From: nagachika00@...
Date: 2014-10-22T14:15:11+00:00
Subject: [ruby-core:65849] [Backport21 - Backport #9640] [Closed] Please backport SSL fixes to 2.1

Issue #9640 has been updated by Tomoyuki Chikanaga.

Status changed from Assigned to Closed
% Done changed from 0 to 100

Applied in changeset r48098.

----------
merge revision(s) r45274,r45278,r45280,r48097: [Backport #9424] [Backport #9640]

	* lib/openssl/ssl.rb: Explicitly whitelist the default
	  SSL/TLS ciphers. Forbid SSLv2 and SSLv3, disable
	  compression by default.
	  Reported by Jeff Hodges.
	  [ruby-core:59829] [Bug #9424]

	* test/openssl/test_ssl.rb: Reuse TLS default options from
	  OpenSSL::SSL::SSLContext::DEFAULT_PARAMS.

	* ext/openssl/lib/openssl/ssl.rb (DEFAULT_PARAMS): override
	  options even if OpenSSL::SSL::OP_NO_SSLv3 is not defined.
	  this is pointed out by Stephen Touset. [ruby-core:65711] [Bug #9424]

----------------------------------------
Backport #9640: Please backport SSL fixes to 2.1
https://bugs.ruby-lang.org/issues/9640#change-49581

* Author: Christian Hofstaedtler
* Status: Closed
* Priority: Normal
* Assignee: Tomoyuki Chikanaga
----------------------------------------
Please backport the fixes for issue #9424 to 2.1.

https://bugs.ruby-lang.org/projects/ruby-trunk/repository/revisions/45274/diff/ext/openssl/lib/openssl/ssl.rb




-- 
https://bugs.ruby-lang.org/