[#70843] Re: [ruby-cvs:58952] hsbt:r51801 (trunk): * lib/rubygems: Update to RubyGems HEAD(fe61e4c112). — Eric Wong <normalperson@...>
hsbt@ruby-lang.org wrote:
3 messages
2015/09/17
[ruby-core:70750] [Ruby trunk - Feature #11524] Use TLS 1.2 to default version of OpenSSL
From:
zzak@...
Date:
2015-09-13 03:13:17 UTC
List:
ruby-core #70750
Issue #11524 has been updated by Zachary Scott. Assignee changed from Hiroshi SHIBATA to openssl ---------------------------------------- Feature #11524: Use TLS 1.2 to default version of OpenSSL https://bugs.ruby-lang.org/issues/11524#change-54129 * Author: Hiroshi SHIBATA * Status: Open * Priority: Normal * Assignee: openssl ---------------------------------------- OpenSSL on trunk still use SSL version 3 with default option. but SSLv3 have some vulnerability. I propose to use TLS 1.2 with default on OpenSSL library. see original proposal: https://github.com/ruby/ruby/pull/873 In other side, HTTP/2 must be required TLS 1.2 protocol. We should change it before http client author put ```ctx.ssl_version = :TLSv1_2``` every their code. ref. https://http2.github.io/http2-spec/#TLSUsage -- https://bugs.ruby-lang.org/