diff options
| author | Kazuki Yamaguchi <k@rhe.jp> | 2025-02-28 12:23:27 +0900 |
|---|---|---|
| committer | git <svn-admin@ruby-lang.org> | 2025-02-28 04:33:43 +0000 |
| commit | a6da77c9e95aab3be9f4553e94eea605bd95d2eb (patch) | |
| tree | a15e2c88cb37fc3892f923ced4f45843becb2b98 /test/ruby/test_array.rb | |
| parent | 42c0722f83d7ed60360bbaf17f2d45e7cfe7d121 (diff) | |
[ruby/openssl] ssl: fix tests using TLS 1.1 or older
Commit https://github.com/ruby/openssl/commit/aa7f03e18f26 broke test_minmax_version and test_fallback_scsv
on systems using OpenSSL 1.1.1 with a system-wide configuration file
that specifies MinProtocol=TLSv1.2.
http://rubyci.s3.amazonaws.com/debian11/ruby-master/log/20250228T003003Z.fail.html.gz
http://rubyci.s3.amazonaws.com/rhel8/ruby-master/log/20250228T003003Z.fail.html.gz
These test cases were already broken before the commit, but they were
being skipped because check_supported_protocol_versions failed to detect
TLS 1.1 support. To avoid affected by the configuration file, explicitly
reset SSLContext#min_version when TLS 1.1 or older is required.
The test cases are also broken with OpenSSL 3.0 or later, but this is
not currently visible because it still fails to detect TLS 1.1 support.
This is caused by the default SSLContext#security_level value, as
OpenSSL 3.0 changed TLS 1.1 to be disabled at level 1.
https://github.com/ruby/openssl/commit/6d0ea81b5e
Diffstat (limited to 'test/ruby/test_array.rb')
0 files changed, 0 insertions, 0 deletions
