Kazuki Yamaguchi f272b3e281 [ruby/openssl] ssl: fix NoMethodError on SAN dNSName with an empty label ...

Handle the empty label as a literal string.

OpenSSL::SSL::SSLSocket#post_connection_check can raise NoMethodError
when the server certificate contains a malformed subjectAltName
extension with a dNSName that starts with ".", such as ".example.com".

Reported by 4l1ve on HackerOne.

https://github.com/ruby/openssl/commit/1fb29e7ef5

2026-10-24 09:23:48 +00:00

..

lib

[ruby/openssl] ssl: fix NoMethodError on SAN dNSName with an empty label

2026-10-24 09:23:48 +00:00

depend

[Misc #22206] Generate dependencies without compiler builds

2026-07-23 00:04:47 +09:00

extconf.rb

[ruby/openssl] pkey: add OpenSSL::PKey::PKey#get_param

2026-07-10 11:25:43 +00:00

History.md

[ruby/openssl] Merge branch 'maint-4.0'

2026-05-13 15:33:24 +00:00

openssl_missing.h

[ruby/openssl] asn1: use new ASN1_BIT_STRING accessor functions with OpenSSL 4.0

2026-03-31 15:14:53 +00:00

openssl.gemspec

[ruby/openssl] Remove version constraint for jruby-openssl

2026-06-22 17:42:39 +00:00

ossl_asn1.c

[ruby/openssl] Use rb_len_t for String lengths and Array indices, part 2

2026-10-11 05:09:37 +00:00

ossl_asn1.h

[ruby/openssl] asn1: refactor converting ASN1_OBJECT to string

2025-11-22 16:48:13 +00:00

ossl_bio.c

[ruby/openssl] Fix missing error check on BIO_get_mem_ptr()

2026-02-26 11:35:50 +00:00

ossl_bio.h

[ruby/openssl] Fix references to the license text

2024-06-08 10:59:17 +00:00

ossl_bn.c

[ruby/openssl] Use rb_len_t for String lengths and Array indices, part 2

2026-10-11 05:09:37 +00:00

ossl_bn.h

[ruby/openssl] Mark variables and functions as static whenever possible

2024-12-07 07:55:47 +00:00

ossl_cipher.c

[ruby/openssl] Use rb_len_t for String lengths and Array indices, part 2

2026-10-11 05:09:37 +00:00

ossl_cipher.h

[ruby/openssl] cipher: use EVP_CIPHER_fetch() if available

2025-11-06 13:25:09 +00:00

ossl_config.c

[ruby/openssl] Use rb_len_t for String lengths and Array indices, part 2

2026-10-11 05:09:37 +00:00

ossl_config.h

[ruby/openssl] Fix references to the license text

2024-06-08 10:59:17 +00:00

ossl_digest.c

[ruby/openssl] Make ruby/openssl types RUBY_TYPED_THREAD_SAFE_FREE

2026-09-21 13:55:24 +00:00

ossl_digest.h

[ruby/openssl] digest: use EVP_MD_fetch() if available

2025-11-06 13:25:09 +00:00

ossl_engine.c

[ruby/openssl] Make ruby/openssl types RUBY_TYPED_THREAD_SAFE_FREE

2026-09-21 13:55:24 +00:00

ossl_engine.h

[ruby/openssl] Mark variables and functions as static whenever possible

2024-12-07 07:55:47 +00:00

ossl_hmac.c

Use rb_len_t for String lengths and Array indices in openssl

2026-10-11 08:10:53 +09:00

ossl_hmac.h

[ruby/openssl] Mark variables and functions as static whenever possible

2024-12-07 07:55:47 +00:00

ossl_hpke.c

[ruby/openssl] Make ruby/openssl types RUBY_TYPED_THREAD_SAFE_FREE

2026-09-21 13:55:24 +00:00

ossl_hpke.h

[ruby/openssl] Add Hybrid Public Key Encryption (HPKE) API Support

2026-06-21 11:59:34 +00:00

ossl_kdf.c

[ruby/openssl] Use rb_len_t for String lengths and Array indices, part 2

2026-10-11 05:09:37 +00:00

ossl_kdf.h

openssl: import v2.1.0.beta1

2017-09-03 12:35:27 +00:00

ossl_ns_spki.c

[ruby/openssl] Use rb_len_t for String lengths and Array indices, part 2

2026-10-11 05:09:37 +00:00

ossl_ns_spki.h

[ruby/openssl] Mark variables and functions as static whenever possible

2024-12-07 07:55:47 +00:00

ossl_ocsp.c

[ruby/openssl] Use rb_len_t for String lengths and Array indices, part 2

2026-10-11 05:09:37 +00:00

ossl_ocsp.h

[ruby/openssl] Mark variables and functions as static whenever possible

2024-12-07 07:55:47 +00:00

ossl_pkcs7.c

[ruby/openssl] Make ruby/openssl types RUBY_TYPED_THREAD_SAFE_FREE

2026-09-21 13:55:24 +00:00

ossl_pkcs7.h

[ruby/openssl] ts: avoid using OpenSSL::PKCS7's internals

2024-12-07 07:55:46 +00:00

ossl_pkcs12.c

[ruby/openssl] Make ruby/openssl types RUBY_TYPED_THREAD_SAFE_FREE

2026-09-21 13:55:24 +00:00

ossl_pkcs12.h

[ruby/openssl] Mark variables and functions as static whenever possible

2024-12-07 07:55:47 +00:00

ossl_pkey_dh.c

[ruby/openssl] pkey, ssl, cipher, hpke: use ossl_want_uninitialized()

2026-07-05 17:49:14 +00:00

ossl_pkey_dsa.c

[ruby/openssl] pkey, ssl, cipher, hpke: use ossl_want_uninitialized()

2026-07-05 17:49:14 +00:00

ossl_pkey_ec.c

Use rb_len_t for String lengths and Array indices in openssl

2026-10-11 08:10:53 +09:00

ossl_pkey_rsa.c

Use rb_len_t for String lengths and Array indices in openssl

2026-10-11 08:10:53 +09:00

ossl_pkey.c

[ruby/openssl] Use rb_len_t for String lengths and Array indices, part 2

2026-10-11 05:09:37 +00:00

ossl_pkey.h

[ruby/openssl] pkey: remove unnecessary prototype from ossl_pkey.h

2026-03-31 15:14:53 +00:00

ossl_provider.c

[ruby/openssl] Make ruby/openssl types RUBY_TYPED_THREAD_SAFE_FREE

2026-09-21 13:55:24 +00:00

ossl_provider.h

[ruby/openssl] add OpenSSL Provider support

2023-06-19 17:45:51 +09:00

ossl_rand.c

[ruby/openssl] rand: fix error check of RAND_load_file()

2026-08-05 17:30:44 +00:00

ossl_rand.h

[ruby/openssl] Mark variables and functions as static whenever possible

2024-12-07 07:55:47 +00:00

ossl_ssl_session.c

[ruby/openssl] Make ruby/openssl types RUBY_TYPED_THREAD_SAFE_FREE

2026-09-21 13:55:24 +00:00

ossl_ssl.c

[ruby/openssl] ssl: raise ArgumentError for a negative length in SSLSocket

2026-10-16 17:31:04 +00:00

ossl_ssl.h

[ruby/openssl] Expand tabs in C source files

2025-12-04 17:46:59 +00:00

ossl_ts.c

Use rb_len_t for String lengths and Array indices in openssl

2026-10-11 08:10:53 +09:00

ossl_ts.h

[ruby/openssl] Fix references to the license text

2024-06-08 10:59:17 +00:00

ossl_x509.c

[ruby/openssl] Freeze more constants for Ractor compatibility

2025-12-15 09:09:49 +00:00

ossl_x509.h

[ruby/openssl] Add const qualifiers for OpenSSL 4.0 compatibility

2026-03-31 15:14:53 +00:00

ossl_x509attr.c

[ruby/openssl] Use rb_len_t for String lengths and Array indices, part 2

2026-10-11 05:09:37 +00:00

ossl_x509cert.c

Use rb_len_t for String lengths and Array indices in openssl

2026-10-11 08:10:53 +09:00

ossl_x509crl.c

Use rb_len_t for String lengths and Array indices in openssl

2026-10-11 08:10:53 +09:00

ossl_x509ext.c

[ruby/openssl] Use rb_len_t for String lengths and Array indices, part 2

2026-10-11 05:09:37 +00:00

ossl_x509name.c

[ruby/openssl] Use rb_len_t for String lengths and Array indices, part 2

2026-10-11 05:09:37 +00:00

ossl_x509req.c

Use rb_len_t for String lengths and Array indices in openssl

2026-10-11 08:10:53 +09:00

ossl_x509revoked.c

Use rb_len_t for String lengths and Array indices in openssl

2026-10-11 08:10:53 +09:00

ossl_x509store.c

[ruby/openssl] Make ruby/openssl types RUBY_TYPED_THREAD_SAFE_FREE

2026-09-21 13:55:24 +00:00

ossl.c

[ruby/openssl] Use rb_len_t for String lengths and Array indices, part 2

2026-10-11 05:09:37 +00:00

ossl.h

[ruby/openssl] Use rb_len_t for String lengths and Array indices, part 2

2026-10-11 05:09:37 +00:00