Ruby Issue Tracking System

03/16/2021

10:16 AM Ruby Revision c71afc9d (git): [ruby/openssl] Add compare? method to OpenSSL::PKey that wraps EVP_PKEY_cmp.

Explicitly check for type given some conflicting statements within openssl's
documentation around EVP_PKEY_cmp and EVP_PKEY_ASN1_METHOD(3).
Add documentation with an example for compare?
https://github.com/ruby/openssl/commit/0bf51da6e2 rinzler (Colton Jenkins)

07/04/2017

05:17 PM Ruby Feature #13681: Ruby digest init fails in FIPS mode when built against OpenSSL ~> 1.0.1

rhenium (Kazuki Yamaguchi) wrote:
> rinzler (Colton Jenkins) wrote:
> ...
Yep, I reviewed and noticed it doesn't attempt to access EVP_MD_CTX directly at all. Just passes it around.
>
> ...
Yes, if openssl with FOM is present then u... rinzler (Colton Jenkins)

06/30/2017

03:43 PM Ruby Feature #13681: Ruby digest init fails in FIPS mode when built against OpenSSL ~> 1.0.1

rhenium (Kazuki Yamaguchi) wrote:
> rinzler (Colton Jenkins) wrote:
> ...
I think I'll move forward with adding in the above recommendations and place a condition for OPENSSL_VERSION < 1.1.
Given FOM 3.0 is still up in the air (https:... rinzler (Colton Jenkins)

06/28/2017

02:35 PM Ruby Feature #13681: Ruby digest init fails in FIPS mode when built against OpenSSL ~> 1.0.1

rhenium (Kazuki Yamaguchi) wrote:
> rinzler (Colton Jenkins) wrote:
> ...
Ah ok, do you know what will happen to openssl::digest then given it uses the same? Curious if that plans to be refactored upon 1.1.x I could do the same with th... rinzler (Colton Jenkins)

06/27/2017

08:38 AM Ruby Feature #13681: Ruby digest init fails in FIPS mode when built against OpenSSL ~> 1.0.1

nobu (Nobuyoshi Nakada) wrote:
> rhenium (Kazuki Yamaguchi) wrote:
> ...
K, I'll check that out. Haven't coded in C in quite some time.
Will do. rinzler (Colton Jenkins)

08:37 AM Ruby Feature #13681: Ruby digest init fails in FIPS mode when built against OpenSSL ~> 1.0.1

rhenium (Kazuki Yamaguchi) wrote:
> > ```diff
> ...
Ah, good catch.
>
> ...
Hasn't it always been opaque? They just moved the struct def from evp.h -> evp_locl.h, but the typedef is still in ossl_typ.h
>
> ...
Not sure I follow... rinzler (Colton Jenkins)

02:29 AM Ruby Feature #13681 (Open): Ruby digest init fails in FIPS mode when built against OpenSSL ~> 1.0.1

When FIPS (https://en.wikipedia.org/wiki/FIPS_140-2) is enabled attempting to initialize any digest will kill the process due to https://github.com/openssl/openssl/commit/65300dcfb04bae643ea7b8f42ff8c8f1b1210a9e
Example,
~~~
> req... rinzler (Colton Jenkins)