/[packages]/cauldron/ruby/current/SOURCES/ruby-2.5.0-allow-3DES-cipher-suites-in-test_sslctx_set_params.patch
ViewVC logotype

Contents of /cauldron/ruby/current/SOURCES/ruby-2.5.0-allow-3DES-cipher-suites-in-test_sslctx_set_params.patch

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1139983 - (show annotations) (download)
Sat Aug 12 18:41:29 2017 UTC (3 years, 1 month ago) by pterjan
File size: 1217 byte(s)
Update to 2.4.1 and pull in a bunch a Fedora changes
1 From 261353a42d0dc0e7bf73e5a8fb8ecffd04249d42 Mon Sep 17 00:00:00 2001
2 From: Kazuki Yamaguchi <k@rhe.jp>
3 Date: Tue, 27 Jun 2017 14:31:09 +0900
4 Subject: [PATCH] test/test_ssl: allow 3DES cipher suites in
5 test_sslctx_set_params
6
7 Fedora's OpenSSL seems to enable 3DES cipher suites by DEFAULT.
8
9 Fixes: https://github.com/ruby/openssl/issues/127
10 ---
11 test/test_ssl.rb | 2 +-
12 1 file changed, 1 insertion(+), 1 deletion(-)
13
14 diff --git a/test/openssl/test_ssl.rb b/test/openssl/test_ssl.rb
15 index 19066566..b3efe95a 100644
16 --- a/test/openssl/test_ssl.rb
17 +++ b/test/openssl/test_ssl.rb
18 @@ -350,7 +350,7 @@ def test_sslctx_set_params
19 assert_equal OpenSSL::SSL::VERIFY_PEER, ctx.verify_mode
20 ciphers_names = ctx.ciphers.collect{|v, _, _, _| v }
21 assert ciphers_names.all?{|v| /A(EC)?DH/ !~ v }, "anon ciphers are disabled"
22 - assert ciphers_names.all?{|v| /(RC4|MD5|EXP|DES)/ !~ v }, "weak ciphers are disabled"
23 + assert ciphers_names.all?{|v| /(RC4|MD5|EXP|DES(?!-EDE|-CBC3))/ !~ v }, "weak ciphers are disabled"
24 assert_equal 0, ctx.options & OpenSSL::SSL::OP_DONT_INSERT_EMPTY_FRAGMENTS
25 if defined?(OpenSSL::SSL::OP_NO_COMPRESSION) # >= 1.0.0
26 assert_equal OpenSSL::SSL::OP_NO_COMPRESSION,

  ViewVC Help
Powered by ViewVC 1.1.28