kotovalexarian-likes-github/ruby--ruby
1
0
Fork 0
mirror of https://github.com/ruby/ruby.git synced 2022-11-09 12:17:21 -05:00
Code Releases Activity
ruby--ruby/ext
History
emboss 85fd9aadd1 * backport r34482 from trunk 
* ext/openssl/ossl_ssl.c: Add SSL constants and allow to unset SSL
  option to prevent BEAST attack. See [Bug #5353].

  In OpenSSL, OP_DONT_INSERT_EMPTY_FRAGMENTS is used to prevent
  TLS-CBC-IV vulunerability described at
  http://www.openssl.org/~bodo/tls-cbc.txt
  It's known issue of TLSv1/SSLv3 but it attracts lots of attention
  these days as BEAST attack. (CVE-2011-3389)

  Until now ossl sets OP_ALL at SSLContext allocation and call
  SSL_CTX_set_options at connection.  SSL_CTX_set_options updates the
  value by using |= so bits set by OP_ALL cannot be unset afterwards.
  This commit changes to call SSL_CTX_set_options only 1 time for each
  SSLContext. It sets the specified value if SSLContext#options= are
  called and sets OP_ALL if not.

  To help users to unset bits in OP_ALL, this commit also adds several
  constant to SSL such as
  OpenSSL::SSL::OP_DONT_INSERT_EMPTY_FRAGMENTS.  These constants were
  not exposed in Ruby because there's no way to unset bits in OP_ALL
  before.

  Following is an example to enable 0/n split for BEAST prevention.

    ctx.options = OP_ALL & ~OP_DONT_INSERT_EMPTY_FRAGMENTS

* test/openssl/test_ssl.rb: Test above option exists.



git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_9_2@34525 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
2012-02-09 17:20:52 +00:00
..
-test- Imported ext/-test-/string from trunk to ruby_1_9_2. Fixes #4540. 2011-05-31 02:12:14 +00:00
bigdecimal * ext/bigdecimal/lib/bigdecimal/math.rb (BigMath#log): improved 2010-05-12 06:04:59 +00:00
continuation * cont.c (ruby_Init_{Continuation_body,Fiber_as_Coroutine}): prefixed 2009-01-20 07:17:28 +00:00
coverage * ext/coverage/coverage.c (rb_mCoverage): removed unneeded static variable. 2008-08-31 04:48:02 +00:00
curses ext/curses/view2.rb: replaced with Hugh Sasse's version. 2010-02-06 14:26:07 +00:00
dbm * ext/**/*.[ch]: removed trailing spaces. 2010-04-22 08:04:13 +00:00
digest * ext/digest/sha2/lib/sha2.rb: revert r28347. It's my mistake. 2010-06-17 09:24:35 +00:00
dl merges r30407 and r30450 from trunk into ruby_1_9_2. 2011-01-16 06:30:33 +00:00
etc merges r29268 from trunk into ruby_1_9_2. 2010-11-24 09:37:10 +00:00
fcntl * ext/**/*.[ch]: removed trailing spaces. 2010-04-22 08:04:13 +00:00
fiber * cont.c (ruby_Init_{Continuation_body,Fiber_as_Coroutine}): prefixed 2009-01-20 07:17:28 +00:00
fiddle merges r30407 and r30450 from trunk into ruby_1_9_2. 2011-01-16 06:30:33 +00:00
gdbm * ext/**/*.[ch]: removed trailing spaces. 2010-04-22 08:04:13 +00:00
iconv * ext/iconv/iconv.c (rb_iconv_sys_fail): fix number of arguments. 2010-05-16 01:49:49 +00:00
io * ext/io/nonblock: moved from ext/io/wait/lib. 2009-07-14 12:53:23 +00:00
json merges r30791 and r30792 from trunk into ruby_1_9_2. 2011-05-11 21:23:16 +00:00
mathn * complex.c (nucomp_canonicalization): renamed. 2008-12-12 23:40:55 +00:00
nkf merges r30112 from trunk into ruby_1_9_2. 2010-12-23 12:45:17 +00:00
objspace merges r28986 from trunk into ruby_1_9_2. fixes [ruby-core:32667] 2010-10-23 12:50:53 +00:00
openssl * backport r34482 from trunk 2012-02-09 17:20:52 +00:00
psych merges r31930 from trunk into ruby_1_9_2. 2011-07-03 12:23:33 +00:00
pty merges r30350 from trunk into ruby_1_9_2. 2010-12-25 09:37:26 +00:00
racc/cparse * ext/**/*.[ch]: removed trailing spaces. 2010-04-22 08:04:13 +00:00
readline merges r30496 and r30519 from trunk into ruby_1_9_2. 2011-01-16 12:35:04 +00:00
ripper * ext/ripper/eventids2.c (token_to_eventid): added 2009-08-08 22:25:11 +00:00
sdbm merges r27764 from trunk into ruby_1_9_2. 2010-05-16 12:15:36 +00:00
socket * ext/socket/extconf.rb (have_type("PADDRINFO")): new check. 2011-07-03 12:24:30 +00:00
stringio merges r31248 from trunk into ruby_1_9_2. 2011-05-29 22:49:19 +00:00
strscan * ext/**/*.[ch]: removed trailing spaces. 2010-04-22 08:04:13 +00:00
syck merges r31441,r31442 and r31443 from trunk into ruby_1_9_2. 2011-05-31 00:11:35 +00:00
syslog * ext/**/*.[ch]: removed trailing spaces. 2010-04-22 08:04:13 +00:00
tk * ext/tk/extconf.rb: I gave up to fix the build issue of ext/tk with Windows 2011-07-09 11:12:34 +00:00
win32ole merges r29517 from trunk into ruby_1_9_2. 2010-12-02 08:07:36 +00:00
zlib * ext/zlib/zlib.c: added a prototype to get rid of SEGV on x86_64 2011-07-03 13:41:50 +00:00
.cvsignore
.document * ext/socket/.document: extracted from ext/.document. 2010-03-22 00:06:48 +00:00
extmk.rb * ext/socket/extconf.rb: suppress a warning. 2010-01-26 12:34:51 +00:00
purelib.rb * ext/purelib.rb, common.mk: to simulate ruby command more precisely, 2010-02-05 16:21:56 +00:00
Setup
Setup.atheos
Setup.emx
Setup.nt