support TLS 1.2, so there
is no need for checking the availability.

https://github.com/ruby/openssl/commit/a175a41529
[ruby/openssl] test/openssl/utils: remove dup_public helper method 2021-10-23T04:38:36+00:00 Kazuki Yamaguchi k@rhe.jp 2021-05-31T02:44:05+00:00 37632a0ac635082e4ca9ca5b1c8da6b6770ff0ed It uses deprecated PKey::{RSA,DSA,DH}#set_* methods, which will not work with OpenSSL 3.0. The same can easily be achieved using PKey#public_to_der regardless of the key kind. https://github.com/ruby/openssl/commit/7b66eaa2db 
It uses deprecated PKey::{RSA,DSA,DH}#set_* methods, which will not
work with OpenSSL 3.0. The same can easily be achieved using
PKey#public_to_der regardless of the key kind.

https://github.com/ruby/openssl/commit/7b66eaa2db
[ruby/openssl] require Ruby 2.6 or later 2021-10-16T10:39:13+00:00 Kazuki Yamaguchi k@rhe.jp 2021-10-13T05:24:53+00:00 cc8ff8b50d445b0621fef9f3dce0da02ec3d406f Drop support for Ruby 2.3, 2.4, and 2.5. As of 2021-10, Ruby 2.6 is the oldest version that still receives security fixes from the Ruby core team, so it doesn't make much sense to keep code for those ancient versions. https://github.com/ruby/openssl/commit/3436bd040d 
Drop support for Ruby 2.3, 2.4, and 2.5.

As of 2021-10, Ruby 2.6 is the oldest version that still receives
security fixes from the Ruby core team, so it doesn't make much sense
to keep code for those ancient versions.

https://github.com/ruby/openssl/commit/3436bd040d
Use Test::Unit::PendedError instead of MiniTest::Skip for test-unit migration 2021-09-06T10:33:56+00:00 Hiroshi SHIBATA hsbt@ruby-lang.org 2021-09-06T10:33:56+00:00 ecfbf1df33a1e90008baa131369c80cfa6282692 






[ruby/openssl] test: adjust test cases for LibreSSL 3.2.4
2021-03-16T10:37:06+00:00

Kazuki Yamaguchi
k@rhe.jp

2021-02-25T08:28:23+00:00

a3f97007bbd1012a4b7662b8166118b81b52527a

LibreSSL 3.2.4 made the certificate verification logic back closer to
pre-3.2.2 one, which is more compatible with OpenSSL.

Part of the fixes added by commit a0e98d48c91f ("Enhance TLS 1.3 support
on LibreSSL 3.2/3.3", 2020-12-03) is required for 3.2.2 and 3.2.3 only
(and ~3.3.1, however 3.3 does not have a stable release yet). Since both
releases are security fix, it should be safe to remove those special
treatment from our test suite.

While we are at it, TestSSL#test_ecdh_curves is split into TLS 1.2 and
TLS 1.3 variants for clarity.

https://github.com/ruby/openssl/commit/a9954bac22





LibreSSL 3.2.4 made the certificate verification logic back closer to
pre-3.2.2 one, which is more compatible with OpenSSL.

Part of the fixes added by commit a0e98d48c91f ("Enhance TLS 1.3 support
on LibreSSL 3.2/3.3", 2020-12-03) is required for 3.2.2 and 3.2.3 only
(and ~3.3.1, however 3.3 does not have a stable release yet). Since both
releases are security fix, it should be safe to remove those special
treatment from our test suite.

While we are at it, TestSSL#test_ecdh_curves is split into TLS 1.2 and
TLS 1.3 variants for clarity.

https://github.com/ruby/openssl/commit/a9954bac22







[ruby/openssl] pkey: have PKey.read parse PEM-encoded DHParameter
2021-03-16T10:16:10+00:00

Kazuki Yamaguchi
k@rhe.jp

2017-03-18T08:26:33+00:00

efad0166c660d565d5e80e862cd9ff9457f8ed03

Try PEM_read_bio_Parameters(). Only PEM format is supported at the
moment since corresponding d2i_* functions are not provided by OpenSSL.

https://github.com/ruby/openssl/commit/867e5c021b





Try PEM_read_bio_Parameters(). Only PEM format is supported at the
moment since corresponding d2i_* functions are not provided by OpenSSL.

https://github.com/ruby/openssl/commit/867e5c021b







[ruby/openssl] Look up digest by name instead of constant
2020-05-13T06:47:51+00:00

Bart de Water
bartdewater@gmail.com

2020-04-19T15:14:36+00:00

0b2c70eaa1e8e41fcb6332b22b084dabb81e637c

https://github.com/ruby/openssl/commit/b28fb2f05c





https://github.com/ruby/openssl/commit/b28fb2f05c







Import openssl-2.2.0 (#2693)
2020-02-16T06:21:29+00:00

Hiroshi SHIBATA
hsbt@ruby-lang.org

2020-02-16T06:21:29+00:00

b99775b163ce44079c1f8727ce9b4ed8bb03489d

Import the master branch of ruby/openssl for preparing to release openssl-2.2.0





Import the master branch of ruby/openssl for preparing to release openssl-2.2.0







test/openssl/utils.rb: Extend the timeout for armv7l
2019-06-07T14:37:55+00:00

Yusuke Endoh
mame@ruby-lang.org

2019-06-07T14:33:23+00:00

75751dca2b9f573db923cecd9767e9174fb69a98

https://rubyci.org/logs/rubyci.s3.amazonaws.com/scw-9d6766/ruby-master/log/20190607T051708Z.fail.html.gz





https://rubyci.org/logs/rubyci.s3.amazonaws.com/scw-9d6766/ruby-master/log/20190607T051708Z.fail.html.gz