[ruby/openssl] ssl: fix test_pqc_sigalg on RHEL 9.7

RHEL 9.7 ships OpenSSL 3.5.1 with ML-DSA support, but it is disabled
for TLS by default, according to the system configuration file:
/etc/crypto-policies/back-ends/opensslcnf.config

Specify SSLContext#sigalgs to override the default list.

https://github.com/ruby/openssl/commit/fac3a26748
This commit is contained in:
Kazuki Yamaguchi 2025-11-18 21:18:26 +09:00 committed by git
parent f168a6d0c2
commit 522b7d823f

View File

@ -2084,6 +2084,7 @@ class OpenSSL::TestSSL < OpenSSL::SSLTestCase
ctx_proc = -> ctx {
# Unset values set by start_server
ctx.cert = ctx.key = ctx.extra_chain_cert = nil
ctx.sigalgs = "rsa_pss_rsae_sha256:mldsa65"
ctx.add_certificate(mldsa_cert, mldsa)
ctx.add_certificate(rsa_cert, rsa)
}