akr	2012-04-23 20:15:35 +0900 (Mon, 23 Apr 2012)

  New Revision: 35434

  http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=35434

  Log:
    * lib/drb/ssl.rb: generate 1024 bits RSA key instead of 512 bits.
      OpenSSL 1.0.1 rejects 512 bits RSA key for TLS1.2 with SHA512.
      http://rt.openssl.org/Ticket/Display.html?id=2769&user=guest&pass=guest
      reported by Bohuslav Kabrda.
      [ruby-core:43844] [ruby-trunk - Bug #6221]

  Modified files:
    trunk/ChangeLog
    trunk/lib/drb/ssl.rb

Index: ChangeLog
===================================================================
--- ChangeLog	(revision 35433)
+++ ChangeLog	(revision 35434)
@@ -1,7 +1,15 @@
+Mon Apr 23 20:11:02 2012  Tanaka Akira  <akr@f...>
+
+	* lib/drb/ssl.rb: generate 1024 bits RSA key instead of 512 bits.
+	  OpenSSL 1.0.1 rejects 512 bits RSA key for TLS1.2 with SHA512.
+	  http://rt.openssl.org/Ticket/Display.html?id=2769&user=guest&pass=guest
+	  reported by Bohuslav Kabrda.
+	  [ruby-core:43844] [ruby-trunk - Bug #6221]
+
 Mon Apr 23 19:54:33 2012  Tanaka Akira  <akr@f...>
 
 	* test/drb/drbtest.rb: rescue Errno::ESRCH for Process.kill.
-	  [ruby-dev:45551] reported by NARUSE, Yui.
+	  reported by NARUSE, Yui.  [ruby-dev:45551]
 
 Mon Apr 23 14:16:45 2012  NARUSE, Yui  <naruse@r...>
 
Index: lib/drb/ssl.rb
===================================================================
--- lib/drb/ssl.rb	(revision 35433)
+++ lib/drb/ssl.rb	(revision 35434)
@@ -54,7 +54,7 @@
           return
         end
 
-        rsa = OpenSSL::PKey::RSA.new(512){|p, n|
+        rsa = OpenSSL::PKey::RSA.new(1024){|p, n|
           next unless self[:verbose]
           case p
           when 0; $stderr.putc "."  # BN_generate_prime

--
ML: ruby-changes@q...
Info: http://www.atdot.net/~ko1/quickml/