eada6519d2
Wed Feb 8 14:06:59 2012 Hiroshi Nakamura <nahi@ruby-lang.org> * ext/openssl/ossl_ssl.c: Add SSL constants and allow to unset SSL option to prevent BEAST attack. See [Bug #5353]. In OpenSSL, OP_DONT_INSERT_EMPTY_FRAGMENTS is used to prevent TLS-CBC-IV vulunerability described at http://www.openssl.org/~bodo/tls-cbc.txt It's known issue of TLSv1/SSLv3 but it attracts lots of attention these days as BEAST attack. (CVE-2011-3389) Until now ossl sets OP_ALL at SSLContext allocation and call SSL_CTX_set_options at connection. SSL_CTX_set_options updates the value by using |= so bits set by OP_ALL cannot be unset afterwards. This commit changes to call SSL_CTX_set_options only 1 time for each SSLContext. It sets the specified value if SSLContext#options= are called and sets OP_ALL if not. To help users to unset bits in OP_ALL, this commit also adds several constant to SSL such as OpenSSL::SSL::OP_DONT_INSERT_EMPTY_FRAGMENTS. These constants were not exposed in Ruby because there's no way to unset bits in OP_ALL before. Following is an example to enable 0/n split for BEAST prevention. ctx.options = OP_ALL & ~OP_DONT_INSERT_EMPTY_FRAGMENTS * test/openssl/test_ssl.rb: Test above option exists.
51 lines
2.9 KiB
Text
51 lines
2.9 KiB
Text
$NetBSD: distinfo,v 1.52 2012/02/16 16:36:08 taca Exp $
|
|
|
|
SHA1 (ruby-1.8.7-p358.tar.bz2) = 2b78dc421cfbca81ef1375a1c3da9f0f70c548fa
|
|
RMD160 (ruby-1.8.7-p358.tar.bz2) = 7196a000d39e4cd24e7911839c828642d54377bd
|
|
Size (ruby-1.8.7-p358.tar.bz2) = 4209883 bytes
|
|
SHA1 (patch-aa) = 4c1572b5a1eb65e89a98c60540433a69cb96dd23
|
|
SHA1 (patch-ab) = b56b6c2ba182414492c803d36433730602e0a591
|
|
SHA1 (patch-ac) = 0119134d778bb85c58ef5bfe30d337dc76ed47e0
|
|
SHA1 (patch-ad) = 2b194a26f3a7b9bdf3afcc0819ab239479f47c5b
|
|
SHA1 (patch-aw) = d3dc491da64426ff72a9417a65eb99bee2d21044
|
|
SHA1 (patch-az) = 55c9cba404add5293168ae7fae7ae7aaf4df6550
|
|
SHA1 (patch-bd) = 4bdf2230fd8a6ea21f28150ba5705ebd0db4af99
|
|
SHA1 (patch-be) = 2286b14b5992686481d1d7a964c43cfc72118a45
|
|
SHA1 (patch-dj) = 9d67b57daf6111361c478481f39ee8764a861106
|
|
SHA1 (patch-dk) = ee85c9489f6074e6818713746691ce99ef778159
|
|
SHA1 (patch-dl) = 0a5010f57e0f21170530fd4f940e66608c6d9630
|
|
SHA1 (patch-dn) = 3cd429fcd4f48ad0ab784058a4ac8672f6ae17db
|
|
SHA1 (patch-do) = d2b190074647a591106797922e2ec907f6b3efde
|
|
SHA1 (patch-dp) = ebdc27a84c24d3373769250bf4b7052058f89d9b
|
|
SHA1 (patch-dq) = 4cd59c9a965c70ed5ee50dc2e8cebe3bce094fbd
|
|
SHA1 (patch-dr) = ed734e802f2d1cb59c2b49952d646849c9226d1e
|
|
SHA1 (patch-ds) = e60434cb299d070289a3c80765187e4058a65f99
|
|
SHA1 (patch-dt) = 59c09f6ea19cc02a1d8ca92a99eed7f8c30a5f10
|
|
SHA1 (patch-du) = e3703b678f3b09f2878389a0a0ecbd453bae59d0
|
|
SHA1 (patch-dv) = c3eeeaf6e52e27ce945d29494d42ee4d7b11a14b
|
|
SHA1 (patch-dy) = 4daf6f49dbcc4f07dc43df811aec03639d636d8a
|
|
SHA1 (patch-eb) = e5105edd12906a5599668e96a424132abe523871
|
|
SHA1 (patch-ec) = 0fcd05fea21d480a6536e2f711021ac4c1448771
|
|
SHA1 (patch-ed) = 70b8ec8b2d466a3868556cbe1c19bf50462bae6d
|
|
SHA1 (patch-ee) = 8240954e7f07d94bd3e87abc1946ea5cef2d854a
|
|
SHA1 (patch-ef) = ffc28b86ddce44483fcb7967fdc9a4483b61e0a0
|
|
SHA1 (patch-eg) = 12e5fdc31adfc578cdbc3efec5b3d6fae58ad767
|
|
SHA1 (patch-eh) = a6ff0e0baaf03b5bde8c98a91220dfbf4c08fc61
|
|
SHA1 (patch-ei) = 95c921cecd9a6d5d4557066d2a160276a37634b0
|
|
SHA1 (patch-ej) = c8f2c5dbf2ba463d852b94fecf6014bb5ef1e3f8
|
|
SHA1 (patch-ek) = a5de28017bc57d4e01ec986b6a5602cba2b75670
|
|
SHA1 (patch-el) = c071250196cff37c413e724ce4fc149b920e6dde
|
|
SHA1 (patch-em) = 13ccef1c981c9bf312a104c9eb0a9e2339f38461
|
|
SHA1 (patch-en) = 5f92c80c321149055b962a4c2ba97105c00706e2
|
|
SHA1 (patch-eo) = 41a1ff4e1037415eb50373eff64322f6e1423e27
|
|
SHA1 (patch-ep) = f881aece8ec0836c75df3be567d57ffc3ad8bce1
|
|
SHA1 (patch-eq) = d9dfa070d1f12de4f5f48f07d5a32d649035a657
|
|
SHA1 (patch-er) = 666fc6c22544c7f74f7c17ffef30563effcb4df7
|
|
SHA1 (patch-et) = eba90415e5279c9eb8bea67635f5f8cab5d1e7ac
|
|
SHA1 (patch-eu) = dbf65258dcdc619d220ab39864389c4ec4c5c625
|
|
SHA1 (patch-ev) = 6178be681ca1cf2647cab9a61c8ef989ff5b23cb
|
|
SHA1 (patch-ew) = 3f23697dddbb11a10d1f0c3e47fb602822ecd11f
|
|
SHA1 (patch-ga) = 73f50504baf74ee77d00dcfb5a9446bbaf122726
|
|
SHA1 (patch-gb) = 345ad3e5df6fd9febe7b398f091662fd7c300dc4
|
|
SHA1 (patch-lib_rdoc_options.rb) = 0f14417733ad6fc6fbc93af1c8463ecd59abce7c
|
|
SHA1 (patch-lib_rdoc_rdoc.rb) = bef895245cc06ca84fd1e5d506c3c65932921b3a
|