Ruby Issue Tracking System

09/02/2026

10:02 AM Ruby Revision 151a401b (git): [ruby/rubygems] Drop encipherment key usages from Gem::Security.create_cert defaults

keyEncipherment should be set only when the subject public key is used
for key transport, and dataEncipherment only when it is used to
directly encrypt user data. RubyGems uses the key for neither purpose.
These key usages are also not ... rhenium (Kazuki Yamaguchi)

08/31/2026

06:12 PM Ruby Revision 40112618 (git): [ruby/openssl] ssl: update docs for SSLContext#{min,max}_version=

Fix some typos, document that assigning 0 has the same effect as
assigning nil, and mention that SSLContext#security_level= may also
affect protocol version selection.
https://github.com/ruby/openssl/commit/d005e6d16b rhenium (Kazuki Yamaguchi)

06:12 PM Ruby Revision e7afdd4d (git): [ruby/openssl] ssl: refactor tests for protocol version negotiation

Since we have dropped support for OpenSSL 1.0.2, all versions of
OpenSSL and compatible libraries we currently support can speak TLS 1.2
and TLS 1.3. We can use this to simplify tests around the protocol
version negotiation.
https://git... rhenium (Kazuki Yamaguchi)

12:06 PM Ruby Revision 1711f833 (git): [ruby/openssl] ssl: delay closing TCP sockets in start_server

Some tests expect server-side SSLSocket#accept to fail for various
reasons. On some systems, closing the underlying socket immediately
with IO#close causes the TCP connection to be terminated with RST.
Do not close it immediately so tha... rhenium (Kazuki Yamaguchi)

12:06 PM Ruby Revision 11bd0c29 (git): [ruby/openssl] ssl: use start_server_proc in more test cases

Update more tests to use start_server_proc instead of UNIXSocket.pair.
It runs threads with timeout and prevents "rake test" from hanging
indefinitely. It also produces better error messages when a test fails.
https://github.com/ruby/op... rhenium (Kazuki Yamaguchi)

12:06 PM Ruby Revision 4d53b8b7 (git): [ruby/openssl] ssl: move tests for IO-like methods to test_pair.rb

r8081 originally intended test_pair.rb for testing methods that behave
like IO.
Move tests for #{get,read}byte, #sys{read,write}, #close_write, and
IO.copy_stream from test_ssl.rb to test_pair.rb.
Similarly, move tests for methods that... rhenium (Kazuki Yamaguchi)

12:06 PM Ruby Revision 002b0062 (git): [ruby/openssl] ssl: simplify test_pair.rb

OpenSSL::SSL::SSLSocket only depends on T_FILE and a small number of
methods defined on IO, so the difference between TCPSocket and Socket
is not significant for these tests. Test only one of them to reduce
the test run time by half.
Ad... rhenium (Kazuki Yamaguchi)

12:06 PM Ruby Revision 429343b3 (git): [ruby/openssl] ssl: refactor test helper start_server

Break it into multiple pieces and simplify:
- Let callers pass a complete SSLContext object instead of a
callback proc ctx_proc to mutate it.
- Add a variant start_server_proc for tests that need finer control,
and remove t... rhenium (Kazuki Yamaguchi)

11:58 AM Ruby Revision 182a5bc8 (git): [ruby/openssl] ssl: deprecate OpenSSL::SSL::SSLServer

Although OpenSSL::SSL::SSLServer presents itself as a TCPServer-like
wrapper, its design has flaws. Document OpenSSL::SSL::SSLServer as
deprecated and recommend using OpenSSL::SSL::SSLSocket directly.
SSLServer#accept calls #accept on t... rhenium (Kazuki Yamaguchi)

08/26/2026

11:56 AM Ruby Revision 68abb349 (git): [ruby/openssl] bn: support marshalling

This fixes tests with Ruby master, where unshareable T_DATA is copied
across Ractor via Marshal.
https://github.com/ruby/openssl/commit/943fe2340e rhenium (Kazuki Yamaguchi)