[ruby-cvs:71344] rhe:r64252 (trunk): net/http, net/ftp: skip SSL/TLS session resumption tests

rhe at ruby-lang.org rhe at ruby-lang.org
Thu Aug 9 19:00:19 JST 2018


rhe	2018-08-09 19:00:19 +0900 (Thu, 09 Aug 2018)

  New Revision: 64252

  https://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=revision&revision=64252

  Log:
    net/http, net/ftp: skip SSL/TLS session resumption tests
    
    Due to a bug in OpenSSL 1.1.0h[1] (it's only in this specific version;
    it was introduced just before the release and is already fixed in their
    stable branch), the callback set by SSLContext#session_new_cb= does not
    get called for clients, making net/http and net/ftp not attempt session
    resumption.
    
    Let's disable the affected test cases for now. Another option would be
    to fallback to using SSLSocket#session as we did before r64234. But
    since only a single version is affected and hopefully a new stable
    version containing the fix will be released in near future, I chose not
    to add such workaround code to lib/.
    
    [1] https://github.com/openssl/openssl/pull/5967

  Modified files:
    trunk/test/net/ftp/test_ftp.rb
    trunk/test/net/http/test_https.rb


More information about the ruby-cvs mailing list