ruby/ext/openssl
Kazuki Yamaguchi 27d77a9c73 [ruby/openssl] pkcs7: remove default cipher from PKCS7.encrypt
Require that users explicitly specify the desired algorithm. In my
opinion, we are not in a position to specify the default cipher.

When OpenSSL::PKCS7.encrypt is given only two arguments, it uses
"RC2-40-CBC" as the symmetric cipher algorithm. 40-bit RC2 is a US
export-grade cipher and considered insecure.

Although this is technically a breaking change, the impact should be
minimal. Even when OpenSSL is compiled with RC2 support and the macro
OPENSSL_NO_RC2 is not defined, it will not actually work on modern
systems because RC2 is part of the legacy provider.

439f456bfa
2024-10-31 08:31:16 +00:00
..
lib [ruby/openssl] Add SSLSocket#readbyte 2024-07-03 08:54:18 +00:00
depend ruby tool/update-deps --fix 2024-04-27 21:55:28 +09:00
extconf.rb [ruby/openssl] Set time directly on the x509 store 2024-07-24 16:51:00 +00:00
History.md [ruby/openssl] History.md: Escape Markdown syntax Italic "*". [ci skip] 2023-11-25 10:05:24 +00:00
openssl.gemspec [ruby/openssl] Rename LICENSE.txt to COPYING 2024-06-08 10:59:16 +00:00
openssl_missing.c [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
openssl_missing.h [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl.c [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl.h [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_asn1.c [ruby/openssl] asn1: make ossl_asn1_get_asn1type() private 2024-07-24 16:50:01 +00:00
ossl_asn1.h [ruby/openssl] asn1: make ossl_asn1_get_asn1type() private 2024-07-24 16:50:01 +00:00
ossl_bio.c [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_bio.h [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_bn.c [DOC] Fix typos 2024-10-31 12:44:50 +09:00
ossl_bn.h [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_cipher.c [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_cipher.h [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_config.c [ruby/openssl] [DOC] better wording for OpenSSL::Config document. 2024-10-31 08:26:12 +00:00
ossl_config.h [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_digest.c [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_digest.h [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_engine.c [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_engine.h [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_hmac.c [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_hmac.h [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_kdf.c Use www.rfc-editor.org for RFC text. 2024-03-28 11:44:45 +09:00
ossl_kdf.h
ossl_ns_spki.c [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_ns_spki.h [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_ocsp.c [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_ocsp.h [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_pkcs7.c [ruby/openssl] pkcs7: remove default cipher from PKCS7.encrypt 2024-10-31 08:31:16 +00:00
ossl_pkcs7.h [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_pkcs12.c [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_pkcs12.h [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_pkey.c [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_pkey.h [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_pkey_dh.c [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_pkey_dsa.c [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_pkey_ec.c [ruby/openssl] [DOC] enhance RDoc for exporting pkeys 2023-08-16 14:48:40 +09:00
ossl_pkey_rsa.c [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_provider.c [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_provider.h [ruby/openssl] add OpenSSL Provider support 2023-06-19 17:45:51 +09:00
ossl_rand.c [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_rand.h [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_ssl.c [ruby/openssl] ssl: remove redundant ossl_ssl_ex_vcb_idx 2024-10-31 08:28:34 +00:00
ossl_ssl.h [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_ssl_session.c [ruby/openssl] Implement Write Barrier for all OpenSSL types 2023-06-19 01:57:09 +09:00
ossl_ts.c [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_ts.h [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_x509.c [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_x509.h [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_x509attr.c [ruby/openssl] x509attr: avoid using OpenSSL::ASN1 internals in #value= 2024-07-24 16:50:01 +00:00
ossl_x509cert.c [ruby/openssl] Pass through nil as digest when signing certificates 2024-06-11 17:12:28 +00:00
ossl_x509crl.c [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_x509ext.c [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_x509name.c [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_x509req.c [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_x509revoked.c [ruby/openssl] Fix references to the license text 2024-06-08 10:59:17 +00:00
ossl_x509store.c [ruby/openssl] Set time directly on the x509 store 2024-07-24 16:51:00 +00:00