From 97be4de53a43113c24e7bcbac6546f12b5c4bb7a Mon Sep 17 00:00:00 2001 From: Jeremy Evans Date: Mon, 16 Oct 2023 12:58:55 -0700 Subject: [PATCH] Force TLS version to 1.2 when using LibreSSL This comment previously specified TLS 1.2, but actually set the version to TLS 1.0. LibreSSL 3.8.1 (included in OpenBSD 7.4) dropped support for TLS 1.0/1.1 for security reasons, which broke this test. Switch the test to use TLS 1.2 as documented so it will continue to work on OpenBSD 7.4+. --- test/net/http/test_https.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/test/net/http/test_https.rb b/test/net/http/test_https.rb index 72a69af1..2fb895a8 100644 --- a/test/net/http/test_https.rb +++ b/test/net/http/test_https.rb @@ -148,7 +148,7 @@ def test_session_reuse # support session resuse. Limiting the version to the TLSv1.2 stack allows # this test to continue to work on LibreSSL 3.2+. LibreSSL may eventually # support session reuse, but there are no current plans to do so. - http.ssl_version = :TLSv1 + http.ssl_version = :TLSv1_2 end http.start