Ruby Issue Tracking System

05/15/2025

04:51 PM Ruby Revision 06a56a7f (git): [ruby/openssl] ssl: fix potential memory leak in SSLContext#setup

If SSL_CTX_add_extra_chain_cert() fails, the refcount of x509 must be
handled by the caller. This should only occur d... rhenium (Kazuki Yamaguchi)

04:50 PM Ruby Revision b43c7cf8 (git): [ruby/openssl] cipher: remove Cipher#encrypt(password, iv) form

OpenSSL::Cipher#encrypt and #decrypt have long supported a hidden
feature to derive a key and an IV from the String a... rhenium (Kazuki Yamaguchi)

04/20/2025

07:41 AM Ruby Revision 93afcfcd (git): [ruby/openssl] asn1: check for missing EOC in indefinite length encoding

EOC octets are required at the end of contents of a constructed encoding
that uses the indefinite length form. This c... rhenium (Kazuki Yamaguchi)

04/16/2025

03:16 PM Ruby Revision 0a8a641d (git): [ruby/openssl] ssl: fix SSLSocket#syswrite with String-convertible objects

Correctly pass the new object assigned by StringValue() to
ossl_ssl_write_internal_safe().
This is a follow-up to co... rhenium (Kazuki Yamaguchi)

04/03/2025

05:58 PM Ruby Revision 6b5e187d (git): [ruby/openssl] pkcs7: fix test failure on RHEL 9

The test case test_split_content fails on RHEL 9 and Fedora 41 because
their OpenSSL packages do not accept SHA-1 sig... rhenium (Kazuki Yamaguchi)

05:58 PM Ruby Revision 3911113b (git): [ruby/openssl] pkcs7: update test case test_graceful_parsing_failure

Using test_pkcs7.rb as an example invalid input is not reliable because
we may happen to include a valid PKCS#7 PEM b... rhenium (Kazuki Yamaguchi)

02/28/2025

04:33 AM Ruby Revision a6da77c9 (git): [ruby/openssl] ssl: fix tests using TLS 1.1 or older

Commit https://github.com/ruby/openssl/commit/aa7f03e18f26 broke test_minmax_version and test_fallback_scsv
on system... rhenium (Kazuki Yamaguchi)

02/27/2025

05:18 PM Ruby Revision d4b8da66 (git): [ruby/openssl] ssl: refactor check_supported_protocol_versions

As reported in <https://github.com/ruby/ruby/pull/12823>,
check_supported_protocol_versions is unstable and occasiona... rhenium (Kazuki Yamaguchi)

05:04 PM Ruby Revision f5a74bd6 (git): [ruby/openssl] digest: always run SHA-3 and truncated SHA-2 tests

The "pend" are no longer necessary, as they work with all OpenSSL
variants we currently support. They were added in O... rhenium (Kazuki Yamaguchi)

05:04 PM Ruby Revision c0f3dcf7 (git): [ruby/openssl] digest: correct assert_equal usage in test_sha3

assert_equal accepts an expected value as the first argument.
https://github.com/ruby/openssl/commit/8faa1d89de rhenium (Kazuki Yamaguchi)