openssl 2.0.7 → 2.0.8

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.


This version of openssl might be problematic. Click here for more details.

checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: ce5a2e8d001a9150d08622ad74ce5956699f2019fe5440290a08bcb1efbfc801
4
- data.tar.gz: 8b4199dec376210e502f34504e68f83ba992da0a28aa5c6ec37341b05cf3ed00
3
+ metadata.gz: aaf3892e604545c94e4a743227ba410a95bc8d42914648f8f6573526ee7f8782
4
+ data.tar.gz: aded4f0191146eb59089b5c30741f659a35fa7d00e1d2d32e12ab7eba4f745a6
5
5
  SHA512:
6
- metadata.gz: d2a3fbf38ae0922eeb55755c19038369e53fac3587f2c9e04fec2d88d6e33dc0149b2b2d2591e2f259d0df42dde17e10e62cf355dc5fb6b6addee8d264fe2b2b
7
- data.tar.gz: 999ba923fd91bda5b699e810a171d7ea24148bf19fc38c9a9feb93870c26025500ea969f556e13a51b0271ede667ee4ec09c31e87df4d7273dc9f83c4ca5ed8c
6
+ metadata.gz: a9343f73db2ec7389646be22d1de4f58e8ecf190848112b278e8451b65b3e2aed446e050b29cbda7fb523da6a35087c5bead7452282ad4decf195247d2492964
7
+ data.tar.gz: 0612bc4a0687c28b008125191fd29726376ca91570bfd2ebb4b950197a3930d0f5d7368cfaa12b31962a2ce89604eacfdfd15646e48b3a1da429197ca2f8d2e3
data/History.md CHANGED
@@ -1,3 +1,17 @@
1
+ Version 2.0.8
2
+ =============
3
+
4
+ Bug fixes
5
+ ---------
6
+
7
+ * OpenSSL::Cipher#pkcs5_keyivgen raises an error when a negative iteration
8
+ count is given.
9
+ [[GitHub #184]](https://github.com/ruby/openssl/pull/184)
10
+ * Fixed build with LibreSSL 2.7.
11
+ [[GitHub #192]](https://github.com/ruby/openssl/issues/192)
12
+ [[GitHub #193]](https://github.com/ruby/openssl/pull/193)
13
+
14
+
1
15
  Version 2.0.7
2
16
  =============
3
17
 
@@ -157,8 +157,11 @@ OpenSSL.check_func_or_macro("SSL_get_server_tmp_key", "openssl/ssl.h")
157
157
  have_func("SSL_is_server")
158
158
 
159
159
  # added in 1.1.0
160
+ if !have_struct_member("SSL", "ctx", "openssl/ssl.h") ||
161
+ try_static_assert("LIBRESSL_VERSION_NUMBER >= 0x2070000fL", "openssl/opensslv.h")
162
+ $defs.push("-DHAVE_OPAQUE_OPENSSL")
163
+ end
160
164
  have_func("CRYPTO_lock") || $defs.push("-DHAVE_OPENSSL_110_THREADING_API")
161
- have_struct_member("SSL", "ctx", "openssl/ssl.h") || $defs.push("-DHAVE_OPAQUE_OPENSSL")
162
165
  have_func("BN_GENCB_new")
163
166
  have_func("BN_GENCB_free")
164
167
  have_func("BN_GENCB_get_arg")
@@ -321,6 +321,8 @@ ossl_cipher_pkcs5_keyivgen(int argc, VALUE *argv, VALUE self)
321
321
  salt = (unsigned char *)RSTRING_PTR(vsalt);
322
322
  }
323
323
  iter = NIL_P(viter) ? 2048 : NUM2INT(viter);
324
+ if (iter <= 0)
325
+ rb_raise(rb_eArgError, "iterations must be a positive integer");
324
326
  digest = NIL_P(vdigest) ? EVP_md5() : GetDigestPtr(vdigest);
325
327
  GetCipher(self, ctx);
326
328
  EVP_BytesToKey(EVP_CIPHER_CTX_cipher(ctx), digest, salt,
@@ -10,6 +10,6 @@
10
10
  #if !defined(_OSSL_VERSION_H_)
11
11
  #define _OSSL_VERSION_H_
12
12
 
13
- #define OSSL_VERSION "2.0.7"
13
+ #define OSSL_VERSION "2.0.8"
14
14
 
15
15
  #endif /* _OSSL_VERSION_H_ */
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: openssl
3
3
  version: !ruby/object:Gem::Version
4
- version: 2.0.7
4
+ version: 2.0.8
5
5
  platform: ruby
6
6
  authors:
7
7
  - Martin Bosslet
@@ -11,7 +11,7 @@ authors:
11
11
  autorequire:
12
12
  bindir: bin
13
13
  cert_chain: []
14
- date: 2017-12-14 00:00:00.000000000 Z
14
+ date: 2018-05-12 00:00:00.000000000 Z
15
15
  dependencies:
16
16
  - !ruby/object:Gem::Dependency
17
17
  name: rake
@@ -172,7 +172,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
172
172
  version: '0'
173
173
  requirements: []
174
174
  rubyforge_project:
175
- rubygems_version: 2.7.3
175
+ rubygems_version: 2.7.6
176
176
  signing_key:
177
177
  specification_version: 4
178
178
  summary: OpenSSL provides SSL, TLS and general purpose cryptography.