[#70257] [Ruby trunk - Feature #11420] [Open] Introduce ID key table into MRI — ko1@...

Issue #11420 has been reported by Koichi Sasada.

11 messages 2015/08/06

[ruby-core:70507] [Ruby trunk - Bug #10046] [Closed] OpenSSL::TestSSLSession#test_ctx_server_session_cb and OpenSSL::TestSSLSession#test_ctx_client_session_cb test failures

From: v.ondruch@...
Date: 2015-08-21 09:58:12 UTC
List: ruby-core #70507
Issue #10046 has been updated by Vit Ondruch.

Status changed from Open to Closed

Resolved by r51650

----------------------------------------
Bug #10046: OpenSSL::TestSSLSession#test_ctx_server_session_cb and OpenSSL:=
:TestSSLSession#test_ctx_client_session_cb test failures
https://bugs.ruby-lang.org/issues/10046#change-53907

* Author: Vit Ondruch
* Status: Closed
* Priority: Normal
* Assignee:=20
* ruby -v: ruby 2.1.2p95 (2014-05-08 revision 45877) [x86_64-linux]
* Backport: 2.0.0: UNKNOWN, 2.1: REQUIRED
----------------------------------------
I observe following test failures in Fedora 21 and Rawhide:

~~~
  4) Error:
OpenSSL::TestSSLSession#test_ctx_server_session_cb:
OpenSSL::SSL::SSLError: SSL_connect returned=3D1 errno=3D0 state=3DSSLv3 re=
ad server hello A: sslv3 alert handshake failure
    /builddir/build/BUILD/ruby-2.1.2/test/openssl/test_ssl_session.rb:351:i=
n `connect'
    /builddir/build/BUILD/ruby-2.1.2/test/openssl/test_ssl_session.rb:351:i=
n `block (2 levels) in test_ctx_server_session_cb'
    /builddir/build/BUILD/ruby-2.1.2/test/openssl/test_ssl_session.rb:346:i=
n `times'
    /builddir/build/BUILD/ruby-2.1.2/test/openssl/test_ssl_session.rb:346:i=
n `block in test_ctx_server_session_cb'
    /builddir/build/BUILD/ruby-2.1.2/test/openssl/utils.rb:298:in `call'
    /builddir/build/BUILD/ruby-2.1.2/test/openssl/utils.rb:298:in `start_se=
rver'
    /builddir/build/BUILD/ruby-2.1.2/test/openssl/test_ssl_session.rb:344:i=
n `test_ctx_server_session_cb'
  5) Error:
OpenSSL::TestSSLSession#test_ctx_client_session_cb:
OpenSSL::SSL::SSLError: SSL_connect returned=3D1 errno=3D0 state=3DSSLv3 re=
ad server hello A: sslv3 alert handshake failure
    /builddir/build/BUILD/ruby-2.1.2/test/openssl/test_ssl_session.rb:294:i=
n `connect'
    /builddir/build/BUILD/ruby-2.1.2/test/openssl/test_ssl_session.rb:294:i=
n `block in test_ctx_client_session_cb'
    /builddir/build/BUILD/ruby-2.1.2/test/openssl/utils.rb:298:in `call'
    /builddir/build/BUILD/ruby-2.1.2/test/openssl/utils.rb:298:in `start_se=
rver'
    /builddir/build/BUILD/ruby-2.1.2/test/openssl/test_ssl_session.rb:290:i=
n `test_ctx_client_session_cb'
~~~

I believe, that I observer these failures since openssl-1.0.1h-5.fc21 was b=
uild. From the changelog of OpenSSL, it seems that there was disabled SSLv2=
 and SSLv3:

~~~
* Mon Jun 30 2014 Tom=C3=A1=C5=A1 Mr=C3=A1z <tmraz@redhat.com> 1.0.1h-5
- disable SSLv2 and SSLv3 protocols by default (can be enabled
  via appropriate SSL_CTX_clear_options() call)
~~~

According to the OpenSSL maintainer, they are going to be disabled in upstr=
eam release of OpenSSL 1.0.3 as well, since they are not secure enough. So =
I am wondering, what can do Ruby about this?

---Files--------------------------------
0001-Don-t-use-obsolete-SSLv3-for-tests.patch (1.33 KB)


--=20
https://bugs.ruby-lang.org/

In This Thread

Prev Next