Skip to content

2.1.0.beta1 vs 2.0.5 with 1.1.0f - SSLContext::METHODS change #147

Closed
@MSP-Greg

Description

@MSP-Greg

I'm somewhat in the middle of some other coding tasks, but I just noticed that

when using 2.1.0.beta1, SSLContext::METHODS is contains

SSLv2 SSLv23 SSLv3 TLSv1 TLSv1_1 TLSv1_2

when using 2.0.5, SSLContext::METHODS contains

SSLv23 TLSv1 TLSv1_1 TLSv1_2

Note that SSLv2 and SSLv3 appear in 2.1.0 but not 2.0.5. I'm using 1.1.0f, and I thought the OpenSSL package was build with SSL disabled. I run a daily Appveyor with info helpful for Ruby, the trunk builds are all the way at the bottom. See the OpenSSL section, 2.1.0.beta1 here and 2.0.5 here.

I checked History.md, the only thing I saw related to SSLContext::Methods was 'OpenSSL::SSL::SSLContext#min_version= and #max_version= are added. [GitHub #142]'

Not super knowledgeable about SSL, but this seems kind of odd...

EDIT: Just found some notes:

1.1.0f package used for above builds (shows no SSL versions):

>openssl ciphers -help
Usage: ciphers [options]
Valid options are:
 -help    Display this summary
 -v       Verbose listing of the SSL/TLS ciphers
 -V       Even more verbose
 -s       Only supported ciphers
 -tls1    TLS1 mode
 -tls1_1  TLS1.1 mode
 -tls1_2  TLS1.2 mode
 -psk     include ciphersuites requiring PSK
 -srp     include ciphersuites requiring SRP

Same command with a 1.0.2l package (shows SSLv2 & SSLv3):

>openssl ciphers -help
usage: ciphers args
 -v          - verbose mode, a textual listing of the SSL/TLS ciphers in OpenSSL
 -V          - even more verbose
 -ssl2       - SSL2 mode
 -ssl3       - SSL3 mode
 -tls1       - TLS1 mode

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions