Ruby Issue Tracking System

10/06/2025

08:02 AM Ruby Revision 33808e0f (git): [ruby/openssl] Bump version number to 4.0.0.pre

https://github.com/ruby/openssl/commit/64f4aae6bd rhenium (Kazuki Yamaguchi)

07:56 AM Ruby Revision 224c1787 (git): [ruby/openssl] Ruby/OpenSSL 3.3.1

https://github.com/ruby/openssl/commit/2b88a6d444 rhenium (Kazuki Yamaguchi)

07:55 AM Ruby Revision 7863389a (git): [ruby/openssl] ssl: remove OpenSSL::X509::V_FLAG_CRL_CHECK_ALL from the default store

With OpenSSL 3.6.0, it causes nearly every certificate verification to
fail with the message "certificate verify fail... rhenium (Kazuki Yamaguchi)

09/30/2025

11:59 AM Ruby Revision 37d65e92 (git): [ruby/openssl] pkey/dh: refactor tests

- Generate smaller parameters in test_new_generate. Generating 2048-bit
parameters is slow and sometimes takes a f... rhenium (Kazuki Yamaguchi)

11:59 AM Ruby Revision ad35a4be (git): [ruby/openssl] pkey: disallow {DH,DSA,EC,RSA}.new without arguments with OpenSSL 3.0

Raise ArgumentError if this is attempted when the extension is compiled
with OpenSSL 3.0 or later. The form will be f... rhenium (Kazuki Yamaguchi)

11:59 AM Ruby Revision 986d9177 (git): [ruby/openssl] pkey: define and use OSSL_HAVE_IMMUTABLE_PKEY macro

Introduce a useful macro indicating that the low-level struct wrapped
in an EVP_PKEY cannot be modified.
Currently, ... rhenium (Kazuki Yamaguchi)

09/17/2025

12:18 PM Ruby Revision 08e7b5f2 (git): [ruby/openssl] Revert "pkey: stop retrying after non-retryable error from OSSL_DECODER"

This reverts commit https://github.com/ruby/openssl/commit/5347880c6eb0 and
https://github.com/ruby/openssl/commit/98... rhenium (Kazuki Yamaguchi)

09/12/2025

02:22 PM Ruby Revision 8a30594d (git): [ruby/openssl] pkey: fix loading public keys with early OpenSSL 3.0.x releases

Treat an empty error queue after calling OSSL_DECODER_from_bio() as a
retryable error.
This is a follow-up to the pr... rhenium (Kazuki Yamaguchi)

12:26 PM Ruby Revision 8af8582d (git): [ruby/openssl] pkey: pass pem_password_cb to OSSL_DECODER only when it is needed

Specify OSSL_DECODER_CTX_set_pem_password_cb() only when we expect a
passphrase-protected private key.
OSSL_DECODER ... rhenium (Kazuki Yamaguchi)

12:26 PM Ruby Revision c0820058 (git): [ruby/openssl] pkey: stop retrying after non-retryable error from OSSL_DECODER

Continue processing only when OSSL_DECODER_from_bio() returns the error
code ERR_R_UNSUPPORTED. Otherwise, raise an e... rhenium (Kazuki Yamaguchi)