From: tidoublemy@...
Date: 2015-09-25T20:05:48+00:00
Subject: [ruby-core:70915] [Ruby trunk - Feature #11552] [Open] ext/openssl: choose the OpenSSL::Digest class for OpenSSL::OCSP::Request.sign and OpenSSL::OCSP::BasicResponse.sign

Issue #11552 has been reported by Tim Shirley.

----------------------------------------
Feature #11552: ext/openssl: choose the OpenSSL::Digest class for OpenSSL::OCSP::Request.sign and OpenSSL::OCSP::BasicResponse.sign
https://bugs.ruby-lang.org/issues/11552

* Author: Tim Shirley
* Status: Open
* Priority: Normal
* Assignee: 
----------------------------------------
ossl_ocsp.c is currently hard-coded to use SHA1 signatures when signing OCSP requests and basic responses, but SHA1 is being phased out for this purpose by web clients.  The attached patch provides an optional parameter to the two sign methods to allow other digest algorithms to be specified.  It is a backwards-compatible change since the new parameter is last and optional, and it will default to SHA1 if not specified.  I've included basic tests as well in the patch.

---Files--------------------------------
ruby-changes.patch (5.49 KB)


-- 
https://bugs.ruby-lang.org/