chef-config 19.1.164 → 19.2.12

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 309b22099435d14e4f8be71a98aff1005772ac64dbf60c440e5d33f4fce10d53
-  data.tar.gz: 8c46f82f7c17fdb2330ca0f2182f9e9476b3d7f96c18b13728d8749d1b86831a
+  metadata.gz: ea55ab8eb7a297d9cb3c659129bf6dec381a9ea0f04642aca950589b8519bcf7
+  data.tar.gz: 6bf7b00213a4ff9f8a0f4b7f249cff6c9963ab5c17fe4cbf0759aa599acba499
 SHA512:
-  metadata.gz: c822ebbe0118452e6240c8d1c0818f90a13701694fa3d93fd700d123ce8150130ab911d076409c76989928678c0d3e04326c367499fc3bbea6902239833d8521
-  data.tar.gz: 968e6d6a478e2ec8ef34fe3651fb9c7badc6c1b6a5bf59c832a916ee3d48a398104fe6f64c47f275d082c72c609158b3bfdda802f1ced9de4bc1c3de9f9ffab5
+  metadata.gz: d3fa388e8d7f0673f5dff57fd123e4e1a0701b6e5b1ee004e6d557b8ea6fcb0c050cc9d9b3fe03904a67642781364600f549d1de4d1cda4fbbd9d623ded3f5e8
+  data.tar.gz: e13531ec7bf469de4f3dfd11a9895ff9cb9d260fc51ef292854352938b9297ddbbe3d634bb1d7d0cdc403ddcce0cba49e3fe3735799a2af13929d6cf29bd9409

data/lib/chef-config/config.rb

@@ -1306,7 +1306,9 @@ module ChefConfig
     # sure Chef runs do not crash.
     # @api private
     def self.enable_fips_mode
+      # Enable FIPS mode in OpenSSL.
       OpenSSL.fips_mode = true
+
       require "digest" unless defined?(Digest)
       require "digest/sha1" unless defined?(Digest::SHA1)
       require "digest/md5" unless defined?(Digest::MD5)
@@ -1314,8 +1316,6 @@ module ChefConfig
       # amount of log spam and warnings.
       Digest.send(:remove_const, "SHA1") if Digest.const_defined?(:SHA1)
       Digest.const_set(:SHA1, OpenSSL::Digest::SHA1)
-      OpenSSL::Digest.send(:remove_const, "MD5") if OpenSSL::Digest.const_defined?(:MD5)
-      OpenSSL::Digest.const_set(:MD5, Digest::MD5)
       ChefConfig.logger.debug "FIPS mode is enabled."
     end
   end

data/lib/chef-config/mixin/fuzzy_hostname_matcher.rb

@@ -42,6 +42,11 @@ module ChefConfig
         # Do greedy matching by adding wildcard if it is not specified
         match = "*" + match unless match.start_with?("*")
         Fuzzyurl.matches?(Fuzzyurl.mask(hostname: match), hostname)
+      rescue ArgumentError
+        # Fuzzyurl cannot parse certain URL formats, notably IPv6 addresses
+        # (bare, bracketed, or embedded in URLs). When parsing fails, the URL
+        # cannot match a no_proxy pattern, so return false.
+        false
       end
 
     end

data/lib/chef-config/version.rb

@@ -15,5 +15,5 @@
 
 module ChefConfig
   CHEFCONFIG_ROOT = File.expand_path("..", __dir__)
-  VERSION = "19.1.164".freeze
+  VERSION = "19.2.12".freeze
 end

data/spec/unit/fuzzy_hostname_matcher_spec.rb

@@ -0,0 +1,70 @@
+#
+# Copyright:: Copyright (c) 2009-2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
+# License:: Apache License, Version 2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+require "spec_helper"
+require "chef-config/mixin/fuzzy_hostname_matcher"
+
+RSpec.describe ChefConfig::Mixin::FuzzyHostnameMatcher do
+  let(:matcher) do
+    Class.new { include ChefConfig::Mixin::FuzzyHostnameMatcher }.new
+  end
+
+  describe "#fuzzy_hostname_match?" do
+    it "matches a hostname with a wildcard pattern" do
+      expect(matcher.fuzzy_hostname_match?("foo.example.com", "example.com")).to be true
+    end
+
+    it "does not match unrelated hostnames" do
+      expect(matcher.fuzzy_hostname_match?("foo.example.com", "other.com")).to be false
+    end
+
+    it "returns false for bare IPv6 addresses instead of raising" do
+      expect(matcher.fuzzy_hostname_match?("2001:db8::1", "example.com")).to be false
+    end
+
+    it "returns false for bracketed IPv6 addresses instead of raising" do
+      expect(matcher.fuzzy_hostname_match?("[2001:db8::1]", "example.com")).to be false
+    end
+
+    it "returns false for IPv6 URLs instead of raising" do
+      expect(matcher.fuzzy_hostname_match?("https://[2001:db8::1]/path", "example.com")).to be false
+    end
+  end
+
+  describe "#fuzzy_hostname_match_any?" do
+    it "returns false when hostname is nil" do
+      expect(matcher.fuzzy_hostname_match_any?(nil, "example.com")).to be false
+    end
+
+    it "returns false when matches is nil" do
+      expect(matcher.fuzzy_hostname_match_any?("foo.example.com", nil)).to be false
+    end
+
+    it "matches against comma-separated patterns" do
+      expect(matcher.fuzzy_hostname_match_any?("foo.example.com", "other.com, example.com")).to be true
+    end
+
+    it "returns false for IPv6 URLs with hostname no_proxy patterns" do
+      ipv6_url = "https://[2001:db8:abcd:ef01::1]/organizations/o3"
+      no_proxy = "gateway.example.net,internal.example.com"
+      expect(matcher.fuzzy_hostname_match_any?(ipv6_url, no_proxy)).to be false
+    end
+
+    it "returns false for bare IPv6 with hostname no_proxy patterns" do
+      expect(matcher.fuzzy_hostname_match_any?("2001:db8::1", "example.com,other.net")).to be false
+    end
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: chef-config
 version: !ruby/object:Gem::Version
-  version: 19.1.164
+  version: 19.2.12
 platform: ruby
 authors:
 - Adam Jacob
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 19.1.164
+        version: 19.2.12
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 19.1.164
+        version: 19.2.12
 - !ruby/object:Gem::Dependency
   name: mixlib-shellout
   requirement: !ruby/object:Gem::Requirement
@@ -145,6 +145,7 @@ files:
 - spec/unit/config_spec.rb
 - spec/unit/credentials_spec.rb
 - spec/unit/fips_spec.rb
+- spec/unit/fuzzy_hostname_matcher_spec.rb
 - spec/unit/path_helper_spec.rb
 - spec/unit/workstation_config_loader_spec.rb
 homepage: https://github.com/chef/chef