ruby/test/openssl
Kazuki Yamaguchi 27d77a9c73 [ruby/openssl] pkcs7: remove default cipher from PKCS7.encrypt
Require that users explicitly specify the desired algorithm. In my
opinion, we are not in a position to specify the default cipher.

When OpenSSL::PKCS7.encrypt is given only two arguments, it uses
"RC2-40-CBC" as the symmetric cipher algorithm. 40-bit RC2 is a US
export-grade cipher and considered insecure.

Although this is technically a breaking change, the impact should be
minimal. Even when OpenSSL is compiled with RC2 support and the macro
OPENSSL_NO_RC2 is not defined, it will not actually work on modern
systems because RC2 is part of the legacy provider.

https://github.com/ruby/openssl/commit/439f456bfa
2024-10-31 08:31:16 +00:00
..
fixtures/pkey [ruby/openssl] Fix test_pkey_dsa.rb in FIPS. 2024-03-27 12:16:11 +09:00
test_asn1.rb [ruby/openssl] test_asn1.rb: Remove the assertions of the time string format without second. 2024-03-13 15:19:40 +00:00
test_bn.rb [ruby/openssl] Fix modular square root test with LibreSSL >= 3.8 2023-06-19 01:57:09 +09:00
test_buffering.rb
test_cipher.rb [ruby/openssl] cipher: fix buffer overflow in Cipher#update 2024-05-02 16:26:11 +09:00
test_config.rb [ruby/openssl] config: relax test assertions against error messages 2023-08-16 14:48:41 +09:00
test_digest.rb [ruby/openssl] Add OpenSSL::Digest.digests to get a list of available digests 2024-04-30 15:05:50 +00:00
test_engine.rb [ruby/openssl] Remove OSSL_DEBUG compile-time option 2023-09-06 19:20:57 +09:00
test_fips.rb [ruby/openssl] test_fips.rb: Fix the `OpenSSL.fips_mode` affecting other tests. 2023-09-21 18:04:55 +00:00
test_hmac.rb [ruby/openssl] Revert "Skip OpenSSL::TestHMAC#test_dup when running with RHEL9" 2023-05-19 09:25:11 +09:00
test_kdf.rb
test_ns_spki.rb [ruby/openssl] Prefer String#unpack1 2023-09-06 19:24:53 +09:00
test_ocsp.rb [ruby/openssl] test/openssl/test_ocsp.rb: fix flaky test 2024-01-17 17:13:16 +00:00
test_ossl.rb Make optional benchmark test in OpenSSL::OSSL#test_memcmp_timing 2024-08-29 17:37:44 +09:00
test_pair.rb [ruby/openssl] Add SSLSocket#readbyte 2024-07-03 08:54:18 +00:00
test_pkcs7.rb [ruby/openssl] pkcs7: remove default cipher from PKCS7.encrypt 2024-10-31 08:31:16 +00:00
test_pkcs12.rb [ruby/openssl] Fix test_create_with_mac_iter accidently setting keytype not maciter 2024-06-05 00:45:53 +00:00
test_pkey.rb [ruby/openssl] Remove test_ed25519_not_approved_on_fips. 2024-08-16 17:10:23 +00:00
test_pkey_dh.rb Fix test_pkey_dh.rb in FIPS. 2023-11-25 10:12:28 +00:00
test_pkey_dsa.rb [ruby/openssl] test/openssl/test_pkey_dsa.rb: skip all tests in FIPS mode 2024-08-06 06:38:03 +00:00
test_pkey_ec.rb [ruby/openssl] Fix test_pkey_ec.rb on FIPS. 2023-09-21 18:04:56 +00:00
test_pkey_rsa.rb [ruby/openssl] Fix test_pkey_rsa.rb in FIPS. 2024-09-05 08:41:30 +00:00
test_provider.rb [ruby/openssl] Fix test_provider.rb in FIPS. 2024-09-06 16:58:18 +00:00
test_random.rb
test_ssl.rb [ruby/openssl] Add SSLSocket#readbyte 2024-07-03 08:54:18 +00:00
test_ssl_session.rb [ruby/openssl] Prefer String#unpack1 2023-09-06 19:24:53 +09:00
test_ts.rb [ruby/openssl] Add to_text for PKCS7 and Timestamp::Response 2024-05-08 09:39:13 +00:00
test_x509attr.rb [ruby/openssl] x509attr: avoid using OpenSSL::ASN1 internals in #value= 2024-07-24 16:50:01 +00:00
test_x509cert.rb [ruby/openssl] Pass through nil as digest when signing certificates 2024-06-11 17:12:28 +00:00
test_x509crl.rb
test_x509ext.rb [ruby/openssl] Exact checks with `assert_include` 2023-10-06 09:45:20 +00:00
test_x509name.rb
test_x509req.rb [ruby/openssl] Only CSR version 1 (encoded as 0) is allowed by PKIX standards 2024-04-26 16:55:15 +00:00
test_x509store.rb
ut_eof.rb [ruby/openssl] Add SSLSocket#readbyte 2024-07-03 08:54:18 +00:00
utils.rb Fix test_pkey_dh.rb in FIPS. 2023-11-25 10:12:28 +00:00