From 8d764960946bdae7270ad22e8df9ff5287c88ca8 Mon Sep 17 00:00:00 2001 From: nahi Date: Mon, 23 Aug 2010 03:06:30 +0000 Subject: * ext/openssl/ossl_asn1.c (obj_to_asn1bool): fixed ASN1::Boolean encoding issue for OpenSSL 1.0.0 compatibility. ASN1::Boolean.new(false).to_der wrongly generated "\1\1\377" which means 'true'. ASN1_TYPE_set of OpenSSL <= 0.9.8 treats value 0x100 as 'false' but OpenSSL >= 1.0.0 treats it as 'true'. ruby-ossl was using 0x100 for 'false' for backward compatibility. Just use 0x0 for the case OpenSSL >= OpenSSL 0.9.7. * test/openssl/test_asn1.rb: test added. git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8@29071 b2dd03c8-39d4-4d8f-98ff-823fe69b080e --- ChangeLog | 14 ++++++++++++++ 1 file changed, 14 insertions(+) (limited to 'ChangeLog') diff --git a/ChangeLog b/ChangeLog index 35ea4d0144..9ad75eac00 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,17 @@ +Mon Aug 23 11:42:41 2010 NAKAMURA, Hiroshi + + * ext/openssl/ossl_asn1.c (obj_to_asn1bool): fixed ASN1::Boolean + encoding issue for OpenSSL 1.0.0 compatibility. + ASN1::Boolean.new(false).to_der wrongly generated "\1\1\377" which + means 'true'. [BUG:3735] + + ASN1_TYPE_set of OpenSSL <= 0.9.8 treats value 0x100 as 'false' but + OpenSSL >= 1.0.0 treats it as 'true'. ruby-ossl was using 0x100 for + 'false' for backward compatibility. Just use 0x0 for the case + OpenSSL >= OpenSSL 0.9.7. + + * test/openssl/test_asn1.rb: test added. + Thu Aug 19 22:57:43 2010 NAKAMURA, Hiroshi * test/openssl/{test_x509cert.rb,test_ssl.rb,test_x509req.rb}: added -- cgit v1.2.3