Ruby Issue Tracking System

10/24/2021

03:40 PM Ruby master Revision e1918670 (git): [ruby/openssl] bn: make BN.pseudo_rand{,_range} an alias of BN.rand{,_range}

BN_pseudo_rand() and BN_pseudo_rand_range() are deprecated in
OpenSSL 3.0. Since they are identical to their non-'pse... rhenium (Kazuki Yamaguchi)

03:40 PM Ruby master Revision e10dfdf6 (git): [ruby/openssl] bn: expand BIGNUM_RAND and BIGNUM_RAND_RANGE macros

Now that BN.pseudo_rand{,_range} are alias, those macros are only used
once. Let's expand the macros for better reada... rhenium (Kazuki Yamaguchi)

03:40 PM Ruby master Revision ee713161 (git): [ruby/openssl] pkey/ec: use EC_GROUP_free() instead of EC_GROUP_clear_free()

EC_GROUP_clear_free() is deprecated in OpenSSL 3.0.
EC_GROUP does not include any sensitive data, so we can safely u... rhenium (Kazuki Yamaguchi)

03:40 PM Ruby master Revision 1b5ccc8a (git): [ruby/openssl] pkey, ssl: use EVP_PKEY_eq() instead of EVP_PKEY_cmp()

OpenSSL 3.0 renamed EVP_PKEY_cmp() to EVP_PKEY_eq() because that was a
confusing name.
https://github.com/ruby/opens... rhenium (Kazuki Yamaguchi)

03:40 PM Ruby master Revision 16272d9a (git): [ruby/openssl] hmac: use EVP_MD_CTX_get_pkey_ctx() instead of EVP_MD_CTX_pkey_ctx()

OpenSSL 3.0 renamed EVP_MD_CTX_pkey_ctx() to include "get" in the
function name. Adjust compatibility macro so that w... rhenium (Kazuki Yamaguchi)

03:40 PM Ruby master Revision 555788b6 (git): [ruby/openssl] pkey/ec: deprecate PKey::EC::Point#make_affine! and make it a no-op

It converts the internal representation of the point object to the
affine coordinate system. However, it had no real ... rhenium (Kazuki Yamaguchi)

03:40 PM Ruby master Revision cfa4fa63 (git): [ruby/openssl] bn: use BN_check_prime() in OpenSSL::BN#prime{,_fasttest}?

In OpenSSL 3.0, BN_is_prime_ex() and BN_is_prime_fasttest_ex() are
deprecated in favor of BN_check_prime().
https://... rhenium (Kazuki Yamaguchi)

03:40 PM Ruby master Revision 040387d2 (git): [ruby/openssl] digest: use EVP_MD_CTX_get0_md() instead of EVP_MD_CTX_md() if exists

The function was renamed in OpenSSL 3.0 due to the change of the
lifetime of EVP_MD objects. They are no longer neces... rhenium (Kazuki Yamaguchi)

03:40 PM Ruby master Revision d5aa3fca (git): [ruby/openssl] ssl: use SSL_CTX_load_verify_{file,dir}() if available

SSL_CTX_load_verify_locations() is deprecated in OpenSSL 3.0 and
replaced with those two separate functions. Use them... rhenium (Kazuki Yamaguchi)

03:40 PM Ruby master Revision fa24e7a5 (git): [ruby/openssl] ssl: use SSL_get_rbio() to check if SSL is started or not

Use SSL_get_rbio() instead of SSL_get_fd(). SSL_get_fd() internally
calls SSL_get_rbio() and it's enough for our purp... rhenium (Kazuki Yamaguchi)