Releasing Ruby OpenSSL 4.0.0

[junaruga]

As we added some new features #894 to support post-quantum cryptography (PQC), I want to see the Ruby OpenSSL new version 3.4.0 is released.

What do you think? Is it too early to release the new version?

[rhenium]

It should be a major bump since we removed support for OpenSSL 1.0.2 in master.

I have a change with OpenSSL::PKey error classes I'd like to finish before cutting a release. I'll make a PR soon.

Other than that, I don't think there are any blockers.

[junaruga]

It should be a major bump since we removed support for OpenSSL 1.0.2 in master.

Ah, all right! That makes sense. I changed this issue ticket's title from "Releasing Ruby OpenSSL 3.4.0" to "Releasing Ruby OpenSSL 4.0.0".

I have a change with OpenSSL::PKey error classes I'd like to finish before cutting a release. I'll make a PR soon.

Other than that, I don't think there are any blockers.

All right! That's great to know that we can release the new version after the change with the OpenSSL::PKey error classes. Thank you!

[HoneyryderChuck]

@rhenium are you planning to release this and this as part of the major release bump?

[rhenium]

These aren't ready for merge. #736 (SSLSocket with non-IO object) doesn't handle errors properly (even if the current tests don't catch it) and I don't think I can finish it very soon. #777 (ASN1) is currently encoding only and I'd rather not have a mix of C and Ruby in a stable branch.

Since neither introduces incompatibilities, they won't need to wait for another major bump.

[junaruga]

I have a change with OpenSSL::PKey error classes I'd like to finish before cutting a release. I'll make a PR soon.

I assume that the change with OpenSSL::PKey error classes is #929.

There is a test failure #933 on the latest AWS-LC version right now.

[junaruga]

There is a test failure #933 on the latest AWS-LC version right now.

The test failure was fixed.

[junaruga]

Now the Ruby OpenSSL version is 4.0.0.pre on the master branch by the 64f4aae. 😃

[junaruga]

@rhenium Do you have any other features and fixes that you want to ship in the Ruby OpenSSL 4.0.0?