puma 2.9.1-java → 2.9.2-java

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 0922d7405e2fb42668eb994933edfcc57234ab01
-  data.tar.gz: 8c287132402d71095f8210b61124fd75a7c96288
+  metadata.gz: 9c5302e337d939901eafe4a2737cdedc19add7c6
+  data.tar.gz: 539591af8ede4700c4f2bbc90c6628557b7022f1
 SHA512:
-  metadata.gz: 999411b1b2fe55fa575aa87b2b513f7607fa79f8f83761d8685973386f1c097f2c8ea5b8613fd0e0c77982c51e432910e7ec31237aa2c0e6af981ebb7896819f
-  data.tar.gz: 5ea012d1b1689c4da2e2be5272bc8b3785e037b7e3368bc33a04108ee3904abf100ffc5fc9ee06618b28d499bedd40fc5dc7a36cbfb37608f0eacb7650d037fa
+  metadata.gz: 71edc5ada3f65b2fe78e8ceb3f2fd63527189ff5c1676c5a4bcf08d9160779cc6033f32584f1739c2b5ff97408e06737ee884e3135f2b2ce164e68e669ccd4de
+  data.tar.gz: 530b558df353ee0506bcbad009e25b98937be32c1a9dde11c90332ad9b3a273b0324998628fe83e7cafb6fd3ae9cc7faf01a8913894bd206bdece1f7ec9603b0

data/History.txt

@@ -1,3 +1,23 @@
+=== 2.9.2 / 1024-10-25
+
+* 8 bug fixes:
+  * Fix puma-wild handling a restart properly. Fixes #550
+  * JRuby SSL POODLE update
+  * Keep deprecated features warnings
+  * Log the current time when Puma shuts down.
+  * Fix cross-platform extension library detection
+  * Use the correct Windows names for OpenSSL.
+  * Better error logging during startup
+  * Fixing sexist error messages
+
+* 6 PRs merged:
+  * Merge pull request #549 from bsnape/log-shutdown-time
+  * Merge pull request #553 from lowjoel/master
+  * Merge pull request #568 from mariuz/patch-1
+  * Merge pull request #578 from danielbuechele/patch-1
+  * Merge pull request #581 from alexch/slightly-better-logging
+  * Merge pull request #590 from looker/jruby_disable_sslv3
+
 === 2.9.1 / 2014-09-05
 
 * 4 bug fixes:

data/README.md

@@ -248,4 +248,4 @@ $ bundle exec rake
 
 ## License
 
-Puma is copyright 2013 Evan Phoenix and contributors. It is licensed under the BSD 3-Clause license. See the include LICENSE file for details.
+Puma is copyright 2014 Evan Phoenix and contributors. It is licensed under the BSD 3-Clause license. See the include LICENSE file for details.

data/bin/puma-wild

@@ -5,11 +5,25 @@
 
 require 'rubygems'
 
-deps = ARGV.shift.split(",").each do |s|
+gems = ARGV.shift
+
+inc = ""
+
+if gems == "-I"
+  inc = ARGV.shift
+  $LOAD_PATH.concat inc.split(":")
+  gems = ARGV.shift
+end
+
+gems.split(",").each do |s|
   name, ver = s.split(":",2)
   gem name, ver
 end
 
+module Puma; end
+
+Puma.const_set("WILD_ARGS", ["-I", inc, gems])
+
 require 'puma/cli'
 
 cli = Puma::CLI.new ARGV

data/ext/puma_http11/extconf.rb

@@ -2,7 +2,8 @@ require 'mkmf'
 
 dir_config("puma_http11")
 
-$defs.push "-Wno-deprecated-declarations"
-$libs += " -lssl -lcrypto "
+if %w'ssl ssleay32'.find {|ssl| have_library(ssl, 'SSL_CTX_new')} and
+  %w'crypto libeay32'.find {|crypto| have_library(crypto, 'BIO_read')}
 
-create_makefile("puma/puma_http11")
+  create_makefile("puma/puma_http11")
+end

data/ext/puma_http11/org/jruby/puma/MiniSSL.java

@@ -1,6 +1,7 @@
 package org.jruby.puma;
 
 import org.jruby.Ruby;
+import org.jruby.RubyBoolean;
 import org.jruby.RubyClass;
 import org.jruby.RubyModule;
 import org.jruby.RubyObject;
@@ -151,6 +152,15 @@ public class MiniSSL extends RubyObject {
 
     sslCtx.init(kmf.getKeyManagers(), null, null);
     engine = sslCtx.createSSLEngine();
+
+    IRubyObject enableSSLv3 = miniSSLContext.callMethod(threadContext, "enable_SSLv3");
+    String[] protocols;
+    if (enableSSLv3 instanceof RubyBoolean && enableSSLv3.isTrue()) {
+      protocols = new String[] { "SSLv2Hello", "SSLv3", "TLSv1", "TLSv1.1", "TLSv1.2" };
+    } else {
+      protocols = new String[] { "TLSv1", "TLSv1.1", "TLSv1.2" };
+    }
+    engine.setEnabledProtocols(protocols);
     engine.setUseClientMode(false);
 
     SSLSession session = engine.getSession();

data/lib/puma/cli.rb

@@ -322,6 +322,7 @@ module Puma
 
     def graceful_stop
       @runner.stop_blocked
+      log "=== puma shutdown: #{Time.now} ==="
       log "- Goodbye!"
     end
 
@@ -362,7 +363,11 @@ module Puma
         lib = File.expand_path "lib"
         arg0[1,0] = ["-I", lib] if $:[0] == lib
 
-        @restart_argv = arg0 + ARGV
+        if defined? Puma::WILD_ARGS
+          @restart_argv = arg0 + Puma::WILD_ARGS + ARGV
+        else
+          @restart_argv = arg0 + ARGV
+        end
       end
     end
 
@@ -430,6 +435,7 @@ module Puma
         Dir.chdir @restart_dir
 
         argv += [redirects] unless RUBY_VERSION < '1.9'
+
         Kernel.exec(*argv)
       end
     end
@@ -466,8 +472,9 @@ module Puma
 
             wild = File.expand_path(File.join(puma_lib_dir, "../bin/puma-wild"))
 
-            args = [Gem.ruby] + dirs.map { |x| ["-I", x] }.flatten +
-                   [wild, deps] + @original_argv
+            wild_loadpath = dirs.join(":")
+
+            args = [Gem.ruby] + [wild, "-I", wild_loadpath, deps] + @original_argv
 
             Kernel.exec(*args)
           end

data/lib/puma/const.rb

@@ -28,7 +28,7 @@ module Puma
   # too taxing on performance.
   module Const
 
-    PUMA_VERSION = VERSION = "2.9.1".freeze
+    PUMA_VERSION = VERSION = "2.9.2".freeze
     CODE_NAME = "Team High Five".freeze
 
     FAST_TRACK_KA_TIMEOUT = 0.2

data/lib/puma/minissl.rb

@@ -95,6 +95,11 @@ module Puma
         # jruby-specific Context properties: java uses a keystore and password pair rather than a cert/key pair
         attr_reader :keystore
         attr_accessor :keystore_pass
+        attr_accessor :enable_SSLv3
+
+        def initialize
+          @enable_SSLv3 = false
+        end
 
         def keystore=(keystore)
           raise ArgumentError, "No such keystore file '#{keystore}'" unless File.exist? keystore

data/lib/puma/runner.rb

@@ -112,7 +112,7 @@ module Puma
       begin
         @app = @cli.config.app
       rescue Exception => e
-        log "! Unable to load application"
+        log "! Unable to load application: #{e.class}: #{e.message}"
         raise e
       end
 

data/lib/puma/server.rb

@@ -714,7 +714,7 @@ module Puma
       if @leak_stack_on_error
         [500, {}, ["Puma caught this error: #{e.message} (#{e.class})\n#{e.backtrace.join("\n")}"]]
       else
-        [500, {}, ["A really lowlevel plumbing error occured. Please contact your local Maytag(tm) repair man.\n"]]
+        [500, {}, ["A really lowlevel plumbing error occured. Please contact your local Maytag(tm) repair person.\n"]]
       end
     end
 

data/test/test_puma_server_ssl.rb

@@ -16,21 +16,21 @@ class TestPumaServerSSL < Test::Unit::TestCase
 
     @app = lambda { |env| [200, {}, [env['rack.url_scheme']]] }
 
-    ctx = Puma::MiniSSL::Context.new
+    @ctx = Puma::MiniSSL::Context.new
 
     if defined?(JRUBY_VERSION)
-      ctx.keystore =  File.expand_path "../../examples/puma/keystore.jks", __FILE__
-      ctx.keystore_pass = 'blahblah'
+      @ctx.keystore =  File.expand_path "../../examples/puma/keystore.jks", __FILE__
+      @ctx.keystore_pass = 'blahblah'
     else
-      ctx.key =  File.expand_path "../../examples/puma/puma_keypair.pem", __FILE__
-      ctx.cert = File.expand_path "../../examples/puma/cert_puma.pem", __FILE__
+      @ctx.key =  File.expand_path "../../examples/puma/puma_keypair.pem", __FILE__
+      @ctx.cert = File.expand_path "../../examples/puma/cert_puma.pem", __FILE__
     end
 
-    ctx.verify_mode = Puma::MiniSSL::VERIFY_NONE
+    @ctx.verify_mode = Puma::MiniSSL::VERIFY_NONE
 
     @events = Puma::Events.new STDOUT, STDERR
     @server = Puma::Server.new @app, @events
-    @server.add_ssl_listener @host, @port, ctx
+    @server.add_ssl_listener @host, @port, @ctx
     @server.run
 
     @http = Net::HTTP.new @host, @port
@@ -88,4 +88,50 @@ class TestPumaServerSSL < Test::Unit::TestCase
     assert_equal "https", body
   end
 
+  if defined?(JRUBY_VERSION)
+    def test_ssl_v3_support_disabled_by_default
+      @http.ssl_version='SSLv3'
+      assert_raises(OpenSSL::SSL::SSLError) do
+        @http.start do
+          Net::HTTP::Get.new '/'
+        end
+      end
+    end
+
+    def test_enabling_ssl_v3_support
+      @server.stop(true)
+      @ctx.enable_SSLv3 = true
+      @server = Puma::Server.new @app, @events
+      @server.add_ssl_listener @host, @port, @ctx
+      @server.run
+      @http.ssl_version='SSLv3'
+
+      body = nil
+      @http.start do
+        req = Net::HTTP::Get.new "/", {}
+
+        @http.request(req) do |rep|
+          body = rep.body
+        end
+      end
+
+      assert_equal "https", body
+    end
+
+    def test_enabling_ssl_v3_support_requires_true
+      @server.stop(true)
+      @ctx.enable_SSLv3 = "truthy but not true"
+      @server = Puma::Server.new @app, @events
+      @server.add_ssl_listener @host, @port, @ctx
+      @server.run
+      @http.ssl_version='SSLv3'
+
+      assert_raises(OpenSSL::SSL::SSLError) do
+        @http.start do
+          Net::HTTP::Get.new '/'
+        end
+      end
+    end
+  end
+
 end

metadata

@@ -1,18 +1,17 @@
 --- !ruby/object:Gem::Specification
 name: puma
 version: !ruby/object:Gem::Version
-  version: 2.9.1
+  version: 2.9.2
 platform: java
 authors:
 - Evan Phoenix
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2014-09-05 00:00:00.000000000 Z
+date: 2014-10-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  name: rack
-  version_requirements: !ruby/object:Gem::Requirement
+  requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '>='
       - !ruby/object:Gem::Version
@@ -20,7 +19,10 @@ dependencies:
     - - <
       - !ruby/object:Gem::Version
         version: '2.0'
-  requirement: !ruby/object:Gem::Requirement
+  name: rack
+  prerelease: false
+  type: :runtime
+  version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '>='
       - !ruby/object:Gem::Version
@@ -28,50 +30,48 @@ dependencies:
     - - <
       - !ruby/object:Gem::Version
         version: '2.0'
-  prerelease: false
-  type: :runtime
 - !ruby/object:Gem::Dependency
-  name: rdoc
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ~>
-      - !ruby/object:Gem::Version
-        version: '4.0'
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ~>
       - !ruby/object:Gem::Version
         version: '4.0'
+  name: rdoc
   prerelease: false
   type: :development
-- !ruby/object:Gem::Dependency
-  name: rake-compiler
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ~>
       - !ruby/object:Gem::Version
-        version: '0.8'
+        version: '4.0'
+- !ruby/object:Gem::Dependency
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ~>
       - !ruby/object:Gem::Version
         version: '0.8'
+  name: rake-compiler
   prerelease: false
   type: :development
-- !ruby/object:Gem::Dependency
-  name: hoe
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ~>
       - !ruby/object:Gem::Version
-        version: '3.12'
+        version: '0.8'
+- !ruby/object:Gem::Dependency
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ~>
       - !ruby/object:Gem::Version
         version: '3.12'
+  name: hoe
   prerelease: false
   type: :development
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '3.12'
 description: Puma is a simple, fast, threaded, and highly concurrent HTTP 1.1 server for Ruby/Rack applications. Puma is intended for use in both development and production environments. In order to get the best throughput, it is highly recommended that you use a  Ruby implementation with real threads like Rubinius or JRuby.
 email:
 - evan@phx.io