Ruby Issue Tracking System

10/21/2014

08:31 PM Ruby master Bug #9659: crash in FIPS mode after unchecked algo->init_func failure

Nobuyoshi Nakada wrote:
> Is EVP API necessary?
The EVP API has been recommended over the old digest-specific API... jared.jennings.ctr (Jared Jennings)

07/01/2014

12:59 PM Ruby master Bug #6137: openssl: hardcoded MD5 use leads to SSL server failure in FIPS mode

Patch for 1.8.7 is at https://bugzilla.redhat.com/show_bug.cgi?id=802946#c4 (this won't be news to you, Vit, but any ... jared.jennings.ctr (Jared Jennings)

03/28/2014

05:54 PM Ruby master Bug #9659: crash in FIPS mode after unchecked algo->init_func failure

I've just compared the Debian and CentOS OpenSSL sources, and it looks like large parts of the FIPS functionality in ... jared.jennings.ctr (Jared Jennings)

12:29 AM Ruby master Bug #9659: crash in FIPS mode after unchecked algo->init_func failure

If any credit is given for finding this problem, it belongs to Joseph Yaworski; see https://tickets.puppetlabs.com/br... jared.jennings.ctr (Jared Jennings)

12:28 AM Ruby master Bug #9659: crash in FIPS mode after unchecked algo->init_func failure

Attached are three cumulative patches against source:/trunk@45452.
The first, 001-detect-digest-failure, changes t... jared.jennings.ctr (Jared Jennings)

03/24/2014

11:00 PM Ruby master Bug #9659: crash in FIPS mode after unchecked algo->init_func failure

I changed the `rb_digest_hash_init_func` typedef from a return type of `void` to `int`, so that the return value of `... jared.jennings.ctr (Jared Jennings)

03/20/2014

09:43 PM Ruby master Bug #9659: crash in FIPS mode after unchecked algo->init_func failure

Now I see that `rb_digest_hash_init_func_t` (source:ext/digest/digest.h@43668#L20) is a typedef for a pointer to a fu... jared.jennings.ctr (Jared Jennings)

07:50 PM Ruby master Bug #9659 (Closed): crash in FIPS mode after unchecked algo->init_func failure

This is just like #4944, but in the `digest` extension instead of the `openssl` extension.
On my host, which is co... jared.jennings.ctr (Jared Jennings)

03/14/2012

03:58 AM Ruby master Bug #6137: openssl: hardcoded MD5 use leads to SSL server failure in FIPS mode

SHA-1 would work too - for a few years, until it's cryptographically broken enough to no longer be FIPS approved, lik... jared.jennings.ctr (Jared Jennings)

12:43 AM Ruby master Bug #6137 (Closed): openssl: hardcoded MD5 use leads to SSL server failure in FIPS mode

=begin
I've got a host configured to be compliant with ((<U.S. Federal Information Processing Standard 140-2|URL:htt... jared.jennings.ctr (Jared Jennings)