jruby-openssl 0.12.1-java → 0.14.0-java

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: 2b73e2783a26e7aa5254c66e325fa6c824c78b8d
-  data.tar.gz: feb0ad37fca2ead87ed151f8c543214f7912508b
+SHA256:
+  metadata.gz: 2548bc2fe716c409cd989bf2d8dadfae326993f955aca85cfe03ca4bf3afb659
+  data.tar.gz: 5f6606773272d521abefb77c475d80a6437091d33b37c15d5daf6c8ccdb87e9b
 SHA512:
-  metadata.gz: aba588920a82b3a568183ee03bcbee3175c033863654521bfc6a624be84072d510853ea2b457f8742d222e19a230c8ce67592a3df16e1ae625d1b644c7e858bf
-  data.tar.gz: ce31f7f99e2352871b2fdefc084eef1d8497a97baacf4a99a6459e39abf0cb35e66a1a4b422e454db6e9433cd6c698b22e07dc1e7688e7c580a397cc0a7ae37b
+  metadata.gz: 05f1f9700cd0e52761a80c4c841dc5afa80f1dbffcb47dadc1761ccf59bb3315b6baa8cbff18b3d611b6094f0ef9b1e930800f07ed2cc1cad4f5c3951047fca8
+  data.tar.gz: 5ca2d93939853cdc3ae2055db4e32ba71e9c6127297ec14c5de5745db2ebbe27c4182ee7325045123a91d8b3b8bac5cebf80471aaab2e67ec5458803ba85805c

data/History.md

@@ -1,3 +1,34 @@
+## 0.14.0
+
+This version upgraded to latest Bouncy-Castle (1.71) and is only compatible with 
+the new version mostly due artifact naming and breaking chances in BC itself.
+
+- [deps] upgrade BC to latest 1.71
+- [fix] make set_minmax_proto_version private 
+
+## 0.13.0
+
+* [fix] ASN1::EndOfContent ancestor hierarchy (#228)
+* [fix] handle X509::Name type conversion (#206)
+* [fix] handle invalid type when creating `X509::Name`
+* [fix] `OpenSSL::X509::Name#inspect` compatibility
+* [fix] escaping with `OpenSSL::X509::Name::RFC2253`
+* [feat] implement `OpenSSL::X509::Name#to_utf8`
+* [fix] compat missing `OpenSSL::SSL::OP_NO_TLSv1_3`
+* [refactor] performance - do not encode/decode cert objects
+* [fix] make sure `Context.ciphers` are not mutated (#219)
+* [feat] support `to_java` conversion for CRL
+* [feat] support `to_java` protocol for PKey (#250)
+
+## 0.12.2
+
+* [fix] work-around JRuby 9.2 autoload behavior (#248)
+  to be able to install jruby-openssl >= 0.12 on JRuby 9.2
+  while the default gem (shipped with JRuby) is < 0.12
+* [feat] support alpn negotiation in ssl context (#247)
+* [feat] support Java cipher names on `SSLContext#ciphers=`
+* [fix] properly handle `require_jar` fallback
+
 ## 0.12.1
 
 * improved compatibility with the openssl gem (version 2.2.1)

data/README.md

@@ -27,6 +27,8 @@ the JRuby [mailing list][1] or the [bug tracker][2].
 |      ~>0.10.5 |  1.7.20-9.3.x |  Java 7-11 |    1.60-1.68 |
 |      ~>0.11.x |   9.0.x-9.3.x |  Java 7-11 |    1.62-1.68 |
 |      ~>0.12.x |   9.1.x-9.3.x |  Java 8-15 |    1.65-1.68 |
+|      ~>0.13.x |   9.1.x-9.3.x |  Java 8-17 |    1.68-1.69 |
+|      ~>0.14.x |   9.1.x-9.3.x |  Java 8-17 |         1.71 |
 
 NOTE: backwards JRuby compatibility was not handled for versions <= **0.9.6** 
 

data/lib/jopenssl/load.rb

@@ -5,21 +5,22 @@ require 'jopenssl/version'
 # NOTE: assuming user does pull in BC .jars from somewhere else on the CP
 unless ENV_JAVA['jruby.openssl.load.jars'].eql?('false')
   version = JOpenSSL::BOUNCY_CASTLE_VERSION
-  bc_jars = nil
   begin
     require 'jar-dependencies'
     # if we have jar-dependencies we let it track the jars
-    require_jar( 'org.bouncycastle', 'bcprov-jdk15on', version )
-    require_jar( 'org.bouncycastle', 'bcpkix-jdk15on', version )
-    require_jar( 'org.bouncycastle', 'bctls-jdk15on',  version )
+    require_jar 'org.bouncycastle', 'bcprov-jdk18on', version
+    require_jar 'org.bouncycastle', 'bcpkix-jdk18on', version
+    require_jar 'org.bouncycastle', 'bcutil-jdk18on', version
+    require_jar 'org.bouncycastle', 'bctls-jdk18on',  version
     bc_jars = true
-  rescue LoadError
+  rescue LoadError, RuntimeError
     bc_jars = false
   end
   unless bc_jars
-    load "org/bouncycastle/bcprov-jdk15on/#{version}/bcprov-jdk15on-#{version}.jar"
-    load "org/bouncycastle/bcpkix-jdk15on/#{version}/bcpkix-jdk15on-#{version}.jar"
-    load "org/bouncycastle/bctls-jdk15on/#{version}/bctls-jdk15on-#{version}.jar"
+    load "org/bouncycastle/bcprov-jdk18on/#{version}/bcprov-jdk18on-#{version}.jar"
+    load "org/bouncycastle/bcpkix-jdk18on/#{version}/bcpkix-jdk18on-#{version}.jar"
+    load "org/bouncycastle/bcutil-jdk18on/#{version}/bcutil-jdk18on-#{version}.jar"
+    load "org/bouncycastle/bctls-jdk18on/#{version}/bctls-jdk18on-#{version}.jar"
   end
 end
 
@@ -34,3 +35,48 @@ end
 if RUBY_VERSION > '2.3'
   load 'jopenssl/_compat23.rb'
 end
+
+# NOTE: content bellow should live in *lib/openssl.rb* but due RubyGems/Bundler
+# `autoload :OpenSSL` this will cause issues if an older version (0.11) is the
+# default gem under JRuby 9.2 (which on auto-load does not trigger a dynamic
+# require - this is only fixed in JRuby 9.3)
+
+module OpenSSL
+  autoload :Config, 'openssl/config' unless const_defined?(:Config, false)
+  autoload :PKCS12, 'openssl/pkcs12'
+end
+
+=begin
+= Info
+  'OpenSSL for Ruby 2' project
+  Copyright (C) 2002  Michal Rokos <m.rokos@sh.cvut.cz>
+  All rights reserved.
+
+= Licence
+  This program is licensed under the same licence as Ruby.
+  (See the file 'LICENCE'.)
+=end
+
+require 'openssl/bn'
+require 'openssl/pkey'
+require 'openssl/cipher'
+#require 'openssl/config' if OpenSSL.const_defined?(:Config, false)
+require 'openssl/digest'
+require 'openssl/hmac'
+require 'openssl/x509'
+require 'openssl/ssl'
+require 'openssl/pkcs5'
+
+module OpenSSL
+  # call-seq:
+  #   OpenSSL.secure_compare(string, string) -> boolean
+  #
+  # Constant time memory comparison. Inputs are hashed using SHA-256 to mask
+  # the length of the secret. Returns +true+ if the strings are identical,
+  # +false+ otherwise.
+  def self.secure_compare(a, b)
+    hashed_a = OpenSSL::Digest.digest('SHA256', a)
+    hashed_b = OpenSSL::Digest.digest('SHA256', b)
+    OpenSSL.fixed_length_secure_compare(hashed_a, hashed_b) && a == b
+  end
+end

data/lib/jopenssl/version.rb

@@ -1,9 +1,10 @@
 module JOpenSSL
-  VERSION = '0.12.1'
-  BOUNCY_CASTLE_VERSION = '1.68'
+  VERSION = '0.14.0'
+  BOUNCY_CASTLE_VERSION = '1.71'
 end
 
 Object.class_eval do
   Jopenssl = JOpenSSL
   private_constant :Jopenssl if respond_to?(:private_constant)
+  deprecate_constant :Jopenssl if respond_to?(:deprecate_constant)
 end

data/lib/openssl.rb

@@ -1,43 +1,3 @@
 # frozen_string_literal: true
 
 require 'jopenssl/load'
-
-module OpenSSL
-  autoload :Config, 'openssl/config' unless const_defined?(:Config, false)
-  autoload :PKCS12, 'openssl/pkcs12'
-end
-
-=begin
-= Info
-  'OpenSSL for Ruby 2' project
-  Copyright (C) 2002  Michal Rokos <m.rokos@sh.cvut.cz>
-  All rights reserved.
-
-= Licence
-  This program is licensed under the same licence as Ruby.
-  (See the file 'LICENCE'.)
-=end
-
-require_relative 'openssl/bn'
-require_relative 'openssl/pkey'
-require_relative 'openssl/cipher'
-#require_relative 'openssl/config' if OpenSSL.const_defined?(:Config, false)
-require_relative 'openssl/digest'
-require_relative 'openssl/hmac'
-require_relative 'openssl/x509'
-require_relative 'openssl/ssl'
-require_relative 'openssl/pkcs5'
-
-module OpenSSL
-  # call-seq:
-  #   OpenSSL.secure_compare(string, string) -> boolean
-  #
-  # Constant time memory comparison. Inputs are hashed using SHA-256 to mask
-  # the length of the secret. Returns +true+ if the strings are identical,
-  # +false+ otherwise.
-  def self.secure_compare(a, b)
-    hashed_a = OpenSSL::Digest.digest('SHA256', a)
-    hashed_b = OpenSSL::Digest.digest('SHA256', b)
-    OpenSSL.fixed_length_secure_compare(hashed_a, hashed_b) && a == b
-  end
-end

data/pom.xml

@@ -11,7 +11,7 @@ DO NOT MODIFY - GENERATED CODE
   <modelVersion>4.0.0</modelVersion>
   <groupId>rubygems</groupId>
   <artifactId>jruby-openssl</artifactId>
-  <version>0.12.1</version>
+  <version>0.14.0</version>
   <packaging>gem</packaging>
   <name>JRuby OpenSSL</name>
   <description>JRuby-OpenSSL is an add-on gem for JRuby that emulates the Ruby OpenSSL native library.</description>
@@ -60,13 +60,13 @@ DO NOT MODIFY - GENERATED CODE
     </snapshotRepository>
   </distributionManagement>
   <properties>
-    <bc.versions>1.68</bc.versions>
+    <bc.versions>1.71</bc.versions>
     <invoker.skip>${maven.test.skip}</invoker.skip>
     <invoker.test>${bc.versions}</invoker.test>
     <jruby.plugins.version>2.0.1</jruby.plugins.version>
     <jruby.switches>-W0</jruby.switches>
-    <jruby.version>9.1.17.0</jruby.version>
-    <jruby.versions>9.1.17.0</jruby.versions>
+    <jruby.version>9.2.19.0</jruby.version>
+    <jruby.versions>9.2.19.0</jruby.versions>
     <mavengem-wagon.version>1.0.3</mavengem-wagon.version>
     <mavengem.wagon.version>1.0.3</mavengem.wagon.version>
     <polyglot.dump.pom>pom.xml</polyglot.dump.pom>
@@ -76,18 +76,23 @@ DO NOT MODIFY - GENERATED CODE
   <dependencies>
     <dependency>
       <groupId>org.bouncycastle</groupId>
-      <artifactId>bcprov-jdk15on</artifactId>
-      <version>1.68</version>
+      <artifactId>bcprov-jdk18on</artifactId>
+      <version>1.71</version>
     </dependency>
     <dependency>
       <groupId>org.bouncycastle</groupId>
-      <artifactId>bcpkix-jdk15on</artifactId>
-      <version>1.68</version>
+      <artifactId>bcpkix-jdk18on</artifactId>
+      <version>1.71</version>
     </dependency>
     <dependency>
       <groupId>org.bouncycastle</groupId>
-      <artifactId>bctls-jdk15on</artifactId>
-      <version>1.68</version>
+      <artifactId>bctls-jdk18on</artifactId>
+      <version>1.71</version>
+    </dependency>
+    <dependency>
+      <groupId>org.bouncycastle</groupId>
+      <artifactId>bcutil-jdk18on</artifactId>
+      <version>1.71</version>
     </dependency>
     <dependency>
       <groupId>org.jruby</groupId>
@@ -269,6 +274,7 @@ DO NOT MODIFY - GENERATED CODE
         <configuration>
           <source>1.8</source>
           <target>1.8</target>
+          <release>8</release>
           <encoding>UTF-8</encoding>
           <debug>true</debug>
           <showWarnings>true</showWarnings>

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: jruby-openssl
 version: !ruby/object:Gem::Version
-  version: 0.12.1
+  version: 0.14.0
 platform: java
 authors:
 - Karol Bucek
@@ -10,7 +10,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-02-02 00:00:00.000000000 Z
+date: 2022-06-30 00:00:00.000000000 Z
 dependencies: []
 description: JRuby-OpenSSL is an add-on gem for JRuby that emulates the Ruby OpenSSL
   native library.
@@ -42,9 +42,10 @@ files:
 - lib/openssl/pkey.rb
 - lib/openssl/ssl.rb
 - lib/openssl/x509.rb
-- lib/org/bouncycastle/bcpkix-jdk15on/1.68/bcpkix-jdk15on-1.68.jar
-- lib/org/bouncycastle/bcprov-jdk15on/1.68/bcprov-jdk15on-1.68.jar
-- lib/org/bouncycastle/bctls-jdk15on/1.68/bctls-jdk15on-1.68.jar
+- lib/org/bouncycastle/bcpkix-jdk18on/1.71/bcpkix-jdk18on-1.71.jar
+- lib/org/bouncycastle/bcprov-jdk18on/1.71/bcprov-jdk18on-1.71.jar
+- lib/org/bouncycastle/bctls-jdk18on/1.71/bctls-jdk18on-1.71.jar
+- lib/org/bouncycastle/bcutil-jdk18on/1.71/bcutil-jdk18on-1.71.jar
 - pom.xml
 homepage: https://github.com/jruby/jruby-openssl
 licenses:
@@ -67,11 +68,11 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements:
-- jar org.bouncycastle:bcprov-jdk15on, 1.68
-- jar org.bouncycastle:bcpkix-jdk15on, 1.68
-- jar org.bouncycastle:bctls-jdk15on,  1.68
-rubyforge_project:
-rubygems_version: 2.6.14.1
+- jar org.bouncycastle:bcprov-jdk18on, 1.71
+- jar org.bouncycastle:bcpkix-jdk18on, 1.71
+- jar org.bouncycastle:bctls-jdk18on,  1.71
+- jar org.bouncycastle:bcutil-jdk18on, 1.71
+rubygems_version: 3.1.6
 signing_key:
 specification_version: 4
 summary: JRuby OpenSSL