* [ruby-core:71678] [Ruby trunk - Bug #11739] [Open] OpenSSL::SSL::SSLServer doesn't negotiate ECDHE-* ciphersuites
[not found] <redmine.issue-11739.20151125063933@ruby-lang.org>
@ 2015-11-25 6:39 ` weeks
2015-12-07 7:33 ` [ruby-core:71887] [Ruby trunk - Bug #11739] " ko1
` (2 subsequent siblings)
3 siblings, 0 replies; 4+ messages in thread
From: weeks @ 2015-11-25 6:39 UTC (permalink / raw)
To: ruby-core
Issue #11739 has been reported by Branodn Weeks.
----------------------------------------
Bug #11739: OpenSSL::SSL::SSLServer doesn't negotiate ECDHE-* ciphersuites
https://bugs.ruby-lang.org/issues/11739
* Author: Branodn Weeks
* Status: Open
* Priority: Normal
* Assignee:
* ruby -v:
* Backport: 2.0.0: UNKNOWN, 2.1: UNKNOWN, 2.2: UNKNOWN
----------------------------------------
I'm trying to configure an instance of OpenSSL::SSL::SSLServer that supports Elliptic curve Diffie–Hellman. No matter what combination of Ruby and OpenSSL versions I try the negotiation with the client fails.
Proof of concept:
https://gist.github.com/brandonweeks/e26414cc1e9eea9453a8
Then run:
>openssl s_client -connect localhost:8443
Also attaching a pcap file of the failed handshake.
---Files--------------------------------
tls_handshake.pcap (4.93 KB)
--
https://bugs.ruby-lang.org/
^ permalink raw reply [flat|nested] 4+ messages in thread
* [ruby-core:71887] [Ruby trunk - Bug #11739] OpenSSL::SSL::SSLServer doesn't negotiate ECDHE-* ciphersuites
[not found] <redmine.issue-11739.20151125063933@ruby-lang.org>
2015-11-25 6:39 ` [ruby-core:71678] [Ruby trunk - Bug #11739] [Open] OpenSSL::SSL::SSLServer doesn't negotiate ECDHE-* ciphersuites weeks
@ 2015-12-07 7:33 ` ko1
2016-07-02 7:41 ` [ruby-core:76228] [Ruby trunk Bug#11739][Closed] " k
2016-08-04 7:25 ` [ruby-core:76711] [Ruby trunk Bug#11739][Rejected] " usa
3 siblings, 0 replies; 4+ messages in thread
From: ko1 @ 2015-12-07 7:33 UTC (permalink / raw)
To: ruby-core
Issue #11739 has been updated by Koichi Sasada.
Assignee set to openssl
----------------------------------------
Bug #11739: OpenSSL::SSL::SSLServer doesn't negotiate ECDHE-* ciphersuites
https://bugs.ruby-lang.org/issues/11739#change-55293
* Author: Branodn Weeks
* Status: Open
* Priority: Normal
* Assignee: openssl
* ruby -v:
* Backport: 2.0.0: UNKNOWN, 2.1: UNKNOWN, 2.2: UNKNOWN
----------------------------------------
I'm trying to configure an instance of OpenSSL::SSL::SSLServer that supports Elliptic curve Diffie–Hellman. No matter what combination of Ruby and OpenSSL versions I try the negotiation with the client fails.
Proof of concept:
https://gist.github.com/brandonweeks/e26414cc1e9eea9453a8
Then run:
>openssl s_client -connect localhost:8443
Also attaching a pcap file of the failed handshake.
---Files--------------------------------
tls_handshake.pcap (4.93 KB)
--
https://bugs.ruby-lang.org/
^ permalink raw reply [flat|nested] 4+ messages in thread
* [ruby-core:76228] [Ruby trunk Bug#11739][Closed] OpenSSL::SSL::SSLServer doesn't negotiate ECDHE-* ciphersuites
[not found] <redmine.issue-11739.20151125063933@ruby-lang.org>
2015-11-25 6:39 ` [ruby-core:71678] [Ruby trunk - Bug #11739] [Open] OpenSSL::SSL::SSLServer doesn't negotiate ECDHE-* ciphersuites weeks
2015-12-07 7:33 ` [ruby-core:71887] [Ruby trunk - Bug #11739] " ko1
@ 2016-07-02 7:41 ` k
2016-08-04 7:25 ` [ruby-core:76711] [Ruby trunk Bug#11739][Rejected] " usa
3 siblings, 0 replies; 4+ messages in thread
From: k @ 2016-07-02 7:41 UTC (permalink / raw)
To: ruby-core
Issue #11739 has been updated by Kazuki Yamaguchi.
Status changed from Open to Closed
ext/openssl didn't support ephemeral ECDH in server mode up until Ruby 2.3 (Feature #11356).
----------------------------------------
Bug #11739: OpenSSL::SSL::SSLServer doesn't negotiate ECDHE-* ciphersuites
https://bugs.ruby-lang.org/issues/11739#change-59460
* Author: Branodn Weeks
* Status: Closed
* Priority: Normal
* Assignee: openssl
* ruby -v:
* Backport: 2.0.0: UNKNOWN, 2.1: UNKNOWN, 2.2: UNKNOWN
----------------------------------------
I'm trying to configure an instance of OpenSSL::SSL::SSLServer that supports Elliptic curve Diffie–Hellman. No matter what combination of Ruby and OpenSSL versions I try the negotiation with the client fails.
Proof of concept:
https://gist.github.com/brandonweeks/e26414cc1e9eea9453a8
Then run:
>openssl s_client -connect localhost:8443
Also attaching a pcap file of the failed handshake.
---Files--------------------------------
tls_handshake.pcap (4.93 KB)
--
https://bugs.ruby-lang.org/
^ permalink raw reply [flat|nested] 4+ messages in thread
* [ruby-core:76711] [Ruby trunk Bug#11739][Rejected] OpenSSL::SSL::SSLServer doesn't negotiate ECDHE-* ciphersuites
[not found] <redmine.issue-11739.20151125063933@ruby-lang.org>
` (2 preceding siblings ...)
2016-07-02 7:41 ` [ruby-core:76228] [Ruby trunk Bug#11739][Closed] " k
@ 2016-08-04 7:25 ` usa
3 siblings, 0 replies; 4+ messages in thread
From: usa @ 2016-08-04 7:25 UTC (permalink / raw)
To: ruby-core
Issue #11739 has been updated by Usaku NAKAMURA.
Status changed from Closed to Rejected
----------------------------------------
Bug #11739: OpenSSL::SSL::SSLServer doesn't negotiate ECDHE-* ciphersuites
https://bugs.ruby-lang.org/issues/11739#change-59932
* Author: Branodn Weeks
* Status: Rejected
* Priority: Normal
* Assignee: openssl
* ruby -v:
* Backport: 2.0.0: UNKNOWN, 2.1: UNKNOWN, 2.2: UNKNOWN
----------------------------------------
I'm trying to configure an instance of OpenSSL::SSL::SSLServer that supports Elliptic curve Diffie–Hellman. No matter what combination of Ruby and OpenSSL versions I try the negotiation with the client fails.
Proof of concept:
https://gist.github.com/brandonweeks/e26414cc1e9eea9453a8
Then run:
>openssl s_client -connect localhost:8443
Also attaching a pcap file of the failed handshake.
---Files--------------------------------
tls_handshake.pcap (4.93 KB)
--
https://bugs.ruby-lang.org/
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2016-08-04 6:52 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
[not found] <redmine.issue-11739.20151125063933@ruby-lang.org>
2015-11-25 6:39 ` [ruby-core:71678] [Ruby trunk - Bug #11739] [Open] OpenSSL::SSL::SSLServer doesn't negotiate ECDHE-* ciphersuites weeks
2015-12-07 7:33 ` [ruby-core:71887] [Ruby trunk - Bug #11739] " ko1
2016-07-02 7:41 ` [ruby-core:76228] [Ruby trunk Bug#11739][Closed] " k
2016-08-04 7:25 ` [ruby-core:76711] [Ruby trunk Bug#11739][Rejected] " usa
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).