rhe	2016-05-31 01:52:10 +0900 (Tue, 31 May 2016)

  New Revision: 55224

  https://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=revision&revision=55224

  Log:
    openssl: fix test failure on Fedora 23
    
    * test/openssl/test_pair.rb (test_ecdh_curves): Avoid P-224. The FIPS
      patch from RHEL disables it. The curve has to be chosen from: {
      secp256k1, secp384r1, secp521r1, prime256v1 }.

  Modified files:
    trunk/test/openssl/test_pair.rb
Index: test/openssl/test_pair.rb
===================================================================
--- test/openssl/test_pair.rb	(revision 55223)
+++ test/openssl/test_pair.rb	(revision 55224)
@@ -425,7 +425,7 @@ module OpenSSL::TestPairM https://github.com/ruby/ruby/blob/trunk/test/openssl/test_pair.rb#L425
 
     ctx1 = OpenSSL::SSL::SSLContext.new
     ctx1.ciphers = "ECDH"
-    ctx1.ecdh_curves = "P-384:P-224"
+    ctx1.ecdh_curves = "P-384:P-521"
     s1 = OpenSSL::SSL::SSLSocket.new(sock1, ctx1)
 
     ctx2 = OpenSSL::SSL::SSLContext.new

--
ML: ruby-changes@q...
Info: http://www.atdot.net/~ko1/quickml/