Skip to content

Instantly share code, notes, and snippets.

@rtyler

rtyler/squished.md

Last active August 29, 2015 14:13
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save rtyler/d3c8c0690a98a4f4cbe6 to your computer and use it in GitHub Desktop.
Save rtyler/d3c8c0690a98a4f4cbe6 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
squished.md

JRuby SSL Hit List

Lookout looking at currently:

  • #1331 - 'bad_record_mac' when uploading things through SSL under particular conditions
  • Might be related to #1080 - Bundling gems constantly fails

Of interest/at large

  • #1737 - JRuby does not support all SSL/TLS versions supported by Java (aka #1874)
  • #1738 - JRuby does not support SSL ciphers offered by newer Java releases (7 and 8)
  • No reproduction case, but Lookout has seen performance issues with encrypting, decrypting and signing of AES-256 payloads which do not yet have a issue and repro case
  • #2195 - OpenSSL::SSL::SSLSocket + IO::select hangs sometimes
  • #2194 - OpenSSL ciphers with Mozilla's "Modern" set are... limited
@jordansissel
Copy link

In truth, my best hope is to abandon the OpenSSL API in Ruby, but I doubt that will ever happen. The krypt project seems abandoned. :(

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment