jruby / jruby-openssl

JRuby's OpenSSL gem
http://www.jruby.org
Other
47 stars 80 forks source link
cryptography jruby jruby-openssl openssl ssl tls

JRuby-OpenSSL

JRuby-OpenSSL is an add-on gem for JRuby that emulates the Ruby OpenSSL native library.

Under the hood uses the Bouncy Castle Crypto APIs.

Each jruby-openssl gem release includes a certain version, usually the latest available, of the library (namely BC Provider and PKIX/CMS/EAC/PKCS/OCSP/TSP/OPENSSL jars).

Please report bugs and incompatibilities (preferably with test-cases) to either the JRuby mailing list or the bug tracker.

Compatibility

JRuby-OpenSSL JRuby compat JVM compat supported BC
0.9.6 1.6.8-9.0.2 Java 6-8 1.47-1.50
0.9.12 1.6.8-9.0.5 Java 6-8 1.47-1.52
0.9.13 1.6.8-9.1.2 Java 6-8 1.49-1.52
0.9.14 1.6.8-9.1.5 Java 6-8 1.49-1.54
0.9.17 1.6.8-9.1.5 Java 6-8 1.50-1.54
~>0.9.18 1.6.8-9.1.x Java 6-8 1.50-1.55
0.10.0 1.7.20-9.2.x Java 7-10 1.55-1.59
0.10.3 1.7.20-9.2.x Java 7-11 1.56-1.62
~>0.10.5 1.7.20-9.3.x Java 7-11 1.60-1.68
~>0.11.x 9.0.x-9.3.x Java 7-11 1.62-1.68
~>0.12.x 9.1.x-9.3.x Java 8-15 1.65-1.68
~>0.13.x 9.1.x-9.4.x Java 8-17 1.68-1.69
~>0.14.x 9.1.x-9.4.x Java 8-21 1.71-1.74
~>0.15.x 9.2.x-9.4.x Java 8-21 1.76-1.78

NOTE: backwards JRuby compatibility was not handled for versions <= 0.9.6

Security

JRuby-OpenSSL is an essential part of JRuby, please report security vulnerabilities to security@jruby.org as detailed on JRuby's security page or using GitHub.

Please note that most OpenSSL vulnerabilities do not effect JRuby since its not using any of OpenSSL's C code, only Ruby parts (*.rb) are the same as in MRI's OpenSSL library.

Testing

Build Status

rake jar:all # creates pom.xml and generates jopenssl.jar under lib
mvn test

will run (junit as well as ruby) tests and a some ruby tests against the default jruby version. to pick a different JRuby version run

mvn test -Djruby.versions=9.2.8.0

for running integration-tests the gem will be first installed and then the same tests run for each possible bouncy-castle version (see listing), run with

mvn verify -P test-9.2.9.0,test-9.1.17.0

or pick a bouncy-castle version

mvn verify -P test-9.2.9.0 -Dbc.versions=1.60

NOTE: you can pick any jruby version which is on central or on ci.jruby

License

(c) 2009-2024 JRuby distributed under EPL 1.0/GPL 2.0/LGPL 2.1