ruby ver. bump

This commit is contained in:
Rmys
2026-01-01 23:09:27 +03:00
parent b2fbc68c58
commit 32481afdd6
2 changed files with 48 additions and 4 deletions
@@ -0,0 +1,38 @@
From e8481cd687840f6d8247ca70967c1de47093ecb8 Mon Sep 17 00:00:00 2001
From: Kazuki Yamaguchi <k@rhe.jp>
Date: Sun, 5 Oct 2025 19:38:47 +0900
Subject: [PATCH] ssl: remove OpenSSL::X509::V_FLAG_CRL_CHECK_ALL from the
default store
With OpenSSL 3.6.0, it causes nearly every certificate verification to
fail with the message "certificate verify failed (unable to get
certificate CRL)" because the CRLs are typically unavailable in the
default store used by OpenSSL::SSL::SSLContext#set_params.
OpenSSL::X509::V_FLAG_CRL_CHECK_ALL is a flag that extends the CRL
checking to all certificates in the chain. In OpenSSL < 3.6.0, the flag
alone has no effect, and OpenSSL::X509::V_FLAG_CRL_CHECK must also be
set to enable CRL checking.
In OpenSSL 3.6.0, OpenSSL::X509::V_FLAG_CRL_CHECK_ALL now implies
OpenSSL::X509::V_FLAG_CRL_CHECK. This is inconsistent with the man page
and may be fixed in a future OpenSSL 3.6.x release, but this flag is not
needed and should not be set by default.
Fixes https://github.com/ruby/openssl/issues/949
---
lib/openssl/ssl.rb | 1 -
1 file changed, 1 deletion(-)
diff --git a/ext/lib/openssl/ssl.rb b/ext/lib/openssl/ssl.rb
index ea8bb2a18..40740a029 100644
--- a/ext/lib/openssl/ssl.rb
+++ b/ext/lib/openssl/ssl.rb
@@ -92,7 +92,6 @@ class SSLContext
DEFAULT_CERT_STORE = OpenSSL::X509::Store.new # :nodoc:
DEFAULT_CERT_STORE.set_default_paths
- DEFAULT_CERT_STORE.flags = OpenSSL::X509::V_FLAG_CRL_CHECK_ALL
# A callback invoked when DH parameters are required for ephemeral DH key
# exchange.
+10 -4
View File
@@ -13,7 +13,7 @@
<IsA>app:console</IsA>
<Summary>An object-oriented scripting language</Summary>
<Description>Ruby is a dynamic, open source programming language with a focus on simplicity and productivity. It has an elegant syntax that is natural to read and easy to write.</Description>
<Archive sha1sum="a07f568bda581a4b4f23c6fe91e1cef44e71f8f8" type="tarxz">https://cache.ruby-lang.org/pub/ruby/3.4/ruby-3.4.7.tar.xz</Archive>
<Archive sha1sum="4e373f5741550d4ef68c2e5e8efc2ce5b0199179" type="tarxz">https://cache.ruby-lang.org/pub/ruby/3.4/ruby-3.4.8.tar.xz</Archive>
<BuildDependencies>
<Dependency>tcl-devel</Dependency>
<Dependency>gmp-devel</Dependency>
@@ -25,8 +25,7 @@
<Dependency>libyaml-devel</Dependency>
</BuildDependencies>
<Patches>
<!-- <Patch level="1">ruby-2.7.0-Remove-RubyGems-dependency.patch</Patch>
<Patch level="1">ruby-2.7.0-Initialize-ABRT-hook.patch</Patch> -->
<!-- <Patch level="1">e8481cd687840f6d8247ca70967c1de47093ecb8.patch</Patch> -->
</Patches>
</Source>
@@ -51,7 +50,7 @@
<!-- ruby libraries -->
<Path fileType="library">/usr/lib/ruby/3.4.0/</Path>
<Path fileType="library">/usr/lib/libruby.so.3.4.7</Path>
<Path fileType="library">/usr/lib/libruby.so.3.4.8</Path>
<Path fileType="library">/usr/lib/libruby.so.3.4</Path>
<Path fileType="library">/usr/lib/libruby.so</Path>
@@ -112,6 +111,13 @@
</Package>
<History>
<Update release="18">
<Date>2026-01-01</Date>
<Version>3.4.8</Version>
<Comment>Version bump.</Comment>
<Name>Pisi Linux Community</Name>
<Email>admin@pisilinux.org</Email>
</Update>
<Update release="17">
<Date>2025-10-11</Date>
<Version>3.4.7</Version>