Upgrading Bouncy Castle to version 1.83
Extensive PKey compatibility improvements (EC, RSA, DSA)
X.509 certificate handling and ASN.1 tagged improvements.
- [fix] parse certificate crlDistributionPoints (#205)
- [fix]
OpenSSL::Cipher#iv_lenfor ECB (#169) - [compat] implement
OpenSSL::PKey#compare? - [fix] fallback to raw bytes on unknown tag
- [compat] implement
OpenSSL::KDF.hkdf(#321) - [fix]
OpenSSL::X509::Request#dupbehavior - [compat] implement
X509::Certificate#== - [compat] add
OpenSSL::X509::Certificate#tbs_bytes - [compat] implement X.509 extension value_der
- [fix] handle
PKey::EC.newwith encrypted PEM (#328) - [compat] add
PKey::EC#deriveand fix nil group (#257, #326) - [compat] support
PKey::EC#sign_rawand verify_raw - [compat] implement
EC::Group#to_der+ related bits - [compat] support
PKey::RSA#sign_pssandverify_pss(#288) - [compat] support
PKey::RSA#sign_rawandverify_raw(#332) - [compat] support
PKey::DSA#sign_rawandverify_raw - [compat] improve DSA key parsing and errors
- [fix]
PKey.readto parse subject PKI - [compat] implement
RSA#private_to_der/private_to_pem - [compat] improve ASN.1 tagging behavior
- [compat] improve
PKey::EC(raise) behavior - [fix] do setup on frozen ssl context (#340)
- [compat] sync up ssl.rb with upstream
- [fix] compat with JRuby 10
initialize_copychanges - [deps] upgrade BC to version 1.83