aboutsummaryrefslogtreecommitdiffstats
path: root/History.md
Commit message (Collapse)AuthorAgeFilesLines
* History.md: Escape Markdown syntax Italic "*". [ci skip]Jun Aruga2023-11-201-1/+1
|
* Ruby/OpenSSL 3.2.0Kazuki Yamaguchi2023-09-221-0/+40
|
* Ruby/OpenSSL 3.1.0ky/release-3.1.0Kazuki Yamaguchi2022-12-231-0/+36
|
* Ruby/OpenSSL 3.0.2ky/release-3.0.2Kazuki Yamaguchi2022-12-231-0/+14
|
* Merge branch 'maint-2.2' into maint-3.0Kazuki Yamaguchi2022-12-231-0/+15
|\ | | | | | | | | | | | | | | | | | | * maint-2.2: Ruby/OpenSSL 2.2.3 ts: use TS_VERIFY_CTX_set_certs instead of TS_VERIFY_CTS_set_certs ocsp: disable OCSP_basic_verify() workaround on LibreSSL 3.5 Actions - update workflow to use OpenSSL 1.1.1, actions/checkout@v3 pkey/ec: fix ossl_raise() calls using cEC_POINT instead of eEC_POINT raise when EC_POINT_cmp or EC_GROUP_cmp error instead of returning true
| * Ruby/OpenSSL 2.2.3maint-2.2ky/release-2.2.3Kazuki Yamaguchi2022-12-231-0/+15
| |
* | Ruby/OpenSSL 3.0.1v3.0.1Kazuki Yamaguchi2022-09-081-0/+24
| |
* | Merge branch 'maint-2.2' into maint-3.0Kazuki Yamaguchi2022-09-081-0/+16
|\| | | | | | | | | | | | | | | | | * maint-2.2: Ruby/OpenSSL 2.2.2 Ruby/OpenSSL 2.1.4 Make GitHub Actions happy on 2.1/2.2 branches test/openssl/test_cipher: skip AES-CCM tests on OpenSSL <= 1.1.1b ignore pkgconfig when any openssl option is specified
| * Ruby/OpenSSL 2.2.2v2.2.2Kazuki Yamaguchi2022-09-081-0/+6
| |
| * Merge branch 'maint-2.1' into maint-2.2Kazuki Yamaguchi2022-09-081-0/+10
| |\ | | | | | | | | | | | | | | | | | | * maint-2.1: Ruby/OpenSSL 2.1.4 Make GitHub Actions happy on 2.1/2.2 branches ignore pkgconfig when any openssl option is specified
| | * Ruby/OpenSSL 2.1.4v2.1.4maint-2.1Kazuki Yamaguchi2022-09-081-0/+10
| | |
* | | Ruby/OpenSSL 3.0.0v3.0.0ky/release-3.0.0Kazuki Yamaguchi2021-12-251-0/+102
| | |
* | | Fix typos [ci skip]Nobuyoshi Nakada2021-11-031-1/+1
|/ /
* | Ruby/OpenSSL 2.2.1v2.2.1ky/release-2.2.1Kazuki Yamaguchi2021-10-161-0/+17
| |
* | Merge branch 'maint-2.1' into maint-2.2Kazuki Yamaguchi2021-10-161-0/+36
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * maint-2.1: Ruby/OpenSSL 2.1.3 ssl: avoid directly storing String object in NPN callback x509store: explicitly call rb_gc_mark() against Store/StoreContext ssl: explicitly call rb_gc_mark() against SSLContext/SSLSocket objects digest: load digest library using Kernel#require pkey: use RSTRING_LENINT() instead of casting to int ext/openssl/extconf.rb: require OpenSSL version >= 1.0.1, < 3 .github/workflows: update OpenSSL/LibreSSL versions test: adjust test cases for LibreSSL 3.2.4 ssl: temporary lock string buffer while reading ssl: create a temporary frozen string buffer when writing Use rb_block_call() instead of the deprecated rb_iterate() in OpenSSL
| * Ruby/OpenSSL 2.1.3v2.1.3ky/release-2.1.3Kazuki Yamaguchi2021-10-161-0/+36
| |
* | Ruby/OpenSSL 2.2.0v2.2.0ky/release-2.2.0Kazuki Yamaguchi2020-05-131-1/+1
| |
* | Add Marshal support to PKey objectsBart de Water2020-04-191-1/+2
| |
* | config: deprecate OpenSSL::Config#add_value and #[]=ky/config-deprecate-modifyKazuki Yamaguchi2020-02-191-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | OpenSSL::Config is currently implemented in Ruby, but we plan to revert back to use OpenSSL API, just as it did before r28632 (in ruby_1_8; r29048 in trunk). It's not clear what was the issue with Windows, but the CONF library should work on Windows too. Modifying a CONF object is not possible in OpenSSL API. Actually, it was possible in previous versions of OpenSSL, but we used their internal functions that are not exposed in shared libraries anymore. Accordingly, OpenSSL::Config#add_value and #[]= have to be removed. As a first step towards the change, let's deprecate those methods.
* | History.md: add missing references to GitHub issuesKazuki Yamaguchi2020-02-191-10/+31
| | | | | | | | | | | | | | Add links to GitHub issues or pull requests. Also, move incompatible changes to a separate section for better visibility.
* | Revert add_certificate_chain_file changes (#320)Hiroshi SHIBATA2020-02-161-2/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | Revert SSLContext#add_certificate_chain_file changes * 0da0dfaf09f549b2b2cd984627b321b7908d1186. * 8d12f0f6ca944212cb8000e689469d7aaa8190d7. * 49f42ad5f82f8b61f51a16e3a6df1ab0d5307d5f. * 5ee295ab8e37c8ffc6eb8c1b7b79ec024f3253e4. * 8b4fa5e336c7544ea677ccee160ec6d221559e10. * 443d13e9b2c127230fde2733959eaa4d41eb355d. * 5d866038920edf2729865653d6dc9309589f089a. * f18559acf97a6f6aaf3d253417eb0100b262cbc6.
* | Clarify in history that PKCS8 reading is also supported [ci skip]Bart de Water2019-11-271-2/+2
| |
* | Add PKCS8 changes to historyBart de Water2019-11-251-0/+3
| |
* | add/update document about AuthorityInfoAccessthekuwayama2019-11-191-3/+5
| | | | | | | | add ca_issuer_uris and ocsp_uris description to the changelog
* | add crl_uris description to the changelogthekuwayama2019-11-111-1/+2
| |
* | Add history for changes since 2.1.2Jeremy Evans2019-11-081-0/+49
|/ | | | | | Going forward, History.md should be updated for all significant new features, backwards compatibility issues, and performance improvements.
* Ruby/OpenSSL 2.1.2v2.1.2Kazuki Yamaguchi2018-10-171-0/+12
|
* Merge branch 'maint-2.0' into maintKazuki Yamaguchi2018-10-171-0/+23
|\ | | | | | | | | | | | | * maint-2.0: Ruby/OpenSSL 2.0.9 needs openssl/opensslv.h x509name: fix OpenSSL::X509::Name#{cmp,<=>}
| * Ruby/OpenSSL 2.0.9v2.0.9Kazuki Yamaguchi2018-10-171-0/+23
| |
* | Merge branch 'maint-2.0' into maintKazuki Yamaguchi2018-05-121-0/+14
|\| | | | | | | | | | | | | | | | | | | * maint-2.0: Ruby/OpenSSL 2.0.8 test/test_ssl_session: set client protocol version explicitly test/test_pkey_rsa: fix test failure with OpenSSL 1.1.1 extconf.rb: fix build with LibreSSL 2.7.0 cipher: validate iterations argument for Cipher#pkcs5_keyivgen test/utils: disable Thread's report_on_exception in start_server
| * Ruby/OpenSSL 2.0.8v2.0.8Kazuki Yamaguchi2018-05-121-0/+14
| |
* | Ruby/OpenSSL 2.1.0v2.1.0ky/release-2.1.0Kazuki Yamaguchi2017-12-141-2/+5
| |
* | Merge branch 'maint'Kazuki Yamaguchi2017-12-141-0/+15
|\| | | | | | | | | | | | | * maint: Ruby/OpenSSL 2.0.7 asn1: fix docs ssl: remove unreachable code
| * Ruby/OpenSSL 2.0.7v2.0.7ky/release-2.0.7Kazuki Yamaguchi2017-12-141-0/+15
| |
* | Ruby/OpenSSL 2.1.0.beta2v2.1.0.beta2ky/release-2.1.0.beta2Kazuki Yamaguchi2017-11-251-5/+28
| |
* | Merge branch 'maint'Kazuki Yamaguchi2017-11-251-1/+1
|\| | | | | | | | | | | | | | | | | | | | | * maint: History.md: fix a typo x509cert, x509crl, x509req, ns_spki: check sanity of public key pkey: make pkey_check_public_key() non-static test/test_cipher: fix test_non_aead_cipher_set_auth_data failure cipher: disallow setting AAD for non-AEAD ciphers test/test_ssl_session: skip tests for session_remove_cb appveyor.yml: remove 'openssl version' line
| * History.md: fix a typoKazuki Yamaguchi2017-11-251-1/+1
| |
* | Merge branch 'maint'Kazuki Yamaguchi2017-09-241-0/+20
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * maint: Ruby/OpenSSL 2.0.6 test/test_engine: check if RC4 is supported test/test_engine: suppress stderr ossl.c: make legacy locking callbacks reentrant ossl.c: use struct CRYPTO_dynlock_value for non-dynamic locks ssl: prevent SSLSocket#sysread* from leaking uninitialized data test/test_pair: replace sleep with IO.select tool/ruby-openssl-docker: update test/test_ssl: do not run NPN tests for LibreSSL >= 2.6.1 test/test_ssl: skip tmp_ecdh_callback test for LibreSSL >= 2.6.1 test/test_pair: disable compression test/test_ssl: suppress warning in test_alpn_protocol_selection_cancel ruby.h: unnormalized Fixnum value test/test_pair: fix test_write_nonblock{,_no_exceptions}
| * Ruby/OpenSSL 2.0.6v2.0.6ky/release-2.0.6Kazuki Yamaguchi2017-09-241-0/+20
| |
* | Ruby/OpenSSL 2.1.0.beta1v2.1.0.beta1ky/release-2.1.0.beta1Kazuki Yamaguchi2017-09-031-19/+25
| |
* | Merge branch 'maint'Kazuki Yamaguchi2017-08-081-0/+13
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * maint: Ruby/OpenSSL 2.0.5 ssl: fix compile error with OpenSSL 1.0.0 ssl: remove unsupported TLS versions from SSLContext::METHODS Add msys2 library dependency tag in gem metadata ossl_pem_passwd_cb: handle nil from the block explicitly ossl_pem_passwd_cb: do not check for taintedness ossl_pem_passwd_cb: relax passphrase length constraint appveyor.yml: test against Ruby 2.4 Rakefile: install_dependencies: install only when needed bio: do not use the FILE BIO method in ossl_obj2bio() bio: prevent possible GC issue in ossl_obj2bio() test/test_ssl: allow 3DES cipher suites in test_sslctx_set_params
| * Ruby/OpenSSL 2.0.5v2.0.5Kazuki Yamaguchi2017-08-081-0/+13
| |
* | Merge branch 'maint'bpointKazuki Yamaguchi2017-06-141-1/+49
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * maint: Ruby/OpenSSL 2.0.4 History.md: add entries for 2.0.1-2.0.3 History.md: wrap at 80 characters extconf.rb: simplify searching libraries logic Search SSL libraries by testing various filename patterns openssl: fix broken openssl check openssl: fix broken openssl check x509store: clear error queue after calling X509_LOOKUP_load_file() tool/sync-with-trunk: 'LASY' -> 'LAST' Update .travis.yml and Dockerfile test/test_x509store: skip OpenSSL::TestX509Store#test_set_errors Fix documentation for OpenSSL::Cipher#final Fix typos ssl: check return value of SSL_set_fd() test/test_ssl: fix typo in test_sysread_and_syswrite Fix typos test/test_pkey_ec: do not use dummy 0 order
| * Ruby/OpenSSL 2.0.4v2.0.4Kazuki Yamaguchi2017-06-141-0/+12
| |
| * History.md: add entries for 2.0.1-2.0.3Kazuki Yamaguchi2017-06-141-0/+35
| |
| * History.md: wrap at 80 charactersKazuki Yamaguchi2017-06-141-1/+2
| |
* | Remove support for OpenSSL 0.9.8 and 1.0.0topic/drop-openssl-098-and-100Kazuki Yamaguchi2016-12-221-1/+3
| | | | | | | | | | | | | | | | | | | | They are no longer receiving security updates from the OpenSSL development team since 2015-12. We have kept basic compatibility until now because RHEL 5 still uses an (heavily modified) OpenSSL 0.9.8e. The RHEL 5 will reach EOL on 2017-03, thus it is now safe to assume nobody is still using such old versions of OpenSSL.
* | Start preparing for 2.1.0Kazuki Yamaguchi2016-12-211-0/+23
|/
* Drop support for LibreSSL < 2.3topic/docker-image-updateKazuki Yamaguchi2016-10-171-1/+1
| | | | | | | | | | | | | | | | | We have changed the support policy for LibreSSL: we now support only maintained stable branches. Quoting from libressl.org[1]: > LibreSSL transitions to a new stable release branch every 6 months in > coordination with the OpenBSD development schedule. LibreSSL stable > branches are updated for 1 year after their corresponding OpenBSD > branch is tagged for release. So, LibreSSL 2.2, which was shipped by OpenBSD 5.8 released on 2015-08, is no longer supported officially by the OpenBSD team. [1] http://www.libressl.org/releases.html
* Merge branch 'topic/pkey-ec-conversion-form'Kazuki Yamaguchi2016-10-091-0/+3
|\ | | | | | | | | * topic/pkey-ec-conversion-form: pkey: allow specifying conversion form in EC::Point#to_bn