normal	2018-12-03 13:51:13 +0900 (Mon, 03 Dec 2018)

  New Revision: 66153

  https://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=revision&revision=66153

  Log:
    drb: fix tests on Debian sid/unstable with OpenSSL 1.1.1a
    
    OpenSSL complains abour our keys being small and weak :<
    Make them big and strong with 2048-bit RSA keys and SHA256 digests

  Modified files:
    trunk/lib/drb/ssl.rb
Index: lib/drb/ssl.rb
===================================================================
--- lib/drb/ssl.rb	(revision 66152)
+++ lib/drb/ssl.rb	(revision 66153)
@@ -162,7 +162,7 @@ module DRb https://github.com/ruby/ruby/blob/trunk/lib/drb/ssl.rb#L162
           return
         end
 
-        rsa = OpenSSL::PKey::RSA.new(1024){|p, n|
+        rsa = OpenSSL::PKey::RSA.new(2048){|p, n|
           next unless self[:verbose]
           case p
           when 0; $stderr.putc "."  # BN_generate_prime
@@ -196,7 +196,7 @@ module DRb https://github.com/ruby/ruby/blob/trunk/lib/drb/ssl.rb#L196
         if comment = self[:SSLCertComment]
           cert.add_extension(ef.create_extension("nsComment", comment))
         end
-        cert.sign(rsa, OpenSSL::Digest::SHA1.new)
+        cert.sign(rsa, OpenSSL::Digest::SHA256.new)
 
         @cert = cert
         @pkey = rsa

--
ML: ruby-changes@q...
Info: http://www.atdot.net/~ko1/quickml/