ruby/lib/webrick
Sorah Fukumori 0f57d66f9e
webrick/ssl: More keyUsage for self-signed certs
Chrome 75+ started to strictly enforce X.509 keyUsage against TLS server
certificates. Webrick supports generating instant self-signed
certificates for debugging purpose and these certificates lacks required
keyUsage for modern TLS. So adding the following keyUsages:

- digitalSignature (for server authentication)
- keyAgreement (for DH key exchange)
- dataEncipherment (for data encryption)

References:

- https://tools.ietf.org/html/rfc5280#section-4.2.1.3
- https://crbug.com/795089
- https://boringssl-review.googlesource.com/c/34604
2020-04-03 00:49:12 +09:00
..
httpauth
httpservlet
.document
accesslog.rb
cgi.rb
compat.rb
config.rb
cookie.rb
htmlutils.rb
httpauth.rb
httpproxy.rb
httprequest.rb
httpresponse.rb
https.rb
httpserver.rb
httpservlet.rb
httpstatus.rb
httputils.rb
httpversion.rb
log.rb
server.rb
ssl.rb
utils.rb
version.rb
webrick.gemspec