rubyntlm 0.6.5 → 0.6.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 12b18439c86b30b978043850938e3ec611230d2e0783828d6db337dfe4ea97ad
-  data.tar.gz: 872a21844c21c9f64815abd312156c3fcddb8ebedc5185ec128106b6714b8521
+  metadata.gz: f618c1c4edae0dd1fc9e9a20d690f3b56d7280ba4e07dc097bfe86e8720ab043
+  data.tar.gz: 8b1516a2ae5919c22fd2788fbdb1c3cb78492826a629536fcb597afa6d2ecd69
 SHA512:
-  metadata.gz: 03df0639b70648b2db81684060ce732d46f21a392590f4995ddb4c97399036ffc8d9a47fd1460b64441a34bebdbabfbd1f3d625bf1246a9e178a0901770f0ee5
-  data.tar.gz: e3ff9341eb1738c501fe90d9456a8203e5771af2c459bb53f0168e24cbdd549540a0369d9a83f2864dce4fac86595cca4c7207b88f11a1b843d9fdbf52b59b20
+  metadata.gz: 0c5a6e37d4945d1abef840ceaf4b78b9149aba4c3cfc05f9b3bbeaa8b0e488b87c551d9652e0e9bda69983b788430cde3e8b968978dae0046f5d5f1dbf99cee2
+  data.tar.gz: a8a0fa4b29d5fa6b9d39bbaf6c3e1a9c342eb2c16e6cd43d969be33dac159c4b19babab2210810b4d14e1a1a0a2c62308cc04b05d6d6b84fe70dc232f5410ade

data/.github/workflows/build.yml

@@ -7,18 +7,49 @@ name: build
     branches:
       - master
 
+# The job only ever reads the checkout; deny everything else by default.
+permissions:
+  contents: read
+
+# A new push to a PR makes the in-flight run redundant. Never cancel master,
+# because those runs are what the README badge reports.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
 jobs:
   unit:
+    name: ${{ matrix.os }} / ruby ${{ matrix.ruby }}
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 15
+    # Nightly builds break for reasons that are not this gem's fault, so they
+    # report without failing the run.
+    continue-on-error: ${{ matrix.experimental || false }}
     strategy:
       fail-fast: false
       matrix:
-        os: [ubuntu-latest, windows-2019]
-        ruby: ['2.6', '2.7', '3.0', '3.1', '3.2', '3.3']
-    runs-on: ${{ matrix.os }}
+        os: [ubuntu-latest, windows-latest]
+        ruby: ['3.0', '3.1', '3.2', '3.3', '3.4', '4.0']
+        include:
+          - os: ubuntu-latest
+            ruby: 'head'
+            experimental: true
+          - os: windows-latest
+            ruby: 'head'
+            experimental: true
+          # truffleruby has no Windows build via setup-ruby.
+          - os: ubuntu-latest
+            ruby: 'truffleruby'
+          - os: ubuntu-latest
+            ruby: 'truffleruby-head'
+            experimental: true
     steps:
-    - uses: actions/checkout@v4
-    - uses: ruby/setup-ruby@v1
-      with:
-        ruby-version: ${{ matrix.ruby }}
-        bundler-cache: true
-    - run: bundle exec rake
+      - uses: actions/checkout@v4
+
+      - uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: ${{ matrix.ruby }}
+          bundler-cache: true
+
+      - name: Run specs
+        run: bundle exec rake spec

data/.gitignore

@@ -3,3 +3,9 @@
 /doc
 Gemfile.lock
 pkg
+
+# Generated by SimpleCov (`rake coverage`)
+/coverage
+
+# RSpec's example status cache, used by `rspec --only-failures`
+/spec/examples.txt

data/.rspec

@@ -1,2 +1,3 @@
+--require spec_helper
 --format documentation
 --color

data/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Change Log
 
+## 0.6.6 (2026-09-09)
+
+* Security: fix NTLMv2 authentication bypass in `Type3#password?`, which verified NTLMv2 responses against an empty password instead of the supplied one
+* Fix binary padding in the Ruby MD4 fallback so non-ASCII passwords hash correctly under OpenSSL 3
+
 ## 0.6.5 (2024-06-11)
 
 * Update available NegotiateFlags during authentication

data/Gemfile

@@ -1,3 +1,20 @@
 source 'https://rubygems.org'
 
 gemspec
+
+# Development dependencies live here rather than in the gemspec so that they
+# can be grouped, and so that consumers of the gem never resolve them.
+group :development, :test do
+  gem 'pry'
+  gem 'rake'
+  gem 'rspec', '~> 3.13'
+  gem 'simplecov', require: false
+end
+
+# Release tooling only. Marked optional so it is not installed by default:
+# github_changelog_generator drags in a large, slow-moving dependency tree that
+# does not resolve on every Ruby we test against. Opt in when cutting a release
+# with `bundle install --with changelog`.
+group :changelog, optional: true do
+  gem 'github_changelog_generator'
+end

data/README.md

@@ -1,6 +1,6 @@
 # Ruby/NTLM -- NTLM Authentication Library for Ruby
 
-[![CI status](https://github.com/WinRb/rubyntlm/actions/workflows/build.yml/badge.svg)](https://github.com/WinRb/rubyntlm/actions/workflows/build.yml)
+[![build status](https://github.com/WinRb/rubyntlm/actions/workflows/build.yml/badge.svg?branch=master&event=push)](https://github.com/WinRb/rubyntlm/actions/workflows/build.yml?query=branch%3Amaster+event%3Apush)
 
 Ruby/NTLM provides message creator and parser for the NTLM authentication. 
 

data/Rakefile

@@ -1,5 +1,4 @@
 require "bundler/gem_tasks"
-require 'github_changelog_generator/task'
 
 require 'rspec/core/rake_task'
 RSpec::Core::RakeTask.new(:spec)
@@ -20,6 +19,19 @@ task :console do
   Pry.start
 end
 
-GitHubChangelogGenerator::RakeTask.new :changelog do |config|
-  config.future_release = Net::NTLM::VERSION::STRING
+# Release tooling only, and deliberately optional: the :changelog bundle group
+# is not installed by default, so this must never break `rake` or `rake spec`.
+# Run `bundle install --with changelog` to enable it.
+begin
+  require 'github_changelog_generator/task'
+
+  GitHubChangelogGenerator::RakeTask.new :changelog do |config|
+    config.future_release = Net::NTLM::VERSION::STRING
+  end
+rescue LoadError
+  desc "Generate CHANGELOG.md (requires: bundle install --with changelog)"
+  task :changelog do
+    abort "github_changelog_generator is not installed. " \
+          "Run `bundle install --with changelog` first."
+  end
 end

data/lib/net/ntlm/md4.rb

@@ -23,8 +23,9 @@ module NTLM
         # initial hash
         a, b, c, d = 0x67452301, 0xefcdab89, 0x98badcfe, 0x10325476
 
-        bit_len = string.size << 3
-        string += "\x80"
+        string = string.b
+        bit_len = string.bytesize << 3
+        string += "\x80".b
         while (string.size % 64) != 56
           string += "\0"
         end

data/lib/net/ntlm/message/type3.rb

@@ -101,29 +101,17 @@ module Net
         end
 
         def ntlmv2_password?(password, server_challenge)
+          # user and domain are already UTF-16LE from the wire; encode the
+          # supplied password to match before deriving the verification key.
+          key = NTLM.ntlmv2_hash(user, EncodeUtil.encode_utf16le(password), domain, :unicode => true)
+          server_challenge = NTLM.pack_int64le(server_challenge) if server_challenge.is_a?(Integer)
 
-          # The first 16 bytes of the ntlm_response are the HMAC of the blob
-          # that follows it.
-          blob = Blob.new
-          blob.parse(ntlm_response[16..-1])
-
-          empty_hash = NTLM.ntlmv2_response(
-            {
-              # user and domain came from the serialized data here, so
-              # they're already unicode
-              :ntlmv2_hash => NTLM.ntlmv2_hash(user, '', domain, :unicode => true),
-              :challenge => server_challenge,
-              :target_info => blob.target_info
-            },
-            {
-              :client_challenge => blob.challenge,
-              # The blob's timestamp is already in milliseconds since 1601,
-              # so convert it back to epoch time first
-              :timestamp => (blob.timestamp / 10_000_000) - NTLM::TIME_OFFSET,
-            }
+          # Authenticate the exact blob bytes. Rebuilding the blob truncates
+          # sub-second timestamps and rejects otherwise valid responses.
+          expected_proof = OpenSSL::HMAC.digest(
+            OpenSSL::Digest::MD5.new, key, server_challenge + ntlm_response[16..-1]
           )
-
-          empty_hash == ntlm_response
+          expected_proof == ntlm_response[0,16]
         end
       end
     end

data/lib/net/ntlm/version.rb

@@ -4,7 +4,7 @@ module Net
     module VERSION
       MAJOR = 0
       MINOR = 6
-      TINY  = 5
+      TINY  = 6
       STRING = [MAJOR, MINOR, TINY].join('.')
     end
   end

data/rubyntlm.gemspec

@@ -13,19 +13,16 @@ Gem::Specification.new do |s|
 
 
   s.files         = `git ls-files`.split($/)
-  s.test_files    = s.files.grep(%r{^(test|spec|features)/})
   s.require_paths = ["lib"]
 
-  s.required_ruby_version = '>= 2.6.0'
+  s.required_ruby_version = '>= 3.0.0'
 
   s.license = 'MIT'
 
-  s.add_development_dependency 'github_changelog_generator', '1.14.3'
-  s.add_development_dependency "pry"
-  s.add_development_dependency "rake"
-  s.add_development_dependency "rspec", ">= 2.11"
-  s.add_development_dependency "simplecov"
   s.add_dependency "base64"
 
   s.metadata["rubygems_mfa_required"] = "true"
+  s.metadata["source_code_uri"] = s.homepage
+  s.metadata["changelog_uri"] = "#{s.homepage}/blob/master/CHANGELOG.md"
+  s.metadata["bug_tracker_uri"] = "#{s.homepage}/issues"
 end

data/spec/lib/net/ntlm/blob_spec.rb

@@ -1,6 +1,4 @@
-require 'spec_helper'
-
-describe Net::NTLM::Blob do
+RSpec.describe Net::NTLM::Blob do
 
   fields = [
       { :name => :blob_signature, :class => Net::NTLM::Int32LE, :value => 257, :active => true },

data/spec/lib/net/ntlm/channel_binding_spec.rb

@@ -1,6 +1,4 @@
-require 'spec_helper'
-
-describe Net::NTLM::ChannelBinding do
+RSpec.describe Net::NTLM::ChannelBinding do
   let(:certificates_path) { 'spec/support/certificates' }
   let(:sha_256_path) { File.join(certificates_path, 'sha_256_hash.pem') }
   let(:sha_256_cert) { OpenSSL::X509::Certificate.new(File.read(sha_256_path)) }  

data/spec/lib/net/ntlm/client/session_spec.rb

@@ -1,6 +1,4 @@
-require 'spec_helper'
-
-describe Net::NTLM::Client::Session do
+RSpec.describe Net::NTLM::Client::Session do
   let(:t2_challenge) { Net::NTLM::Message.decode64 "TlRMTVNTUAACAAAADAAMADgAAAA1goriAAyk1DmJUnUAAAAAAAAAAFAAUABEAAAABgLwIwAAAA9TAEUAUgBWAEUAUgACAAwAUwBFAFIAVgBFAFIAAQAMAFMARQBSAFYARQBSAAQADABzAGUAcgB2AGUAcgADAAwAcwBlAHIAdgBlAHIABwAIADd7mrNaB9ABAAAAAA==" }
   let(:inst) { Net::NTLM::Client::Session.new(nil, t2_challenge) }
   let(:user_session_key) {["3c4918ff0b33e2603e5d7ceaf34bb7d5"].pack("H*")}

data/spec/lib/net/ntlm/client_spec.rb

@@ -1,6 +1,4 @@
-require 'spec_helper'
-
-describe Net::NTLM::Client do
+RSpec.describe Net::NTLM::Client do
   let(:inst) { Net::NTLM::Client.new("test", "test01", :workstation => "testhost") }
   let(:user_session_key) {["3c4918ff0b33e2603e5d7ceaf34bb7d5"].pack("H*")}
 

data/spec/lib/net/ntlm/encode_util_spec.rb

@@ -1,6 +1,4 @@
-require 'spec_helper'
-
-describe Net::NTLM::EncodeUtil do
+RSpec.describe Net::NTLM::EncodeUtil do
 
   context '#encode_utf16le' do
     it 'should convert an ASCII string to UTF' do

data/spec/lib/net/ntlm/field_set_spec.rb

@@ -1,6 +1,4 @@
-require 'spec_helper'
-
-describe Net::NTLM::FieldSet do
+RSpec.describe Net::NTLM::FieldSet do
 
   fields = []
 

data/spec/lib/net/ntlm/field_spec.rb

@@ -1,6 +1,4 @@
-require 'spec_helper'
-
-describe Net::NTLM::Field do
+RSpec.describe Net::NTLM::Field do
 
   it_behaves_like 'a field', 'Foo', false
 

data/spec/lib/net/ntlm/int16_le_spec.rb

@@ -1,6 +1,4 @@
-require 'spec_helper'
-
-describe Net::NTLM::Int16LE do
+RSpec.describe Net::NTLM::Int16LE do
 
   int_values = {
     :default     => 15,

data/spec/lib/net/ntlm/int32_le_spec.rb

@@ -1,6 +1,4 @@
-require 'spec_helper'
-
-describe Net::NTLM::Int32LE do
+RSpec.describe Net::NTLM::Int32LE do
 
   int_values = {
       :default     => 252716124,

data/spec/lib/net/ntlm/int64_le_spec.rb

@@ -1,6 +1,4 @@
-require 'spec_helper'
-
-describe Net::NTLM::Int64LE do
+RSpec.describe Net::NTLM::Int64LE do
 
   int_values = {
       :default     => 5294967295,

data/spec/lib/net/ntlm/md4_spec.rb

@@ -0,0 +1,16 @@
+RSpec.describe Net::NTLM::Md4 do
+  describe '.digest' do
+    it 'hashes binary input containing high bytes' do
+      # Independently calculated with OpenSSL's legacy MD4 provider.
+      expect(described_class.digest("\xff".b).unpack('H*').first).
+        to eq('82c167af8e345bd055487af8d2b540c9')
+    end
+
+    it 'preserves the caller input and encoding' do
+      input = "\xff".b.freeze
+      described_class.digest(input)
+      expect(input).to eq("\xff".b)
+      expect(input.encoding).to eq(Encoding::ASCII_8BIT)
+    end
+  end
+end

data/spec/lib/net/ntlm/message/type0_spec.rb

@@ -1,6 +1,4 @@
-require 'spec_helper'
-
-describe Net::NTLM::Message::Type0 do
+RSpec.describe Net::NTLM::Message::Type0 do
 
   fields = [
       { :name => :sign, :class => Net::NTLM::String, :value => Net::NTLM::SSP_SIGN, :active => true },

data/spec/lib/net/ntlm/message/type1_spec.rb

@@ -1,6 +1,4 @@
-require 'spec_helper'
-
-describe Net::NTLM::Message::Type1 do
+RSpec.describe Net::NTLM::Message::Type1 do
   fields = [
       { :name => :sign, :class => Net::NTLM::String, :value => Net::NTLM::SSP_SIGN, :active => true },
       { :name => :type, :class => Net::NTLM::Int32LE, :value => 1, :active => true },

data/spec/lib/net/ntlm/message/type2_spec.rb

@@ -1,7 +1,6 @@
 # encoding: UTF-8
-require 'spec_helper'
 
-describe Net::NTLM::Message::Type2 do
+RSpec.describe Net::NTLM::Message::Type2 do
 
   fields = [
       { :name => :sign, :class => Net::NTLM::String, :value => Net::NTLM::SSP_SIGN, :active => true },

data/spec/lib/net/ntlm/message/type3_spec.rb

@@ -1,6 +1,4 @@
-require 'spec_helper'
-
-describe Net::NTLM::Message::Type3 do
+RSpec.describe Net::NTLM::Message::Type3 do
 
   fields = [
       { :name => :sign, :class => Net::NTLM::String, :value => Net::NTLM::SSP_SIGN, :active => true },
@@ -99,6 +97,10 @@ describe Net::NTLM::Message::Type3 do
         end
       end
 
+      it 'rejects a non-empty password for an empty-password response' do
+        expect(message.password?('test1234', server_challenge)).to be false
+      end
+
       describe '#ntlm_version' do
         let(:ver) { message.ntlm_version }
         it 'should be :ntlmv2' do
@@ -172,6 +174,22 @@ describe Net::NTLM::Message::Type3 do
 
     # http://davenport.sourceforge.net/ntlm.html#appendixC9
     context 'NTLMv2 Authentication; NTLM1 Signing and Sealing Using the 40-bit NTLMv2 User Session Key' do
+      let(:server_challenge) { ['0033b02d17275b77'].pack('H*') }
+
+      describe '#password?' do
+        it 'accepts the known fixture password' do
+          expect(message.password?('test1234', server_challenge)).to be true
+        end
+
+        it 'rejects an incorrect password' do
+          expect(message.password?('wrong', server_challenge)).to be false
+        end
+
+        it 'rejects an empty password' do
+          expect(message.blank_password?(server_challenge)).to be false
+        end
+      end
+
       let(:data) do
         [
           '4e544c4d5353500003000000180018006000000076007600780000000c000c00' \
@@ -222,6 +240,57 @@ describe Net::NTLM::Message::Type3 do
 
   end
 
+  describe '#password? with serialized NTLMv2 responses' do
+    let(:type2) do
+      Net::NTLM::Message::Type2.new.tap do |message|
+        message.challenge = 0x0123456789abcdef
+      end
+    end
+    let(:server_challenge) { Net::NTLM.pack_int64le(type2.challenge) }
+    subject(:message) do
+      described_class.parse(type2.response(
+        { :user => 'victim', :domain => 'CORP', :password => password },
+        { :ntlmv2 => true, :client_challenge => 0x1122334455667788, :timestamp => 0 }
+      ).serialize)
+    end
+
+    ['secret', 'odd', "p\u00e4ss\u5bc6\u7801\u{1f512}", ''].each do |password|
+      context "with password #{password.inspect}" do
+        let(:password) { password }
+
+        it 'accepts the password used to generate the response' do
+          expect(message.password?(password, server_challenge)).to be true
+        end
+
+        it 'rejects a different non-empty password' do
+          expect(message.password?('incorrect', server_challenge)).to be false
+        end
+
+        it 'recognizes only an empty password as blank' do
+          expect(message.blank_password?(server_challenge)).to eq(password.empty?)
+        end
+
+        it 'rejects a different server challenge' do
+          expect(message.password?(password, "\x00" * 8)).to be false
+        end
+
+        it 'accepts an integer server challenge' do
+          expect(message.password?(password, type2.challenge)).to be true
+        end
+
+        it 'rejects a modified proof' do
+          message.ntlm_response.setbyte(0, message.ntlm_response.getbyte(0) ^ 1)
+          expect(message.password?(password, server_challenge)).to be false
+        end
+
+        it 'rejects a modified blob' do
+          message.ntlm_response.setbyte(24, message.ntlm_response.getbyte(24) ^ 1)
+          expect(message.password?(password, server_challenge)).to be false
+        end
+      end
+    end
+  end
+
   describe '#serialize' do
     context 'when the username contains non-ASCI characters' do
       let(:t3) {

data/spec/lib/net/ntlm/message_spec.rb

@@ -1,6 +1,4 @@
-require 'spec_helper'
-
-describe Net::NTLM::Message do
+RSpec.describe Net::NTLM::Message do
 
   fields = []
   flags = [

data/spec/lib/net/ntlm/security_buffer_spec.rb

@@ -1,6 +1,4 @@
-require 'spec_helper'
-
-describe Net::NTLM::SecurityBuffer do
+RSpec.describe Net::NTLM::SecurityBuffer do
 
   fields = [
       { :name => :length, :class => Net::NTLM::Int16LE, :value => 0, :active => true },

data/spec/lib/net/ntlm/string_spec.rb

@@ -1,6 +1,4 @@
-require 'spec_helper'
-
-describe Net::NTLM::String do
+RSpec.describe Net::NTLM::String do
 
   it_behaves_like 'a field', 'Foo', false
 

data/spec/lib/net/ntlm/target_info_spec.rb

@@ -1,6 +1,4 @@
-require 'spec_helper'
-
-describe Net::NTLM::TargetInfo do
+RSpec.describe Net::NTLM::TargetInfo do
   let(:key1) { Net::NTLM::TargetInfo::MSV_AV_NB_COMPUTER_NAME }
   let(:value1) { 'some data' }
   let(:key2) { Net::NTLM::TargetInfo::MSV_AV_NB_DOMAIN_NAME }

data/spec/lib/net/ntlm/version_spec.rb

@@ -1,7 +1,6 @@
-require 'spec_helper'
 require File.expand_path("#{File.dirname(__FILE__)}/../../../../lib/net/ntlm/version")
 
-describe Net::NTLM::VERSION do
+RSpec.describe Net::NTLM::VERSION do
 
   it 'should contain an integer value for Major Version' do
     expect(Net::NTLM::VERSION::MAJOR).to be_an Integer

data/spec/lib/net/ntlm_spec.rb

@@ -1,6 +1,4 @@
-require "spec_helper"
-
-describe Net::NTLM do
+RSpec.describe Net::NTLM do
   let(:passwd) {"SecREt01"}
   let(:user) {"user"}
   let(:domain) {"DOMAIN"}

data/spec/spec_helper.rb

@@ -1,22 +1,51 @@
-require 'simplecov'
-require 'pathname'
+# Coverage must be started before the library under test is loaded, otherwise
+# methods defined at require time are not tracked.
+if ENV['COVERAGE']
+  require 'simplecov'
 
-SimpleCov.start do
-  add_filter '/spec/'
-  add_filter '/config/'
-  add_filter '/vendor/'
-end if ENV["COVERAGE"]
+  SimpleCov.start do
+    add_filter '/spec/'
+    add_filter '/vendor/'
+    enable_coverage :branch if respond_to?(:enable_coverage)
+  end
+end
 
 require 'rspec'
 require 'net/ntlm'
 
-# add project lib directory to load path
-spec_pathname = Pathname.new(__FILE__).dirname
-root_pathname = spec_pathname.join('..').expand_path
-# Requires supporting ruby files with custom matchers and macros, etc,
-# in spec/support/ and its subdirectories.
-support_glob = root_pathname.join('spec', 'support', '**', '*.rb')
+# Custom matchers, shared examples and other support code.
+Dir[File.expand_path('support/**/*.rb', __dir__)].sort.each { |path| require path }
+
+RSpec.configure do |config|
+  # Require `RSpec.describe` rather than a top-level `describe`, so the gem's
+  # specs do not depend on RSpec monkey-patching Object.
+  config.disable_monkey_patching!
+
+  config.expect_with :rspec do |expectations|
+    expectations.syntax = :expect
+    expectations.include_chain_clauses_in_custom_matcher_descriptions = true
+  end
+
+  config.mock_with :rspec do |mocks|
+    mocks.syntax = :expect
+    # Fail fast when a partial double stubs a method the real object does not
+    # have, so refactors in lib/ cannot leave specs passing against a fiction.
+    mocks.verify_partial_doubles = true
+  end
+
+  # Shared example groups get their own metadata rather than leaking it into
+  # the host group. This is the RSpec 4 default.
+  config.shared_context_metadata_behavior = :apply_to_host_groups
+
+  # `rspec --only-failures` and `--next-failure`.
+  config.example_status_persistence_file_path = 'spec/examples.txt'
+
+  # Tagging an example `:focus` runs just that example, without needing to pass
+  # a line number. No effect when nothing is tagged.
+  config.filter_run_when_matching :focus
 
-Dir.glob(support_glob) do |path|
-  require path
+  # Randomise ordering to surface accidental dependencies between examples, and
+  # print the seed so a failure can be reproduced with `--seed`.
+  config.order = :random
+  Kernel.srand config.seed
 end

data/spec/support/shared/examples/net/ntlm/field_shared.rb

@@ -1,4 +1,4 @@
-shared_examples_for 'a field' do  | value, active|
+RSpec.shared_examples_for 'a field' do  | value, active|
 
   subject do
     described_class.new({

data/spec/support/shared/examples/net/ntlm/fieldset_shared.rb

@@ -1,4 +1,4 @@
-shared_examples_for 'a fieldset' do |fields|
+RSpec.shared_examples_for 'a fieldset' do |fields|
 
   subject(:fieldset_class) do
     Class.new(described_class)

data/spec/support/shared/examples/net/ntlm/int_shared.rb

@@ -1,4 +1,4 @@
-shared_examples_for 'an integer field' do  |values|
+RSpec.shared_examples_for 'an integer field' do  |values|
 
   subject do
     described_class.new({

data/spec/support/shared/examples/net/ntlm/message_shared.rb

@@ -1,4 +1,4 @@
-shared_examples_for 'a message' do |flags|
+RSpec.shared_examples_for 'a message' do |flags|
 
   subject(:test_message) do
     unless described_class.names.include?(:flag)

metadata

@@ -1,86 +1,16 @@
 --- !ruby/object:Gem::Specification
 name: rubyntlm
 version: !ruby/object:Gem::Version
-  version: 0.6.5
+  version: 0.6.6
 platform: ruby
 authors:
 - Kohei Kajimoto
 - Paul Morton
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-06-12 00:00:00.000000000 Z
+date: 2026-09-09 00:00:00.000000000 Z
 dependencies:
-- !ruby/object:Gem::Dependency
-  name: github_changelog_generator
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - '='
-      - !ruby/object:Gem::Version
-        version: 1.14.3
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - '='
-      - !ruby/object:Gem::Version
-        version: 1.14.3
-- !ruby/object:Gem::Dependency
-  name: pry
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
-- !ruby/object:Gem::Dependency
-  name: rake
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
-- !ruby/object:Gem::Dependency
-  name: rspec
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '2.11'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '2.11'
-- !ruby/object:Gem::Dependency
-  name: simplecov
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
 - !ruby/object:Gem::Dependency
   name: base64
   requirement: !ruby/object:Gem::Requirement
@@ -151,6 +81,7 @@ files:
 - spec/lib/net/ntlm/int16_le_spec.rb
 - spec/lib/net/ntlm/int32_le_spec.rb
 - spec/lib/net/ntlm/int64_le_spec.rb
+- spec/lib/net/ntlm/md4_spec.rb
 - spec/lib/net/ntlm/message/type0_spec.rb
 - spec/lib/net/ntlm/message/type1_spec.rb
 - spec/lib/net/ntlm/message/type2_spec.rb
@@ -172,7 +103,10 @@ licenses:
 - MIT
 metadata:
   rubygems_mfa_required: 'true'
-post_install_message: 
+  source_code_uri: https://github.com/winrb/rubyntlm
+  changelog_uri: https://github.com/winrb/rubyntlm/blob/master/CHANGELOG.md
+  bug_tracker_uri: https://github.com/winrb/rubyntlm/issues
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -180,41 +114,15 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.6.0
+      version: 3.0.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.3
-signing_key: 
+rubygems_version: 3.4.19
+signing_key:
 specification_version: 4
 summary: Ruby/NTLM library.
-test_files:
-- spec/lib/net/ntlm/blob_spec.rb
-- spec/lib/net/ntlm/channel_binding_spec.rb
-- spec/lib/net/ntlm/client/session_spec.rb
-- spec/lib/net/ntlm/client_spec.rb
-- spec/lib/net/ntlm/encode_util_spec.rb
-- spec/lib/net/ntlm/field_set_spec.rb
-- spec/lib/net/ntlm/field_spec.rb
-- spec/lib/net/ntlm/int16_le_spec.rb
-- spec/lib/net/ntlm/int32_le_spec.rb
-- spec/lib/net/ntlm/int64_le_spec.rb
-- spec/lib/net/ntlm/message/type0_spec.rb
-- spec/lib/net/ntlm/message/type1_spec.rb
-- spec/lib/net/ntlm/message/type2_spec.rb
-- spec/lib/net/ntlm/message/type3_spec.rb
-- spec/lib/net/ntlm/message_spec.rb
-- spec/lib/net/ntlm/security_buffer_spec.rb
-- spec/lib/net/ntlm/string_spec.rb
-- spec/lib/net/ntlm/target_info_spec.rb
-- spec/lib/net/ntlm/version_spec.rb
-- spec/lib/net/ntlm_spec.rb
-- spec/spec_helper.rb
-- spec/support/certificates/sha_256_hash.pem
-- spec/support/shared/examples/net/ntlm/field_shared.rb
-- spec/support/shared/examples/net/ntlm/fieldset_shared.rb
-- spec/support/shared/examples/net/ntlm/int_shared.rb
-- spec/support/shared/examples/net/ntlm/message_shared.rb
+test_files: []