1berry/ruby
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

drb: fix tests on Debian sid/unstable with OpenSSL 1.1.1a

Browse Source 
OpenSSL complains abour our keys being small and weak :<
Make them big and strong with 2048-bit RSA keys and SHA256 digests

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@66153 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
This commit is contained in:
normal 2018-12-03 04:51:13 +00:00
parent a063f71a7c
commit fb0009cfdc
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
lib/drb/ssl.rb
View File

@ -162,7 +162,7 @@ module DRb
return return
end end
rsa = OpenSSL::PKey::RSA.new(1024){|p, n| rsa = OpenSSL::PKey::RSA.new(2048){|p, n|
next unless self[:verbose] next unless self[:verbose]
case p case p
when 0; $stderr.putc "." # BN_generate_prime when 0; $stderr.putc "." # BN_generate_prime
@ -196,7 +196,7 @@ module DRb
if comment = self[:SSLCertComment] if comment = self[:SSLCertComment]
cert.add_extension(ef.create_extension("nsComment", comment)) cert.add_extension(ef.create_extension("nsComment", comment))
end end
cert.sign(rsa, OpenSSL::Digest::SHA1.new) cert.sign(rsa, OpenSSL::Digest::SHA256.new)
@cert = cert @cert = cert
@pkey = rsa @pkey = rsa