JRuby-OpenSSL

JRuby-OpenSSL is an add-on gem for JRuby that emulates the Ruby OpenSSL native library.

Under the hood uses the Bouncy Castle Crypto APIs.

Each jruby-openssl gem release includes a certain version, usually the latest available, of the library (namely BC Provider and PKIX/CMS/EAC/PKCS/OCSP/TSP/OPENSSL jars).

Please report bugs and incompatibilities (preferably with test-cases) to either the JRuby mailing list or the bug tracker.

Compatibility

JRuby-OpenSSL	JRuby compat	JVM compat	supported BC
0.9.6	1.6.8-9.0.2	Java 6-8	1.47-1.50
0.9.12	1.6.8-9.0.5	Java 6-8	1.47-1.52
0.9.13	1.6.8-9.1.2	Java 6-8	1.49-1.52
0.9.14	1.6.8-9.1.5	Java 6-8	1.49-1.54
0.9.17	1.6.8-9.1.5	Java 6-8	1.50-1.54
~>0.9.18	1.6.8-9.1.x	Java 6-8	1.50-1.55
0.10.0	1.7.20-9.2.x	Java 7-10	1.55-1.59
0.10.3	1.7.20-9.2.x	Java 7-11	1.56-1.62
~>0.10.5	1.7.20-9.3.x	Java 7-11	1.60-1.68
~>0.11.x	9.0.x-9.3.x	Java 7-11	1.62-1.68
~>0.12.x	9.1.x-9.3.x	Java 8-15	1.65-1.68
~>0.13.x	9.1.x-9.4.x	Java 8-17	1.68-1.69
~>0.14.x	9.1.x-9.4.x	Java 8-21	1.71-1.74
~>0.15.x	9.2.x-9.4.x	Java 8-21	1.76-1.79

NOTE: backwards JRuby compatibility was not handled for versions <= 0.9.6

Security

JRuby-OpenSSL is an essential part of JRuby, please report security vulnerabilities to security@jruby.org as detailed on JRuby's security page or using GitHub.

Please note that most OpenSSL vulnerabilities do not effect JRuby since its not using any of OpenSSL's C code, only Ruby parts (*.rb) are the same as in MRI's OpenSSL library.

Testing

rake jar:all # creates pom.xml and generates jopenssl.jar under lib
mvn test

will run (junit as well as ruby) tests and a some ruby tests against the default jruby version. to pick a different JRuby version run

mvn test -Djruby.versions=9.2.8.0

for running integration-tests the gem will be first installed and then the same tests run for each possible bouncy-castle version (see listing), run with

mvn verify -P test-9.2.9.0,test-9.1.17.0

or pick a bouncy-castle version

mvn verify -P test-9.2.9.0 -Dbc.versions=1.60

NOTE: you can pick any jruby version which is on central or on ci.jruby

License

(c) 2009-2024 JRuby distributed under EPL 1.0/GPL 2.0/LGPL 2.1