https://github.com/ruby/openssl - v4.0.0

A high-level overview is available in History.md: https://github.com/ruby/openssl/blob/master/History.md#version-400

Merged Pull Requests

• pkey: Use openssl generated pkcs8 key instead by @samuel40791765 in https://github.com/ruby/openssl/pull/830
• Various cleanups in pkey tests by @rhenium in https://github.com/ruby/openssl/pull/834
• Reduce OpenSSL::Buffering#do_write overhead by @byroot in https://github.com/ruby/openssl/pull/831
• Require LibreSSL 3.9 or later (Drop support for 3.1-3.8) by @rhenium in https://github.com/ruby/openssl/pull/836
• Require OpenSSL 1.1.0 or later (Drop support for 1.0.2) by @rhenium in https://github.com/ruby/openssl/pull/839
• Require OpenSSL 1.1.1 or later (Drop support for 1.1.0) by @rhenium in https://github.com/ruby/openssl/pull/841
• Use X509_ALGOR_get0() accessor for X509_ALGOR by @botovq in https://github.com/ruby/openssl/pull/687
• pkey: change PKey::{RSA,DSA,DH}#params to use nil for missing parameters by @rhenium in https://github.com/ruby/openssl/pull/774
• ts: use TS_VERIFY_CTX_set0_{store,certs}() on OpenSSL 3.4 by @rhenium in https://github.com/ruby/openssl/pull/842
• ssl: separate SSLContext#min_version= and #max_version= by @rhenium in https://github.com/ruby/openssl/pull/849
• pkey/ec: remove deprecated PKey::EC::Point#mul(ary, ary [, bn]) form by @rhenium in https://github.com/ruby/openssl/pull/843
• test_ssl.rb: Test respecting system default min. by @junaruga in https://github.com/ruby/openssl/pull/851
• Cleanups in SSL tests by @rhenium in https://github.com/ruby/openssl/pull/853
• Add build support for AWS-LC by @samuel40791765 in https://github.com/ruby/openssl/pull/852
• Avoid calling sk_*() with NULL by @rhenium in https://github.com/ruby/openssl/pull/854
• ssl: remove cert_store from start_server test helper by @rhenium in https://github.com/ruby/openssl/pull/858
• Patch and enable tests with AWS-LC by @samuel40791765 in https://github.com/ruby/openssl/pull/855
• Use ENV["TEST_RUBY_OPENSSL_FIPS_ENABLED"] instead of OpenSSL::OPENSSL_FIPS. by @junaruga in https://github.com/ruby/openssl/pull/862
• ssl: manually craft invalid SAN extensions in tests by @rhenium in https://github.com/ruby/openssl/pull/861
• digest: always run SHA-3 and truncated SHA-2 tests by @rhenium in https://github.com/ruby/openssl/pull/864
• ssl: refactor check_supported_protocol_versions by @rhenium in https://github.com/ruby/openssl/pull/866
• ssl: fix tests using TLS 1.1 or older by @rhenium in https://github.com/ruby/openssl/pull/867
• Improve AWS-LC tests by @junaruga in https://github.com/ruby/openssl/pull/863
• Improve document of initialize_copy by @midnight-wonderer in https://github.com/ruby/openssl/pull/869
• Skip PKCS7 with indefinite length test in AWS-LC by @samuel40791765 in https://github.com/ruby/openssl/pull/871
• pkcs7: fix test failure on RHEL 9 by @rhenium in https://github.com/ruby/openssl/pull/876
• CI: Upgrade OpenSSL versions by @junaruga in https://github.com/ruby/openssl/pull/878
• Fix the tests using SHA-1 Probabilistic Signature Scheme (PSS) parameters. by @junaruga in https://github.com/ruby/openssl/pull/879
• .github/workflows/test.yml: stop using ubuntu-20.04 runner image by @rhenium in https://github.com/ruby/openssl/pull/880
• ssl: fix SSLSocket#syswrite with String-convertible objects by @rhenium in https://github.com/ruby/openssl/pull/881
• asn1: check for missing EOC in indefinite length encoding by @rhenium in https://github.com/ruby/openssl/pull/859
• .github/workflows/test.yml: update test-openssls by @rhenium in https://github.com/ruby/openssl/pull/884
• AWS-LC has support for parsing ber constructed strings now by @samuel40791765 in https://github.com/ruby/openssl/pull/888
• cipher: remove Cipher#encrypt(password, iv) form by @rhenium in https://github.com/ruby/openssl/pull/887
• ssl: fix potential memory leak in SSLContext#setup by @rhenium in https://github.com/ruby/openssl/pull/882
• CI test.yml - add workflow_dispatch by @MSP-Greg in https://github.com/ruby/openssl/pull/890
• ssl: add SSLContext#sigalgs= and #client_sigalgs= by @rhenium in https://github.com/ruby/openssl/pull/895
• pkey: add support for OpenSSL 3 provider-only pkeys by @rhenium in https://github.com/ruby/openssl/pull/898
• Use Dir.glob and base keyword arg for the installer of Ruby package by @hsbt in https://github.com/ruby/openssl/pull/904
• Run have_func with the header providing the declarations by @nobu in https://github.com/ruby/openssl/pull/905
• ssl: rename SSLContext#ecdh_curves= to #groups= by @rhenium in https://github.com/ruby/openssl/pull/900
• pkey/ec: avoid calling SYM2ID() on user-supplied objects by @rhenium in https://github.com/ruby/openssl/pull/907
• asn1: align UTCTime year range with RFC 5280 by @rhenium in https://github.com/ruby/openssl/pull/909
• Various test and CI improvements by @rhenium in https://github.com/ruby/openssl/pull/910
• Rakefile: fix :test/:test_fips => :compile dependency by @rhenium in https://github.com/ruby/openssl/pull/911
• ssl: add SSLSocket#sigalg, #peer_sigalg, #group by @junaruga in https://github.com/ruby/openssl/pull/908
• ssl: add post-quantum cryptography (PQC) tests by @junaruga in https://github.com/ruby/openssl/pull/913
• lib/openssl.rb: require files in alphabetical order by @rhenium in https://github.com/ruby/openssl/pull/914
• Cleanup ossl_*_new() functions by @rhenium in https://github.com/ruby/openssl/pull/912
• x509store: fix StoreContext#current_cert by @rhenium in https://github.com/ruby/openssl/pull/919
• pkcs7: clean up tests by @rhenium in https://github.com/ruby/openssl/pull/921
• pkcs7: fix error queue leak in OpenSSL::PKCS7#detached by @rhenium in https://github.com/ruby/openssl/pull/922
• pkcs7: make PKCS7#add_recipient actually useful by @rhenium in https://github.com/ruby/openssl/pull/923
• pkey: skip tests using invalid keys in the FIPS mode by @rhenium in https://github.com/ruby/openssl/pull/930
• Add missing write barriers in X509 by @jhawthorn in https://github.com/ruby/openssl/pull/932
• pkey: fix repeated passphrase prompts in OpenSSL::PKey.read by @rhenium in https://github.com/ruby/openssl/pull/931
• pkey: fix loading public keys with early OpenSSL 3.0.x releases by @rhenium in https://github.com/ruby/openssl/pull/940
• CONTRIBUTING.md: Add Debugging section [ci skip] by @junaruga in https://github.com/ruby/openssl/pull/944
• Revert "pkey: stop retrying after non-retryable error from OSSL_DECODER" by @rhenium in https://github.com/ruby/openssl/pull/943
• c_rehash: fix hash_name output for small hashes by @orgads in https://github.com/ruby/openssl/pull/942
• Add AuthTagError exception for AEAD authentication failures by @samuel-williams-shopify in https://github.com/ruby/openssl/pull/939
• Fix test_ssl.rb in FIPS. by @junaruga in https://github.com/ruby/openssl/pull/937
• Fix "default gem" link in README.md by @holtrop in https://github.com/ruby/openssl/pull/945
• CI: Add GitHub Actions ppc64le/s390x cases by @junaruga in https://github.com/ruby/openssl/pull/946
• pkey: disallow {DH,DSA,EC,RSA}.new without arguments on OpenSSL 3.0 by @rhenium in https://github.com/ruby/openssl/pull/848
• pkey/dh: refactor tests by @rhenium in https://github.com/ruby/openssl/pull/947
• CI: Upgrade OpenSSL and LibreSSL versions by @junaruga in https://github.com/ruby/openssl/pull/948
• Add a workflow to sync commits to ruby/ruby by @k0kubun in https://github.com/ruby/openssl/pull/951
• ssl: use SSL_CTX_set_dh_auto() by default by @rhenium in https://github.com/ruby/openssl/pull/924
• ssl: allow SSLContext#set_params to be used from non-main Ractors by @rhenium in https://github.com/ruby/openssl/pull/925
• Update link to OpenSSL configuration file docs by @tobscher in https://github.com/ruby/openssl/pull/956
• cipher: various docs improvements by @rhenium in https://github.com/ruby/openssl/pull/954
• Update keys used in tests by @rhenium in https://github.com/ruby/openssl/pull/953
• Add support for "fetched" EVP_MD and EVP_CIPHER by @rhenium in https://github.com/ruby/openssl/pull/958
• pkey: unify error classes into PKeyError by @rhenium in https://github.com/ruby/openssl/pull/929
• Replace Ruby 3.5 with Ruby 4.0 by @yahonda in https://github.com/ruby/openssl/pull/961
• ssl: fix test_pqc_sigalg on RHEL 9.7 by @rhenium in https://github.com/ruby/openssl/pull/965
• pkey/ec: fix OpenSSL::PKey::EC::Group#curve_name for unknown curves by @rhenium in https://github.com/ruby/openssl/pull/966
• asn1: refactor converting ASN1_OBJECT to string by @rhenium in https://github.com/ruby/openssl/pull/967
• ts: fix docs for attrs on OpenSSL::Timestamp::Factory by @rhenium in https://github.com/ruby/openssl/pull/970
• Remove dummy declarations for mOSSL and eOSSLError by @rhenium in https://github.com/ruby/openssl/pull/971
• Revert "rewriting most of the asn1 init code in ruby" by @rhenium in https://github.com/ruby/openssl/pull/972
• Expand tabs in C source files by @rhenium in https://github.com/ruby/openssl/pull/973
• asn1: use ASN1_TIME_to_tm() to decode UTCTime and GeneralizedTime by @rhenium in https://github.com/ruby/openssl/pull/974
• x509cert: handle invalid validity periods in Certificate#inspect by @rhenium in https://github.com/ruby/openssl/pull/977
• Treat ASN1_STRING as opaque by @botovq in https://github.com/ruby/openssl/pull/978
• asn1integer_to_num: don't cast away const by @botovq in https://github.com/ruby/openssl/pull/979
• ossl.c: implement OpenSSL::OpenSSLError#detailed_message by @rhenium in https://github.com/ruby/openssl/pull/976
• x509cert: update doc for OpenSSL::X509::Certificate#== by @rhenium in https://github.com/ruby/openssl/pull/984
• pkcs7: raise OpenSSL::PKCS7::PKCS7Error in #initialize by @rhenium in https://github.com/ruby/openssl/pull/983
• Freeze more constants for Ractor compatibility by @rhenium in https://github.com/ruby/openssl/pull/985
• Release 4.0.0 by @rhenium in https://github.com/ruby/openssl/pull/982

New Contributors

• @samuel40791765 made their first contribution in https://github.com/ruby/openssl/pull/830
• @midnight-wonderer made their first contribution in https://github.com/ruby/openssl/pull/869
• @jhawthorn made their first contribution in https://github.com/ruby/openssl/pull/932
• @orgads made their first contribution in https://github.com/ruby/openssl/pull/942
• @samuel-williams-shopify made their first contribution in https://github.com/ruby/openssl/pull/939
• @holtrop made their first contribution in https://github.com/ruby/openssl/pull/945
• @k0kubun made their first contribution in https://github.com/ruby/openssl/pull/951
• @tobscher made their first contribution in https://github.com/ruby/openssl/pull/956
• @yahonda made their first contribution in https://github.com/ruby/openssl/pull/961

Full Changelog: https://github.com/ruby/openssl/compare/v3.3.2...v4.0.0

- C
Published by github-actions[bot] 3 months ago

https://github.com/ruby/openssl - v3.3.2

What's Changed

• Check NULL values for deprecated EVP_PKEY_get0() functions by @stanhu in https://github.com/ruby/openssl/pull/957

New Contributors

• @stanhu made their first contribution in https://github.com/ruby/openssl/pull/957

Full Changelog: https://github.com/ruby/openssl/compare/v3.3.1...v3.3.2

- C
Published by github-actions[bot] 4 months ago

https://github.com/ruby/openssl - v3.2.3

What's Changed

• Check NULL values for deprecated EVP_PKEY_get0() functions by @stanhu in https://github.com/ruby/openssl/pull/957

New Contributors

• @stanhu made their first contribution in https://github.com/ruby/openssl/pull/957

Full Changelog: https://github.com/ruby/openssl/compare/v3.2.2...v3.2.3

- C
Published by github-actions[bot] 4 months ago

https://github.com/ruby/openssl - v3.1.3

What's Changed

• Check NULL values for deprecated EVP_PKEY_get0() functions by @stanhu in https://github.com/ruby/openssl/pull/957

New Contributors

• @stanhu made their first contribution in https://github.com/ruby/openssl/pull/957

Full Changelog: https://github.com/ruby/openssl/compare/v3.1.2...v3.1.3

- C
Published by rhenium 4 months ago

https://github.com/ruby/openssl - v3.1.2

What's Changed

• Fix CI in maint-3.1 branch by @rhenium in https://github.com/ruby/openssl/pull/846
• pkey: avoid calling i2d_PUBKEY family on an incomplete key by @rhenium in https://github.com/ruby/openssl/pull/847
• test/openssl/test_bn.rb: use Ractor#value by @rhenium in https://github.com/ruby/openssl/pull/896
• ssl: remove OpenSSL::X509::V_FLAG_CRL_CHECK_ALL from the default store by @rhenium in https://github.com/ruby/openssl/pull/950

Full Changelog: https://github.com/ruby/openssl/compare/v3.1.1...v3.1.2

- C
Published by rhenium 5 months ago

https://github.com/ruby/openssl - v3.2.2

What's Changed

• Fix CI in maint-3.1 branch by @rhenium in https://github.com/ruby/openssl/pull/846
• pkey: avoid calling i2d_PUBKEY family on an incomplete key by @rhenium in https://github.com/ruby/openssl/pull/847
• test/openssl/test_bn.rb: use Ractor#value by @rhenium in https://github.com/ruby/openssl/pull/896
• ssl: remove OpenSSL::X509::V_FLAG_CRL_CHECK_ALL from the default store by @rhenium in https://github.com/ruby/openssl/pull/950

Full Changelog: https://github.com/ruby/openssl/compare/v3.2.1...v3.2.2

- C
Published by github-actions[bot] 5 months ago

https://github.com/ruby/openssl - v3.3.1

What's Changed

• ssl: fix SSLSocket#sysread leaking locktmp String on timeout by @rhenium in https://github.com/ruby/openssl/pull/832
• Fix CI in maint-3.1 branch by @rhenium in https://github.com/ruby/openssl/pull/846
• pkey: avoid calling i2d_PUBKEY family on an incomplete key by @rhenium in https://github.com/ruby/openssl/pull/847
• Removed needless workaround again by @hsbt in https://github.com/ruby/openssl/pull/850
• test/openssl/test_bn.rb: use Ractor#value by @rhenium in https://github.com/ruby/openssl/pull/896
• ssl: remove OpenSSL::X509::V_FLAG_CRL_CHECK_ALL from the default store by @rhenium in https://github.com/ruby/openssl/pull/950

Full Changelog: https://github.com/ruby/openssl/compare/v3.3.0...v3.3.1

- C
Published by github-actions[bot] 5 months ago

https://github.com/ruby/openssl - v3.3.0

What's Changed

• Exact checks with assert_include by @nobu in https://github.com/ruby/openssl/pull/683
• Exact checks with assert_include by @nobu in https://github.com/ruby/openssl/pull/684
• CI: Upgrade OpenSSL and LibreSSL versions. by @junaruga in https://github.com/ruby/openssl/pull/689
• CONTRIBUTING.md: Update testing with debugging and FIPS use cases. [ci skip] by @junaruga in https://github.com/ruby/openssl/pull/688
• CI: Add OpenSSL 3.2.0. by @junaruga in https://github.com/ruby/openssl/pull/698
• History.md: Escape Markdown syntax Italic "*". [ci skip] by @junaruga in https://github.com/ruby/openssl/pull/697
• Use Markdown reference-style links in documents. [ci skip] by @junaruga in https://github.com/ruby/openssl/pull/696
• Fix test_pkey_dh.rb in FIPS. by @junaruga in https://github.com/ruby/openssl/pull/694
• Windows Ruby 3.3: Workaround: Set OPENSSL_MODULES to find providers. by @junaruga in https://github.com/ruby/openssl/pull/712
• CI: Added the rubyinstaller2 issue link that legacy provider is not loaded. by @junaruga in https://github.com/ruby/openssl/pull/713
• Add more methods to SocketForwarder. by @ioquatix in https://github.com/ruby/openssl/pull/708
• Only set min_version on OpenSSL < 1.1.0 by @ekohl in https://github.com/ruby/openssl/pull/710
• Add support for IO#timeout. by @ioquatix in https://github.com/ruby/openssl/pull/714
• test/openssl/test_ocsp.rb: fix flaky test by @rhenium in https://github.com/ruby/openssl/pull/702
• CI: Upgrade OpenSSL and LibreSSL versions. by @junaruga in https://github.com/ruby/openssl/pull/720
• omit tests related legacy provider by @hsbt in https://github.com/ruby/openssl/pull/718
• test_asn1.rb: Remove the assertions of the time string format without second. by @junaruga in https://github.com/ruby/openssl/pull/728
• test_provider.rb: Make a legacy provider test optional. by @junaruga in https://github.com/ruby/openssl/pull/721
• Revert openssl dir workaround on TruffleRuby by @eregon in https://github.com/ruby/openssl/pull/705
• Fix test_pkey_dsa.rb in FIPS. by @junaruga in https://github.com/ruby/openssl/pull/729
• Use www.rfc-editor.org for RFC text. by @hsbt in https://github.com/ruby/openssl/pull/737
• CI: Upgrade OpenSSL and LibreSSL versions. by @junaruga in https://github.com/ruby/openssl/pull/745
• Only CSR version 1 (encoded as 0) is allowed by PKIX standards by @botovq in https://github.com/ruby/openssl/pull/747
• Introduce basic support for close_read and close_write. by @ioquatix in https://github.com/ruby/openssl/pull/743
• CI: Remove workaround for Ruby-3.2 and 3.3 on Windows by @larskanis in https://github.com/ruby/openssl/pull/748
• Add OpenSSL::Digest.digests to get a list of available digests by @bdewater in https://github.com/ruby/openssl/pull/726
• Remove trailing space in test_ssl.rb by @peterzhu2118 in https://github.com/ruby/openssl/pull/750
• asn1: check error return from i2d_ASN1_TYPE() by @rhenium in https://github.com/ruby/openssl/pull/755
• read: don't clear buffer when nothing can be read by @casperisfine in https://github.com/ruby/openssl/pull/739
• Add to_text for PKCS7 and Timestamp::Response by @segiddins in https://github.com/ruby/openssl/pull/756
• [CI] test.yml - use bundle exec, use setup-ruby bundler-cache, fixes Windows issue by @MSP-Greg in https://github.com/ruby/openssl/pull/758
• Don't download OpenSSL from ftp.openssl.org anyomre by @KJTsanaktsidis in https://github.com/ruby/openssl/pull/763
• Fix test_create_with_mac_iter accidently setting keytype not maciter by @KJTsanaktsidis in https://github.com/ruby/openssl/pull/762
• Add X509::Certificate#tbs_bytes by @segiddins in https://github.com/ruby/openssl/pull/753
• Clarify license by @rhenium in https://github.com/ruby/openssl/pull/754
• Automatically update GitHub Pages from master branch by @rhenium in https://github.com/ruby/openssl/pull/764
• CI: Rely on setup-ruby to install Bundler gems by @olleolleolle in https://github.com/ruby/openssl/pull/766
• Pass through nil as digest when signing certificates by @gartens in https://github.com/ruby/openssl/pull/761
• rewriting most of the asn1 init code in ruby by @HoneyryderChuck in https://github.com/ruby/openssl/pull/740
• Add SSLSocket#readbyte by @lwoggardner in https://github.com/ruby/openssl/pull/771
• A temporary workaround to download OpenSSL archive files. by @junaruga in https://github.com/ruby/openssl/pull/779
• x509attr: avoid using OpenSSL::ASN1 internals in #value= by @rhenium in https://github.com/ruby/openssl/pull/773
• Set time directly on the x509 store by @segiddins in https://github.com/ruby/openssl/pull/770
• Revert "A temporary workaround to download OpenSSL archive files." by @junaruga in https://github.com/ruby/openssl/pull/781
• CI: Upgrade OpenSSL and LibreSSL versions by @junaruga in https://github.com/ruby/openssl/pull/782
• Make "rake debug" protective for a Ruby OpenSSL loading error. by @junaruga in https://github.com/ruby/openssl/pull/783
• Update .github/workflows/test.yml by @rhenium in https://github.com/ruby/openssl/pull/784
• test_s_generate_parameters: Consider a DSA error in FIPS. by @junaruga in https://github.com/ruby/openssl/pull/786
• Remove test_ed25519_not_approved_on_fips. by @junaruga in https://github.com/ruby/openssl/pull/789
• Fix test_pkey_rsa.rb in FIPS. by @junaruga in https://github.com/ruby/openssl/pull/790
• Fix test_provider.rb in FIPS. by @junaruga in https://github.com/ruby/openssl/pull/794
• CI: Upgrade OpenSSL versions by @junaruga in https://github.com/ruby/openssl/pull/799
• Add prime gem to d dependency by @takkanm in https://github.com/ruby/openssl/pull/810
• CI: Upgrade OpenSSL and LibreSSL versions by @rhenium in https://github.com/ruby/openssl/pull/813
• [DOC] Replace removed method in example for OpenSSL::Config#to_s by @hoshi-sano in https://github.com/ruby/openssl/pull/805
• ssl: remove redundant ossl_ssl_ex_vcb_idx by @rhenium in https://github.com/ruby/openssl/pull/795
• pkcs7: remove default cipher from PKCS7.encrypt by @rhenium in https://github.com/ruby/openssl/pull/796
• move ractor safe macro to ossl.h by @HoneyryderChuck in https://github.com/ruby/openssl/pull/811
• make bn shareable when frozen by @HoneyryderChuck in https://github.com/ruby/openssl/pull/808
• Add passing test files in FIPS. by @junaruga in https://github.com/ruby/openssl/pull/819
• Rakefile: Manage test files by excluding test files in the test_fips task. by @junaruga in https://github.com/ruby/openssl/pull/820
• Support signing requests and CRLs using ED25519 by @joshcooper in https://github.com/ruby/openssl/pull/804
• ssl: fix potential exception in servername_cb by @rhenium in https://github.com/ruby/openssl/pull/822
• ssl: handle callback exceptions in SSLSocket#sysread and #syswrite by @rhenium in https://github.com/ruby/openssl/pull/821
• ossl config: shareable when frozen by @HoneyryderChuck in https://github.com/ruby/openssl/pull/809
• Various small fixes in C extension code by @rhenium in https://github.com/ruby/openssl/pull/814
• ssl: do not enable OpenSSL::SSL::OP_ALL by default by @rhenium in https://github.com/ruby/openssl/pull/767
• pkcs12: add PKCS12#set_mac by @rhenium in https://github.com/ruby/openssl/pull/788
• digest: remove optional parameter from OpenSSL::Digest#finish by @rhenium in https://github.com/ruby/openssl/pull/825
• ssl: fix flaky test case test_ctx_client_session_cb_tls13_exception by @rhenium in https://github.com/ruby/openssl/pull/829
• Ruby/OpenSSL 3.3.0 by @rhenium in https://github.com/ruby/openssl/pull/827

New Contributors

• @ekohl made their first contribution in https://github.com/ruby/openssl/pull/710
• @casperisfine made their first contribution in https://github.com/ruby/openssl/pull/739
• @segiddins made their first contribution in https://github.com/ruby/openssl/pull/756
• @KJTsanaktsidis made their first contribution in https://github.com/ruby/openssl/pull/763
• @olleolleolle made their first contribution in https://github.com/ruby/openssl/pull/766
• @gartens made their first contribution in https://github.com/ruby/openssl/pull/761
• @HoneyryderChuck made their first contribution in https://github.com/ruby/openssl/pull/740
• @lwoggardner made their first contribution in https://github.com/ruby/openssl/pull/771
• @takkanm made their first contribution in https://github.com/ruby/openssl/pull/810
• @hoshi-sano made their first contribution in https://github.com/ruby/openssl/pull/805
• @joshcooper made their first contribution in https://github.com/ruby/openssl/pull/804

Full Changelog: https://github.com/ruby/openssl/compare/v3.2.1...v3.3.0

- C
Published by rhenium about 1 year ago

https://github.com/ruby/openssl - v3.2.1

What's Changed

• Fix regression in do_write(s) causing significant performance issues when using large (>10meg) writes by @jaymzjulian in https://github.com/ruby/openssl/pull/706
• Backport test fixes to 3.0 by @rhenium in https://github.com/ruby/openssl/pull/751
• cipher: fix buffer overflow in Cipher#update by @rhenium in https://github.com/ruby/openssl/pull/717
• Handle missing content in PKCS7 by @rhenium in https://github.com/ruby/openssl/pull/752
• Remove "gemspec" from Gemfile by @rhenium in https://github.com/ruby/openssl/pull/768
• asn1: fix ObjectId#== by @rhenium in https://github.com/ruby/openssl/pull/792
• x509: fix handling of multiple URIs in Certificate#crl_uris by @rhenium in https://github.com/ruby/openssl/pull/776
• cipher: make output buffer String independent by @rhenium in https://github.com/ruby/openssl/pull/824
• Configure RubyGems Trusted Publishing by @rhenium in https://github.com/ruby/openssl/pull/815

New Contributors

• @jaymzjulian made their first contribution in https://github.com/ruby/openssl/pull/706

Full Changelog: https://github.com/ruby/openssl/compare/v3.2.0...v3.2.1

- C
Published by rhenium about 1 year ago

https://github.com/ruby/openssl - v3.1.1

What's Changed

• pkey/ec: constify by @nobu in https://github.com/ruby/openssl/pull/584
• Fix regression in do_write(s) causing significant performance issues when using large (>10meg) writes by @jaymzjulian in https://github.com/ruby/openssl/pull/706
• Backport test fixes to 3.0 by @rhenium in https://github.com/ruby/openssl/pull/751
• cipher: fix buffer overflow in Cipher#update by @rhenium in https://github.com/ruby/openssl/pull/717
• Handle missing content in PKCS7 by @rhenium in https://github.com/ruby/openssl/pull/752
• Remove "gemspec" from Gemfile by @rhenium in https://github.com/ruby/openssl/pull/768
• asn1: fix ObjectId#== by @rhenium in https://github.com/ruby/openssl/pull/792
• x509: fix handling of multiple URIs in Certificate#crl_uris by @rhenium in https://github.com/ruby/openssl/pull/776
• cipher: make output buffer String independent by @rhenium in https://github.com/ruby/openssl/pull/824

New Contributors

• @jaymzjulian made their first contribution in https://github.com/ruby/openssl/pull/706

Full Changelog: https://github.com/ruby/openssl/compare/v3.1.0...v3.1.1

- C
Published by rhenium about 1 year ago

https://github.com/ruby/openssl - v3.0.3

What's Changed

• Fix regression in do_write(s) causing significant performance issues when using large (>10meg) writes by @jaymzjulian in https://github.com/ruby/openssl/pull/706
• Backport test fixes to 3.0 by @rhenium in https://github.com/ruby/openssl/pull/751
• cipher: fix buffer overflow in Cipher#update by @rhenium in https://github.com/ruby/openssl/pull/717
• Handle missing content in PKCS7 by @rhenium in https://github.com/ruby/openssl/pull/752
• Remove "gemspec" from Gemfile by @rhenium in https://github.com/ruby/openssl/pull/768
• asn1: fix ObjectId#== by @rhenium in https://github.com/ruby/openssl/pull/792
• x509: fix handling of multiple URIs in Certificate#crl_uris by @rhenium in https://github.com/ruby/openssl/pull/776
• cipher: make output buffer String independent by @rhenium in https://github.com/ruby/openssl/pull/824

New Contributors

• @jaymzjulian made their first contribution in https://github.com/ruby/openssl/pull/706

Full Changelog: https://github.com/ruby/openssl/compare/v3.0.2...v3.0.3

- C
Published by rhenium about 1 year ago

https://github.com/ruby/openssl - v3.2.0

What's Changed

• pkey/ec: constify by @nobu in https://github.com/ruby/openssl/pull/584
• [DOC] Remove repeated example from Digest by @Maumagnaguagno in https://github.com/ruby/openssl/pull/587
• Do not require a test file in a separately run test case by @andrykonchin in https://github.com/ruby/openssl/pull/591
• Update the latest version of EnvUtil by @hsbt in https://github.com/ruby/openssl/pull/593
• Improve GH Actions by @hsbt in https://github.com/ruby/openssl/pull/599
• Forward-port https://bugs.ruby-lang.org/issues/19386 by @hsbt in https://github.com/ruby/openssl/pull/596
• Skip failing test with truffleruby and ubuntu-22.04 by @hsbt in https://github.com/ruby/openssl/pull/600
• Stub gemspec for JRuby by @headius in https://github.com/ruby/openssl/pull/598
• .github/workflows/test.yml: Update OpenSSL versions by @junaruga in https://github.com/ruby/openssl/pull/602
• Relax error message for OpenSSL 3.1 by @nobu in https://github.com/ruby/openssl/pull/607
• Register global variables before assignment by @nobu in https://github.com/ruby/openssl/pull/613
• Add rdoc as a development dependency. by @junaruga in https://github.com/ruby/openssl/pull/616
• Implement FIPS functions, adding OpenSSL FIPS mode case on CI. by @junaruga in https://github.com/ruby/openssl/pull/608
• Fix warnings about the OPENSSL_FIPS macro in OpenSSL 1.1. by @junaruga in https://github.com/ruby/openssl/pull/621
• Revert "Skip OpenSSL::TestHMAC#test_dup when running with RHEL9" by @hsbt in https://github.com/ruby/openssl/pull/622
• CI: Enable the verbose mode in the mkmf.rb. by @junaruga in https://github.com/ruby/openssl/pull/623
• CI: Enable the verbose mode in the mkmf.rb by env MAKEFLAGS. by @junaruga in https://github.com/ruby/openssl/pull/624
• Remove usage of IO internals. by @ioquatix in https://github.com/ruby/openssl/pull/627
• Append flags from environment variables. by @junaruga in https://github.com/ruby/openssl/pull/629
• Print the Ruby and compiler info or the command itself before compiling. by @junaruga in https://github.com/ruby/openssl/pull/630
• Rakefile: Print the message with Rake.rake_output_message. by @junaruga in https://github.com/ruby/openssl/pull/632
• Fix OpenSSL::PKey.read that cannot parse PKey in the FIPS mode. by @junaruga in https://github.com/ruby/openssl/pull/615
• Implement Write Barrier for all OpenSSL types by @byroot in https://github.com/ruby/openssl/pull/604
• CI: Rename the key name "foo_bar" (underscore) to "foo-bar" (hyphen). by @junaruga in https://github.com/ruby/openssl/pull/634
• CI: Upgrade OpenSSL and LibreSSL versions. by @junaruga in https://github.com/ruby/openssl/pull/636
• extconf.rb: apply RUBY_OPENSSL_EXT{C,LD}FLAGS after checking features by @rhenium in https://github.com/ruby/openssl/pull/633
• pkey: use unsigned type for bit fields by @rhenium in https://github.com/ruby/openssl/pull/638
• Drop support for Ruby 2.6 by @rhenium in https://github.com/ruby/openssl/pull/639
• CI: Check compiler warnings. by @junaruga in https://github.com/ruby/openssl/pull/631
• CI: Fix a typo in the comment. [ci skip] by @junaruga in https://github.com/ruby/openssl/pull/641
• add OpenSSL Provider support by @QWYNG in https://github.com/ruby/openssl/pull/635
• Add support for raw private/public keys by @sylph01 in https://github.com/ruby/openssl/pull/646
• [DOC] remove top-level example for OpenSSL::Cipher#pkcs5_keyivgen by @rhenium in https://github.com/ruby/openssl/pull/647
• Always respect the openssl prefix chosen by truffle/openssl-prefix on TruffleRuby by @eregon in https://github.com/ruby/openssl/pull/653
• CI: Add OpenSSL 3.1 FIPS case. by @junaruga in https://github.com/ruby/openssl/pull/655
• CI: Upgrade OpenSSL versions. by @junaruga in https://github.com/ruby/openssl/pull/657
• Raise an error when the specified OpenSSL library directory doesn't exist. by @junaruga in https://github.com/ruby/openssl/pull/618
• CI: Add OpenSSL master branch head non-FIPS and FIPS cases. by @junaruga in https://github.com/ruby/openssl/pull/658
• Enhance printing OpenSSL versions. by @junaruga in https://github.com/ruby/openssl/pull/662
• Use openssl? instead of OpenSSL::OPENSSL_VERSION_NUMBER. by @junaruga in https://github.com/ruby/openssl/pull/663
• test/openssl/test_pkey.rb: Fix pending tests in FIPS case. by @junaruga in https://github.com/ruby/openssl/pull/664
• Include "additional data" message in OpenSSL errors by @rhenium in https://github.com/ruby/openssl/pull/648
• ssl: raise SSLError if loading ca_file or ca_path fails by @rhenium in https://github.com/ruby/openssl/pull/659
• [DOC] enhance RDoc for exporting pkeys by @rhenium in https://github.com/ruby/openssl/pull/645
• ssl: adjust "certificate verify failed" error on SSL_ERROR_SYSCALL by @rhenium in https://github.com/ruby/openssl/pull/640
• Fix LIBRESSL_VERSION_NUMBER document mistake. by @junaruga in https://github.com/ruby/openssl/pull/667
• Rakefile: Print FIPS information in the rake debug. by @junaruga in https://github.com/ruby/openssl/pull/666
• CI: Replace "mode" in "FIPS mode" with "module". by @junaruga in https://github.com/ruby/openssl/pull/670
• ossl_pkey.c: Workaround: Decode with non-zero selections. by @junaruga in https://github.com/ruby/openssl/pull/669
• Use the test-unit-ruby-core gem for Test::Unit::CoreAssertions by @rhenium in https://github.com/ruby/openssl/pull/673
• test/openssl/test_pkey_ec.rb: refactor tests for EC.builtin_curves by @rhenium in https://github.com/ruby/openssl/pull/675
• Refactor Buffering consume_rbuff and getbyte methods by @Maumagnaguagno in https://github.com/ruby/openssl/pull/585
• Prefer String#unpack1 by @Maumagnaguagno in https://github.com/ruby/openssl/pull/586
• ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters by @rhenium in https://github.com/ruby/openssl/pull/674
• instead of looking of NIDs and then using X509V3_EXT_nconf_nid, by @mcr in https://github.com/ruby/openssl/pull/141
• Fix OCSP documentation by @p8 in https://github.com/ruby/openssl/pull/676
• Remove OSSL_DEBUG compile-time option by @rhenium in https://github.com/ruby/openssl/pull/677
• Fix test_pkey_ec.rb on FIPS. by @junaruga in https://github.com/ruby/openssl/pull/681
• Bump actions/checkout from 3 to 4 by @dependabot in https://github.com/ruby/openssl/pull/682
• Release 3.2.0 by @rhenium in https://github.com/ruby/openssl/pull/678

New Contributors

• @Maumagnaguagno made their first contribution in https://github.com/ruby/openssl/pull/587
• @andrykonchin made their first contribution in https://github.com/ruby/openssl/pull/591
• @headius made their first contribution in https://github.com/ruby/openssl/pull/598
• @byroot made their first contribution in https://github.com/ruby/openssl/pull/604
• @QWYNG made their first contribution in https://github.com/ruby/openssl/pull/635
• @sylph01 made their first contribution in https://github.com/ruby/openssl/pull/646
• @mcr made their first contribution in https://github.com/ruby/openssl/pull/141
• @p8 made their first contribution in https://github.com/ruby/openssl/pull/676
• @dependabot made their first contribution in https://github.com/ruby/openssl/pull/682

Full Changelog: https://github.com/ruby/openssl/compare/v3.1.0...v3.2.0

- C
Published by rhenium over 2 years ago

https://github.com/ruby/openssl - v3.1.0

What's Changed

• Added 'ciphersuites=' method to allow setting of TLSv1.3 cipher suites along with some unit tests by @kmdz1 in https://github.com/ruby/openssl/pull/493
• Install openssl with vcpkg on mswin by @nobu in https://github.com/ruby/openssl/pull/504
• Make tests pass on LibreSSL 3.5 and 3.4 by @jeremyevans in https://github.com/ruby/openssl/pull/506
• Fix formatting in docs by @peterzhu2118 in https://github.com/ruby/openssl/pull/508
• Update actions at 2022/3 by @hsbt in https://github.com/ruby/openssl/pull/505
• Use SHA256 for OCSP BasicResponse and Request by @jackorp in https://github.com/ruby/openssl/pull/507
• [CI] add Ubuntu-22.04 and update mswin, all are OpenSSL 3 by @MSP-Greg in https://github.com/ruby/openssl/pull/514
• ignore pkgconfig when openssl-dir option is specified by @skaes in https://github.com/ruby/openssl/pull/486
• Skip a new test when old OpenSSL by @nobu in https://github.com/ruby/openssl/pull/524
• Check for OpenSSL functions in headers by @XrXr in https://github.com/ruby/openssl/pull/520
• [CI] test.yml - test-openssls - use 1.1.1q, 3.0.5 by @MSP-Greg in https://github.com/ruby/openssl/pull/528
• [CI] TestHMAC#test_dup - remove 'pend' for OpenSSL 3 by @MSP-Greg in https://github.com/ruby/openssl/pull/529
• implement SSLSocket#export_keying_material for doing RFC 5705 operations by @madblobfish in https://github.com/ruby/openssl/pull/530
• Add support to SSL_CTX_set_keylog_callback() by @cdelafuente-r7 in https://github.com/ruby/openssl/pull/536
• Use default IO#timeout if possible. by @ioquatix in https://github.com/ruby/openssl/pull/547
• Use default IO#timeout if possible. by @ioquatix in https://github.com/ruby/openssl/pull/548
• Call out insecure PKCS #1 v1.5 default padding for RSA by @bdewater in https://github.com/ruby/openssl/pull/549
• Add BN#mod_sqrt by @btoews in https://github.com/ruby/openssl/pull/553
• Use SHA256 instead of SHA1 where needed in tests. by @jackorp in https://github.com/ruby/openssl/pull/554
• Enable HKDF support for LibreSSL 3.6 and later by @botovq in https://github.com/ruby/openssl/pull/569
• Allow empty string to OpenSSL::Cipher#update by @unasuke in https://github.com/ruby/openssl/pull/568
• Fixes OPENSSL_LIBRARY_VERSION description on documentation by @hbontempo-br in https://github.com/ruby/openssl/pull/559
• Use EVP_Digest{Sign,Verify} when available by @botovq in https://github.com/ruby/openssl/pull/560
• Added dependebot for github actions by @hsbt in https://github.com/ruby/openssl/pull/574
• Rake and test-unit are only for development by @nobu in https://github.com/ruby/openssl/pull/578
• Actions - Use Ubuntu 20.04 for 1.1.1 CI, misc fixes by @MSP-Greg in https://github.com/ruby/openssl/pull/573
• Fix test failures with LibreSSL 3.6 by @rhenium in https://github.com/ruby/openssl/pull/579
• Check for functions with arguments by @nobu in https://github.com/ruby/openssl/pull/575
• Suppress OpenSSL-3 warnings by @nobu in https://github.com/ruby/openssl/pull/576
• Undefine OpenSSL::SSL for no socket platforms by @kateinoigakukun in https://github.com/ruby/openssl/pull/558
• Ruby/OpenSSL 3.1.0 by @rhenium in https://github.com/ruby/openssl/pull/583

New Contributors

• @kmdz1 made their first contribution in https://github.com/ruby/openssl/pull/493
• @peterzhu2118 made their first contribution in https://github.com/ruby/openssl/pull/508
• @jackorp made their first contribution in https://github.com/ruby/openssl/pull/507
• @skaes made their first contribution in https://github.com/ruby/openssl/pull/486
• @XrXr made their first contribution in https://github.com/ruby/openssl/pull/520
• @madblobfish made their first contribution in https://github.com/ruby/openssl/pull/530
• @cdelafuente-r7 made their first contribution in https://github.com/ruby/openssl/pull/536
• @botovq made their first contribution in https://github.com/ruby/openssl/pull/569
• @hbontempo-br made their first contribution in https://github.com/ruby/openssl/pull/559
• @kateinoigakukun made their first contribution in https://github.com/ruby/openssl/pull/558

Full Changelog: https://github.com/ruby/openssl/compare/v3.0.2...v3.1.0

- C
Published by rhenium about 3 years ago

https://github.com/ruby/openssl - v3.0.2

What's Changed

• pkey/ec: fix multiple ossl_raise() calls using cEC_POINT instead of eEC_POINT by @bannable in https://github.com/ruby/openssl/pull/570
• raise when EC_POINT_cmp or EC_GROUP_cmp error instead of returning true by @bannable in https://github.com/ruby/openssl/pull/564
• maint-2.2 Actions - update workflow to use OpenSSL 1.1.1, actions/checkout@v3 by @MSP-Greg in https://github.com/ruby/openssl/pull/572
• pkey/ec: check private key validity with OpenSSL 3 by @rhenium in https://github.com/ruby/openssl/pull/580
• Ruby/OpenSSL 2.2.3 by @rhenium in https://github.com/ruby/openssl/pull/581
• Ruby/OpenSSL 3.0.2 by @rhenium in https://github.com/ruby/openssl/pull/582

New Contributors

• @bannable made their first contribution in https://github.com/ruby/openssl/pull/570

Full Changelog: https://github.com/ruby/openssl/compare/v3.0.1...v3.0.2

- C
Published by rhenium about 3 years ago

https://github.com/ruby/openssl - v2.2.3

What's Changed

• pkey/ec: fix multiple ossl_raise() calls using cEC_POINT instead of eEC_POINT by @bannable in https://github.com/ruby/openssl/pull/570
• raise when EC_POINT_cmp or EC_GROUP_cmp error instead of returning true by @bannable in https://github.com/ruby/openssl/pull/564
• maint-2.2 Actions - update workflow to use OpenSSL 1.1.1, actions/checkout@v3 by @MSP-Greg in https://github.com/ruby/openssl/pull/572
• Ruby/OpenSSL 2.2.3 by @rhenium in https://github.com/ruby/openssl/pull/581

New Contributors

• @bannable made their first contribution in https://github.com/ruby/openssl/pull/570

Full Changelog: https://github.com/ruby/openssl/compare/v2.2.2...v2.2.3

- C
Published by rhenium about 3 years ago