openssl 3.3.2-java → 4.0.0-java

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. checksums.yaml +4 -4
  2. data/CONTRIBUTING.md +3 -0
  3. data/History.md +85 -0
  4. data/README.md +12 -11
  5. metadata +1 -1
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: bf9522ee11a31ec94832d43bc4c2ce1a39da5b441c90cebe6c7815ecb23ca00c
4
- data.tar.gz: b13e65b9d6b6e90b0b0fa7d537c588895812e2179e0e10d3adb665a727bd8d84
3
+ metadata.gz: 2b967c76683184d75678e4af5039f2c090e371a7b959de0e688a110aca3389b7
4
+ data.tar.gz: e0ff2f9b4ea73289a5849650998eeb06e0516fd73f3d32482a4c50fedd154f0a
5
5
  SHA512:
6
- metadata.gz: 0bb619e1823453ccdc51253f42d23c5214e8410041d122c1114ae54eb389096715a873e2253c1a76b89475636d3e51b6d25b81ed33662d7ce19aae00a45506f2
7
- data.tar.gz: b0f133dd8e31b31b383a61c1c8cc93300fc5b182c33c05eb12db725652b12397f6b5c3e50a0812595b48d7e650d365acae48d9c1e577755db429e4d7e41d6e8d
6
+ metadata.gz: 11741bae344dd5f2a7d66774a595ebdd388f2b449fe46a538fce3067a1e22c49304f05316f7009d7d7728909846d3888a82a43c55437c0f4c8e094b9db91ba93
7
+ data.tar.gz: b41f010f681e515a59ed35fc5013743e0fef315ea31f412c434e0d29d367e5488bd7b9ae9dad65c324e04f35350032ffd1b0e77df7466823a6a948ce61d76fa7
data/CONTRIBUTING.md CHANGED
@@ -224,6 +224,9 @@ $ OPENSSL_CONF=$OPENSSL_DIR/ssl/openssl_fips.cnf \
224
224
  The GitHub Actions workflow file [`test.yml`][GitHub test.yml] contains useful
225
225
  information for building OpenSSL/LibreSSL and testing against them.
226
226
 
227
+ ## Debugging
228
+
229
+ You can use the `OpenSSL.debug = true` to print additional error strings.
227
230
 
228
231
  ## Relation with Ruby source tree
229
232
 
data/History.md CHANGED
@@ -1,3 +1,88 @@
1
+ Version 4.0.0
2
+ =============
3
+
4
+ Compatibility
5
+ -------------
6
+
7
+ * Ruby >= 2.7
8
+ * OpenSSL >= 1.1.1, LibreSSL >= 3.9, and AWS-LC 1.66.0
9
+ - Removed support for OpenSSL 1.0.2-1.1.0 and LibreSSL 3.1-3.8.
10
+ [[GitHub #835]](https://github.com/ruby/openssl/issues/835)
11
+ - Added support for AWS-LC.
12
+ [[GitHub #833]](https://github.com/ruby/openssl/issues/833)
13
+
14
+
15
+ Notable changes
16
+ ---------------
17
+
18
+ * `OpenSSL::SSL`
19
+ - Reduce overhead when writing to `OpenSSL::SSL::SSLSocket`. `#syswrite` no
20
+ longer creates a temporary String object.
21
+ [[GitHub #831]](https://github.com/ruby/openssl/pull/831)
22
+ - Make `OpenSSL::SSL::SSLContext#min_version=` and `#max_version=` wrap the
23
+ corresponding OpenSSL APIs directly, and remove the fallback to SSL options.
24
+ [[GitHub #849]](https://github.com/ruby/openssl/pull/849)
25
+ - Add `OpenSSL::SSL::SSLContext#sigalgs=` and `#client_sigalgs=` for
26
+ specifying signature algorithms to use for connections.
27
+ [[GitHub #895]](https://github.com/ruby/openssl/pull/895)
28
+ - Rename `OpenSSL::SSL::SSLContext#ecdh_curves=` to `#groups=` following
29
+ the underlying OpenSSL API rename. This method is no longer specific to
30
+ ECDHE. The old method remains as an alias.
31
+ [[GitHub #900]](https://github.com/ruby/openssl/pull/900)
32
+ - Add `OpenSSL::SSL::SSLSocket#sigalg`, `#peer_sigalg`, and `#group` for
33
+ getting the signature algorithm and the key agreement group used in the
34
+ current connection.
35
+ [[GitHub #908]](https://github.com/ruby/openssl/pull/908)
36
+ - Enable `SSL_CTX_set_dh_auto()` for servers by default.
37
+ [[GitHub #924]](https://github.com/ruby/openssl/pull/924)
38
+ - Improve Ractor compatibility. Note that the internal-use constant
39
+ `OpenSSL::SSL::SSLContext::DEFAULT_PARAMS` is now frozen.
40
+ [[GitHub #925]](https://github.com/ruby/openssl/pull/925)
41
+ * `OpenSSL::PKey`
42
+ - Remove `OpenSSL::PKey::EC::Point#mul` support with array arguments. The
43
+ underlying OpenSSL API has been removed, and the method has been deprecated
44
+ since ruby/openssl v3.0.0.
45
+ [[GitHub #843]](https://github.com/ruby/openssl/pull/843)
46
+ - `OpenSSL::PKey::{RSA,DSA,DH}#params` uses `nil` to indicate missing fields
47
+ instead of the number `0`.
48
+ [[GitHub #774]](https://github.com/ruby/openssl/pull/774)
49
+ - Unify `OpenSSL::PKey::PKeyError` classes. The former subclasses
50
+ `OpenSSL::PKey::DHError`, `OpenSSL::PKey::DSAError`,
51
+ `OpenSSL::PKey::ECError`, and `OpenSSL::PKey::RSAError` have been merged
52
+ into a single class.
53
+ [[GitHub #929]](https://github.com/ruby/openssl/pull/929)
54
+ * `OpenSSL::Cipher`
55
+ - `OpenSSL::Cipher#encrypt` and `#decrypt` no longer accept arguments.
56
+ Passing passwords has been deprecated since Ruby 1.8.2 (released in 2004).
57
+ [[GitHub #887]](https://github.com/ruby/openssl/pull/887)
58
+ - `OpenSSL::Cipher#final` raises `OpenSSL::Cipher::AuthTagError` when the
59
+ integrity check fails for AEAD ciphers. `OpenSSL::Cipher::AuthTagError` is a
60
+ new subclass of `OpenSSL::Cipher::CipherError`, which was previously raised.
61
+ [[GitHub #939]](https://github.com/ruby/openssl/pull/939)
62
+ - `OpenSSL::Cipher.new` now raises `OpenSSL::Cipher::CipherError` instead of
63
+ `RuntimeError` when OpenSSL does not recognize the algorithm.
64
+ [[GitHub #958]](https://github.com/ruby/openssl/pull/958)
65
+ - Add support for "fetched" cipher algorithms with OpenSSL 3.0 or later.
66
+ [[GitHub #958]](https://github.com/ruby/openssl/pull/958)
67
+ * `OpenSSL::Digest`
68
+ - `OpenSSL::Digest.new` now raises `OpenSSL::Digest::DigestError` instead of
69
+ `RuntimeError` when OpenSSL does not recognize the algorithm.
70
+ [[GitHub #958]](https://github.com/ruby/openssl/pull/958)
71
+ - Add support for "fetched" digest algorithms with OpenSSL 3.0 or later.
72
+ [[GitHub #958]](https://github.com/ruby/openssl/pull/958)
73
+ * `OpenSSL::ASN1.decode` now assumes a 1950-2049 year range for `UTCTime`
74
+ according to RFC 5280. It previously used a 1969-2068 range. The encoder
75
+ has always used the 1950-2049 range.
76
+ [[GitHub #909]](https://github.com/ruby/openssl/pull/909)
77
+ * `OpenSSL::OpenSSLError`, the base class for all ruby/openssl errors, carry
78
+ an additional attribute `#errors` to keep the content of OpenSSL's error
79
+ queue. Also, add `#detailed_message` for Ruby 3.2 or later.
80
+ [[GitHub #976]](https://github.com/ruby/openssl/pull/976)
81
+ * `OpenSSL::PKCS7.new` raises `OpenSSL::PKCS7::PKCS7Error` instead of
82
+ `ArgumentError` on error to be consistent with other constructors.
83
+ [[GitHub #983]](https://github.com/ruby/openssl/pull/983)
84
+
85
+
1
86
  Version 3.3.2
2
87
  =============
3
88
 
data/README.md CHANGED
@@ -16,17 +16,18 @@ the standard library of Ruby. This is called a [default gem].
16
16
  Each stable branch of OpenSSL for Ruby will remain supported as long as it is
17
17
  included as a default gem in [supported Ruby branches][Ruby Maintenance Branches].
18
18
 
19
- |Version|Maintenance status |Ruby compatibility|OpenSSL compatibility |
20
- |-------|-------------------------------|------------------|--------------------------------------------|
21
- |3.3.x |normal maintenance (Ruby 3.4) |Ruby 2.7+ |OpenSSL 1.0.2-3.4 (current) or LibreSSL 3.1+|
22
- |3.2.x |normal maintenance (Ruby 3.3) |Ruby 2.7+ |OpenSSL 1.0.2-3.4 (current) or LibreSSL 3.1+|
23
- |3.1.x |normal maintenance (Ruby 3.2) |Ruby 2.6+ |OpenSSL 1.0.2-3.4 (current) or LibreSSL 3.1+|
24
- |3.0.x |security maintenance (Ruby 3.1)|Ruby 2.6+ |OpenSSL 1.0.2-3.4 (current) or LibreSSL 3.1+|
25
- |2.2.x |end-of-life (Ruby 3.0) |Ruby 2.3+ |OpenSSL 1.0.1-1.1.1 or LibreSSL 2.9+ |
26
- |2.1.x |end-of-life (Ruby 2.5-2.7) |Ruby 2.3+ |OpenSSL 1.0.1-1.1.1 or LibreSSL 2.5+ |
27
- |2.0.x |end-of-life (Ruby 2.4) |Ruby 2.3+ |OpenSSL 0.9.8-1.1.1 or LibreSSL 2.3+ |
28
-
29
- [default gem]: https://docs.ruby-lang.org/en/master/standard_library_rdoc.html
19
+ |Version|Minimum Ruby|OpenSSL compatibility |Bundled with|Maintenance |
20
+ |-------|------------|-----------------------------------------|------------|-------------|
21
+ |4.0.x |Ruby 2.7 |OpenSSL 1.1.1-3.x, LibreSSL 3.9+, AWS-LC |Ruby 4.0 |bug fixes |
22
+ |3.3.x |Ruby 2.7 |OpenSSL 1.0.2-3.x, LibreSSL 3.1+ |Ruby 3.4 |bug fixes |
23
+ |3.2.x |Ruby 2.7 |OpenSSL 1.0.2-3.x, LibreSSL 3.1+ |Ruby 3.3 |bug fixes |
24
+ |3.1.x |Ruby 2.6 |OpenSSL 1.0.2-3.x, LibreSSL 3.1+ |Ruby 3.2 |security only|
25
+ |3.0.x |Ruby 2.6 |OpenSSL 1.0.2-3.x, LibreSSL 3.1+ |Ruby 3.1 |end-of-life |
26
+ |2.2.x |Ruby 2.3 |OpenSSL 1.0.1-1.1.1, LibreSSL 2.9+ |Ruby 3.0 |end-of-life |
27
+ |2.1.x |Ruby 2.3 |OpenSSL 1.0.1-1.1.1, LibreSSL 2.5+ |Ruby 2.5-2.7|end-of-life |
28
+ |2.0.x |Ruby 2.3 |OpenSSL 0.9.8-1.1.1, LibreSSL 2.3+ |Ruby 2.4 |end-of-life |
29
+
30
+ [default gem]: https://docs.ruby-lang.org/en/master/standard_library_md.html
30
31
  [Ruby Maintenance Branches]: https://www.ruby-lang.org/en/downloads/branches/
31
32
 
32
33
  ## Installation
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: openssl
3
3
  version: !ruby/object:Gem::Version
4
- version: 3.3.2
4
+ version: 4.0.0
5
5
  platform: java
6
6
  authors:
7
7
  - Martin Bosslet