rpms/ruby
3
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
Clone of https://src.fedoraproject.org/rpms/ruby
703 Commits 34 Branches 203 Tags 3.3 MiB
RPM Spec 60.1%
Diff 32.7%
Ruby 7.2%
8d5b538747
Go to file
Jun Aruga 8d5b538747 ssl: use ffdhe2048 from RFC 7919 as the default DH group parameter 
When the dependant openssl-libs was upgraded from 1:3.1.1-4.fc40 to
1:3.1.4-1.fc40, Fedora rawhide started to fail on Koschei.

This commit fixes the following failures in OpenSSL FIPS.

```
+ make -C redhat-linux-build runruby 'TESTRUN_SCRIPT=   -I/builddir/build/BUILD/ruby-3.2.2/tool/lib --enable-gems   /builddir/build/SOURCES/test_openssl_fips.rb /builddir/build/BUILD/ruby-3.2.2 --verbose'
...
  1) Failure:
OpenSSL::TestFIPS#test_fips_mode_get_with_fips_mode_set [/builddir/build/BUILD/ruby-3.2.2/test/openssl/test_fips.rb:38]:
assert_separately failed with error message
pid 93968 exit 1
| /builddir/build/BUILD/ruby-3.2.2/redhat-linux-build/.ext/common/openssl/pkey.rb:132:in `initialize': could not parse pkey (OpenSSL::PKey::DHError)
| >-from /builddir/build/BUILD/ruby-3.2.2/redhat-linux-build/.ext/common/openssl/pkey.rb:132:in `new'
| >-from /builddir/build/BUILD/ruby-3.2.2/redhat-linux-build/.ext/common/openssl/pkey.rb:132:in `new'
| >-from /builddir/build/BUILD/ruby-3.2.2/redhat-linux-build/.ext/common/openssl/ssl.rb:37:in `<class:SSLContext>'
| >-from /builddir/build/BUILD/ruby-3.2.2/redhat-linux-build/.ext/common/openssl/ssl.rb:23:in `<module:SSL>'
| >-from /builddir/build/BUILD/ruby-3.2.2/redhat-linux-build/.ext/common/openssl/ssl.rb:22:in `<module:OpenSSL>'
| >-from /builddir/build/BUILD/ruby-3.2.2/redhat-linux-build/.ext/common/openssl/ssl.rb:21:in `<top (required)>'
| >-from /builddir/build/BUILD/ruby-3.2.2/redhat-linux-build/.ext/common/openssl.rb:21:in `require_relative'
| >-from /builddir/build/BUILD/ruby-3.2.2/redhat-linux-build/.ext/common/openssl.rb:21:in `<top (required)>'
| >-from -:in `require'
  2) Failure:
OpenSSL::TestFIPS#test_fips_mode_get_is_true_on_fips_mode_enabled [/builddir/build/BUILD/ruby-3.2.2/test/openssl/test_fips.rb:12]:
assert_separately failed with error message
pid 93969 exit 1
| /builddir/build/BUILD/ruby-3.2.2/redhat-linux-build/.ext/common/openssl/pkey.rb:132:in `initialize': could not parse pkey (OpenSSL::PKey::DHError)
| >-from /builddir/build/BUILD/ruby-3.2.2/redhat-linux-build/.ext/common/openssl/pkey.rb:132:in `new'
| >-from /builddir/build/BUILD/ruby-3.2.2/redhat-linux-build/.ext/common/openssl/pkey.rb:132:in `new'
| >-from /builddir/build/BUILD/ruby-3.2.2/redhat-linux-build/.ext/common/openssl/ssl.rb:37:in `<class:SSLContext>'
| >-from /builddir/build/BUILD/ruby-3.2.2/redhat-linux-build/.ext/common/openssl/ssl.rb:23:in `<module:SSL>'
| >-from /builddir/build/BUILD/ruby-3.2.2/redhat-linux-build/.ext/common/openssl/ssl.rb:22:in `<module:OpenSSL>'
| >-from /builddir/build/BUILD/ruby-3.2.2/redhat-linux-build/.ext/common/openssl/ssl.rb:21:in `<top (required)>'
| >-from /builddir/build/BUILD/ruby-3.2.2/redhat-linux-build/.ext/common/openssl.rb:21:in `require_relative'
| >-from /builddir/build/BUILD/ruby-3.2.2/redhat-linux-build/.ext/common/openssl.rb:21:in `<top (required)>'
| >-from -:in `require'
Finished tests in 0.166449s, 72.0941 tests/s, 342.4468 assertions/s.
12 tests, 57 assertions, 2 failures, 0 errors, 1 skips
```

The commit was ported from CentOS Stream rpms/ruby stream-ruby-3.1-rhel-9.4.0 branch:
<59242d8ce8>.
2023-11-09 17:58:10 +01:00
.gitignore Upgrade to Ruby 3.0.0. 2021-01-04 16:42:55 +01:00
libruby.stp Add TapSet for Ruby. 2013-02-22 14:17:04 +01:00
macros.ruby Add %{ruby_default_filter} macro. 2013-04-30 14:42:13 +02:00
macros.rubygems Pass ldflags to gem install 2021-05-31 10:25:26 +00:00
operating_system.rb Cache Gem.default_dir 2023-11-03 17:12:13 +01:00
ruby-2.1.0-always-use-i386.patch Upgrade to Ruby 3.2.2. 2023-03-31 15:27:47 +02:00
ruby-2.1.0-custom-rubygems-location.patch Upgrade to Ruby 3.2.2. 2023-03-31 15:27:47 +02:00
ruby-2.1.0-Enable-configuration-of-archlibdir.patch Upgrade to Ruby 3.2.2. 2023-03-31 15:27:47 +02:00
ruby-2.1.0-Prevent-duplicated-paths-when-empty-version-string-i.patch Upgrade to Ruby 3.2.2. 2023-03-31 15:27:47 +02:00
ruby-2.3.0-ruby_version.patch Upgrade to Ruby 3.2.2. 2023-03-31 15:27:47 +02:00
ruby-2.7.0-Initialize-ABRT-hook.patch Upgrade to Ruby 3.2.0. 2023-01-02 18:09:09 +01:00
ruby-2.7.1-Timeout-the-test_bug_reporter_add-witout-raising-err.patch Upgrade to Ruby 3.2.0. 2023-01-02 18:09:09 +01:00
ruby-3.1.0-Don-t-query-RubyVM-FrozenCore-for-class-path.patch Upgrade to Ruby 3.2.0. 2023-01-02 18:09:09 +01:00
ruby-3.2.0-Revert-Fix-test-syntax-suggest-order.patch Upgrade to Ruby 3.2.1. 2023-02-10 10:45:13 +01:00
ruby-3.2.0-Revert-Test-syntax_suggest-by-make-check.patch Upgrade to Ruby 3.2.1. 2023-02-10 10:45:13 +01:00
ruby-3.2.0-Use-SHA256-instead-of-SHA1.patch Fix ELN FTBFS due to stronger crypto settings. 2023-01-05 10:30:24 +01:00
ruby-3.3.0-openssl-3.2.0-fips-enable-tests.patch Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. 2023-09-22 12:54:53 +02:00
ruby-3.3.0-openssl-3.2.0-fips-fix-pkey-dh-require-openssl.patch ssl: use ffdhe2048 from RFC 7919 as the default DH group parameter 2023-11-09 17:58:10 +01:00
ruby-3.3.0-openssl-3.2.0-fips-fix-pkey-read-in-openssl-3.patch Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. 2023-09-22 12:54:53 +02:00
ruby-3.3.0-openssl-3.2.0-fix-fips-get-set-in-openssl-3.patch Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. 2023-09-22 12:54:53 +02:00
ruby-exercise.stp Add missing ruby-exercise.stp file. 2013-02-22 14:17:53 +01:00
ruby.rpmlintrc Fix compatibilty with rpmlint 2.0+ 2023-01-02 18:20:46 +01:00
ruby.spec ssl: use ffdhe2048 from RFC 7919 as the default DH group parameter 2023-11-09 17:58:10 +01:00
rubygems.attr Add conflicts RPM generator. 2018-02-13 13:50:15 +01:00
rubygems.con Add conflicts RPM generator. 2018-02-13 13:50:15 +01:00
rubygems.prov Upgrade to Ruby 2.6.0. 2019-01-17 08:31:01 +01:00
rubygems.req Extract composition of dependecy strings into helper. 2019-01-24 10:38:43 +01:00
sources Upgrade to Ruby 3.2.2. 2023-03-31 15:27:47 +02:00
test_abrt.rb Move the ABRT hook test into separate file. 2015-12-13 19:36:58 +01:00
test_openssl_fips.rb Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. 2023-09-22 12:54:53 +02:00
test_systemtap.rb Upgrade to Ruby 2.4.0. 2017-01-09 15:58:21 +01:00