shyouhei	2010-11-22 16:22:05 +0900 (Mon, 22 Nov 2010)

  New Revision: 29861

  http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=29861

  Log:
    Mon, 23 Aug 2010 03:06:30 +0000  nahi <nahi@b2dd03c8-39d4-4d8f-98ff-823fe69b080e>
     merge revision(s) 29071:
     
     	* ext/openssl/ossl_asn1.c (obj_to_asn1bool): fixed ASN1::Boolean
     	  encoding issue for OpenSSL 1.0.0 compatibility.
     	  ASN1::Boolean.new(false).to_der wrongly generated "\1\1\377" which
     	  means 'true'.
    
      ASN1_TYPE_set of OpenSSL <= 0.9.8 treats value 0x100 as 'false' but
      OpenSSL >= 1.0.0 treats it as 'true'.  ruby-ossl was using 0x100 for
      'false' for backward compatibility.  Just use 0x0 for the case
      OpenSSL >= OpenSSL 0.9.7.
    
    * test/openssl/test_asn1.rb: test added.
    
    git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8@29071 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
    Signed-off-by: URABE, Shyouhei <shyouhei@r...>

  Modified files:
    branches/ruby_1_8_7/ChangeLog
    branches/ruby_1_8_7/ext/openssl/ossl_asn1.c
    branches/ruby_1_8_7/test/openssl/test_asn1.rb
    branches/ruby_1_8_7/version.h

Index: ruby_1_8_7/ext/openssl/ossl_asn1.c
===================================================================
--- ruby_1_8_7/ext/openssl/ossl_asn1.c	(revision 29860)
+++ ruby_1_8_7/ext/openssl/ossl_asn1.c	(revision 29861)
@@ -196,7 +196,11 @@
 static ASN1_BOOLEAN
 obj_to_asn1bool(VALUE obj)
 {
+#if OPENSSL_VERSION_NUMBER < 0x00907000L
      return RTEST(obj) ? 0xff : 0x100;
+#else
+     return RTEST(obj) ? 0xff : 0x0;
+#endif
 }
 
 static ASN1_INTEGER*
Index: ruby_1_8_7/ChangeLog
===================================================================
--- ruby_1_8_7/ChangeLog	(revision 29860)
+++ ruby_1_8_7/ChangeLog	(revision 29861)
@@ -1,3 +1,17 @@
+Mon Aug 23 11:42:41 2010  NAKAMURA, Hiroshi  <nahi@r...>
+
+	* ext/openssl/ossl_asn1.c (obj_to_asn1bool): fixed ASN1::Boolean
+	  encoding issue for OpenSSL 1.0.0 compatibility.
+	  ASN1::Boolean.new(false).to_der wrongly generated "\1\1\377" which
+	  means 'true'.  [BUG:3735] 
+	  
+	  ASN1_TYPE_set of OpenSSL <= 0.9.8 treats value 0x100 as 'false' but
+	  OpenSSL >= 1.0.0 treats it as 'true'.  ruby-ossl was using 0x100 for
+	  'false' for backward compatibility.  Just use 0x0 for the case
+	  OpenSSL >= OpenSSL 0.9.7.
+
+	* test/openssl/test_asn1.rb: test added.
+
 Tue Aug 10 17:35:49 2010  NARUSE, Yui  <naruse@r...>
 
 	* lib/webrick/httprequest.rb (WEBrick::HTTPRequest::parse_uri):
Index: ruby_1_8_7/version.h
===================================================================
--- ruby_1_8_7/version.h	(revision 29860)
+++ ruby_1_8_7/version.h	(revision 29861)
@@ -2,7 +2,7 @@
 #define RUBY_RELEASE_DATE "2010-11-22"
 #define RUBY_VERSION_CODE 187
 #define RUBY_RELEASE_CODE 20101122
-#define RUBY_PATCHLEVEL 310
+#define RUBY_PATCHLEVEL 311
 
 #define RUBY_VERSION_MAJOR 1
 #define RUBY_VERSION_MINOR 8
Index: ruby_1_8_7/test/openssl/test_asn1.rb
===================================================================
--- ruby_1_8_7/test/openssl/test_asn1.rb	(revision 29860)
+++ ruby_1_8_7/test/openssl/test_asn1.rb	(revision 29861)
@@ -194,4 +194,18 @@
     cululated_sig = key.sign(OpenSSL::Digest::SHA1.new, tbs_cert.to_der)
     assert_equal(cululated_sig, sig_val.value)
   end
+
+  def test_encode_boolean
+    encode_decode_test(OpenSSL::ASN1::Boolean, [true, false])
+  end
+
+  def test_encode_integer
+    encode_decode_test(OpenSSL::ASN1::Integer, [72, -127, -128, 128, -1, 0, 1, -(2**12345), 2**12345])
+  end
+
+  def encode_decode_test(type, values)
+    values.each do |v|
+      assert_equal(v, OpenSSL::ASN1.decode(type.new(v).to_der).value)
+    end
+  end
 end if defined?(OpenSSL)

--
ML: ruby-changes@q...
Info: http://www.atdot.net/~ko1/quickml/