diff options
| author | Kazuki Yamaguchi <k@rhe.jp> | 2025-04-20 20:26:00 +0900 |
|---|---|---|
| committer | git <svn-admin@ruby-lang.org> | 2025-10-08 13:59:39 +0000 |
| commit | ea79fe225cc28960595b53cf20e698ec5bbddb0e (patch) | |
| tree | 596e3f926cc46aec6cc6440d31ea489d1ae127ad /spec/ruby/core | |
| parent | 8dfe5403415fc1bd0c6ce56e5edd8749d081e33d (diff) | |
[ruby/openssl] ssl: use SSL_CTX_set_dh_auto() by default
Rely on OpenSSL's builtin DH parameters for TLS 1.2 and earlier instead
of providing a default SSLContext#tmp_dh_callback proc.
SSL_CTX_set_dh_auto() has been available since OpenSSL 1.1.0.
The parameters can still be overridden by specifying
SSLContext#tmp_dh_callback or #tmp_dh, as confirmed by existing tests.
SSLContext#tmp_dh_callback depends on a deprecated OpenSSL feature. We
also prefer not to hard-code parameters, which is a maintenance burden.
This change also improves Ractor compatibility by removing the
unshareable proc.
https://github.com/ruby/openssl/commit/9cfec9bf5e
Diffstat (limited to 'spec/ruby/core')
0 files changed, 0 insertions, 0 deletions