From: Hiroshi NAKAMURA <redmine@...>
Date: 2010-08-23T14:55:03+09:00
Subject: [ruby-core:31829] [Bug #3735] OpenSSL::ASN1::Boolean.new(false).to_der encodes the value as 'true' under OpenSSL 1.0.0

Issue #3735 has been updated by Hiroshi NAKAMURA.


I should have copied the commit log;

        * ext/openssl/ossl_asn1.c (obj_to_asn1bool): fixed ASN1::Boolean
          encoding issue for OpenSSL 1.0.0 compatibility.
          ASN1::Boolean.new(false).to_der wrongly generated "\1\1\377" which
          means 'true'.

          ASN1_TYPE_set of OpenSSL <= 0.9.8 treats value 0x100 as 'false' but
          OpenSSL >= 1.0.0 treats it as 'true'.  ruby-ossl was using 0x100 for
          'false' for backward compatibility.  Just use 0x0 for the case
          OpenSSL >= OpenSSL 0.9.7.

        * test/openssl/test_asn1.rb: test added.

----------------------------------------
http://redmine.ruby-lang.org/issues/show/3735

----------------------------------------
http://redmine.ruby-lang.org