Backport RubyGems fixes in r39166 to ruby 2.0.0
r39166 contains two RubyGems fixes.
The change to lib/rubygems/package.rb is a critical bug fix for RubyGems signing support. Without this fix users of the LowSecurity policy will not be able to install signed gems.
The change to lib/rubygems/package/old.rb is not a critical bug fix. It will make my diagnosis of problems in RubyGems easier, though. It does not change operation of RubyGems in Ruby 2.0.0.
lib/rubygems/package.rb: Include checksums.yaml.gz signatures for
test/rubygems/test_gem_package.rb: Test for the above.
git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_2_0_0@39227 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
#2 [ruby-core:52078] Updated by drbrain (Eric Hodel) over 5 years ago
The change to lib/rubygems/package/old.rb is not critical. It suppresses a warning almost nobody will ever see and fixes behavior on 1.8.7. These are not sufficient for inclusion.
The change to lib/rubygems/package.rb is critical. Without it users will not be able to install signed gems built with rubygems 2.0 or newer on ruby 2.0.0 without upgrading rubygems.
The attached patch fixes only the critical issue.