Please extend cipher key sizes. #215
Description
Sooner then later, Fedora will enforce stronger crypto policies. These policies can be already enforced by update-crypto-policies --set NEXT. With this settings, the test suite produces ~100 errors, such as:
101) Error:
OpenSSL::TestSSL#test_servername_cb_raises_an_exception_on_unknown_objects:
OpenSSL::SSL::SSLError: SSL_CTX_use_certificate: ee key too small
/builddir/build/BUILD/ruby-2.5.1/test/openssl/test_ssl.rb:766:in `initialize'
/builddir/build/BUILD/ruby-2.5.1/test/openssl/test_ssl.rb:766:in `new'
/builddir/build/BUILD/ruby-2.5.1/test/openssl/test_ssl.rb:766:in `test_servername_cb_raises_an_exception_on_unknown_objects'
It would be really nice if:
- Ruby OpenSSL is prepared for these changes sooner then these settings are applied (the original schedule was for F29 already [1], [2]).
- The change could be done on one place or not at all, e.g. to go with something like:
$ export OPENSSL_SYSTEM_CIPHERS_OVERRIDE=xyz_nonexistent_file
$ export OPENSSL_CONF=''