diff --git a/programming/language/ruby/ruby/files/e8481cd687840f6d8247ca70967c1de47093ecb8.patch b/programming/language/ruby/ruby/files/e8481cd687840f6d8247ca70967c1de47093ecb8.patch new file mode 100644 index 0000000000..573f86edb2 --- /dev/null +++ b/programming/language/ruby/ruby/files/e8481cd687840f6d8247ca70967c1de47093ecb8.patch @@ -0,0 +1,38 @@ +From e8481cd687840f6d8247ca70967c1de47093ecb8 Mon Sep 17 00:00:00 2001 +From: Kazuki Yamaguchi +Date: Sun, 5 Oct 2025 19:38:47 +0900 +Subject: [PATCH] ssl: remove OpenSSL::X509::V_FLAG_CRL_CHECK_ALL from the + default store + +With OpenSSL 3.6.0, it causes nearly every certificate verification to +fail with the message "certificate verify failed (unable to get +certificate CRL)" because the CRLs are typically unavailable in the +default store used by OpenSSL::SSL::SSLContext#set_params. + +OpenSSL::X509::V_FLAG_CRL_CHECK_ALL is a flag that extends the CRL +checking to all certificates in the chain. In OpenSSL < 3.6.0, the flag +alone has no effect, and OpenSSL::X509::V_FLAG_CRL_CHECK must also be +set to enable CRL checking. + +In OpenSSL 3.6.0, OpenSSL::X509::V_FLAG_CRL_CHECK_ALL now implies +OpenSSL::X509::V_FLAG_CRL_CHECK. This is inconsistent with the man page +and may be fixed in a future OpenSSL 3.6.x release, but this flag is not +needed and should not be set by default. + +Fixes https://github.com/ruby/openssl/issues/949 +--- + lib/openssl/ssl.rb | 1 - + 1 file changed, 1 deletion(-) + +diff --git a/ext/lib/openssl/ssl.rb b/ext/lib/openssl/ssl.rb +index ea8bb2a18..40740a029 100644 +--- a/ext/lib/openssl/ssl.rb ++++ b/ext/lib/openssl/ssl.rb +@@ -92,7 +92,6 @@ class SSLContext + + DEFAULT_CERT_STORE = OpenSSL::X509::Store.new # :nodoc: + DEFAULT_CERT_STORE.set_default_paths +- DEFAULT_CERT_STORE.flags = OpenSSL::X509::V_FLAG_CRL_CHECK_ALL + + # A callback invoked when DH parameters are required for ephemeral DH key + # exchange. diff --git a/programming/language/ruby/ruby/pspec.xml b/programming/language/ruby/ruby/pspec.xml index 2956d25a54..90f5333eb1 100644 --- a/programming/language/ruby/ruby/pspec.xml +++ b/programming/language/ruby/ruby/pspec.xml @@ -13,7 +13,7 @@ app:console An object-oriented scripting language Ruby is a dynamic, open source programming language with a focus on simplicity and productivity. It has an elegant syntax that is natural to read and easy to write. - https://cache.ruby-lang.org/pub/ruby/3.4/ruby-3.4.7.tar.xz + https://cache.ruby-lang.org/pub/ruby/3.4/ruby-3.4.8.tar.xz tcl-devel gmp-devel @@ -25,8 +25,7 @@ libyaml-devel - + @@ -51,7 +50,7 @@ /usr/lib/ruby/3.4.0/ - /usr/lib/libruby.so.3.4.7 + /usr/lib/libruby.so.3.4.8 /usr/lib/libruby.so.3.4 /usr/lib/libruby.so @@ -112,6 +111,13 @@ + + 2026-01-01 + 3.4.8 + Version bump. + Pisi Linux Community + admin@pisilinux.org + 2025-10-11 3.4.7