diff options
| author | Kazuki Yamaguchi <[email protected]> | 2024-06-12 03:01:54 +0900 |
|---|---|---|
| committer | git <[email protected]> | 2024-12-07 08:15:08 +0000 |
| commit | c9bbf7e3eba9d42983d89b07273f4f31e9ca8d0e (patch) | |
| tree | 5a908e46247a784efbfb6d0d4baa04f3c6707cff /test | |
| parent | 510c190739b83cfa4fdb56e9d9c0578af25c9c6a (diff) | |
[ruby/openssl] ssl: do not clear existing SSL options in SSLContext#set_params
Apply SSL options set in DEFAULT_PARAMS without clearing existing
options.
It currently clears options in order to avoid setting one of the
options included in OpenSSL::SSL::OP_ALL unless explicitly specified,
namely OpenSSL::SSL::OP_DONT_INSERT_EMPTY_FRAGMENTS. Now that
OpenSSL::SSL::OP_ALL has been removed from SSLContext#initialize, it is
no longer necessary.
https://github.com/ruby/openssl/commit/77c3db2d65
Diffstat (limited to 'test')
| -rw-r--r-- | test/openssl/test_ssl.rb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/test/openssl/test_ssl.rb b/test/openssl/test_ssl.rb index 088bd602c0..459efcc18e 100644 --- a/test/openssl/test_ssl.rb +++ b/test/openssl/test_ssl.rb @@ -57,6 +57,8 @@ class OpenSSL::TestSSL < OpenSSL::SSLTestCase assert_separately([{ "OPENSSL_CONF" => f.path }, "-ropenssl"], <<~"end;") ctx = OpenSSL::SSL::SSLContext.new assert_equal OpenSSL::SSL::OP_NO_TICKET, ctx.options & OpenSSL::SSL::OP_NO_TICKET + ctx.set_params + assert_equal OpenSSL::SSL::OP_NO_TICKET, ctx.options & OpenSSL::SSL::OP_NO_TICKET end; } end |