ruby ver. bump

2026-01-01 23:09:27 +03:00
parent b2fbc68c58
commit 32481afdd6
2 changed files with 48 additions and 4 deletions
@@ -0,0 +1,38 @@
+From e8481cd687840f6d8247ca70967c1de47093ecb8 Mon Sep 17 00:00:00 2001
+From: Kazuki Yamaguchi <k@rhe.jp>
+Date: Sun, 5 Oct 2025 19:38:47 +0900
+Subject: [PATCH] ssl: remove OpenSSL::X509::V_FLAG_CRL_CHECK_ALL from the
+ default store
+
+With OpenSSL 3.6.0, it causes nearly every certificate verification to
+fail with the message "certificate verify failed (unable to get
+certificate CRL)" because the CRLs are typically unavailable in the
+default store used by OpenSSL::SSL::SSLContext#set_params.
+
+OpenSSL::X509::V_FLAG_CRL_CHECK_ALL is a flag that extends the CRL
+checking to all certificates in the chain. In OpenSSL < 3.6.0, the flag
+alone has no effect, and OpenSSL::X509::V_FLAG_CRL_CHECK must also be
+set to enable CRL checking.
+
+In OpenSSL 3.6.0, OpenSSL::X509::V_FLAG_CRL_CHECK_ALL now implies
+OpenSSL::X509::V_FLAG_CRL_CHECK. This is inconsistent with the man page
+and may be fixed in a future OpenSSL 3.6.x release, but this flag is not
+needed and should not be set by default.
+
+Fixes https://github.com/ruby/openssl/issues/949
+---
+ lib/openssl/ssl.rb | 1 -
+ 1 file changed, 1 deletion(-)
+
+diff --git a/ext/lib/openssl/ssl.rb b/ext/lib/openssl/ssl.rb
+index ea8bb2a18..40740a029 100644
+--- a/ext/lib/openssl/ssl.rb
+++ b/ext/lib/openssl/ssl.rb
+@@ -92,7 +92,6 @@ class SSLContext
+ 
+       DEFAULT_CERT_STORE = OpenSSL::X509::Store.new # :nodoc:
+       DEFAULT_CERT_STORE.set_default_paths
+-      DEFAULT_CERT_STORE.flags = OpenSSL::X509::V_FLAG_CRL_CHECK_ALL
+ 
+       # A callback invoked when DH parameters are required for ephemeral DH key
+       # exchange.
@@ -13,7 +13,7 @@
        <IsA>app:console</IsA>
        <Summary>An object-oriented scripting language</Summary>
        <Description>Ruby is a dynamic, open source programming language with a focus on simplicity and productivity. It has an elegant syntax that is natural to read and easy to write.</Description>
-        <Archive sha1sum="a07f568bda581a4b4f23c6fe91e1cef44e71f8f8" type="tarxz">https://cache.ruby-lang.org/pub/ruby/3.4/ruby-3.4.7.tar.xz</Archive>
+        <Archive sha1sum="4e373f5741550d4ef68c2e5e8efc2ce5b0199179" type="tarxz">https://cache.ruby-lang.org/pub/ruby/3.4/ruby-3.4.8.tar.xz</Archive>
        <BuildDependencies>
            <Dependency>tcl-devel</Dependency>
            <Dependency>gmp-devel</Dependency>
@@ -25,8 +25,7 @@
            <Dependency>libyaml-devel</Dependency>
        </BuildDependencies>
        <Patches>
-            <!-- <Patch level="1">ruby-2.7.0-Remove-RubyGems-dependency.patch</Patch>
-            <Patch level="1">ruby-2.7.0-Initialize-ABRT-hook.patch</Patch> -->
+<!--             <Patch level="1">e8481cd687840f6d8247ca70967c1de47093ecb8.patch</Patch> -->
        </Patches>
    </Source>

@@ -51,7 +50,7 @@
            <!-- ruby libraries -->
            <Path fileType="library">/usr/lib/ruby/3.4.0/</Path>
            
-            <Path fileType="library">/usr/lib/libruby.so.3.4.7</Path>
+            <Path fileType="library">/usr/lib/libruby.so.3.4.8</Path>
            <Path fileType="library">/usr/lib/libruby.so.3.4</Path>
            <Path fileType="library">/usr/lib/libruby.so</Path>
            
@@ -112,6 +111,13 @@
    </Package>

    <History>
+        <Update release="18">
+            <Date>2026-01-01</Date>
+            <Version>3.4.8</Version>
+            <Comment>Version bump.</Comment>
+            <Name>Pisi Linux Community</Name>
+            <Email>admin@pisilinux.org</Email>
+        </Update>
        <Update release="17">
            <Date>2025-10-11</Date>
            <Version>3.4.7</Version>