On Tue, Oct 12, 2010 at 02:09:45PM +0400, Alexey I. Froloff wrote: > > 1) Error: > > test_client_auth(OpenSSL::TestSSL): > > OpenSSL::SSL::SSLError: SSL_read:: sslv3 alert bad record mac > > 1) Error: > > test_eof_0(OpenSSL::TestEOF2): > > OpenSSL::SSL::SSLError: SSL_read:: internal error > Как это лечить? Сам же и отвечу: * ext/openssl/ossl_asn1.c (obj_to_asn1bool): fixed ASN1::Boolean encoding issue for OpenSSL 1.0.0 compatibility. ASN1::Boolean.new(false).to_der wrongly generated "\1\1\377" which means 'true'. ASN1_TYPE_set of OpenSSL <= 0.9.8 treats value 0x100 as 'false' but OpenSSL >= 1.0.0 treats it as 'true'. ruby-ossl was using 0x100 for 'false' for backward compatibility. Just use 0x0 for the case OpenSSL >= OpenSSL 0.9.7. -- Regards, -- Sir Raorn. --- http://thousandsofhate.blogspot.com/