mirror of
https://github.com/ruby/ruby.git
synced 2022-11-09 12:17:21 -05:00
![]() This defines TLS1_3_VERSION when using LibreSSL 3.2+. LibreSSL 3.2/3.3 doesn't advertise this by default, even though it will use TLS 1.3 in both client and server modes. Changes between LibreSSL 3.1 and 3.2/3.3 broke a few tests, Defining TLS1_3_VERSION by itself fixes 1 test failure. A few tests now fail on LibreSSL 3.2/3.3 unless TLS 1.2 is set as the maximum version, and this adjusts those tests. The client CA test doesn't work in LibreSSL 3.2+, so I've marked that as pending. For the hostname verification, LibreSSL 3.2.2+ has a new stricter hostname verifier that doesn't like subjectAltName such as c*.example.com and d.*.example.com, so adjust the related tests. With these changes, the tests pass on LibreSSL 3.2/3.3. https://github.com/ruby/openssl/commit/a0e98d48c9 |
||
---|---|---|
.. | ||
lib | ||
depend | ||
extconf.rb | ||
History.md | ||
openssl.gemspec | ||
openssl_missing.c | ||
openssl_missing.h | ||
ossl.c | ||
ossl.h | ||
ossl_asn1.c | ||
ossl_asn1.h | ||
ossl_bio.c | ||
ossl_bio.h | ||
ossl_bn.c | ||
ossl_bn.h | ||
ossl_cipher.c | ||
ossl_cipher.h | ||
ossl_config.c | ||
ossl_config.h | ||
ossl_digest.c | ||
ossl_digest.h | ||
ossl_engine.c | ||
ossl_engine.h | ||
ossl_hmac.c | ||
ossl_hmac.h | ||
ossl_kdf.c | ||
ossl_kdf.h | ||
ossl_ns_spki.c | ||
ossl_ns_spki.h | ||
ossl_ocsp.c | ||
ossl_ocsp.h | ||
ossl_pkcs7.c | ||
ossl_pkcs7.h | ||
ossl_pkcs12.c | ||
ossl_pkcs12.h | ||
ossl_pkey.c | ||
ossl_pkey.h | ||
ossl_pkey_dh.c | ||
ossl_pkey_dsa.c | ||
ossl_pkey_ec.c | ||
ossl_pkey_rsa.c | ||
ossl_rand.c | ||
ossl_rand.h | ||
ossl_ssl.c | ||
ossl_ssl.h | ||
ossl_ssl_session.c | ||
ossl_ts.c | ||
ossl_ts.h | ||
ossl_x509.c | ||
ossl_x509.h | ||
ossl_x509attr.c | ||
ossl_x509cert.c | ||
ossl_x509crl.c | ||
ossl_x509ext.c | ||
ossl_x509name.c | ||
ossl_x509req.c | ||
ossl_x509revoked.c | ||
ossl_x509store.c | ||
ruby_missing.h |