Commits on Jun 26, 2021

1. Add ssl_security_level support …

   This change adds an :ssl_security_level option to change the security
   level of the SSLContext before Excon uses it to create an SSLSocket.
   
   OpenSSL 1.1.0 introduced security levels, where increasingly large
   security levels forbid increasingly strong cryptographic algorithms and
   parameters.  Security level 0 forbids nothing (the default behavior in
   previous versions of OpenSSL), and security level 5 allows only very
   strong algorithms and very long key lengths.
   
   Every OpenSSL library now has a default security level compiled into it,
   and programs may need to change the security level from its default.
   
   Changing an OpenSSL::SSL::SSLContext's security level requires Ruby
   2.4.0+ or version 2.0.0+ of the openssl gem. See the following for more
   information:
   
   - https://ruby-doc.org/stdlib-2.4.0/libdoc/openssl/rdoc/OpenSSL/SSL/SSLContext.html#method-i-security_level-3D
   - https://www.openssl.org/docs/man1.1.0/man3/SSL_CTX_set_security_level.html

   

   rwg-stripe committed Jun 26, 2021
   Copy the full SHA

   035260b View commit details

   Browse the repository at this point in the history