ruby/ext/openssl
emboss 50ba64ab87 * ext/openssl/ossl_ssl.c: Allow disabling client-side renegotiation.
* test/openssl/test_ssl.rb: Simple tests for this.

  Client-side renegotiation is still considered problematic, even
  when used in the context of secure renegotiation (RI, RFC 5746).
  The changes allow users to either completely disable client
  renegotiation on the server, or to specify a maximum number of
  handshakes allowed in total. The number of total handshakes is
  counted in a callback set as SSL_set_info_callback. If the
  maximum number of handshakes is exceeded an error will be raised
  We do not support renegotiation in the OpenSSL extension, therefore
  this feature can only be tested externally.
  The feature is opt-in, the default setting will be to allow
  unlimited client renegotiation, as was the case before.


git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@35797 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
2012-05-26 00:56:33 +00:00
..
lib * ext/openssl/lib/openssl/ssl.rb: add hostname to "hostname does not 2012-04-30 00:11:44 +00:00
deprecation.rb * ext/openssl/deprecation.rb (OpenSSL.check_func): check if header is 2012-05-01 05:18:02 +00:00
extconf.rb * ext/openssl/extconf.rb: Use Logging::message instead of message. 2012-05-18 19:51:58 +00:00
openssl_missing.c * ext/openssl/extconf.rb 2011-06-26 01:32:03 +00:00
openssl_missing.h * ext/openssl/extconf.rb 2011-06-26 01:32:03 +00:00
ossl.c * Make sure to clear $! when ignoring an exception 2011-12-20 06:06:46 +00:00
ossl.h * ext/openssl/ossl.h: include openssl/e_os2.h before checking the 2011-07-08 06:03:17 +00:00
ossl_asn1.c * ext/openssl/ossl_asn1.c: raise TypeError when trying to encode nil 2012-03-28 22:53:18 +00:00
ossl_asn1.h * ext/**/*.[ch]: removed trailing spaces. 2010-04-22 08:04:13 +00:00
ossl_bio.c * include/ruby/intern.h (rb_cloexec_dup): declared. 2011-10-29 11:02:32 +00:00
ossl_bio.h
ossl_bn.c * ext/openssl/ossl.c: surpress warning: shorten-64-to-32. 2011-03-24 07:29:21 +00:00
ossl_bn.h * ext/openssl/ossl_bn.c: More documentation. 2007-04-03 07:02:44 +00:00
ossl_cipher.c * remove trailing spaces. 2012-02-09 03:25:07 +00:00
ossl_cipher.h * ext/openssl/ossl_pkcs5.c: New module. 2007-04-05 05:59:22 +00:00
ossl_config.c * ext/openssl/ossl_config.c (parse_config): remove dead declaration. 2010-09-29 03:37:44 +00:00
ossl_config.h
ossl_digest.c * whitespace cleanup. 2011-11-04 07:19:23 +00:00
ossl_digest.h * ext/openssl/ossl_pkcs5.c: New module. 2007-04-05 05:59:22 +00:00
ossl_engine.c * whitespace cleanup. 2011-11-04 07:19:23 +00:00
ossl_engine.h
ossl_hmac.c * ext/openssl/ossl_hmac.c: Revert checking return type of 2011-07-22 04:11:38 +00:00
ossl_hmac.h
ossl_ns_spki.c * ext/openssl/ossl_ns_spki.c: Complete documentation. 2011-10-20 17:22:09 +00:00
ossl_ns_spki.h
ossl_ocsp.c * ext/openssl/ossl.c: surpress warning: shorten-64-to-32. 2011-03-24 07:29:21 +00:00
ossl_ocsp.h
ossl_pkcs5.c * ext/openssl/ossl_pkcs5.c (ossl_pkcs5_pbkdf2_hmac): suppress warnings. 2012-04-22 12:43:53 +00:00
ossl_pkcs5.h * ext/dl/cfunc.c (rb_dlcfunc_call): adjust format. [ruby-dev:31222] 2007-07-15 13:24:39 +00:00
ossl_pkcs7.c * ext/openssl/ossl_pkcs7.c: fix crash when parsing garbage data. 2012-03-29 01:27:17 +00:00
ossl_pkcs7.h * ext/openssl/ossl_pkcs5.c: New module. 2007-04-05 05:59:22 +00:00
ossl_pkcs12.c * ext/openssl/ossl.h: Introduced OSSL_BIO_reset macro for PEM/DER 2011-06-22 08:41:08 +00:00
ossl_pkcs12.h * ext/openssl/ossl_pkcs5.c: New module. 2007-04-05 05:59:22 +00:00
ossl_pkey.c * variable.c (trace_ev): Removed "not reached" comment as this line is 2012-04-14 00:36:26 +00:00
ossl_pkey.h * whitespace cleanup. 2011-11-04 07:19:23 +00:00
ossl_pkey_dh.c * ext/openssl/ossl_ssl.c: Remove set, but unused variables. 2011-10-19 01:15:35 +00:00
ossl_pkey_dsa.c * ext/openssl/ossl_pkey_dsa.c: remove redundant colon from error 2011-11-23 23:15:09 +00:00
ossl_pkey_ec.c * encoding.c (rb_enc_codepoint_len): Use UNREACHABLE to avoid "control 2012-04-13 23:45:37 +00:00
ossl_pkey_rsa.c Refix Bug #6094: use unsigned long integer literal. 2012-03-23 02:33:05 +00:00
ossl_rand.c * ext/openssl/ossl.c: surpress warning: shorten-64-to-32. 2011-03-24 07:29:21 +00:00
ossl_rand.h
ossl_ssl.c * ext/openssl/ossl_ssl.c: Allow disabling client-side renegotiation. 2012-05-26 00:56:33 +00:00
ossl_ssl.h * ext/openssl/ossl_ssl.h: parenthesize macro arguments. 2011-03-10 13:28:58 +00:00
ossl_ssl_session.c * ext/openssl/ossl_ssl_session.c (ossl_ssl_session_set_time): Check 2011-06-23 10:36:09 +00:00
ossl_version.h * ext/openssl/ossl_ssl.c: Switch stats hash key from string to symbol. 2008-04-20 22:32:06 +00:00
ossl_x509.c
ossl_x509.h
ossl_x509attr.c * ext/openssl/ossl_x509attr.c: parenthesize macro arguments. 2011-03-13 09:11:45 +00:00
ossl_x509cert.c * ext/openssl/ossl_x509cert.c: Fix doc typo. 2012-03-31 03:07:53 +00:00
ossl_x509crl.c * ext/openssl/ossl.h: Introduced OSSL_BIO_reset macro for PEM/DER 2011-06-22 08:41:08 +00:00
ossl_x509ext.c * ext/openssl/ossl.c: surpress warning: shorten-64-to-32. 2011-03-24 07:29:21 +00:00
ossl_x509name.c * remove trailing spaces. 2012-02-09 03:25:07 +00:00
ossl_x509req.c * ext/openssl/ossl.h: Introduced OSSL_BIO_reset macro for PEM/DER 2011-06-22 08:41:08 +00:00
ossl_x509revoked.c * ext/openssl/ossl_x509revoked.c: parenthesize macro arguments. 2011-03-19 03:30:59 +00:00
ossl_x509store.c * ext/openssl/ossl_x509store.c: Add class documentation for 2012-02-02 22:54:10 +00:00
ruby_missing.h * ext/openssl/extconf.rb: remove checks for available functions. 2011-11-26 01:49:36 +00:00