jruby-openssl
jruby-openssl copied to clipboard
JRuby's OpenSSL gem
I am implementing OCSP support in MongoDB Ruby driver. When using JRuby, I am not able to retrieve the OCSP endpoint from the server certificate. [Test code](https://github.com/p-mongo/tests/tree/master/jruby-ocsp): ``` require 'openssl'...
Sometime after `jruby-1.7.19` a change was introduced that changes the `Net::SMTP` behavior with respect with MRI. Repro: ``` ruby require "net/smtp" message =
Copying https://github.com/jruby/jruby/issues/2992 here per @headius suggestion, see https://github.com/jruby/jruby/issues/2992#issuecomment-106607106 for rationale. Testcase: ``` ruby require 'socket' require 'openssl' from, to = UNIXSocket.pair ssl_to = OpenSSL::SSL::SSLSocket.new(to) ssl_to.write('foo') ``` fails with ``` SSLSocket.java:858:in...
While working on jruby/jruby#6246 I found that the `test_sni` test in WEBrick's test_ssl.rb is failing because a `verify_callback` is not being called. The assertion in question is here: https://github.com/ruby/webrick/blob/2c912ded39f2d3046203cde8b169dcf2c267017e/test/webrick/test_https.rb#L41 The...
The following code from WEBrick's ssl.rb passes a block into the RSA constructor, which is supposed to be use to yield each generated byte in turn. We do not pass...
In [updating JRuby's stdlib to 2.5.7](jruby/jruby#5917) I had to reject the following changes that use a `session_new_cb=` method we do not implement. I'm not sure when this method was introduced;...
SSL fails with latest http gem under jruby: jruby-9.0.4.0 :031 > require "http" => true jruby-9.0.4.0 :032 > HTTP.get("https://blocktrades.us") OpenSSL::SSL::SSLError: Received fatal alert: handshake_failure from org/jruby/ext/openssl/SSLSocket.java:218:in connect' from /home/.rvm/gems/jruby-9.0.4.0/gems/http-2.2.2/lib/http/timeout/null.rb:26:inconnect_ssl' from...
cipher.update and cipher.final have different behavior in JRuby vs MRI for block ciphers when data is added in KEY_LENGTH sized chunks. ``` require 'openssl' require 'securerandom' KEY_LENGTH = 16 cipher...
As soon as a certificate has more than one (DNS?) SAN, jruby-openssl a) represents them internally as multiple extensions b) the `to_text` also renders them as multiple entries However, as...
A number of method were added to accommodate changes in OpenSSL that made some structures like PKey opaque. See https://bugs.ruby-lang.org/issues/12324. These methods are required to run some MRI tests, specifically...