jruby-openssl icon indicating copy to clipboard operation
jruby-openssl copied to clipboard

OpenSSL::SSL::SSLSocket#verify_result returns wrong result for self-signed certs

Open headius opened this issue 10 years ago • 0 comments

From http://jira.codehaus.org/browse/JRUBY-7049

See the following tests from Celluloid::IO https://github.com/celluloid/celluloid-io/blob/master/spec/celluloid/io/ssl_socket_spec.rb#L105 On MRI, these return OpenSSL::X509::V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT as expected. On JRuby, this returns 1, which does not seem to be even valid. (Note: this is not returning V_OK, so at least that much should be good)

--- Want to back this issue? **[Post a bounty on it!](https://www.bountysource.com/issues/7364392-openssl-ssl-sslsocket-verify_result-returns-wrong-result-for-self-signed-certs?utm_campaign=plugin&utm_content=tracker%2F136995&utm_medium=issues&utm_source=github)** We accept bounties via [Bountysource](https://www.bountysource.com/?utm_campaign=plugin&utm_content=tracker%2F136995&utm_medium=issues&utm_source=github).

headius avatar Dec 29 '14 21:12 headius