Skip to content

0.9.12

Compare
Choose a tag to compare
@mkristian mkristian released this 08 Oct 19:18
· 757 commits to master since this release
  • when the Cipher/Signature needs to be created via java reflection use a constructor
    which avoids verifying the bouncy-castle jars (which is the main reason for using
    reflection since some classloader setups fails to verify those jars) (#73)
  • force US locale for date formatting
    otherwise it uses system locale, which is inconsistent with MRI.
  • X509::Store.set_default_paths ignores FileNotFound errors like MRI does (#68)
  • check type on X509::Store.verify
    throw a TypeError if the argument is not a OpenSSL::X509::Certificate (#69)
  • keep the default x509 certs and directories in line with MRI, only if
    they do not exists fallback on cacerts from the java.home/lib/security/cacerts
  • bring the default ca-certs paths/location more in line with MRI and fallback on
    jvm truststore (java.home/lib/security/cacerts) when needed