jruby-openssl 0.15.2-java → 0.15.4-java

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA256:
-  metadata.gz: 3b322a7977111ba9770b41e0401f501af7409f3b9d37299e1e7b792fb2987b63
-  data.tar.gz: 9a5b49175af58f39f0d2c5113eb0487fed68bfbb3cff76e2417dcf8d874030d0
+SHA1:
+  metadata.gz: e8bb3c7e2f2f97edfd979f79912f344dc7a28fea
+  data.tar.gz: 20b63ae82b2287f2c589fae82a40136087520e62
 SHA512:
-  metadata.gz: ed0d9547185e0ade1eff94d60b2c926cfc8c2c69bf273db53ce978f45a75067a4436caf0cf68f3c52a79b07abe5fa9067262c1701044dc8d6537bf5b5fcdfb50
-  data.tar.gz: f0083caf3519b9815b675ab9c65a33f6f77f71409f5e77613bc01c7bed8c82b39e8c9f75b886a2616979ffe52f880688fbaedbcd09a46db17e4e33ba1102ee35
+  metadata.gz: 77810561ee1d964842f7be3e7568c8891288bef32b958677528464ce9b3e38e51c27d3739c23b0693b999ac0b9343be562db792889a990eb0a1aca6209b576a0
+  data.tar.gz: 0b55e12fe6a730e4c1be62d7671074614bfc2713d6bf9bc296b576db2f4464f9368392d9c89281c8ea7b4e403a33dd517e21014ef05d04d1356b34dfe011628e

data/History.md

@@ -1,3 +1,26 @@
+## 0.15.4
+
+* [fix] Verify hostname by default (CVE-2025-46551)
+
+## 0.15.3
+
+* [fix] keep curve name when group is set into another key
+* [fix] make sure `OpenSSL::PKey::EC#dup` (copying) works
+* [compat] make sure `OpenSSL::PKey::EC#generate_key!` exists
+* [compat] missing OpenSSL:BN `to_int`, `-@`, `+@`, `abs`, `negative?`
+* [compat] implement PKey::EC `public_to_pem` and `xxx_to_der`
+* [fix] initialize @unused_bits = 0 for BitString
+* [fix] raise ASN1Error when unused_bits out of range
+* [fix] respect @unused_bits in BitString (#323)
+* [fix] missing `OpenSSL::ASN1::ObjectId#==` (#311)
+* [compat] implement PKey::DSA `public_to_der` and `public_to_pem`
+* [compat] implement PKey::RSA `public_to_der` and `public_to_pem`
+* [fix] DSA private key should generate after `set_key`
+* [refactor] RSA key internals to always consider params
+* [fix] DSA key compatibility when `set_pqg`
+* [fix] RSA private key should generate after `set_key`
+* [compat] add private? and public? methods on `PKey::EC`
+
 ## 0.15.2
 
 * [deps] upgrade BC to version 1.79

data/lib/jopenssl/load.rb

@@ -69,5 +69,3 @@ module OpenSSL
     OpenSSL.fixed_length_secure_compare(hashed_a, hashed_b) && a == b
   end
 end
-
-load 'jopenssl/_compat23.rb'

data/lib/jopenssl/version.rb

@@ -1,5 +1,5 @@
 module JOpenSSL
-  VERSION = '0.15.2'
+  VERSION = '0.15.4'
   BOUNCY_CASTLE_VERSION = '1.79'
 end
 

data/lib/openssl/ssl.rb

@@ -20,7 +20,7 @@ module OpenSSL
       DEFAULT_PARAMS = { # :nodoc:
         :min_version => OpenSSL::SSL::TLS1_VERSION,
         :verify_mode => OpenSSL::SSL::VERIFY_PEER,
-        :verify_hostname => nil, # TODO => true needs JRuby support to call verify_certificate_identity
+        :verify_hostname => true,
         :options => OpenSSL::SSL::OP_ALL | OpenSSL::SSL::OP_NO_COMPRESSION
       }
 

data/pom.xml

@@ -11,7 +11,7 @@ DO NOT MODIFY - GENERATED CODE
   <modelVersion>4.0.0</modelVersion>
   <groupId>rubygems</groupId>
   <artifactId>jruby-openssl</artifactId>
-  <version>0.15.2</version>
+  <version>0.15.4</version>
   <packaging>gem</packaging>
   <name>JRuby OpenSSL</name>
   <description>JRuby-OpenSSL is an add-on gem for JRuby that emulates the Ruby OpenSSL native library.</description>
@@ -65,8 +65,8 @@ DO NOT MODIFY - GENERATED CODE
     <invoker.test>${bc.versions}</invoker.test>
     <jruby.plugins.version>3.0.2</jruby.plugins.version>
     <jruby.switches>-W0</jruby.switches>
-    <jruby.version>9.2.19.0</jruby.version>
-    <jruby.versions>9.2.19.0</jruby.versions>
+    <jruby.version>9.1.17.0</jruby.version>
+    <jruby.versions>9.1.17.0</jruby.versions>
     <mavengem-wagon.version>2.0.2</mavengem-wagon.version>
     <mavengem.wagon.version>2.0.2</mavengem.wagon.version>
     <polyglot.dump.pom>pom.xml</polyglot.dump.pom>
@@ -274,7 +274,6 @@ DO NOT MODIFY - GENERATED CODE
         <configuration>
           <source>1.8</source>
           <target>1.8</target>
-          <release>8</release>
           <encoding>UTF-8</encoding>
           <debug>true</debug>
           <showWarnings>true</showWarnings>

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: jruby-openssl
 version: !ruby/object:Gem::Version
-  version: 0.15.2
+  version: 0.15.4
 platform: java
 authors:
 - Karol Bucek
@@ -10,7 +10,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-11-24 00:00:00.000000000 Z
+date: 2025-05-07 00:00:00.000000000 Z
 dependencies: []
 description: JRuby-OpenSSL is an add-on gem for JRuby that emulates the Ruby OpenSSL
   native library.
@@ -25,7 +25,6 @@ files:
 - README.md
 - Rakefile
 - lib/jopenssl.jar
-- lib/jopenssl/_compat23.rb
 - lib/jopenssl/load.rb
 - lib/jopenssl/version.rb
 - lib/jruby-openssl.rb
@@ -72,7 +71,8 @@ requirements:
 - jar org.bouncycastle:bcpkix-jdk18on, 1.79
 - jar org.bouncycastle:bctls-jdk18on,  1.79
 - jar org.bouncycastle:bcutil-jdk18on, 1.79
-rubygems_version: 3.1.6
+rubyforge_project:
+rubygems_version: 2.6.14.1
 signing_key:
 specification_version: 4
 summary: JRuby OpenSSL

data/lib/jopenssl/_compat23.rb

@@ -1,71 +0,0 @@
-# frozen_string_literal: false
-
-module OpenSSL
-
-  module PKey
-
-    class DH
-
-      def set_key(pub_key, priv_key)
-        self.pub_key = pub_key
-        self.priv_key = priv_key
-        self
-      end
-
-      def set_pqg(p, q, g)
-        self.p = p
-        if respond_to?(:q=)
-          self.q = q
-        else
-          OpenSSL.warn "JRuby-OpenSSL does not support setting q param on #{inspect}" if q
-        end
-        self.g = g
-        self
-      end
-
-    end
-
-    class DSA
-
-      def set_key(pub_key, priv_key)
-        self.pub_key = pub_key
-        self.priv_key = priv_key
-        self
-      end
-
-      def set_pqg(p, q, g)
-        self.p = p
-        self.q = q
-        self.g = g
-        self
-      end
-
-    end
-
-    class RSA
-
-      def set_key(n, e, d)
-        self.n = n
-        self.e = e
-        self.d = d
-        self
-      end
-
-      def set_factors(p, q)
-        self.p = p
-        self.q = q
-        self
-      end
-
-      def set_crt_params(dmp1, dmq1, iqmp)
-        self.dmp1 = dmp1
-        self.dmq1 = dmq1
-        self.iqmp = iqmp
-        self
-      end
-
-    end
-
-  end
-
-end