jruby-openssl

jruby-openssl copied to clipboard

Parsing invalid PEM files unexpectedly succeeds

1

(1) Reading invalid private key in PEM format does not fail like expected ``` irb(main):001:0> require 'openssl' => true irb(main):002:0> OpenSSL::PKey::read('not a PEM file') => # ``` If using another...

tsaarni

Mimic MRI's openssl when jopenssl require fails.

8

Some libraries (such as RubyGems [1]) rescues openssl load errors and adjust their behavior depending if the openssl is properly required. However, prior this commit, require 'openssl' succeeded just fine,...

voxik

`OpenSSL::Pkey::RSA` / `org.jruby.ext.openssl.PKeyRSA` is missing the PSS methods `sign-pss` and `verify-pss`. A cursory glance suggests that BouncyCastle supports PSS keys/signatures; however, investigation is needed as to whether it is compatible...

mattys101

verify_hostname not set, name potentially not verified in many situations

2

In CRuby, the `verify_hostname` property of the ssl context is set to true on the first set_params call: ```ruby # cruby 3.2 ctx = OpenSSL::SSL::SSLContext.new ctx.verify_hostname #=> false ctx.set_params {}...

HoneyryderChuck

FIPS-140 support

6

Hello, This is a follow-up question for https://github.com/jruby/jruby-openssl/issues/259. I'd like to invest some time here to verify if I can switch the bouncycastle jars to be fips-validated ones. My application...

yweiy10

OpenSSL::Buffering#read_nonblock(..., exception: false) can still throw exceptions

6

Hello. I am not sure whether it's a jruby-openssl's or jruby's bug, but opening the issue here for now. Also, I don't have a way to reproduce, but it does...

fxposter

Hi 👋 , I'm getting the following error when transforming a given ASN1Data structure to der: ```ruby asn = OpenSSL::ASN1::ASN1Data.new("bla", 0, :APPLICATION). asn.to_der # 16: from org.jruby.ir.instructions.CallBase.interpret(CallBase.java:549) # 15: from...

HoneyryderChuck

I cannot seem to be able to import an exported PEM encoded `OpenSSL::PKey::EC` key. ## Steps To Reproduce ```ruby ec = OpenSSL::PKey::EC.new('prime256v1') ec.generate_key pem = ec.to_pem # => "-----BEGIN EC...

postmodern

Bad value for crlDistributionPoints

1

Hello, When running this code, create a self signed cert with crlDistributionPoints, i've got strange value when running openssl (and also browser don't recogniez the value) ```ruby require 'openssl' key...

ahmet2mir

revisit compatibility with gemified net/http

1

JRuby had a few modification to *net/http* in stdlib to work-around APIs JOSSL does not provide (e.g. `session_new_cb=`) as well as some custom Java specific features (using the JVM system...

kares