httpclient 2.7.2 → 2.8.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 3efa89267c49ad8538e958b70fa1d5ad60a51f14
-  data.tar.gz: fddc29793643f39d3d29de2bda66a096353686e0
+  metadata.gz: 7d31f6d6614892afef55ee460384719e2a3fd308
+  data.tar.gz: deb8c8f5172a0d956daebda1853b585d7d2f5845
 SHA512:
-  metadata.gz: 7f31fd63927c5e74d67fd57710e9a8e8528ef4eeee5ee03accac31629af74ccc19dca082df5d36fb2827e3713d9e36f1e6e444472f56111c9c32805df9a757f1
-  data.tar.gz: a74ae21b44d061adc75c34488de4cde93c55f3e5cb98f22871e7f31cd5fec66f954339a664cd6576b8f796dbec28a9e6f48815e8b34331cafdb5f5fb74b3abe8
+  metadata.gz: 5df03c1b552368850d643690166ef8dadedab621395ffae31c279cf863b4d4c8b7a1ac1504b9bf5feb6dde6452ce47ec725187dc15535c3c6576f4f606961664
+  data.tar.gz: ef50511dd9b8d46ff3c6b5bad0e55a66b99501c62246b308c3f54eec3273253e006dce6ef13ab78b8533b2fb5eeda121c00f1943d562815f40c9c33e472b0f91

data/lib/httpclient/ssl_config.rb

@@ -441,18 +441,10 @@ class HTTPClient
       nil
     end
 
-    # Use 2014 bit certs trust anchor if possible.
-    # CVE-2015-1793 requires: OpenSSL >= 1.0.2d or OpenSSL >= 1.0.1p
-    # OpenSSL before 1.0.1 does not have CVE-2015-1793 problem
+    # Use 2048 bit certs trust anchor
     def load_cacerts(cert_store)
       ver = OpenSSL::OPENSSL_VERSION
-      if (ver.start_with?('OpenSSL 1.0.1') && ver >= 'OpenSSL 1.0.1p') ||
-          (ver.start_with?('OpenSSL ') && ver >= 'OpenSSL 1.0.2d') || defined?(JRuby)
-        filename = 'cacert.pem'
-      else
-        filename = 'cacert1024.pem'
-      end
-      file = File.join(File.dirname(__FILE__), filename)
+      file = File.join(File.dirname(__FILE__), 'cacert.pem')
       unless defined?(JRuby)
         # JRuby uses @cert_store_items
         add_trust_ca_to_store(cert_store, file)

data/lib/httpclient/version.rb

@@ -1,3 +1,3 @@
 class HTTPClient
-  VERSION = '2.7.2'
+  VERSION = '2.8.0'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: httpclient
 version: !ruby/object:Gem::Version
-  version: 2.7.2
+  version: 2.8.0
 platform: ruby
 authors:
 - Hiroshi Nakamura
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-04-22 00:00:00.000000000 Z
+date: 2016-04-24 00:00:00.000000000 Z
 dependencies: []
 description: 
 email: nahi@ruby-lang.org