Ruby Issue Tracking System

07/12/2025

01:25 PM Ruby Revision 753e3b7a (git): [ruby/openssl] asn1: align UTCTime year range with RFC 5280

ASN.1 UTCTime uses two-digit years. While X.680 does not specify how to
map them as far as I can tell, X.509/PKIX use... rhenium (Kazuki Yamaguchi)

07/05/2025

02:03 PM Ruby Revision b6817392 (git): [ruby/openssl] pkey/ec: avoid calling SYM2ID() on user-supplied objects

Compare by the VALUE value instead of ID. Calling SYM2ID() on a dynamic
symbol will pin a permanent ID.
These method... rhenium (Kazuki Yamaguchi)

07/04/2025

09:17 AM Ruby Revision 38993efb (git): [ruby/openssl] ssl: rename SSLContext#ecdh_curves= to #groups=

TLS 1.3 renamed the "elliptic_curves" extension to "supported_groups"
to reflect that it now covers more than just EC... rhenium (Kazuki Yamaguchi)

06/25/2025

05:13 PM Ruby Revision 0c6075bd (git): [ruby/openssl] pkey: handle EVP_PKEY_KEYMGMT return by EVP_PKEY_id()

For algorithms implemented solely in an OpenSSL 3 provider, without an
associated EVP_PKEY_METHOD, EVP_PKEY_id() retu... rhenium (Kazuki Yamaguchi)

05:13 PM Ruby Revision a1996b32 (git): [ruby/openssl] pkey: use EVP_PKEY_new_raw_{private,public}_key_ex() if available

Algorithms implemented only in OpenSSL 3 providers may not have a
corresponding NID. The *_ex() variants have been ad... rhenium (Kazuki Yamaguchi)

05:13 PM Ruby Revision ca0a315f (git): [ruby/openssl] ossl.h: include <openssl/provider.h> in ossl.h

Move the #include from ossl_provider.c to ossl.h. As OpenSSL 3 provider
functions will be used in multiple source fil... rhenium (Kazuki Yamaguchi)

06/21/2025

10:57 AM Ruby Revision 0cec4a14 (git): Restore getrandom(2) path for Linux with glibc 2.36 or later

This is a follow-up to commit b120f5e38d9c (avoid fork-unsafe arc4random
implementations, 2018-09-04).
Avoid definin... rhenium (Kazuki Yamaguchi)

08:24 AM Ruby Bug #21448: Random.urandom may fail to fall back to reading /dev/urandom on Linux < 3.17

FWIW `getentropy()` has recently made it into POSIX (with a slight difference in errno behavior compared to existing ... rhenium (Kazuki Yamaguchi)

06/20/2025

05:58 PM Ruby Revision 0d75dd1f (git): [ruby/openssl] ssl: update rdoc for SSLContext#ciphers= and #ciphersuites=

https://github.com/ruby/openssl/commit/54f22395e7 rhenium (Kazuki Yamaguchi)

05:58 PM Ruby Revision 112ba706 (git): [ruby/openssl] ssl: add SSLContext#sigalgs= and #client_sigalgs=

Add methods for setting supported signature algorithms, corresponding
to SSL_CTX_set1_sigalgs_list() and SSL_CTX_set1... rhenium (Kazuki Yamaguchi)