From: zn@... Date: 2018-08-24T05:56:00+00:00 Subject: [ruby-core:88623] [Ruby trunk Feature#15009][Assigned] Add negotiated SSL protocol and cipher to Net::HTTP debug output Issue #15009 has been updated by znz (Kazuhiro NISHIYAMA). Status changed from Open to Assigned Assignee set to naruse (Yui NARUSE) ---------------------------------------- Feature #15009: Add negotiated SSL protocol and cipher to Net::HTTP debug output https://bugs.ruby-lang.org/issues/15009#change-73684 * Author: bdewater (Bart de Water) * Status: Assigned * Priority: Normal * Assignee: naruse (Yui NARUSE) * Target version: ---------------------------------------- This makes is easier to verify what Ruby has negotiated with the server. An example of why you'd want to double check; for credit card payment data the PCI DSS [mandates](https://blog.pcisecuritystandards.org/are-you-ready-for-30-june-2018-sayin-goodbye-to-ssl-early-tls) that TLS 1.1 or newer is used after June 30. Example output: ``` opening connection to stripe.com:443... opened starting SSL for stripe.com:443... SSL established, protocol: TLSv1.2, cipher: ECDHE-RSA-AES128-GCM-SHA256 ``` Patch: https://github.com/ruby/ruby/pull/1877/files -- https://bugs.ruby-lang.org/ Unsubscribe: