jruby-openssl 0.19.3-java → 0.19.5-java

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 4b2d2e2cfb98fb276169353e0a96ef2c41b5ed9be72afe65f8a533f2af389303
4
- data.tar.gz: 56891904f7804768cdf31d8a10f7f86c91ef1a1a86119d297648fb9b293a9f1e
3
+ metadata.gz: 745c8be246e75d17ab0d10b729ded808f1b3b77bfb0ef9ca123018cb666b6001
4
+ data.tar.gz: d56ce79778182c10ab3efcdca9ba860a1ab8cb8f674b242cd4b12b418ea87bca
5
5
  SHA512:
6
- metadata.gz: 898da59071f4969cd053072d181954355a668e9fd5011c9b099287bc899e24525e73ff1b8a43efc00a8fd9ca06bcc20e5293e0fc734379863bb62957d4412447
7
- data.tar.gz: 58fe61d22c8346b07b27acce29b7aa8fb489e603e2aededac65f94fc05dcf51e6e788af5ae8473c59bf0470539e07e541fcd3dda823f1bbd370f48ed016e9462
6
+ metadata.gz: acb095233bbc1223d2fc7db3b1c204dcf4305d9f48a20162646d3f776c5aa5856e41996894895f73b476e5478b1659b08b50748b8247fedd9fa1c7c22e0e208f
7
+ data.tar.gz: 1ef0edb02eea0eb6038ffbec6cd60e3d647255de2b0d937f97240062690d701eae9632076128bec75717cdfee7adbb951f8678455c28d39bba9c44ba813e0d5c
data/History.md CHANGED
@@ -1,3 +1,40 @@
1
+ ## 0.19.5
2
+
3
+ TLS handshake error reporting and shutdown alert fix, OCSP request improvements,
4
+ ASN.1 decoding compatibility and safety handling for uninitialized objects.
5
+
6
+ - [fix] `OCSP::Request` nonce and certid handling (#396)
7
+ - [fix] avoid flushing stale bytes after failed wrap
8
+ - [compat] report cert verify error on failed handshake (#399)
9
+ - [fix] flush buffered alert on failed handshake shutdown (#399)
10
+ - [fix] handle uninitialized Digest/HMAC objects
11
+ - [fix] prevent loop in PKCS12 on cyclic safe bags
12
+ - [fix] bounds and space escaping in X509::Extension
13
+ - [compat] keep ObjectId value as given on initialize
14
+ - [fix] string insertion index in HMAC fallback
15
+ - [fix] revoked entry extensions in X509CRL#to_text
16
+ - [fix] handle uninitialized CRL in X509CRL#to_text
17
+ - [fix] handle null around X509Cert#to_text
18
+ - [fix] X509Cert#to_der when cert is uninitialized
19
+ - [fix] validate keyword arguments in KDF.pbkdf2_hmac and KDF.hkdf
20
+ - [fix] ASN.1 constructed bit and subclassing support
21
+ - [fix] ASN.1 encoding decoding and type resolution
22
+
23
+ ## 0.19.4
24
+
25
+ TLS compatibility, cipher selection and key-handling (regression) fixes.
26
+
27
+ - [fix] match BCJSSE credential key in TLS handshakes (#383)
28
+ - [fix] keep CTR (and OFB) cipher state after final (#392)
29
+ - [fix] report 1.3 ciphers independently of legacy selectors
30
+ - [fix] support AES128, AES256 and CHACHA20 cipher aliases (#390)
31
+ - [fix] translate unchecked RSA provider errors
32
+ - [fix] return `false` for out-of-range RSA-PSS signatures
33
+ - [fix] finalize buffered TLS EOF handling (#388)
34
+ - [fix] deliver buffered data before EOF (#388)
35
+ - [fix] support ECDHE cipher selectors (#387)
36
+ - [fix] reject incomplete PEM end markers (#385)
37
+
1
38
  ## 0.19.3
2
39
 
3
40
  Broader OpenSSL compatibility across PKCS7, X.509, key handling and big numbers,
data/Rakefile CHANGED
@@ -102,17 +102,18 @@ require_relative 'tasks/provider_tests'
102
102
  namespace :test do
103
103
  namespace :provider do
104
104
  define_provider_test_task :bc_all,
105
- description: 'Run tests with BC providers registered through java.security',
105
+ description: 'Run tests with BC providers registered',
106
106
  providers: [
107
107
  { name: 'BC', class: 'org.bouncycastle.jce.provider.BouncyCastleProvider' },
108
108
  { name: 'BCJSSE', class: 'org.bouncycastle.jsse.provider.BouncyCastleJsseProvider' }
109
109
  ],
110
110
  jars: -> { FileList['vendor/**/*.jar'].map { |path| File.expand_path(path) } }
111
- define_provider_test_task :bc_wout_jsse,
112
- description: 'Run tests with only BC provider registered (without BC-JSSE)',
111
+ define_provider_test_task :bc_wout_jsse, # BC registered but BC-JSSE n/a
112
+ description: 'Run tests with BC provider and default SSL engine',
113
113
  providers: [
114
114
  { name: 'BC', class: 'org.bouncycastle.jce.provider.BouncyCastleProvider' },
115
115
  ],
116
+ extra_ruby_opts: ['-J-Djruby.openssl.provider.ssl=false'], # use built-in SunJSSE
116
117
  jdk_providers: ['SUN', 'SunJSSE', 'SunJCE', 'SunEC'],
117
118
  jars: -> { FileList['vendor/**/*.jar'].map { |path| File.expand_path(path) } }
118
119
  end
@@ -1,6 +1,6 @@
1
1
  # frozen_string_literal: true
2
2
  module JOpenSSL
3
- VERSION = '0.19.3'
3
+ VERSION = '0.19.5'
4
4
  BOUNCY_CASTLE_VERSION = '1.86'
5
5
 
6
6
  # @private
data/lib/jopenssl.jar CHANGED
Binary file
data/pom.xml CHANGED
@@ -11,7 +11,7 @@ DO NOT MODIFY - GENERATED CODE
11
11
  <modelVersion>4.0.0</modelVersion>
12
12
  <groupId>org.jruby.openssl</groupId>
13
13
  <artifactId>jruby-openssl</artifactId>
14
- <version>0.19.3</version>
14
+ <version>0.19.5</version>
15
15
  <packaging>gem</packaging>
16
16
  <name>SSL/TLS and general-purpose cryptography for JRuby</name>
17
17
  <description>Ruby OpenSSL compatibility for JRuby, based on Java JCA/JCE and Bouncy Castle libraries (does not depend on native OpenSSL).</description>
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: jruby-openssl
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.19.3
4
+ version: 0.19.5
5
5
  platform: java
6
6
  authors:
7
7
  - Karol Bucek
@@ -9,7 +9,7 @@ authors:
9
9
  - JRuby contributors
10
10
  bindir: bin
11
11
  cert_chain: []
12
- date: 2026-10-07 00:00:00.000000000 Z
12
+ date: 2026-11-04 00:00:00.000000000 Z
13
13
  dependencies: []
14
14
  description: Ruby OpenSSL compatibility for JRuby, based on Java JCA/JCE and Bouncy
15
15
  Castle libraries (does not depend on native OpenSSL).