RubyGems - webrick - Versions diffs - 1.3.1 → 1.4.0.beta1 - Mend

webrick 1.3.1 → 1.4.0.beta1

Potentially problematic release.

This version of webrick might be problematic. Click here for more details.

Files changed (64) hide show

checksums.yaml +7 -0
data/lib/webrick.rb +6 -6
data/lib/webrick/accesslog.rb +9 -1
data/lib/webrick/cgi.rb +51 -2
data/lib/webrick/compat.rb +2 -1
data/lib/webrick/config.rb +42 -5
data/lib/webrick/cookie.rb +68 -6
data/lib/webrick/htmlutils.rb +4 -2
data/lib/webrick/httpauth.rb +1 -0
data/lib/webrick/httpauth/authenticator.rb +13 -8
data/lib/webrick/httpauth/basicauth.rb +3 -3
data/lib/webrick/httpauth/digestauth.rb +25 -9
data/lib/webrick/httpauth/htdigest.rb +8 -4
data/lib/webrick/httpauth/htgroup.rb +1 -0
data/lib/webrick/httpauth/htpasswd.rb +7 -3
data/lib/webrick/httpauth/userdb.rb +1 -0
data/lib/webrick/httpproxy.rb +47 -14
data/lib/webrick/httprequest.rb +142 -16
data/lib/webrick/httpresponse.rb +96 -24
data/lib/webrick/https.rb +24 -1
data/lib/webrick/httpserver.rb +20 -4
data/lib/webrick/httpservlet.rb +1 -0
data/lib/webrick/httpservlet/abstract.rb +2 -1
data/lib/webrick/httpservlet/cgi_runner.rb +1 -0
data/lib/webrick/httpservlet/cgihandler.rb +19 -5
data/lib/webrick/httpservlet/erbhandler.rb +2 -1
data/lib/webrick/httpservlet/filehandler.rb +87 -34
data/lib/webrick/httpservlet/prochandler.rb +14 -0
data/lib/webrick/httpstatus.rb +24 -10
data/lib/webrick/httputils.rb +129 -13
data/lib/webrick/httpversion.rb +28 -1
data/lib/webrick/log.rb +22 -2
data/lib/webrick/server.rb +203 -60
data/lib/webrick/ssl.rb +80 -5
data/lib/webrick/utils.rb +97 -67
data/lib/webrick/version.rb +6 -1
metadata +59 -69
data/README.txt +0 -21
data/sample/webrick/demo-app.rb +0 -66
data/sample/webrick/demo-multipart.cgi +0 -12
data/sample/webrick/demo-servlet.rb +0 -6
data/sample/webrick/demo-urlencoded.cgi +0 -12
data/sample/webrick/hello.cgi +0 -11
data/sample/webrick/hello.rb +0 -8
data/sample/webrick/httpd.rb +0 -23
data/sample/webrick/httpproxy.rb +0 -25
data/sample/webrick/httpsd.rb +0 -33
data/test/openssl/utils.rb +0 -313
data/test/ruby/envutil.rb +0 -208
data/test/webrick/test_cgi.rb +0 -134
data/test/webrick/test_cookie.rb +0 -131
data/test/webrick/test_filehandler.rb +0 -285
data/test/webrick/test_httpauth.rb +0 -167
data/test/webrick/test_httpproxy.rb +0 -282
data/test/webrick/test_httprequest.rb +0 -411
data/test/webrick/test_httpresponse.rb +0 -49
data/test/webrick/test_httpserver.rb +0 -305
data/test/webrick/test_httputils.rb +0 -96
data/test/webrick/test_httpversion.rb +0 -40
data/test/webrick/test_server.rb +0 -67
data/test/webrick/test_utils.rb +0 -64
data/test/webrick/utils.rb +0 -58
data/test/webrick/webrick.cgi +0 -36
data/test/webrick/webrick_long_filename.cgi +0 -36

data/README.txt DELETED

@@ -1,21 +0,0 @@
-= WEB server toolkit.
-WEBrick is an HTTP server toolkit that can be configured as an HTTPS server,
-a proxy server, and a virtual-host server.  WEBrick features complete
-logging of both server operations and HTTP access.  WEBrick supports both
-basic and digest authentication in addition to algorithms not in RFC 2617.
-A WEBrick servers can be composed of multiple WEBrick servers or servlets to
-provide differing behavior on a per-host or per-path basis.  WEBrick
-includes servlets for handling CGI scripts, ERb pages, ruby blocks and
-directory listings.
-WEBrick also includes tools for daemonizing a process and starting a process
-at a higher privilege level and dropping permissions.
-== Copyright
-Author: IPR -- Internet Programming with Ruby -- writers
-Copyright (c) 2000 TAKAHASHI Masayoshi, GOTOU YUUZOU
-Copyright (c) 2002 Internet Programming with Ruby writers. All rights reserved.

data/sample/webrick/demo-app.rb DELETED

@@ -1,66 +0,0 @@
-require "pp"
-module DemoApplication
-  def initialize(config, enctype)
-    super
-    @enctype = enctype
-  end
-  def do_GET(req, res)
-    if req.path_info != "/"
-      res.set_redirect(WEBrick::HTTPStatus::Found, req.script_name + "/")
-    end
-    res.body =<<-_end_of_html_
-      <HTML>
-       <FORM method="POST" enctype=#{@enctype}>
-        text: <INPUT type="text" name="text"><BR>
-        file: <INPUT type="file" name="file"><BR>
-        check:
-        <INPUT type="checkbox" name="check" value="a">a,
-        <INPUT type="checkbox" name="check" value="b">b,
-        <INPUT type="checkbox" name="check" value="c">c,
-        <BR>
-        <INPUT type="submit">
-       </FORM>
-      </HTML>
-    _end_of_html_
-    res['content-type'] = 'text/html; charset=iso-8859-1'
-  end
-  def do_POST(req, res)
-    if req["content-length"].to_i > 1024*10
-      raise WEBrick::HTTPStatus::Forbidden, "file size too large"
-    end
-    res.body =<<-_end_of_html_
-      <HTML>
-       <H2>Query Parameters</H2>
-       #{display_query(req.query)}
-       <A href="#{req.path}">return</A>
-       <H2>Request</H2>
-       <PRE>#{WEBrick::HTMLUtils::escape(PP::pp(req, "", 80))}</PRE>
-       <H2>Response</H2>
-       <PRE>#{WEBrick::HTMLUtils::escape(PP::pp(res, "", 80))}</PRE>
-      </HTML>
-    _end_of_html_
-    res['content-type'] = 'text/html; charset=iso-8859-1'
-  end
-  private
-  def display_query(q)
-    ret = ""
-    q.each{|key, val|
-      ret << "<H3>#{WEBrick::HTMLUtils::escape(key)}</H3>"
-      ret << "<TABLE border=1>"
-      ret << make_tr("val", val.inspect)
-      ret << make_tr("val.to_a", val.to_a.inspect)
-      ret << make_tr("val.to_ary", val.to_ary.inspect)
-      ret << "</TABLE>"
-    }
-    ret
-  end
-  def make_tr(arg0, arg1)
-    "<TR><TD>#{arg0}</TD><TD>#{WEBrick::HTMLUtils::escape(arg1)}</TD></TR>"
-  end
-end

data/sample/webrick/demo-multipart.cgi DELETED

@@ -1,12 +0,0 @@
-#!/usr/bin/env ruby
-require "webrick/cgi"
-require "webrick/https" # should load if it runs on HTTPS server
-require "./demo-app"
-class DemoCGI < WEBrick::CGI
-  include DemoApplication
-end
-config = { :NPH => false }
-cgi = DemoCGI.new(config, "multipart/form-data")
-cgi.start

data/sample/webrick/demo-servlet.rb DELETED

@@ -1,6 +0,0 @@
-require "webrick"
-require "./demo-app"
-class DemoServlet < WEBrick::HTTPServlet::AbstractServlet
-  include DemoApplication
-end

data/sample/webrick/demo-urlencoded.cgi DELETED

@@ -1,12 +0,0 @@
-#!/usr/bin/env ruby
-require "webrick/cgi"
-require "webrick/https"  # should load if it runs on HTTPS server
-require "./demo-app"
-class DemoCGI < WEBrick::CGI
-  include DemoApplication
-end
-config = { :NPH => false }
-cgi = DemoCGI.new(config, "application/x-www-form-urlencoded")
-cgi.start

data/sample/webrick/hello.cgi DELETED

@@ -1,11 +0,0 @@
-#!/usr/bin/env ruby
-require "webrick/cgi"
-class HelloCGI < WEBrick::CGI
-  def do_GET(req, res)
-    res["content-type"] = "text/plain"
-    res.body = "Hello, world.\n"
-  end
-end
-HelloCGI.new.start

data/sample/webrick/hello.rb DELETED

@@ -1,8 +0,0 @@
-require "webrick"
-class HelloServlet < WEBrick::HTTPServlet::AbstractServlet
-  def do_GET(req, res)
-    res["content-type"] = "text/plain"
-    res.body = "Hello, world.\n"
-  end
-end

data/sample/webrick/httpd.rb DELETED

@@ -1,23 +0,0 @@
-require "webrick"
-httpd = WEBrick::HTTPServer.new(
-  :DocumentRoot => File::dirname(__FILE__),
-  :Port         => 10080,
-  :Logger       => WEBrick::Log.new($stderr, WEBrick::Log::DEBUG),
-  :AccessLog    => [
-    [ $stderr, WEBrick::AccessLog::COMMON_LOG_FORMAT  ],
-    [ $stderr, WEBrick::AccessLog::REFERER_LOG_FORMAT ],
-    [ $stderr, WEBrick::AccessLog::AGENT_LOG_FORMAT   ],
-  ],
-  :CGIPathEnv   => ENV["PATH"]   # PATH environment variable for CGI.
-)
-require "./hello"
-httpd.mount("/hello", HelloServlet)
-require "./demo-servlet"
-httpd.mount("/urlencoded", DemoServlet, "application/x-www-form-urlencoded")
-httpd.mount("/multipart", DemoServlet, "multipart/form-data")
-trap(:INT){ httpd.shutdown }
-httpd.start

data/sample/webrick/httpproxy.rb DELETED

@@ -1,25 +0,0 @@
-require "webrick"
-require "webrick/httpproxy"
-# The :ProxyContentHandler proc will be invoked before sending a response to
-# the User-Agent.  You can inspect the pair of request and response messages
-# (or edit the response message if necessary).
-pch = Proc.new{|req, res|
-  p [ req.request_line, res.status_line ]
-}
-def upstream_proxy
-  if prx = ENV["http_proxy"]
-    return URI.parse(prx)
-  end
-  return nil
-end
-httpd = WEBrick::HTTPProxyServer.new(
-  :Port     => 10080,
-  :ProxyContentHandler => pch,
-  :ProxyURI => upstream_proxy
-)
-Signal.trap(:INT){ httpd.shutdown }
-httpd.start

data/sample/webrick/httpsd.rb DELETED

@@ -1,33 +0,0 @@
-require "webrick"
-require "webrick/https"
-hostname = WEBrick::Utils::getservername
-subject = [["O", "ruby-lang.org"], ["OU", "sample"], ["CN", hostname]]
-comment = "Comment for self-signed certificate"
-httpd = WEBrick::HTTPServer.new(
-  :DocumentRoot   => File::dirname(__FILE__),
-  :Port           => 10443,
-  :SSLEnable      => true,
-  # Specify key pair and server certificate.
-  # :SSLPrivateKey  => OpenSSL::PKey::RSA.new(File.read("server.key")),
-  # :SSLCertificate => OpenSSL::X509::Certificate.new(File.read("server.crt")),
-  # specify the following SSL options if you want to use auto
-  # generated self-signed certificate.
-  :SSLCertName    => subject,
-  :SSLComment     => comment,
-  :CGIPathEnv     => ENV["PATH"]  # PATH environment variable for CGI.
-)
-require "./hello"
-httpd.mount("/hello", HelloServlet)
-require "./demo-servlet"
-httpd.mount("/urlencoded", DemoServlet, "application/x-www-form-urlencoded")
-httpd.mount("/multipart", DemoServlet, "multipart/form-data")
-trap(:INT){ httpd.shutdown }
-httpd.start

data/test/openssl/utils.rb DELETED

@@ -1,313 +0,0 @@
-begin
-  require "openssl"
-rescue LoadError
-end
-require "test/unit"
-require "digest/md5"
-require 'tempfile'
-require "rbconfig"
-require "socket"
-require_relative '../ruby/envutil'
-module OpenSSL::TestUtils
-  TEST_KEY_RSA1024 = OpenSSL::PKey::RSA.new <<-_end_of_pem_
------BEGIN RSA PRIVATE KEY-----
-MIICXgIBAAKBgQDLwsSw1ECnPtT+PkOgHhcGA71nwC2/nL85VBGnRqDxOqjVh7Cx
-aKPERYHsk4BPCkE3brtThPWc9kjHEQQ7uf9Y1rbCz0layNqHyywQEVLFmp1cpIt/
-Q3geLv8ZD9pihowKJDyMDiN6ArYUmZczvW4976MU3+l54E6lF/JfFEU5hwIDAQAB
-AoGBAKSl/MQarye1yOysqX6P8fDFQt68VvtXkNmlSiKOGuzyho0M+UVSFcs6k1L0
-maDE25AMZUiGzuWHyaU55d7RXDgeskDMakD1v6ZejYtxJkSXbETOTLDwUWTn618T
-gnb17tU1jktUtU67xK/08i/XodlgnQhs6VoHTuCh3Hu77O6RAkEA7+gxqBuZR572
-74/akiW/SuXm0SXPEviyO1MuSRwtI87B02D0qgV8D1UHRm4AhMnJ8MCs1809kMQE
-JiQUCrp9mQJBANlt2ngBO14us6NnhuAseFDTBzCHXwUUu1YKHpMMmxpnGqaldGgX
-sOZB3lgJsT9VlGf3YGYdkLTNVbogQKlKpB8CQQDiSwkb4vyQfDe8/NpU5Not0fII
-8jsDUCb+opWUTMmfbxWRR3FBNu8wnym/m19N4fFj8LqYzHX4KY0oVPu6qvJxAkEA
-wa5snNekFcqONLIE4G5cosrIrb74sqL8GbGb+KuTAprzj5z1K8Bm0UW9lTjVDjDi
-qRYgZfZSL+x1P/54+xTFSwJAY1FxA/N3QPCXCjPh5YqFxAMQs2VVYTfg+t0MEcJD
-dPMQD5JX6g5HKnHFg2mZtoXQrWmJSn7p8GJK8yNTopEErA==
------END RSA PRIVATE KEY-----
-  _end_of_pem_
-  TEST_KEY_RSA2048 = OpenSSL::PKey::RSA.new <<-_end_of_pem_
------BEGIN RSA PRIVATE KEY-----
-MIIEpAIBAAKCAQEAuV9ht9J7k4NBs38jOXvvTKY9gW8nLICSno5EETR1cuF7i4pN
-s9I1QJGAFAX0BEO4KbzXmuOvfCpD3CU+Slp1enenfzq/t/e/1IRW0wkJUJUFQign
-4CtrkJL+P07yx18UjyPlBXb81ApEmAB5mrJVSrWmqbjs07JbuS4QQGGXLc+Su96D
-kYKmSNVjBiLxVVSpyZfAY3hD37d60uG+X8xdW5v68JkRFIhdGlb6JL8fllf/A/bl
-NwdJOhVr9mESHhwGjwfSeTDPfd8ZLE027E5lyAVX9KZYcU00mOX+fdxOSnGqS/8J
-DRh0EPHDL15RcJjV2J6vZjPb0rOYGDoMcH+94wIDAQABAoIBAAzsamqfYQAqwXTb
-I0CJtGg6msUgU7HVkOM+9d3hM2L791oGHV6xBAdpXW2H8LgvZHJ8eOeSghR8+dgq
-PIqAffo4x1Oma+FOg3A0fb0evyiACyrOk+EcBdbBeLo/LcvahBtqnDfiUMQTpy6V
-seSoFCwuN91TSCeGIsDpRjbG1vxZgtx+uI+oH5+ytqJOmfCksRDCkMglGkzyfcl0
-Xc5CUhIJ0my53xijEUQl19rtWdMnNnnkdbG8PT3LZlOta5Do86BElzUYka0C6dUc
-VsBDQ0Nup0P6rEQgy7tephHoRlUGTYamsajGJaAo1F3IQVIrRSuagi7+YpSpCqsW
-wORqorkCgYEA7RdX6MDVrbw7LePnhyuaqTiMK+055/R1TqhB1JvvxJ1CXk2rDL6G
-0TLHQ7oGofd5LYiemg4ZVtWdJe43BPZlVgT6lvL/iGo8JnrncB9Da6L7nrq/+Rvj
-XGjf1qODCK+LmreZWEsaLPURIoR/Ewwxb9J2zd0CaMjeTwafJo1CZvcCgYEAyCgb
-aqoWvUecX8VvARfuA593Lsi50t4MEArnOXXcd1RnXoZWhbx5rgO8/ATKfXr0BK/n
-h2GF9PfKzHFm/4V6e82OL7gu/kLy2u9bXN74vOvWFL5NOrOKPM7Kg+9I131kNYOw
-Ivnr/VtHE5s0dY7JChYWE1F3vArrOw3T00a4CXUCgYEA0SqY+dS2LvIzW4cHCe9k
-IQqsT0yYm5TFsUEr4sA3xcPfe4cV8sZb9k/QEGYb1+SWWZ+AHPV3UW5fl8kTbSNb
-v4ng8i8rVVQ0ANbJO9e5CUrepein2MPL0AkOATR8M7t7dGGpvYV0cFk8ZrFx0oId
-U0PgYDotF/iueBWlbsOM430CgYEAqYI95dFyPI5/AiSkY5queeb8+mQH62sdcCCr
-vd/w/CZA/K5sbAo4SoTj8dLk4evU6HtIa0DOP63y071eaxvRpTNqLUOgmLh+D6gS
-Cc7TfLuFrD+WDBatBd5jZ+SoHccVrLR/4L8jeodo5FPW05A+9gnKXEXsTxY4LOUC
-9bS4e1kCgYAqVXZh63JsMwoaxCYmQ66eJojKa47VNrOeIZDZvd2BPVf30glBOT41
-gBoDG3WMPZoQj9pb7uMcrnvs4APj2FIhMU8U15LcPAj59cD6S6rWnAxO8NFK7HQG
-4Jxg3JNNf8ErQoCHb1B3oVdXJkmbJkARoDpBKmTCgKtP8ADYLmVPQw==
------END RSA PRIVATE KEY-----
-  _end_of_pem_
-  TEST_KEY_DSA256 = OpenSSL::PKey::DSA.new <<-_end_of_pem_
------BEGIN DSA PRIVATE KEY-----
-MIH3AgEAAkEAhk2libbY2a8y2Pt21+YPYGZeW6wzaW2yfj5oiClXro9XMR7XWLkE
-9B7XxLNFCS2gmCCdMsMW1HulaHtLFQmB2wIVAM43JZrcgpu6ajZ01VkLc93gu/Ed
-AkAOhujZrrKV5CzBKutKLb0GVyVWmdC7InoNSMZEeGU72rT96IjM59YzoqmD0pGM
-3I1o4cGqg1D1DfM1rQlnN1eSAkBq6xXfEDwJ1mLNxF6q8Zm/ugFYWR5xcX/3wFiT
-b4+EjHP/DbNh9Vm5wcfnDBJ1zKvrMEf2xqngYdrV/3CiGJeKAhRvL57QvJZcQGvn
-ISNX5cMzFHRW3Q==
------END DSA PRIVATE KEY-----
-  _end_of_pem_
-  TEST_KEY_DSA512 = OpenSSL::PKey::DSA.new <<-_end_of_pem_
------BEGIN DSA PRIVATE KEY-----
-MIH4AgEAAkEA5lB4GvEwjrsMlGDqGsxrbqeFRh6o9OWt6FgTYiEEHaOYhkIxv0Ok
-RZPDNwOG997mDjBnvDJ1i56OmS3MbTnovwIVAJgub/aDrSDB4DZGH7UyarcaGy6D
-AkB9HdFw/3td8K4l1FZHv7TCZeJ3ZLb7dF3TWoGUP003RCqoji3/lHdKoVdTQNuR
-S/m6DlCwhjRjiQ/lBRgCLCcaAkEAjN891JBjzpMj4bWgsACmMggFf57DS0Ti+5++
-Q1VB8qkJN7rA7/2HrCR3gTsWNb1YhAsnFsoeRscC+LxXoXi9OAIUBG98h4tilg6S
-55jreJD3Se3slps=
------END DSA PRIVATE KEY-----
-  _end_of_pem_
-if defined?(OpenSSL::PKey::EC)
-  TEST_KEY_EC_P256V1 = OpenSSL::PKey::EC.new <<-_end_of_pem_
------BEGIN EC PRIVATE KEY-----
-MHcCAQEEIID49FDqcf1O1eO8saTgG70UbXQw9Fqwseliit2aWhH1oAoGCCqGSM49
-AwEHoUQDQgAEFglk2c+oVUIKQ64eZG9bhLNPWB7lSZ/ArK41eGy5wAzU/0G51Xtt
-CeBUl+MahZtn9fO1JKdF4qJmS39dXnpENg==
------END EC PRIVATE KEY-----
-  _end_of_pem_
-end
-  TEST_KEY_DH512 = OpenSSL::PKey::DH.new <<-_end_of_pem_
------BEGIN DH PARAMETERS-----
-MEYCQQDmWXGPqk76sKw/edIOdhAQD4XzjJ+AR/PTk2qzaGs+u4oND2yU5D2NN4wr
-aPgwHyJBiK1/ebK3tYcrSKrOoRyrAgEC
------END DH PARAMETERS-----
-  _end_of_pem_
-  module_function
-  def issue_cert(dn, key, serial, not_before, not_after, extensions,
-                 issuer, issuer_key, digest)
-    cert = OpenSSL::X509::Certificate.new
-    issuer = cert unless issuer
-    issuer_key = key unless issuer_key
-    cert.version = 2
-    cert.serial = serial
-    cert.subject = dn
-    cert.issuer = issuer.subject
-    cert.public_key = key.public_key
-    cert.not_before = not_before
-    cert.not_after = not_after
-    ef = OpenSSL::X509::ExtensionFactory.new
-    ef.subject_certificate = cert
-    ef.issuer_certificate = issuer
-    extensions.each{|oid, value, critical|
-      cert.add_extension(ef.create_extension(oid, value, critical))
-    }
-    cert.sign(issuer_key, digest)
-    cert
-  end
-  def issue_crl(revoke_info, serial, lastup, nextup, extensions,
-                issuer, issuer_key, digest)
-    crl = OpenSSL::X509::CRL.new
-    crl.issuer = issuer.subject
-    crl.version = 1
-    crl.last_update = lastup
-    crl.next_update = nextup
-    revoke_info.each{|rserial, time, reason_code|
-      revoked = OpenSSL::X509::Revoked.new
-      revoked.serial = rserial
-      revoked.time = time
-      enum = OpenSSL::ASN1::Enumerated(reason_code)
-      ext = OpenSSL::X509::Extension.new("CRLReason", enum)
-      revoked.add_extension(ext)
-      crl.add_revoked(revoked)
-    }
-    ef = OpenSSL::X509::ExtensionFactory.new
-    ef.issuer_certificate = issuer
-    ef.crl = crl
-    crlnum = OpenSSL::ASN1::Integer(serial)
-    crl.add_extension(OpenSSL::X509::Extension.new("crlNumber", crlnum))
-    extensions.each{|oid, value, critical|
-      crl.add_extension(ef.create_extension(oid, value, critical))
-    }
-    crl.sign(issuer_key, digest)
-    crl
-  end
-  def get_subject_key_id(cert)
-    asn1_cert = OpenSSL::ASN1.decode(cert)
-    tbscert   = asn1_cert.value[0]
-    pkinfo    = tbscert.value[6]
-    publickey = pkinfo.value[1]
-    pkvalue   = publickey.value
-    OpenSSL::Digest::SHA1.hexdigest(pkvalue).scan(/../).join(":").upcase
-  end
-  def silent
-    begin
-      back, $VERBOSE = $VERBOSE, nil
-      yield
-    ensure
-      $VERBOSE = back
-    end
-  end
-  class OpenSSL::SSLTestCase < Test::Unit::TestCase
-    RUBY = EnvUtil.rubybin
-    SSL_SERVER = File.join(File.dirname(__FILE__), "ssl_server.rb")
-    PORT = 20443
-    ITERATIONS = ($0 == __FILE__) ? 100 : 10
-    def setup
-      @ca_key  = OpenSSL::TestUtils::TEST_KEY_RSA2048
-      @svr_key = OpenSSL::TestUtils::TEST_KEY_RSA1024
-      @cli_key = OpenSSL::TestUtils::TEST_KEY_DSA256
-      @ca  = OpenSSL::X509::Name.parse("/DC=org/DC=ruby-lang/CN=CA")
-      @svr = OpenSSL::X509::Name.parse("/DC=org/DC=ruby-lang/CN=localhost")
-      @cli = OpenSSL::X509::Name.parse("/DC=org/DC=ruby-lang/CN=localhost")
-      now = Time.at(Time.now.to_i)
-      ca_exts = [
-        ["basicConstraints","CA:TRUE",true],
-        ["keyUsage","cRLSign,keyCertSign",true],
-      ]
-      ee_exts = [
-        ["keyUsage","keyEncipherment,digitalSignature",true],
-      ]
-      @ca_cert  = issue_cert(@ca, @ca_key, 1, now, now+3600, ca_exts, nil, nil, OpenSSL::Digest::SHA1.new)
-      @svr_cert = issue_cert(@svr, @svr_key, 2, now, now+1800, ee_exts, @ca_cert, @ca_key, OpenSSL::Digest::SHA1.new)
-      @cli_cert = issue_cert(@cli, @cli_key, 3, now, now+1800, ee_exts, @ca_cert, @ca_key, OpenSSL::Digest::SHA1.new)
-      @server = nil
-    end
-    def teardown
-    end
-    def issue_cert(*arg)
-      OpenSSL::TestUtils.issue_cert(*arg)
-    end
-    def issue_crl(*arg)
-      OpenSSL::TestUtils.issue_crl(*arg)
-    end
-    def readwrite_loop(ctx, ssl)
-      while line = ssl.gets
-        if line =~ /^STARTTLS$/
-          ssl.accept
-          next
-        end
-        ssl.write(line)
-      end
-    rescue OpenSSL::SSL::SSLError
-    rescue IOError
-    ensure
-      ssl.close rescue nil
-    end
-    def server_loop(ctx, ssls, server_proc)
-      loop do
-        ssl = nil
-        begin
-          ssl = ssls.accept
-        rescue OpenSSL::SSL::SSLError
-          retry
-        end
-        Thread.start do
-          Thread.current.abort_on_exception = true
-          server_proc.call(ctx, ssl)
-        end
-      end
-    rescue Errno::EBADF, IOError, Errno::EINVAL, Errno::ECONNABORTED, Errno::ENOTSOCK
-    end
-    DHParam = OpenSSL::PKey::DH.new(128)
-    def start_server(port0, verify_mode, start_immediately, args = {}, &block)
-      ctx_proc = args[:ctx_proc]
-      server_proc = args[:server_proc]
-      server_proc ||= method(:readwrite_loop)
-      store = OpenSSL::X509::Store.new
-      store.add_cert(@ca_cert)
-      store.purpose = OpenSSL::X509::PURPOSE_SSL_CLIENT
-      ctx = OpenSSL::SSL::SSLContext.new
-      ctx.cert_store = store
-      #ctx.extra_chain_cert = [ ca_cert ]
-      ctx.cert = @svr_cert
-      ctx.key = @svr_key
-      ctx.tmp_dh_callback = proc { DHParam }
-      ctx.verify_mode = verify_mode
-      ctx_proc.call(ctx) if ctx_proc
-      Socket.do_not_reverse_lookup = true
-      tcps = nil
-      port = port0
-      begin
-        tcps = TCPServer.new("127.0.0.1", port)
-      rescue Errno::EADDRINUSE
-        port += 1
-        retry
-      end
-      ssls = OpenSSL::SSL::SSLServer.new(tcps, ctx)
-      ssls.start_immediately = start_immediately
-      begin
-        server = Thread.new do
-          Thread.current.abort_on_exception = true
-          server_loop(ctx, ssls, server_proc)
-        end
-        $stderr.printf("%s started: pid=%d port=%d\n", SSL_SERVER, $$, port) if $DEBUG
-        block.call(server, port.to_i)
-      ensure
-        begin
-          begin
-            tcps.shutdown
-          rescue Errno::ENOTCONN
-            # when `Errno::ENOTCONN: Socket is not connected' on some platforms,
-            # call #close instead of #shutdown.
-            tcps.close
-            tcps = nil
-          end if (tcps)
-          if (server)
-            server.join(5)
-            if server.alive?
-              server.kill
-              server.join
-              flunk("TCPServer was closed and SSLServer is still alive") unless $!
-            end
-          end
-        ensure
-          tcps.close if (tcps)
-        end
-      end
-    end
-    def starttls(ssl)
-      ssl.puts("STARTTLS")
-      sleep 1   # When this line is eliminated, process on Cygwin blocks
-                # forever at ssl.connect. But I don't know why it does.
-      ssl.connect
-    end
-  end
-end if defined?(OpenSSL)