Skip to content

Commit 8fcb1d0

Browse files
hsbtclaude
andauthored
Drop legacy prime-generation callback in setup_certificate (#48)
The `BN_GENCB` block only printed progress dots in verbose mode, but it re-enters Ruby from inside OpenSSL's keygen. Under ZJIT that re-entry intermittently aborts generation with `EVP_PKEY_keygen`. The callback form is obsolete in OpenSSL 3.x, so just generate the key without it. Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
1 parent af4ff53 commit 8fcb1d0

1 file changed

Lines changed: 1 addition & 13 deletions

File tree

lib/drb/ssl.rb

Lines changed: 1 addition & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -170,19 +170,7 @@ def setup_certificate
170170
return
171171
end
172172

173-
rsa = OpenSSL::PKey::RSA.new(2048){|p, n|
174-
next unless self[:verbose]
175-
case p
176-
when 0; $stderr.putc "." # BN_generate_prime
177-
when 1; $stderr.putc "+" # BN_generate_prime
178-
when 2; $stderr.putc "*" # searching good prime,
179-
# n = #of try,
180-
# but also data from BN_generate_prime
181-
when 3; $stderr.putc "\n" # found good prime, n==0 - p, n==1 - q,
182-
# but also data from BN_generate_prime
183-
else; $stderr.putc "*" # BN_generate_prime
184-
end
185-
}
173+
rsa = OpenSSL::PKey::RSA.new(2048)
186174

187175
cert = OpenSSL::X509::Certificate.new
188176
cert.version = 2 # This means v3

0 commit comments

Comments
 (0)