--- /dev/null
+puma (4.3.1-1)
+
+ Several tests have been disabled by default:
+
+ - test/test_puma_server_ssl.rb has been disabled because all tests fail
+ randomly. However these tests have never been performed in puma 3.x and
+ they also work randomly. So until someone can look into them and fix them,
+ we decided to not run them (see also #921931).
+
+ - test_control_for_ssl (test/test_cli.rb) and
+ test_control_ssl (test/test_pumactl.rb) show similar issues and don't seem
+ to imply that the package fails to work. So they have been disabled too.
+
+ -- Daniel Leidert <dleidert@debian.org> Wed, 05 Feb 2020 23:51:51 +0100
--- /dev/null
+puma (5.6.5-3+deb12u2) bookworm-security; urgency=high
+
+ * Non-maintainer upload by the Debian LTS Team.
+ * Fix CVE-2026-47736, CVE-2026-47737.
+ * Refresh ssl certs for the tests
+
+ -- Abhijith PA <abhijith@debian.org> Mon, 05 Oct 2026 10:10:12 +0530
+
+puma (5.6.5-3+deb12u1) bookworm; urgency=medium
+
+ * Team upload
+ * d/patches/
+ + CVE-2023-40175.patch: Fix CVE-2023-40175, incorrect behavior when
+ parsing chunked transfer encoding bodies and zero-length
+ Content-Length headers in a way that allowed HTTP request
+ smuggling. (Closes: #1050079)
+
+ + CVE-2024-21647.patch: Fix CVE-2024-21647 by limiting the size of
+ chunk extensions. (Closes: #1060345)
+
+ + CVE-2024-45614.patch: Fix CVE-2024-45614, clients could clobber
+ values set by intermediate proxies (such as X-Forwarded-For) by
+ providing a underscore version of the same header.
+ (Closes: #1082379)
+
+ -- Abhijith PA <abhijith@debian.org> Wed, 29 Jan 2025 07:26:33 +0530
+
+puma (5.6.5-3) unstable; urgency=medium
+
+ * Team upload.
+ * d/control (Vcs-Git): Fix URL.
+
+ -- Daniel Leidert <dleidert@debian.org> Thu, 09 Feb 2023 16:24:05 +0100
+
+puma (5.6.5-2) unstable; urgency=medium
+
+ * debian/ruby-tests.rake: skip test that fails often (Closes: #1006022)
+ * debian/ruby-tests.rake: exclude tests that fail often but not always
+
+ -- Antonio Terceiro <terceiro@debian.org> Wed, 02 Nov 2022 09:26:37 -0300
+
+puma (5.6.5-1) unstable; urgency=medium
+
+ * Update watch file for github.com pattern change
+ * New upstream version 5.6.5
+ * Refresh patches
+ * Bump Standards-Version to 4.6.1 (no changes needed)
+
+ -- Pirate Praveen <praveen@debian.org> Sun, 16 Oct 2022 22:44:46 +0530
+
+puma (5.6.4-1) unstable; urgency=medium
+
+ * New upstream version 5.6.4
+ * Refresh patches
+ * Disable some tests that fail with
+ NameError: uninitialized constant Puma::LogWriter
+ * Remove tmp/restart.txt in clean
+
+ -- Pirate Praveen <praveen@debian.org> Mon, 04 Apr 2022 13:24:10 +0530
+
+puma (5.5.2-2) unstable; urgency=medium
+
+ * Team upload
+ * debian/rules: force an UTF-8 locale
+ * debian/ruby-tests.rake: wrap lines
+ * debian/ruby-tests.rake: run all ssl tests on autopkgtest only
+ * debian/test/control: give ssl test a name
+
+ -- Antonio Terceiro <terceiro@debian.org> Tue, 02 Nov 2021 16:35:12 -0300
+
+puma (5.5.2-1) unstable; urgency=medium
+
+ * Team upload
+ * New upstream version 5.5.2
+ - Builds and tests fine again (Closes: #998295)
+ * Add build-dependency on ruby-localhost
+ * debian/rules: exclude several unnecessary files from installation
+
+ -- Antonio Terceiro <terceiro@debian.org> Tue, 02 Nov 2021 14:39:10 -0300
+
+puma (5.3.2-3) unstable; urgency=medium
+
+ * Use --gem-install layout option of dh-ruby
+
+ -- Pirate Praveen <praveen@debian.org> Tue, 12 Oct 2021 02:24:33 +0530
+
+puma (5.3.2-2) unstable; urgency=medium
+
+ * Reupload to unstable
+ * Bump Standards-Version to 4.6.0 (no changes needed)
+ * Bump debhelper compatibility level to 13
+
+ -- Pirate Praveen <praveen@debian.org> Mon, 11 Oct 2021 03:17:23 +0530
+
+puma (5.3.2-1) experimental; urgency=medium
+
+ * New upstream version 5.3.2 (Closes: #989054) (Fixes: CVE-2021-29509)
+ * Refresh patches
+
+ -- Pirate Praveen <praveen@debian.org> Fri, 28 May 2021 22:34:53 +0530
+
+puma (4.3.8-1) unstable; urgency=medium
+
+ * New upstream version 4.3.8 (Closes: #989054) (Fixes: CVE-2021-29509)
+
+ -- Pirate Praveen <praveen@debian.org> Wed, 26 May 2021 10:24:19 +0530
+
+puma (5.2.2-2) experimental; urgency=medium
+
+ * Disable test that failied on amd64 buildd
+
+ -- Pirate Praveen <praveen@debian.org> Mon, 08 Mar 2021 23:03:52 +0530
+
+puma (5.2.2-1) experimental; urgency=medium
+
+ * New upstream version 5.2.2
+ * Bump Standards-Version to 4.5.1 (no changes needed)
+ * Refresh patches for new upstream release
+ * Add ruby-minitest-stub-const as build dependency
+ * Disable failing tests
+
+ -- Pirate Praveen <praveen@debian.org> Sun, 07 Mar 2021 21:03:52 +0530
+
+puma (4.3.6-1) unstable; urgency=medium
+
+ * Team upload.
+ * New upstream version.
+ - Fixes CVE-2020-11076 and CVE-2020-11077 (closes: #972102).
+ * d/copyright: Minor update.
+ * d/puma.lintian-overrides: Add package override.
+ * d/ruby-tests.rake: Add logic to run SSL test.
+ * d/patches/*.patch: Add missing headers and refresh.
+ * d/source/lintian-overrides: Add source override.
+ * d/tests/control: Set environment variable to run the SSL tests separately
+ (similar to the solution used in the jekyll package).
+ * d/tests/test-puma-server-ssl*: Removed.
+
+ -- Daniel Leidert <dleidert@debian.org> Thu, 15 Oct 2020 20:57:29 +0200
+
+puma (4.3.3-3) unstable; urgency=medium
+
+ * Include patch from gitlab to improve performance
+
+ -- Pirate Praveen <praveen@debian.org> Tue, 18 Aug 2020 00:15:20 +0530
+
+puma (4.3.3-2) unstable; urgency=medium
+
+ [ Daniel Leidert ]
+ * debian/tests/test_puma_server_ssl,
+ debian/tests/test_puma_server_ssl.rake: Run test/test_puma_server_ssl.rb
+ in an openssl enviroment not using the Debian defaults.
+ * debian/tests/control: Add new test.
+
+ [ Debian Janitor ]
+ * Set field Upstream-Contact in debian/copyright.
+ * Remove obsolete fields Contact, Name from debian/upstream/metadata
+ (already present in machine-readable debian/copyright).
+
+ [ Pirate Praveen ]
+ * Remove debian-branch option from debian/gbp.conf
+ * Reupload to unstable
+
+ -- Pirate Praveen <praveen@debian.org> Mon, 03 Aug 2020 15:37:16 +0530
+
+puma (4.3.3-1) experimental; urgency=medium
+
+ * Team upload.
+ * New upstream release.
+ - Fixes CVE-2020-5247 (closes: #952766).
+ - Fixes CVE-2020-5249 (closes: #953122).
+ * d/control (Section): Change to web.
+ (Vcs-Git): Indicate branch name via -b debian/experimental.
+ (Homepage): Use secure URL.
+ (Depends): Use ${ruby:Depends}.
+ * d/copyright (Source): Use secure URL.
+ * d/rules: Add override to install upstream changelog.
+ * d/watch: Use package name for tarball.
+
+ -- Daniel Leidert <dleidert@debian.org> Thu, 05 Mar 2020 01:34:17 +0100
+
+puma (4.3.1-1) experimental; urgency=medium
+
+ * Team upload.
+ * New upstream release
+ - Fixes CVE-2019-16770 Keepalive thread overload/DoS (closes: #946312).
+ * d/control (Rules-Requires-Root): Set to binary-targets.
+ (Build-Depends, Depends): Add ruby-nio4r.
+ (Build-Depends): Add curl for test/test_integration_single.rb.
+ * d/ruby-tests.rake: Disable test/test_puma_server_ssl.rb.
+ * d/README.source: Add to explain tests which have been disabled.
+ * d/patches/0004-puma.gemspec-drop-git-usage.patch: Refresh patch.
+ * d/patches/0011-disable-minitest-extensions.patch: Add patch.
+ - Disable unavailable minitest extensions (retry and proveit).
+ * d/patches/0012-disable-cli-ssl-tests.patch: Add patch.
+ - Disable CLI SSL tests.
+ * d/patches/0013-fix-test-term-not-accepts-new-connections.patch: Add.
+ - Fix test_term_not_accepts_new_connections to be locale independent.
+ * d/patches/0002-test_integration-disable-test-that-fails-randomly.patch,
+ d/patches/0003-test_cli-disable-test-that-rails-randomly.patch,
+ d/patches/0005-test_puma_server-disable-test-that-fails-randomly.patch,
+ d/patches/0006-test-helper.rb-drop-bundler-usage.patch,
+ d/patches/0007-test-test_cli.rb-disable-test-that-fails-randomly.patch,
+ d/patches/0008-fix-ssl-tests.patch,
+ d/patches/0009-disable-tests-failing-in-single-cpu.patch,
+ d/patches/0010-fix-cluster-exit-for-ruby27.patch: Remove obsolete patches.
+ * d/patches/series: Adjust.
+
+ -- Daniel Leidert <dleidert@debian.org> Thu, 06 Feb 2020 11:45:11 +0100
+
+puma (3.12.4-1) unstable; urgency=medium
+
+ * Team upload.
+ * New upstream release.
+ - Fixes CVE-2020-5247 (closes: #952766).
+ - Fixes CVE-2020-5249 (closes: #953122).
+ * d/control (Section): Changed to web.
+ (Homepage): Use secure URL.
+ (Depends): Add ${ruby:Depends}.
+ * d/copyright (Source): Use secure URL.
+ * d/ruby-tests.rake: Disable test/test_puma_server_ssl.rb for the moment.
+ These tests fail due to openssl being configured to use SECLEVEL2
+ (https://github.com/puma/puma/issues/2147).
+ * d/rules: Add override to install upstream changelog.
+ * d/watch: Rename downloaded tarball to include package name.
+ * d/patches/0008-fix-ssl-tests.patch: Remove patch. Applied upstream.
+ * d/patches/CVE-2019-16770.patch: Ditto.
+ * d/patches/*.patch: Refresh patches.
+ * d/patches/series: Adjust.
+
+ -- Daniel Leidert <dleidert@debian.org> Wed, 04 Mar 2020 23:09:16 +0100
+
+puma (3.12.0-4) unstable; urgency=medium
+
+ * Team upload.
+ * d/control (Rules-Requires-Root): Set to binary-targets.
+ * d/patches/0011-disable-minitest-extensions.patch: Add patch.
+ - Disable unavailable minitest retry extension.
+ * d/patches/CVE-2019-16770.patch: Add patch.
+ - Backport fix for CVE-2019-16770 from upstream (closes: #946312).
+ * d/patches/series: Add patch.
+
+ -- Daniel Leidert <dleidert@debian.org> Thu, 06 Feb 2020 12:54:59 +0100
+
+puma (3.12.0-3) unstable; urgency=medium
+
+ * Team upload.
+ * d/compat: Remove obsolete file.
+ * d/control: Add Rules-Requires-Root field.
+ (Build-Depends): Use debhelper-compat.
+ (Standards-Version): Bump to 4.5.0.
+ (Depends): Drop ruby-interpreter.
+ * d/copyright (Format): Fix insecure-copyright-format-uri and add myself.
+ * d/puma.1, d/pumactl.1: Add manual pages.
+ * d/puma.manpages: Install manual pages.
+ * d/ruby-tests.rake: Set verbose mode.
+ * d/patches/0010-fix-cluster-exit-for-ruby27.patch: Add patch.
+ - Fix hang with Ruby >= 2.6 when shutting down workers.
+ * d/patches/series: Enable new patch.
+ * d/upstream/metadata: Add metadata.
+ * d/upstream/metadata: Add metadata.
+
+ -- Daniel Leidert <dleidert@debian.org> Wed, 05 Feb 2020 18:20:58 +0100
+
+puma (3.12.0-2) unstable; urgency=medium
+
+ * Disable tests failing in single cpu (Closes: #921931)
+
+ -- Pirate Praveen <praveen@debian.org> Sun, 10 Feb 2019 18:56:47 +0530
+
+puma (3.12.0-1) unstable; urgency=medium
+
+ [ Balint Reczey ]
+ * New upstream version 3.12.0
+ * Refresh patches
+
+ [ Pirate Praveen ]
+ * Fix OpenSSL 1.1.1 test failures with upstream patch (Closes: #900156)
+ * Bump Standards-Version to 4.3.0 (no changes needed)
+ * Add myself to uploaders
+
+ -- Pirate Praveen <praveen@debian.org> Sun, 10 Feb 2019 10:56:59 +0530
+
+puma (3.11.3-1) unstable; urgency=medium
+
+ * Team upload
+ * Remove myself from Uploaders:
+ * New upstream version 3.11.3
+ * Build against libssl-dev instead of libssl1.0-dev (Closes: #859542)
+ * Refresh packaging files with `dh-make-ruby -wo .`
+ * Bump debhelper compat to 11
+ * Change Vcs-* to point to salsa.debian.org
+ * Use standard debian/ruby-tests.rake
+ * drop build-dependency on ruby-hoe
+ * Refresh patches
+ * New patches:
+ - 0006-test-helper.rb-drop-bundler-usage.patch
+ - 0007-test-test_cli.rb-disable-test-that-fails-randomly.patch
+ * Replace 0001-test_puma_server_ssl-update-for-newer-versions-of-Op.patch
+ with 0001-test_puma_server_ssl-disable-test-that-takes-too-lon.patch
+
+
+ -- Antonio Terceiro <terceiro@debian.org> Wed, 28 Mar 2018 18:53:22 -0300
+
+puma (3.6.0-1) unstable; urgency=medium
+
+ * Initial release (Closes: #720336)
+
+ -- Antonio Terceiro <terceiro@debian.org> Thu, 10 Nov 2016 16:47:06 -0200
--- /dev/null
+tmp/restart.txt
--- /dev/null
+Source: puma
+Section: web
+Priority: optional
+Maintainer: Debian Ruby Team <pkg-ruby-extras-maintainers@lists.alioth.debian.org>
+Uploaders: Pirate Praveen <praveen@debian.org>
+Build-Depends: curl,
+ debhelper-compat (= 13),
+ gem2deb (>= 1.6),
+ libssl-dev,
+ rake,
+ ruby-localhost,
+ ruby-nio4r (>= 2),
+ ruby-rack (<< 3),
+ ruby-minitest-stub-const
+Standards-Version: 4.6.1
+Vcs-Git: https://salsa.debian.org/ruby-team/puma.git
+Vcs-Browser: https://salsa.debian.org/ruby-team/puma
+Homepage: https://puma.io
+Testsuite: autopkgtest-pkg-ruby
+XS-Ruby-Versions: all
+Rules-Requires-Root: binary-targets
+
+Package: puma
+Architecture: any
+XB-Ruby-Versions: ${ruby:Versions}
+Depends: ruby, ${misc:Depends}, ${ruby:Depends}, ${shlibs:Depends}
+Description: threaded HTTP 1.1 server for Ruby/Rack applications
+ Puma is a simple, fast, threaded, and highly concurrent HTTP 1.1 server for
+ Ruby/Rack applications. Puma is intended for use in both development and
+ production environments.
--- /dev/null
+Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Upstream-Name: puma
+Upstream-Contact: https://github.com/puma/puma/issues
+Source: https://github.com/puma/puma
+
+Files: *
+Copyright: 2005, Zed Shaw
+ 2011, Evan Phoenix
+License: BSD-3-clause
+
+Files: debian/*
+Copyright: 2016 Antonio Terceiro <terceiro@debian.org>
+ 2020 Daniel Leidert <dleidert@debian.org>
+License: BSD-3-clause
+Comment: The Debian packaging is licensed under the same terms as the source.
+
+License: BSD-3-clause
+ All rights reserved.
+ .
+ Redistribution and use in source and binary forms, with or without
+ modification, are permitted provided that the following conditions are met:
+ .
+ * Redistributions of source code must retain the above copyright notice, this
+ list of conditions and the following disclaimer.
+ * Redistributions in binary form must reproduce the above copyright notice
+ this list of conditions and the following disclaimer in the documentation
+ and/or other materials provided with the distribution.
+ * Neither the name of the Evan Phoenix nor the names of its contributors
+ may be used to endorse or promote products derived from this software
+ without specific prior written permission.
+ .
+ THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+ AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE
+ FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+ CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+ OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
--- /dev/null
+[DEFAULT]
+pristine-tar = true
+verbose = true
--- /dev/null
+From: Antonio Terceiro <terceiro@softwarelivre.org>
+Date: Wed, 5 Feb 2020 21:36:05 +0100
+Subject: Drop git usage from gemspec
+
+Forwarded: not-needed
+---
+ puma.gemspec | 3 +--
+ 1 file changed, 1 insertion(+), 2 deletions(-)
+
+--- a/puma.gemspec
++++ b/puma.gemspec
+@@ -13,8 +13,7 @@
+ if RbConfig::CONFIG['ruby_version'] >= '2.5'
+ s.metadata["msys2_mingw_dependencies"] = "openssl"
+ end
+- s.files = `git ls-files -- bin docs ext lib tools`.split("\n") +
+- %w[History.md LICENSE README.md]
++ s.files = Dir.glob('**/*').reject { |f| f =~ /^debian\//}
+ s.homepage = "https://puma.io"
+
+ if s.respond_to?(:metadata=)
--- /dev/null
+From: Daniel Leidert <daniel.leidert@wgdd.de>
+Date: Wed, 5 Feb 2020 22:20:42 +0100
+Subject: Disable unavailable minitest extensions
+
+Forwarded: not-needed
+---
+ test/helper.rb | 8 ++++----
+ 1 file changed, 4 insertions(+), 4 deletions(-)
+
+--- a/test/helper.rb
++++ b/test/helper.rb
+@@ -14,7 +14,6 @@
+ require_relative "minitest/verbose"
+ require "minitest/autorun"
+ require "minitest/pride"
+-require "minitest/proveit"
+ require "minitest/stub_const"
+ require "net/http"
+ require_relative "helpers/apps"
+@@ -102,10 +101,6 @@
+ end
+
+ Minitest::Test.prepend TimeoutEveryTestCase
+-if ENV['CI']
+- require 'minitest/retry'
+- Minitest::Retry.use!
+-end
+
+ module TestSkips
+
+@@ -178,7 +173,7 @@
+ REPO_NAME = ENV['GITHUB_REPOSITORY'] ? ENV['GITHUB_REPOSITORY'][/[^\/]+\z/] : 'puma'
+
+ def self.run(reporter, options = {}) # :nodoc:
+- prove_it!
++ #prove_it!
+ super
+ end
+
--- /dev/null
+From: Daniel Leidert <daniel.leidert@wgdd.de>
+Date: Wed, 5 Feb 2020 23:18:37 +0100
+Subject: Disable cli ssl tests
+
+Forwarded: not-needed
+---
+ test/test_cli.rb | 2 +-
+ test/test_pumactl.rb | 2 +-
+ 2 files changed, 2 insertions(+), 2 deletions(-)
+
+--- a/test/test_pumactl.rb
++++ b/test/test_pumactl.rb
+@@ -223,7 +223,7 @@
+ refute_includes log, 'send_request'
+ end
+
+- def test_control_ssl
++ def __test_control_ssl
+ skip_unless :ssl
+
+ host = "127.0.0.1"
--- /dev/null
+From: Daniel Leidert <daniel.leidert@wgdd.de>
+Date: Thu, 6 Feb 2020 11:24:24 +0100
+Subject: Fix test to read output locale independent
+
+The test fails if run in a non-English environment.
+---
+ test/test_integration_single.rb | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+--- a/test/test_integration_single.rb
++++ b/test/test_integration_single.rb
+@@ -76,7 +76,7 @@
+ true while @server.gets !~ /Gracefully stopping/ # wait for server to begin graceful shutdown
+
+ # Invoke a request which must be rejected
+- _stdin, _stdout, rejected_curl_stderr, rejected_curl_wait_thread = Open3.popen3("curl #{HOST}:#{@tcp_port}")
++ _stdin, _stdout, rejected_curl_stderr, rejected_curl_wait_thread = Open3.popen3({ "LC_ALL" => "C" }, "curl http://#{HOST}:#{@tcp_port}")
+
+ assert nil != Process.getpgid(@server.pid) # ensure server is still running
+ assert nil != Process.getpgid(curl_wait_thread[:pid]) # ensure first curl invocation still in progress
--- /dev/null
+This test failed on amd64 buildd
+https://buildd.debian.org/status/fetch.php?pkg=puma&arch=amd64&ver=5.2.2-1&stamp=1615133735&raw=0
+
+--- a/test/test_puma_server.rb
++++ b/test/test_puma_server.rb
+@@ -1294,7 +1294,7 @@
+ end
+ end
+
+- def test_command_ignored_before_run
++ def __test_command_ignored_before_run
+ @server.stop # ignored
+ @server.run
+ @server.halt
--- /dev/null
+From 7405a219801dcebc0ad6e0aa108d4319ca23f662 Mon Sep 17 00:00:00 2001
+From: Nate Berkopec <nate.berkopec@gmail.com>
+Date: Fri, 18 Aug 2023 09:47:23 +0900
+Subject: [PATCH] Merge pull request from GHSA-68xg-gqqm-vgj8
+
+* Reject empty string for Content-Length
+
+* Ignore trailers in last chunk
+
+* test_puma_server.rb - use heredoc, test_cl_and_te_smuggle
+
+* client.rb - stye/RubyCop
+
+* test_puma_server.rb - indented heredoc rubocop disable
+
+* Dentarg comments
+
+* Remove unused variable
+
+---------
+
+Co-authored-by: MSP-Greg <Greg.mpls@gmail.com>
+---
+ lib/puma/client.rb | 23 ++++++++++++++--------
+ test/test_puma_server.rb | 42 +++++++++++++++++++++++++++++++++++++++-
+ 2 files changed, 56 insertions(+), 9 deletions(-)
+
+diff --git a/lib/puma/client.rb b/lib/puma/client.rb
+index e966f995e8..9c11912caa 100644
+--- a/lib/puma/client.rb
++++ b/lib/puma/client.rb
+@@ -45,7 +45,8 @@ class Client
+
+ # chunked body validation
+ CHUNK_SIZE_INVALID = /[^\h]/.freeze
+- CHUNK_VALID_ENDING = "\r\n".freeze
++ CHUNK_VALID_ENDING = Const::LINE_END
++ CHUNK_VALID_ENDING_SIZE = CHUNK_VALID_ENDING.bytesize
+
+ # Content-Length header value validation
+ CONTENT_LENGTH_VALUE_INVALID = /[^\d]/.freeze
+@@ -347,8 +348,8 @@ def setup_body
+ cl = @env[CONTENT_LENGTH]
+
+ if cl
+- # cannot contain characters that are not \d
+- if cl =~ CONTENT_LENGTH_VALUE_INVALID
++ # cannot contain characters that are not \d, or be empty
++ if cl =~ CONTENT_LENGTH_VALUE_INVALID || cl.empty?
+ raise HttpParserError, "Invalid Content-Length: #{cl.inspect}"
+ end
+ else
+@@ -509,7 +510,7 @@ def decode_chunk(chunk)
+
+ while !io.eof?
+ line = io.gets
+- if line.end_with?("\r\n")
++ if line.end_with?(CHUNK_VALID_ENDING)
+ # Puma doesn't process chunk extensions, but should parse if they're
+ # present, which is the reason for the semicolon regex
+ chunk_hex = line.strip[/\A[^;]+/]
+@@ -521,13 +522,19 @@ def decode_chunk(chunk)
+ @in_last_chunk = true
+ @body.rewind
+ rest = io.read
+- last_crlf_size = "\r\n".bytesize
+- if rest.bytesize < last_crlf_size
++ if rest.bytesize < CHUNK_VALID_ENDING_SIZE
+ @buffer = nil
+- @partial_part_left = last_crlf_size - rest.bytesize
++ @partial_part_left = CHUNK_VALID_ENDING_SIZE - rest.bytesize
+ return false
+ else
+- @buffer = rest[last_crlf_size..-1]
++ # if the next character is a CRLF, set buffer to everything after that CRLF
++ start_of_rest = if rest.start_with?(CHUNK_VALID_ENDING)
++ CHUNK_VALID_ENDING_SIZE
++ else # we have started a trailer section, which we do not support. skip it!
++ rest.index(CHUNK_VALID_ENDING*2) + CHUNK_VALID_ENDING_SIZE*2
++ end
++
++ @buffer = rest[start_of_rest..-1]
+ @buffer = nil if @buffer.empty?
+ set_ready
+ return true
+diff --git a/test/test_puma_server.rb b/test/test_puma_server.rb
+index 298e44b439..2bfaf98848 100644
+--- a/test/test_puma_server.rb
++++ b/test/test_puma_server.rb
+@@ -627,7 +627,7 @@ def test_large_chunked_request
+ [200, {}, [""]]
+ }
+
+- header = "GET / HTTP/1.1\r\nConnection: close\r\nTransfer-Encoding: chunked\r\n\r\n"
++ header = "GET / HTTP/1.1\r\nConnection: close\r\nContent-Length: 200\r\nTransfer-Encoding: chunked\r\n\r\n"
+
+ chunk_header_size = 6 # 4fb8\r\n
+ # Current implementation reads one chunk of CHUNK_SIZE, then more chunks of size 4096.
+@@ -1365,4 +1365,44 @@ def test_rack_url_scheme_user
+ data = send_http_and_read "GET / HTTP/1.0\r\n\r\n"
+ assert_equal "user", data.split("\r\n").last
+ end
++
++ def test_cl_empty_string
++ server_run do |env|
++ [200, {}, [""]]
++ end
++
++ empty_cl_request = "GET / HTTP/1.1\r\nHost: localhost\r\nContent-Length:\r\n\r\nGET / HTTP/1.1\r\nHost: localhost\r\n\r\n"
++
++ data = send_http_and_read empty_cl_request
++ assert_operator data, :start_with?, 'HTTP/1.1 400 Bad Request'
++ end
++
++ def test_crlf_trailer_smuggle
++ server_run do |env|
++ [200, {}, [""]]
++ end
++
++ smuggled_payload = "GET / HTTP/1.1\r\nTransfer-Encoding: chunked\r\nHost: whatever\r\n\r\n0\r\nX:POST / HTTP/1.1\r\nHost: whatever\r\n\r\nGET / HTTP/1.1\r\nHost: whatever\r\n\r\n"
++
++ data = send_http_and_read smuggled_payload
++ assert_equal 2, data.scan("HTTP/1.1 200 OK").size
++ end
++
++ # test to check if content-length is ignored when 'transfer-encoding: chunked'
++ # is used. See also test_large_chunked_request
++ def test_cl_and_te_smuggle
++ body = nil
++ server_run { |env|
++ body = env['rack.input'].read
++ [200, {}, [""]]
++ }
++
++ req = "POST /search HTTP/1.1\r\nHost: vulnerable-website.com\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 4\r\nTransfer-Encoding: chunked\r\n\r\n7b\r\nGET /404 HTTP/1.1\r\nHost: vulnerable-website.com\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 144\r\n\r\nx=\r\n0\r\n\r\n"
++
++ data = send_http_and_read req
++
++ assert_includes body, "GET /404 HTTP/1.1\r\n"
++ assert_includes body, "Content-Length: 144\r\n"
++ assert_equal 1, data.scan("HTTP/1.1 200 OK").size
++ end
+ end
--- /dev/null
+From bbb880ffb6debbfdea535b4b3eb2204d49ae151d Mon Sep 17 00:00:00 2001
+From: Nate Berkopec <nate.berkopec@gmail.com>
+Date: Mon, 8 Jan 2024 14:48:43 +0900
+Subject: [PATCH] Merge pull request from GHSA-c2f4-cvqm-65w2
+
+Co-authored-by: MSP-Greg <MSP-Greg@users.noreply.github.com>
+Co-authored-by: Patrik Ragnarsson <patrik@starkast.net>
+Co-authored-by: Evan Phoenix <evan@phx.io>
+---
+ lib/puma/client.rb | 27 +++++++++++++++++++++++++++
+ test/test_puma_server.rb | 14 ++++++++++++++
+ 2 files changed, 41 insertions(+)
+
+--- a/lib/puma/client.rb
++++ b/lib/puma/client.rb
+@@ -48,6 +48,14 @@ module Puma
+ CHUNK_VALID_ENDING = Const::LINE_END
+ CHUNK_VALID_ENDING_SIZE = CHUNK_VALID_ENDING.bytesize
+
++ # The maximum number of bytes we'll buffer looking for a valid
++ # chunk header.
++ MAX_CHUNK_HEADER_SIZE = 4096
++
++ # The maximum amount of excess data the client sends
++ # using chunk size extensions before we abort the connection.
++ MAX_CHUNK_EXCESS = 16 * 1024
++
+ # Content-Length header value validation
+ CONTENT_LENGTH_VALUE_INVALID = /[^\d]/.freeze
+
+@@ -460,6 +468,7 @@ module Puma
+ @chunked_body = true
+ @partial_part_left = 0
+ @prev_chunk = ""
++ @excess_cr = 0
+
+ @body = Tempfile.new(Const::PUMA_TMP_BASE)
+ @body.unlink
+@@ -541,6 +550,20 @@ module Puma
+ end
+ end
+
++ # Track the excess as a function of the size of the
++ # header vs the size of the actual data. Excess can
++ # go negative (and is expected to) when the body is
++ # significant.
++ # The additional of chunk_hex.size and 2 compensates
++ # for a client sending 1 byte in a chunked body over
++ # a long period of time, making sure that that client
++ # isn't accidentally eventually punished.
++ @excess_cr += (line.size - len - chunk_hex.size - 2)
++
++ if @excess_cr >= MAX_CHUNK_EXCESS
++ raise HttpParserError, "Maximum chunk excess detected"
++ end
++
+ len += 2
+
+ part = io.read(len)
+@@ -568,6 +591,10 @@ module Puma
+ @partial_part_left = len - part.size
+ end
+ else
++ if @prev_chunk.size + chunk.size >= MAX_CHUNK_HEADER_SIZE
++ raise HttpParserError, "maximum size of chunk header exceeded"
++ end
++
+ @prev_chunk = line
+ return false
+ end
+--- a/test/test_puma_server.rb
++++ b/test/test_puma_server.rb
+@@ -648,6 +648,20 @@ EOF
+ end
+ end
+
++ def test_large_chunked_request_header
++ server_run(environment: :production) { |env|
++ [200, {}, [""]]
++ }
++
++ max_chunk_header_size = Puma::Client::MAX_CHUNK_HEADER_SIZE
++ header = "GET / HTTP/1.1\r\nConnection: close\r\nContent-Length: 200\r\nTransfer-Encoding: chunked\r\n\r\n"
++ socket = send_http "#{header}1;t#{'x' * (max_chunk_header_size + 2)}"
++
++ data = socket.read
++
++ assert_match "HTTP/1.1 400 Bad Request\r\n\r\n", data
++ end
++
+ def test_chunked_request_pause_before_value
+ body = nil
+ content_length = nil
--- /dev/null
+From cac3fd18cf29ed43719ff5d52d9cfec215f0a043 Mon Sep 17 00:00:00 2001
+From: Evan Phoenix <evan@phx.io>
+Date: Wed, 18 Sep 2024 21:56:07 -0700
+Subject: [PATCH] Merge commit from fork
+
+* Prevent underscores from clobbering hyphen headers
+
+* Special case encoding headers to prevent app confusion
+
+* Handle _ as , in jruby as well
+
+* Silence RuboCop offense
+
+---------
+
+Co-authored-by: Patrik Ragnarsson <patrik@starkast.net>
+---
+ ext/puma_http11/org/jruby/puma/Http11.java | 2 +
+ lib/puma/const.rb | 8 +++
+ lib/puma/request.rb | 19 ++++++--
+ test/test_normalize.rb | 57 ++++++++++++++++++++++
+ test/test_request_invalid.rb | 28 +++++++++++
+ 5 files changed, 111 insertions(+), 3 deletions(-)
+ create mode 100644 test/test_normalize.rb
+
+--- a/ext/puma_http11/org/jruby/puma/Http11.java
++++ b/ext/puma_http11/org/jruby/puma/Http11.java
+@@ -99,6 +99,8 @@ public class Http11 extends RubyObject {
+ int bite = b.get(i) & 0xFF;
+ if(bite == '-') {
+ b.set(i, (byte)'_');
++ } else if(bite == '_') {
++ b.set(i, (byte)',');
+ } else {
+ b.set(i, (byte)Character.toUpperCase(bite));
+ }
+--- a/lib/puma/const.rb
++++ b/lib/puma/const.rb
+@@ -244,6 +244,14 @@ module Puma
+ # header values can contain HTAB?
+ ILLEGAL_HEADER_VALUE_REGEX = /[\x00-\x08\x0A-\x1F]/.freeze
+
++ # The keys of headers that should not be convert to underscore
++ # normalized versions. These headers are ignored at the request reading layer,
++ # but if we normalize them after reading, it's just confusing for the application.
++ UNMASKABLE_HEADERS = {
++ "HTTP_TRANSFER,ENCODING" => true,
++ "HTTP_CONTENT,LENGTH" => true,
++ }
++
+ # Banned keys of response header
+ BANNED_HEADER_KEY = /\A(rack\.|status\z)/.freeze
+
+--- a/lib/puma/request.rb
++++ b/lib/puma/request.rb
+@@ -318,6 +318,11 @@ module Puma
+ # compatibility, we'll convert them back. This code is written to
+ # avoid allocation in the common case (ie there are no headers
+ # with `,` in their names), that's why it has the extra conditionals.
++ #
++ # @note If a normalized version of a `,` header already exists, we ignore
++ # the `,` version. This prevents clobbering headers managed by proxies
++ # but not by clients (Like X-Forwarded-For).
++ #
+ # @param env [Hash] see Puma::Client#env, from request, modifies in place
+ # @version 5.0.3
+ #
+@@ -326,23 +331,30 @@ module Puma
+ to_add = nil
+
+ env.each do |k,v|
+- if k.start_with?("HTTP_") and k.include?(",") and k != "HTTP_TRANSFER,ENCODING"
++ if k.start_with?("HTTP_") and k.include?(",") and !UNMASKABLE_HEADERS.key?(k)
+ if to_delete
+ to_delete << k
+ else
+ to_delete = [k]
+ end
+
++ new_k = k.tr(",", "_")
++ if env.key?(new_k)
++ next
++ end
++
+ unless to_add
+ to_add = {}
+ end
+
+- to_add[k.tr(",", "_")] = v
++ to_add[new_k] = v
+ end
+ end
+
+ if to_delete
+ to_delete.each { |k| env.delete(k) }
++ end
++ if to_add
+ env.merge! to_add
+ end
+ end
+--- /dev/null
++++ b/test/test_normalize.rb
+@@ -0,0 +1,57 @@
++# frozen_string_literal: true
++
++require_relative "helper"
++
++require "puma/request"
++
++class TestNormalize < Minitest::Test
++ parallelize_me!
++
++ include Puma::Request
++
++ def test_comma_headers
++ env = {
++ "HTTP_X_FORWARDED_FOR" => "1.1.1.1",
++ "HTTP_X_FORWARDED,FOR" => "2.2.2.2",
++ }
++
++ req_env_post_parse env
++
++ expected = {
++ "HTTP_X_FORWARDED_FOR" => "1.1.1.1",
++ }
++
++ assert_equal expected, env
++
++ # Test that the iteration order doesn't matter
++
++ env = {
++ "HTTP_X_FORWARDED,FOR" => "2.2.2.2",
++ "HTTP_X_FORWARDED_FOR" => "1.1.1.1",
++ }
++
++ req_env_post_parse env
++
++ expected = {
++ "HTTP_X_FORWARDED_FOR" => "1.1.1.1",
++ }
++
++ assert_equal expected, env
++ end
++
++ def test_unmaskable_headers
++ env = {
++ "HTTP_CONTENT,LENGTH" => "100000",
++ "HTTP_TRANSFER,ENCODING" => "chunky"
++ }
++
++ req_env_post_parse env
++
++ expected = {
++ "HTTP_CONTENT,LENGTH" => "100000",
++ "HTTP_TRANSFER,ENCODING" => "chunky"
++ }
++
++ assert_equal expected, env
++ end
++end
+--- a/test/test_request_invalid.rb
++++ b/test/test_request_invalid.rb
+@@ -216,4 +216,32 @@ class TestRequestInvalid < Minitest::Tes
+
+ assert_status data
+ end
++
++ def test_underscore_header_1
++ hdrs = [
++ "X-FORWARDED-FOR: 1.1.1.1", # proper
++ "X-FORWARDED-FOR: 2.2.2.2", # proper
++ "X_FORWARDED-FOR: 3.3.3.3", # invalid, contains underscore
++ "Content-Length: 5",
++ ].join "\r\n"
++
++ response = send_http_and_read "#{GET_PREFIX}#{hdrs}\r\n\r\nHello\r\n\r\n"
++
++ assert_includes response, "HTTP_X_FORWARDED_FOR = 1.1.1.1, 2.2.2.2"
++ refute_includes response, "3.3.3.3"
++ end
++
++ def test_underscore_header_2
++ hdrs = [
++ "X_FORWARDED-FOR: 3.3.3.3", # invalid, contains underscore
++ "X-FORWARDED-FOR: 2.2.2.2", # proper
++ "X-FORWARDED-FOR: 1.1.1.1", # proper
++ "Content-Length: 5",
++ ].join "\r\n"
++
++ response = send_http_and_read "#{GET_PREFIX}#{hdrs}\r\n\r\nHello\r\n\r\n"
++
++ assert_includes response, "HTTP_X_FORWARDED_FOR = 2.2.2.2, 1.1.1.1"
++ refute_includes response, "3.3.3.3"
++ end
+ end
--- /dev/null
+From ebe9db3929ab8299d19c8f5b41e8ef4f4b22fa58 Mon Sep 17 00:00:00 2001
+From: Nate Berkopec <nate.berkopec@gmail.com>
+Date: Wed, 27 May 2026 08:33:21 +0900
+Subject: [PATCH] 7.2.1 backport (#3947)
+
+* Limit and anchor PROXY protocol parsing
+
+(cherry picked from commit f1f37d5822aa8ffe23e7d0d16e9a1f3b0eaf9bfd)
+
+* Parse PROXY protocol only once per connection
+
+(cherry picked from commit 8310c17cd43784723ed41a94d2a747da256306de)
+---
+ lib/puma/client.rb | 38 ++++++++++++++-------
+ lib/puma/const.rb | 3 +-
+ test/test_puma_server.rb | 71 ++++++++++++++++++++++++++++++++++++++++
+ 3 files changed, 100 insertions(+), 12 deletions(-)
+
+--- a/lib/puma/client.rb
++++ b/lib/puma/client.rb
+@@ -148,7 +148,7 @@ module Puma
+ def reset(fast_check=true)
+ @parser.reset
+ @read_header = true
+- @read_proxy = !!@expect_proxy_proto
++ @read_proxy = !!@expect_proxy_proto && @requests_served.zero?
+ @env = @proto_env.dup
+ @body = nil
+ @tempfile = nil
+@@ -196,20 +196,36 @@ module Puma
+ def try_to_parse_proxy_protocol
+ if @read_proxy
+ if @expect_proxy_proto == :v1
+- if @buffer.include? "\r\n"
+- if md = PROXY_PROTOCOL_V1_REGEX.match(@buffer)
+- if md[1]
+- @peerip = md[1].split(" ")[0]
++ crlf_index = @buffer.index "\r\n"
++
++ unless crlf_index
++ if "PROXY ".start_with? @buffer
++ return false
++ elsif @buffer.start_with? "PROXY "
++ if @buffer.bytesize >= PROXY_PROTOCOL_V1_MAX_LENGTH
++ raise ConnectionError, "PROXY protocol v1 line is too long"
+ end
+- @buffer = md.post_match
++ return false
+ end
+- # if the buffer has a \r\n but doesn't have a PROXY protocol
+- # request, this is just HTTP from a non-PROXY client; move on
++
+ @read_proxy = false
+- return @buffer.size > 0
+- else
+- return false
++ return true
++ end
++
++ if @buffer.start_with?("PROXY ") && crlf_index + 2 > PROXY_PROTOCOL_V1_MAX_LENGTH
++ raise ConnectionError, "PROXY protocol v1 line is too long"
++ end
++
++ if md = PROXY_PROTOCOL_V1_REGEX.match(@buffer)
++ if md[1]
++ @peerip = md[1].split(" ")[0]
++ end
++ @buffer = md.post_match
+ end
++ # if the buffer has a \r\n but doesn't have a PROXY protocol
++ # request, this is just HTTP from a non-PROXY client; move on
++ @read_proxy = false
++ return @buffer.size > 0
+ end
+ end
+ true
+--- a/lib/puma/const.rb
++++ b/lib/puma/const.rb
+@@ -255,6 +255,7 @@ module Puma
+ # Banned keys of response header
+ BANNED_HEADER_KEY = /\A(rack\.|status\z)/.freeze
+
+- PROXY_PROTOCOL_V1_REGEX = /^PROXY (?:TCP4|TCP6|UNKNOWN) ([^\r]+)\r\n/.freeze
++ PROXY_PROTOCOL_V1_REGEX = /\APROXY (?:TCP4|TCP6|UNKNOWN) ([^\r]+)\r\n/.freeze
++ PROXY_PROTOCOL_V1_MAX_LENGTH = 107
+ end
+ end
+--- a/test/test_puma_server.rb
++++ b/test/test_puma_server.rb
+@@ -1065,6 +1065,75 @@ EOF
+ assert_equal 'fd00::1', remote_addr
+ end
+
++ def test_proxy_protocol_rejects_line_without_crlf_at_max_length
++ server_run(remote_address: :proxy_protocol, remote_address_proxy_protocol: :v1) do
++ [200, {}, ["Hello"]]
++ end
++
++ socket = new_connection
++ socket << "PROXY #{'A' * (Puma::Const::PROXY_PROTOCOL_V1_MAX_LENGTH - "PROXY ".bytesize)}"
++
++ assert_equal "", socket.read
++ end
++
++ def test_proxy_protocol_allows_non_proxy_requests_over_max_length
++ server_run(remote_address: :proxy_protocol, remote_address_proxy_protocol: :v1) do
++ [200, {}, ["Hello"]]
++ end
++
++ response = send_http_and_read( "GET /#{'a' * Puma::Const::PROXY_PROTOCOL_V1_MAX_LENGTH} HTTP/1.0\r\n\r\n")
++
++ assert_match %r{\AHTTP/1\.[01] 200 OK}, response
++ assert_match %r{Hello\z}, response
++ end
++
++ def test_proxy_protocol_ignores_embedded_proxy_line_in_http_body
++ server_run(remote_address: :proxy_protocol, remote_address_proxy_protocol: :v1) do |env|
++ body = env['rack.input'].read
++ [200, {'Content-Length' => body.bytesize.to_s}, [body]]
++ end
++
++ body = "prefix\nPROXY TCP4 1.1.1.1 2.2.2.2 3 4\r\nsuffix"
++ response = send_http_and_read ("POST / HTTP/1.1\r\nHost: test.com\r\nContent-Length: #{body.bytesize}\r\n\r\n#{body}")
++
++ assert_match %r{\AHTTP/1\.[01] 200 OK}, response
++ assert_match %r{#{Regexp.escape(body)}\z}, response
++ end
++
++ def test_proxy_protocol_only_parses_first_request_on_connection
++ server_run(remote_address: :proxy_protocol, remote_address_proxy_protocol: :v1) do |env|
++ [200, {}, [env["REMOTE_ADDR"]]]
++ end
++
++ socket = send_proxy_v1_http("GET /one HTTP/1.1\r\nHost: test.com\r\n\r\n", "1.2.3.4")
++
++ assert_equal ["HTTP/1.1 200 OK", "Content-Length: 7"], header(socket)
++ assert_equal "1.2.3.4", socket.read(7)
++
++ sleep 1
++
++ socket << "PROXY TCP4 127.0.0.1 127.0.0.1 10000 80\r\nGET /two HTTP/1.1\r\nHost: test.com\r\nConnection: close\r\n\r\n"
++
++ assert_match %r{\AHTTP/1\.[01] 400 Bad Request}, socket.read
++ end
++
++ def test_proxy_protocol_allows_proxy_http_method_on_keep_alive
++ server_run(remote_address: :proxy_protocol, remote_address_proxy_protocol: :v1, supported_http_methods: :any) do |env|
++ [200, {}, [env["REMOTE_ADDR"]]]
++ end
++
++ socket = send_proxy_v1_http("GET /one HTTP/1.1\r\nHost: test.com\r\n\r\n", "1.2.3.4")
++
++ assert_equal ["HTTP/1.1 200 OK", "Content-Length: 7"], header(socket)
++ assert_equal "1.2.3.4", socket.read(7)
++
++ socket << "PROXY /two HTTP/1.1\r\nHost: test.com\r\nConnection: close\r\n\r\n"
++
++ response = socket.read
++ assert_match %r{\AHTTP/1\.1 200 OK\r\n}, response
++ assert_equal "1.2.3.4", response.split("\r\n").last
++ end
++
+ # To comply with the Rack spec, we have to split header field values
+ # containing newlines into multiple headers.
+ def assert_does_not_allow_http_injection(app, opts = {})
--- /dev/null
+Description: ssl certs for testcases
+Author: Abhijith PA <abhijith@debian.org>
+Forwarded: not-needed
+Last-Update: 2026-10-07
+
+--- puma-5.6.5.orig/examples/puma/cert_puma.pem
++++ puma-5.6.5/examples/puma/cert_puma.pem
+@@ -1,21 +1,21 @@
+ -----BEGIN CERTIFICATE-----
+ MIIDgjCCAmqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADA5MQswCQYDVQQGEwJVUzEO
+-MAwGA1UECgwFbG9jYWwxDTALBgNVBAsMBGFlcm8xCzAJBgNVBAMMAkNBMB4XDTIw
+-MDgwMTAwMDAwMFoXDTI0MDgwMTAwMDAwMFowSDELMAkGA1UEBhMCVVMxDjAMBgNV
++MAwGA1UECgwFbG9jYWwxDTALBgNVBAsMBGFlcm8xCzAJBgNVBAMMAkNBMB4XDTI2
++MTAwMTAwMDAwMFoXDTMwMTAwMTAwMDAwMFowSDELMAkGA1UEBhMCVVMxDjAMBgNV
+ BAoMBWxvY2FsMQ0wCwYDVQQLDARhZXJvMQswCQYDVQQLDAJDQTENMAsGA1UEAwwE
+-cHVtYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL9pa0gvlNdwge/u
+-aZNE5hTyBLH3eQzdduGcYjoSy6AVgab8M8s5O7RPMEDORV6xRuGfNgRI40Kkx4E8
+-w5icHSp9WumsEi5FrKIcIXttquLdcBkUEq9N/mPVZAlg5Jr5IePzWafM0gTdKlR1
+-LN/UHcVaMHWt4/Kz2ja9wlUhaKly7+UG1JdHhQ1yrAVVUTLN9YT8VTkyaB11+K0m
+-KpdvHcyFuB4yBcvCd4iGSIqf7wjlEIRp8Pa9C6tR8gAlCi4APlzmngYod3wbXAhE
+-psjvSXCWCdeHKD/wAgBz1abA4yNnSIhb4KFFkGMn+F74ZjeCZN287lz/18gQLn06
+-3EXVKIECAwEAAaOBhTCBgjAMBgNVHRMBAf8EAjAAMDEGCWCGSAGG+EIBDQQkFiJS
++cHVtYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMYqWLZujJSPkcEp
++yPQ6l07HFV0BZ8Hq0+HaRtfpgQY6Yzvms8w2a/Z1ZQ4SMNBrhEGoDxxWsu765flF
++/f98IzzedDk/gXW5IB9lhp3pdANiVkwSP+gYT53g+CN7WJw3xx6UrcTP/hz/Qe+w
++OspH4mMdv4wF8yxNFf4ktuyr5Oug/MfxeW5v14b3uOPNhr0fHuAFDSldGzDuydUM
++bbPH25HcDqz0xLz1Pek7zsBSm3sUxwOxnToWAAMJo5vyhyNO0SpQlLxGap1Qq1il
++FsaxV29WtnYNVpsVF688061QDQp62yX4J1qPshd6arqZh1hFiy9H56YDPXqNQ0Ph
++HmYqJHMCAwEAAaOBhTCBgjAMBgNVHRMBAf8EAjAAMDEGCWCGSAGG+EIBDQQkFiJS
+ dWJ5L09wZW5TU0wgR2VuZXJhdGVkIENlcnRpZmljYXRlMB0GA1UdDgQWBBTyDyJl
+ mYBDwfWdRj6lWGvoY43k9DALBgNVHQ8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH
+-AwEwDQYJKoZIhvcNAQELBQADggEBAH2YCJJY9RFO8a7wW+9LonTVL1QLvpS0bgqC
+-1CvW3ANCXriCXHUHc/aLmneRfXhrezCcAgqyqG2+HxJ3fLllec7lbiznnV7DaAmn
+-Jhgmlho9fw2FxPA4iZ5DQvCALS0Ho4Vo+kPVExbhH4XKZkVTJosms5TWmDaeyfN0
+-PyWDeyKsjqi9oXqqAZKBo9DFWxkJUThzpxXdWo2S9cKt7EWJJlgdlmQGyoo39Xdu
+-86MxNGfaS+7ChzcXQVu1B/t0fpFKfkVCEKvNEQ50v/D01Ed0hgQPOaqgFvFMp0eU
+-B0b1xpKQ2OshyOK1048ou3Gv+fAw+xtcC840T0DDMte73sysXtg=
++AwEwDQYJKoZIhvcNAQELBQADggEBAIYADOhm+LsB2/715nRkmz7O8RdZryqIr3Kd
++2BumUXpHvs97hy6a+2GEmyYVN5DNxogX+O0nl0VjZVQrEoPFI+RFdEJp6N9aH6Og
++MvUuAv5Aob4ct0kkwLRMmPYNon4lG1gt15mo/hpb9aDaeIwRE/v3ttXzhIQ+/sFa
++ZwoRT4TfcTqGC9TN3RsWmQtuPPoxw7jhNbLCNyqSaHJd1gKHoN7Ftu1vL78k9xb6
++cF4d0QveFElymKdjbkm1nPtrgFkoPtNnMt1Kwdu+dZbDLl2q7zEfikvCfe93fKLX
++RX3QlklKPC350yBRn82UiKTe0ZS57CQiBNcFz/DVF79oSN+1mlE=
+ -----END CERTIFICATE-----
+--- puma-5.6.5.orig/examples/puma/client-certs/ca.crt
++++ puma-5.6.5/examples/puma/client-certs/ca.crt
+@@ -1,19 +1,19 @@
+ -----BEGIN CERTIFICATE-----
+ MIIDDjCCAfagAwIBAgIBAzANBgkqhkiG9w0BAQsFADA4MRMwEQYKCZImiZPyLGQB
+-GRYDbmV0MRQwEgYKCZImiZPyLGQBGRYEcHVtYTELMAkGA1UEAwwCQ0EwHhcNMjAw
+-ODAxMDAwMDAwWhcNMjQwODAxMDAwMDAwWjA4MRMwEQYKCZImiZPyLGQBGRYDbmV0
++GRYDbmV0MRQwEgYKCZImiZPyLGQBGRYEcHVtYTELMAkGA1UEAwwCQ0EwHhcNMjYx
++MDAxMDAwMDAwWhcNMzAxMDAxMDAwMDAwWjA4MRMwEQYKCZImiZPyLGQBGRYDbmV0
+ MRQwEgYKCZImiZPyLGQBGRYEcHVtYTELMAkGA1UEAwwCQ0EwggEiMA0GCSqGSIb3
+-DQEBAQUAA4IBDwAwggEKAoIBAQDIHxrFcS2JkRQbXLFosb32unVkVuwHSPSt6Dpl
+-2jUQHP/bceAx/d9waHYf8rlbCFAIoduZDOc7XCJUidgcG5NfLJyQpkkWOU8CGWH+
+-Ipl4AE8auYCcy/0T7BQqaRC41HPmrJG1CC40rqcY47lUO2haI+vj5TZFHNhAbRat
+-rR1iD1veis2gBZtrMzd4IlpvEHGv6ghfnSc20za4exmapjp/uAAIOXpeFX8QHumA
+-bty4dd+iHpKjDzUrhG9Qa5v28ii2K1AcbczUQ7FzSp2/GoRSjF+WY6i86N9Z1M97
+-2PEgy0IG5l6JHu1P0/rd00hN0h0Owzv3V5ldMLZap7+pVFQTAgMBAAGjIzAhMA8G
++DQEBAQUAA4IBDwAwggEKAoIBAQC1P8p5V+jPPJOVDlCQmaGkVe9i3uJpuZxBdvyT
++71O/8uMuosJN1lq1s5dL2/eh+9rjjMHQrO/RuB3VCkWRNsbNq8bHDOPIIXiVOAPK
++2tLI+58OFX904+uf+3ySGLMwQDPR52ov/ArCx28a/L5hg4tf/boXBdeOtfZvuCp0
++GvdI0LYNeR26M28FsUFmH7PsbLRnNbq6hynayrMCipYQkavM2FuKPDtIg5OYFlHG
++4bamXTRG+VmH6qdTY825al8+04Uuom9kx6Fg1Ee/+mD5lqXlKo/BxO6UhRiZwrTf
++l/EBicxdc2aLyY5zVAtDY6VVDOTHj3oZkjwWgV0ytcpi8f63AgMBAAGjIzAhMA8G
+ A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEBCwUAA4IB
+-AQA3GWpy4bYLOHLENDTUBeclF6cDdYiautD6gxd1SDLMWOhAUF7ywwT87OAJdr1I
+-+W1TUv5BRG21rNm1QsZfLbStdKA1mpiET/9nYN7m1YauL5hI3yD49TGuO9/sxcE5
+-zNW7D3VBVNq+pyT21/TvLAgxCNvjjm7byzyIOcoRUyZx8WhCf8nUT6cEShXqEg4Q
+-iUBSLI38tiQoZneuVzDRlXBY0PqoB19l2Kg9yThHjPTVhw5EAQSDKXCCvaxAbVw6
+-ZPLNnOdK6DvqEZ3GC5WlaHQdmLxmN4OfV6AEtpgqgGY9u8K1ylTr3ET7xLK7bhcA
+-oZsggEVZr1Ifx9BWIazRNwlw
++AQB3E+f+miY+Fu4IOoXe9b2/mP+S0IzvGTXEtKnOG3n24B1SLGMSr1HcyUySI8n/
++qwwONSUfL8kGWintY8gTAlHhVjdW8gTLXVGMV9aYexxcojycta4MqM60uRMunBD3
++CGjP45pd76sJsJ0paZMrdqjjMYYPHxI8sau3VQbKZ96DeTWvrEOGm6xQtQ5qbFQy
++ZjEFZmy72N/Occ421IprCGOkuuV24q9sgWssOHF6/nbRdsJMXlxGtCXSq8YM5SEn
++3YReyODq2foayZOmOR1VTR4JMJnlB9b36WbjkTz8jQGcHqKqzwXUEFgdywOxZaZ3
++saaKCW4MbsGrqXEAck5iK35K
+ -----END CERTIFICATE-----
+--- puma-5.6.5.orig/examples/puma/client-certs/ca.key
++++ puma-5.6.5/examples/puma/client-certs/ca.key
+@@ -1,27 +1,27 @@
+ -----BEGIN RSA PRIVATE KEY-----
+-MIIEpgIBAAKCAQEAyB8axXEtiZEUG1yxaLG99rp1ZFbsB0j0reg6Zdo1EBz/23Hg
+-Mf3fcGh2H/K5WwhQCKHbmQznO1wiVInYHBuTXyyckKZJFjlPAhlh/iKZeABPGrmA
+-nMv9E+wUKmkQuNRz5qyRtQguNK6nGOO5VDtoWiPr4+U2RRzYQG0Wra0dYg9b3orN
+-oAWbazM3eCJabxBxr+oIX50nNtM2uHsZmqY6f7gACDl6XhV/EB7pgG7cuHXfoh6S
+-ow81K4RvUGub9vIotitQHG3M1EOxc0qdvxqEUoxflmOovOjfWdTPe9jxIMtCBuZe
+-iR7tT9P63dNITdIdDsM791eZXTC2Wqe/qVRUEwIDAQABAoIBAQCrFcxxV5yyqxEh
+-g1E4TBw3Ppj1u0n1wG1N7+ddA/uxVtl15hjhJEVNeEDkd0H3jVe+yYFPizR0DwRa
+-ea4D+Z84Eo+XKlH5ae0dwk2AUlwZt0npcwV9BvfJfF6RE1l0akzbvFSlC+VUrKu2
+-H5llZZSE24jjQCXxWAOYsKpeuE0ScsIvgKIW7i7sSKE8x8bRyEY6nF8ayfwLoDId
+-O1eIYM9bYt+y/K0MnZLuKxKRMXDiORSTu9ujR5NVmDkb4DJgVhkz8DcN9K9UV5FE
+-tRZzD13fOJS/RnKjoGCtJV4G8vzWvtqcaQaxxCCfYQS+XChqUExNxooOVQjlx+AE
+-HWrJ/oEhAoGBAPkrY5P6OfV7GOC5CxcI4wv955vf17rT85VSyqHRztiLv90IFi0B
+-snBjocJo466Xsi85QNkRHyW/DG0xuZ/lJyJyM79prOV0PXRlEr8loR3RT7OqK8KQ
+-nX4Ip7ELixT7Kspwh+p3S/Z2/9kR0XXJ8aJCb5Xz31YvswEew7Z7kbNHAoGBAM2b
+-gjw6BGzP9Ni9xTQKKK6NBimlsKqg/pnvEVSMb4lNNB/nPlVEzFUc5iFHX5luaaCr
+-dsaa7vOjUZ14aLQcuGTDrWKc82Vn2g6A+//TXbm0zWK5x1fctFdUxHPmBNiTO5xc
+-+29cGv/laehyphkIfQsLsmnOeMvDkyNeX0L0JYbVAoGBAL4so5/5x+rYvTAni5NV
+-MRWiAPgzbJAn3S4HNqkzXVBhuVqWJXbMaMjnAjtDmyNSnKj2ZcxHCSLiIjXlUev8
+-FlZwG5borRGkGpOP4TMLIWGEs/RI2YVyowHi0TqLuOeWnB5OrS4DR3MheDzRILFq
+-JIbXdhtZOwio91LPjEjnH1lZAoGBAI5mnAa2cAYk6YGLvZ9TQeXSymfh17/1jSB0
+-EV6rfTxs+iL2d5d69MImJ8T4t99+Ny4OU08uUzzu6kHT+UB1e8heNiHMbk7XZJET
+-CHWgoJNUA8PSw5u4wjaSARX8Q3L0Vh7vzzzLX+/HplhVv3ArDt+tlD3vwH3v0GJ4
+-pCWtDqiZAoGBAMjf2InVEJsQD/uOFblpgzTxNXoWnYDA2udIpHOgcdw3+JhZzOXx
+-01WReomSBtuc0XStJdZKZbLuYgtG3XEJPA8rqS4SVm+M05XTCnDVkpENAZf14u8r
+-8dbPJUWzoVDkEuJespgixpJ18JAytDXvl5gzFp6Gr2O0Dd7arN/8IIP8
++MIIEogIBAAKCAQEAtT/KeVfozzyTlQ5QkJmhpFXvYt7iabmcQXb8k+9Tv/LjLqLC
++TdZatbOXS9v3ofva44zB0Kzv0bgd1QpFkTbGzavGxwzjyCF4lTgDytrSyPufDhV/
++dOPrn/t8khizMEAz0edqL/wKwsdvGvy+YYOLX/26FwXXjrX2b7gqdBr3SNC2DXkd
++ujNvBbFBZh+z7Gy0ZzW6uocp2sqzAoqWEJGrzNhbijw7SIOTmBZRxuG2pl00RvlZ
++h+qnU2PNuWpfPtOFLqJvZMehYNRHv/pg+Zal5SqPwcTulIUYmcK035fxAYnMXXNm
++i8mOc1QLQ2OlVQzkx496GZI8FoFdMrXKYvH+twIDAQABAoIBAAhjdpetdGZxq3OY
++xoIdbNLsxpgLsGyWkmn15lRjHWats0sGGGUULdLpXXAS3aqpu+SP2qvcR9CBK3b1
++Mz64dh9bEGedAUZ9b2sZ578HPVM0+2m3n/8FH3N3kbk3RcUkFjc5n9CvDcEcYYLd
++E2NIUcvfCTJQlbySpQsK+dgGzs7CrzZNzAmW6NyUjgaD29tg4RbCnLwRoZHOvW9A
++S418cwRyePNSoampVvOrKShcCZUuKwNnkw2IU7F+FuovX7XyiIEwWfZETRE5xmMS
++8BG8NTl5pe5FGOIJeAiO6Ib7e/Y75rjpVrMzna/BiO0Nv1DrwSwxhwTyziiEGD+O
++RIsy590CgYEA/9Dkk6Rw00P4oxEXNj4DpobfgIY0eJCzXfxPtUkWIlc7eqfMU2rK
++IBXMWSg9qcWq5lLh2EXL0yv80AeJiuz7DGWL72t7qaTGkPehoMwbhSdsbyNr09o2
++UHzAzIA5VUjrbrrBgBDpHmrOwYEMUvxFBDh2mGCJo4OnmL/DylYPxDMCgYEAtWEq
++vjYz1eGW3RBTuwGUuFMsrLv6xysXEpLvFtBYLEa3G4Dyq8plhQkNdPCFTivKozva
++TeRHClqmzi61wHj8mWMvzqcqzGD08nPHQr6KpZmPTqpxbUm69nmSQMbmSVBlV9BL
++RjbvnGkVf6tbBKRlvWy6urfEr95+fo2LSnAZt20CgYBgxM1iiEbhtAme7b0hGK5a
++1RRA0wOQQ/SF7gbc5cvIq8TlLgpd17ykDHrjkxRYX1y5icrC/AwRUsdsjh1afzCs
++TNF1fOwnjRxMBFCQugUDBpm/JOAKILaBFd/8u9h0SYQ9u8msvzjf97lEe6OE1Mbq
++xM0f8Qy/3PKOFqRiqtGF/wKBgF6TrRMD9mF3QRBCXDat61t121yypGBIQr6nqU3v
++E5r6wK3xvhf/8JG/F6o7ZHdPdFlLc1icSMLIZCQszQ7wx15ADwSlvDZX9EGcR3Gx
++I2CYQtaVH5IKGRg+ahmm3RurdTyl2ypgqO6ZCOHKeypfgsGUOYX1HvVJghIBQnlt
++HKu9AoGAfBhvv2lBl+5uDbJJX6M5Ui8v7T3j0o4gYEBiVBn0QtCbNRCSMSz6vNMB
++CXFg/PQjg09qxjHnqrJm4lr6xEtxjrv1rpgSbH21zvslh+fnokOlLItSA8z7e9RC
++737gi4anftzZotXOippV9+MRT0q2bBUsdifWugRG3SCasn6zEmY=
+ -----END RSA PRIVATE KEY-----
+--- puma-5.6.5.orig/examples/puma/client-certs/client.crt
++++ puma-5.6.5/examples/puma/client-certs/client.crt
+@@ -1,19 +1,19 @@
+ -----BEGIN CERTIFICATE-----
+ MIIDBDCCAeygAwIBAgIBCzANBgkqhkiG9w0BAQsFADA4MRMwEQYKCZImiZPyLGQB
+-GRYDbmV0MRQwEgYKCZImiZPyLGQBGRYEcHVtYTELMAkGA1UEAwwCQ0EwHhcNMjAw
+-ODAxMDAwMDAwWhcNMjQwODAxMDAwMDAwWjA/MRMwEQYKCZImiZPyLGQBGRYDbmV0
++GRYDbmV0MRQwEgYKCZImiZPyLGQBGRYEcHVtYTELMAkGA1UEAwwCQ0EwHhcNMjYx
++MDAxMDAwMDAwWhcNMzAxMDAxMDAwMDAwWjA/MRMwEQYKCZImiZPyLGQBGRYDbmV0
+ MRQwEgYKCZImiZPyLGQBGRYEcHVtYTESMBAGA1UEAwwJbG9jYWxob3N0MIIBIjAN
+-BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoywLJRT7wZM1P3Abg9NIT+NJ8TkS
+-IBz8ZgyyhSW1lU/tcsNEJakIl22XAeLEHfMknMzDqvU1G256hqM+/Tgohreat+yc
+-ofy+2OOu4un+44qIGX82i2PCt+afVvbGhPpHioyAJRDXZd9V4FtESH+6As7m+6MH
+-E4yX547E6XmmJ9lp8z9FnBMi1a6C01bI6mZhMuReLl2bS0FWjqrwNN3PpizBD+Vv
+-FbUIndC+UiD0kYPxTwSDCpEq/To0FrNCdAj94Y4oZVuvx8B1mHiqwkqmlOLUZslS
+-u7CFInqbswq5LnGFRIVSg3bu4bgCbCEmJhfqxp5MODT4VBXa2sCOnG7BBwIDAQAB
+-oxIwEDAOBgNVHQ8BAf8EBAMCBLAwDQYJKoZIhvcNAQELBQADggEBAApaKvnGiRqs
+-Vz4B06f/mDLmN7gb0e/evEypB2S06fp9f/oWWHXHCxpx9bKbiHFNNiinoc97/Spb
+-GzylHV/n9j8GEtZmJMiSJZubN8vpn1Jg0Usz3ZtAy0fe9ephjBIXPpwrsGF6Oz3u
+-U/b2zTpJX3oJ3Eq6Q9hLplYU3bNHfrw6PAbzbB91zVTFsqZUTctKrMRgp68FA4fw
+-VWQkb4QwLK1UVJIT/nR3v7nJDktgpR4mfdrtWbWxOGm/ed2oOilpqVhVN99P+bUn
+-3cFkQ6PSYK8En9jJhBMe/zQqpSyy09Tfi/Zy6nzZv0ah53bpeCFLZFi+0CU8HwPr
+-MuD1XQN72zg=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+ -----END CERTIFICATE-----
+--- puma-5.6.5.orig/examples/puma/client-certs/client.key
++++ puma-5.6.5/examples/puma/client-certs/client.key
+@@ -1,27 +1,27 @@
+ -----BEGIN RSA PRIVATE KEY-----
+-MIIEowIBAAKCAQEAoywLJRT7wZM1P3Abg9NIT+NJ8TkSIBz8ZgyyhSW1lU/tcsNE
+-JakIl22XAeLEHfMknMzDqvU1G256hqM+/Tgohreat+ycofy+2OOu4un+44qIGX82
+-i2PCt+afVvbGhPpHioyAJRDXZd9V4FtESH+6As7m+6MHE4yX547E6XmmJ9lp8z9F
+-nBMi1a6C01bI6mZhMuReLl2bS0FWjqrwNN3PpizBD+VvFbUIndC+UiD0kYPxTwSD
+-CpEq/To0FrNCdAj94Y4oZVuvx8B1mHiqwkqmlOLUZslSu7CFInqbswq5LnGFRIVS
+-g3bu4bgCbCEmJhfqxp5MODT4VBXa2sCOnG7BBwIDAQABAoIBAGsjyE2Y8ZWxKw10
+-dxyf5qNOAoc5igU8Ax6ex7lVgV2BFdB9FooD63hCpRy/4TYpKKksam4eg7h3Wkx9
+-dCagcTvD4vtRiadzZXzUQ0kLjCmsFKFpPk9YOcq2y3k2oDNAgykeCCZOYKCrfJ/M
+-TZGtDF47rL8d1M+pSTTqMbF8BvWyZ3hTKkB4dNbF4uNQ5EPD8fgkmPOMR9Ul5R3X
+-XvrzDWYJb0+qElbtP4Y570KQTmbBpTj2soFb2fLuPv4NpBTNx3xIja4fs7wYP46M
+-k1dI+wQnrC512rpacowOtWKlqx3yBrtKNjg39faPHQQpfPqkJNYZZPVA9rc255SG
+-l4B7y4ECgYEA1v+8z4r+lkrX/t0L2WmuHHjE6no+1c3C4RdHkkUYvgUWdE7fjRGH
+-fpcfZu/aTcnTj+LAkZpEty8gDZKqb8tpliMbpnkzx7Li4AYQof5QYcWQb9rJYihT
+-70fJgLN2QQCAD7VC00AuUam7D8r4o4uImmrOxa5jqZFHztphKXMU4p8CgYEAwkoc
+-vZ/LRcbiKm72/CJ8RI9YgkQanFye/6cYwsVyrydmaevxdCq68hcafPSHwJSraEK9
+-zo2T6qaZZr1zdwdSFutsBfOw6g7MMPfxtUPtmHJnwoFsEBSjwSwddwi/RLXiZGUK
+-I31z1sRO4XoLzhvESZZP9aCURT3MSwqFTWsasJkCgYEApyKpoeHYpfdK0FsAciRA
+-cOvFkM41eLn7LEaPofrLEDUeTo5eJOkinttWUwxUdbJXH/zTXJ1Dm/Arh8Gjc0L7
+-MvbZ8OE5yp2a1zJ/zZ7I2CjgbsPzV7YoAdSZpc5dOIzuAMgVSeoT1/INdGqCPYkk
+-SX6MfYpi+Zfx7bFAZRuMedsCgYA2Qrp6HumHSD8buLfTvNHV1+7RGrIP3zIslf8t
+-TjV0Q12v0UwytEhXmio0oZpUJ3Ejghg+Wn3n97U540kfAfVkH0Wg9+j9xTozpttj
+-U2BExhbCVKDYcNs29NoZx2CbkOx0O1+0f7HdVh/tisdHPav5HTihkcI3AEZQ4tRN
+-xc7DaQKBgFtj7G/nbhU1Rr1d7HJk8to88zHvUPPWI8AaqyQKDKD2nOSAysA0v9h6
+-z7FG0SidXeCZF8NnlxRcR6+Zf/oDgx/akKGXGGGifgAIjkq53CQewNyg8iQda0cF
+-3wU8z+qAajPnhXEZ7T/OO1pRUUQRvM1obOLVORTzP+ZTD9/RZu4F
++MIIEowIBAAKCAQEAlfZAk/6RuOY5RI4uzGfTNTr4AVpO2Xqw1HVOZcojQmUqUBKx
++Ikmk75Rlbh4HO7ORnfXDUYTogVEcgbOtPDN3PNkBgA/JlelbJl7gklNDYs3aK70K
++FKe5YVgONPUuzg9jwpwK/K+iCOCh2ynXq/QAzJk7K7adfdAQGtiHnGKWO085jmOP
++IuPmjcf393VUKnhC2B+dsThalii2OjKI95vhxVohqyPkMGk7EquEwQE1yKG0+WUw
++6qJ8KigQeiN0rKX8F4Zw582e1j2K7zQqWOJu1YD0UVchQ8YQRxH29r2hwkZph7xY
++4L+pH7knLDJkrIamDzkBM1YIRVLZw9HVoNcAWwIDAQABAoIBAA092WjxnYNypmB+
++OSkPPlA6dncdts2viD+FljHlxFd5OfnB4ZM+zOOwBx7O/WHq34y2DHrW96k6wZlW
++uMRfYdCx84oPzgPA2PqAsTRdsGfgKzrmewyxqYX5C22z4qykuwqoBbS9rqfTBTSM
++s5pGHIknoXJty+bpAUSllWy1+Q1s6FhIgebw0au/Gq8qQ3RfEyjYrEij8AHcUKYq
++/CYZ/BKl/T2i7gYk12f+J3D6AdGU8LYvAhr+pN1vWZ09xE7x62ExbLa9+zJYRA6m
++s5FTzlhCNN0QAREwdRibWEAF6F7FZ20G1Pu73jRddJtUZA2a8QhVIcWatYs+fpLL
++l8EM0v0CgYEAyOD3YcLhHSY1gJDFrOeiw2ZmV9CtnoDrHwHsvjtpyj0HKgLxYDHX
++2ieh2KH/Fv5rJW0etbtP2k74fU08Ya2sf1tPQ2/0takr62bH+6sVx7neuBWahWpN
++cSPMl4x9KzFTNLpbjWCR57ZxPvONtdLylC6lWCbil8vmrn9kQg4CGD8CgYEAvxyN
+++J+rEATAFCVhT8reVKyUq1KgP/gnOT8BDe7a+bgbaNoIVikl+cjvw+FCSro38hdT
++x5H5tQVdr67CXixbYCuXzTZlyxxhKsr68iWgrVn50iFXadR+Sydf3B02paZE9l0V
++CqW2V7QVnUYvQkJq/AZgDEAamCc+nvaG1GS0sOUCgYA0UMKcp1BRcx4D+bBBs6Hk
++GcsVm7dbzF9vl+S8NmT60qIHAvUyBEke+6te6/GvX1swSBbzZXEKff6hQ3gySDTg
++hjtCaOnmVcSmbgIvPQNTHMkwUBAKJwE8MgKahXAjy5jL5qzpSPk2y4D60Btb+zBJ
++/0v4hUgGGIhfcbX+rf9FqQKBgE9FWN433IzYa5PvrV2bmH0m2MP3keD23c4xBA7z
++dIEAjN4BElQq3UWuw0VMumKku2//nRC6zAj6INIuexD09TH+4wiL9804CFXnvA+U
++7AD7wVQX4FpVec1Sl8CFnZU4UoKeOYwhEHFwkUabRh8FzbqcKlrqfB2AqcjmGScg
++XpLBAoGBAK4X+65EryEncxexUG4lB+4ddihuxyPJrR+42bOC7oIVe3+D1N4pokaw
++pqTEi3K/vRF1pvOL79cKJQBkcjdFxuELOrw+N7DlZHEvWHX+xJYONpt1WHVU3hwm
++Iv/+SqNG7KSxzWcYNMwtwP/hd65LJoV/n520GdGP/RwPtiBAYQSV
+ -----END RSA PRIVATE KEY-----
+--- puma-5.6.5.orig/examples/puma/client-certs/client_expired.crt
++++ puma-5.6.5/examples/puma/client-certs/client_expired.crt
+@@ -1,19 +1,19 @@
+ -----BEGIN CERTIFICATE-----
+ MIIDBDCCAeygAwIBAgIBFzANBgkqhkiG9w0BAQsFADA4MRMwEQYKCZImiZPyLGQB
+-GRYDbmV0MRQwEgYKCZImiZPyLGQBGRYEcHVtYTELMAkGA1UEAwwCQ0EwHhcNMTkw
+-ODAxMDAwMDAwWhcNMjAwODAxMDAwMDAwWjA/MRMwEQYKCZImiZPyLGQBGRYDbmV0
++GRYDbmV0MRQwEgYKCZImiZPyLGQBGRYEcHVtYTELMAkGA1UEAwwCQ0EwHhcNMjUx
++MDAxMDAwMDAwWhcNMjYxMDAxMDAwMDAwWjA/MRMwEQYKCZImiZPyLGQBGRYDbmV0
+ MRQwEgYKCZImiZPyLGQBGRYEcHVtYTESMBAGA1UEAwwJbG9jYWxob3N0MIIBIjAN
+-BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoywLJRT7wZM1P3Abg9NIT+NJ8TkS
+-IBz8ZgyyhSW1lU/tcsNEJakIl22XAeLEHfMknMzDqvU1G256hqM+/Tgohreat+yc
+-ofy+2OOu4un+44qIGX82i2PCt+afVvbGhPpHioyAJRDXZd9V4FtESH+6As7m+6MH
+-E4yX547E6XmmJ9lp8z9FnBMi1a6C01bI6mZhMuReLl2bS0FWjqrwNN3PpizBD+Vv
+-FbUIndC+UiD0kYPxTwSDCpEq/To0FrNCdAj94Y4oZVuvx8B1mHiqwkqmlOLUZslS
+-u7CFInqbswq5LnGFRIVSg3bu4bgCbCEmJhfqxp5MODT4VBXa2sCOnG7BBwIDAQAB
+-oxIwEDAOBgNVHQ8BAf8EBAMCBLAwDQYJKoZIhvcNAQELBQADggEBAHDfDovSTCmM
+-sxDCfTGQUYwnvOohTP0hjUHB6BzNAPVKYoBiq064m/JoDFmOGGtF3CqhWqtE2psl
+-eOK8fA/QomyFaIAowhx8qrswMP7T/rRldAG+9QHBYZGkPtbB8evK6XqrMEQTf2Ux
+-FlN3p7BZl9rhtuManMb+Wud3HfLYjXn2nTRvkOTi93MP05Vrho8KegZ9Kj4wY1rK
+-gOnkbI6bv+1r9yjsZuUKPH/OjFkpmAoOab5hX5R5CmEefGAet2KPCNrApuwfvRHT
+-x9jVwtOYBHq3DVcBDBu+O38L+WlKGeXvUK4AzvxQaVUysCG3DA1zrvyI3Y8Jy2Jk
+-KfmWZWlvXlM=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+ -----END CERTIFICATE-----
+--- puma-5.6.5.orig/examples/puma/client-certs/client_expired.key
++++ puma-5.6.5/examples/puma/client-certs/client_expired.key
+@@ -1,27 +1,27 @@
+ -----BEGIN RSA PRIVATE KEY-----
+-MIIEowIBAAKCAQEAoywLJRT7wZM1P3Abg9NIT+NJ8TkSIBz8ZgyyhSW1lU/tcsNE
+-JakIl22XAeLEHfMknMzDqvU1G256hqM+/Tgohreat+ycofy+2OOu4un+44qIGX82
+-i2PCt+afVvbGhPpHioyAJRDXZd9V4FtESH+6As7m+6MHE4yX547E6XmmJ9lp8z9F
+-nBMi1a6C01bI6mZhMuReLl2bS0FWjqrwNN3PpizBD+VvFbUIndC+UiD0kYPxTwSD
+-CpEq/To0FrNCdAj94Y4oZVuvx8B1mHiqwkqmlOLUZslSu7CFInqbswq5LnGFRIVS
+-g3bu4bgCbCEmJhfqxp5MODT4VBXa2sCOnG7BBwIDAQABAoIBAGsjyE2Y8ZWxKw10
+-dxyf5qNOAoc5igU8Ax6ex7lVgV2BFdB9FooD63hCpRy/4TYpKKksam4eg7h3Wkx9
+-dCagcTvD4vtRiadzZXzUQ0kLjCmsFKFpPk9YOcq2y3k2oDNAgykeCCZOYKCrfJ/M
+-TZGtDF47rL8d1M+pSTTqMbF8BvWyZ3hTKkB4dNbF4uNQ5EPD8fgkmPOMR9Ul5R3X
+-XvrzDWYJb0+qElbtP4Y570KQTmbBpTj2soFb2fLuPv4NpBTNx3xIja4fs7wYP46M
+-k1dI+wQnrC512rpacowOtWKlqx3yBrtKNjg39faPHQQpfPqkJNYZZPVA9rc255SG
+-l4B7y4ECgYEA1v+8z4r+lkrX/t0L2WmuHHjE6no+1c3C4RdHkkUYvgUWdE7fjRGH
+-fpcfZu/aTcnTj+LAkZpEty8gDZKqb8tpliMbpnkzx7Li4AYQof5QYcWQb9rJYihT
+-70fJgLN2QQCAD7VC00AuUam7D8r4o4uImmrOxa5jqZFHztphKXMU4p8CgYEAwkoc
+-vZ/LRcbiKm72/CJ8RI9YgkQanFye/6cYwsVyrydmaevxdCq68hcafPSHwJSraEK9
+-zo2T6qaZZr1zdwdSFutsBfOw6g7MMPfxtUPtmHJnwoFsEBSjwSwddwi/RLXiZGUK
+-I31z1sRO4XoLzhvESZZP9aCURT3MSwqFTWsasJkCgYEApyKpoeHYpfdK0FsAciRA
+-cOvFkM41eLn7LEaPofrLEDUeTo5eJOkinttWUwxUdbJXH/zTXJ1Dm/Arh8Gjc0L7
+-MvbZ8OE5yp2a1zJ/zZ7I2CjgbsPzV7YoAdSZpc5dOIzuAMgVSeoT1/INdGqCPYkk
+-SX6MfYpi+Zfx7bFAZRuMedsCgYA2Qrp6HumHSD8buLfTvNHV1+7RGrIP3zIslf8t
+-TjV0Q12v0UwytEhXmio0oZpUJ3Ejghg+Wn3n97U540kfAfVkH0Wg9+j9xTozpttj
+-U2BExhbCVKDYcNs29NoZx2CbkOx0O1+0f7HdVh/tisdHPav5HTihkcI3AEZQ4tRN
+-xc7DaQKBgFtj7G/nbhU1Rr1d7HJk8to88zHvUPPWI8AaqyQKDKD2nOSAysA0v9h6
+-z7FG0SidXeCZF8NnlxRcR6+Zf/oDgx/akKGXGGGifgAIjkq53CQewNyg8iQda0cF
+-3wU8z+qAajPnhXEZ7T/OO1pRUUQRvM1obOLVORTzP+ZTD9/RZu4F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+ -----END RSA PRIVATE KEY-----
+--- puma-5.6.5.orig/examples/puma/client-certs/client_unknown.crt
++++ puma-5.6.5/examples/puma/client-certs/client_unknown.crt
+@@ -1,19 +1,19 @@
+ -----BEGIN CERTIFICATE-----
+ MIIDBTCCAe2gAwIBAgIBEzANBgkqhkiG9w0BAQsFADA5MRMwEQYKCZImiZPyLGQB
+-GRYDbmV0MRQwEgYKCZImiZPyLGQBGRYEcHVtYTEMMAoGA1UEAwwDQ0FVMB4XDTIw
+-MDgwMTAwMDAwMFoXDTI0MDgwMTAwMDAwMFowPzETMBEGCgmSJomT8ixkARkWA25l
++GRYDbmV0MRQwEgYKCZImiZPyLGQBGRYEcHVtYTEMMAoGA1UEAwwDQ0FVMB4XDTI2
++MTAwMTAwMDAwMFoXDTMwMTAwMTAwMDAwMFowPzETMBEGCgmSJomT8ixkARkWA25l
+ dDEUMBIGCgmSJomT8ixkARkWBHB1bWExEjAQBgNVBAMMCWxvY2FsaG9zdDCCASIw
+-DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKQo9ve3XI5fiKE5AKI3Qm7aeGwy
+-uIR5RBo58Na4saBSfCaKZvNwzuEimKN6S4ShUlV0egKwCs/KvzbhQJpIxVsLQCGs
+-AQDxdOGP1FyizQvzDhzL7BC2I/Dp3A5V6uXkxo1qTqoBdTYeJ/mdIVgZ7bgTnUdu
+-uY9KErU/ugR8MbqZyQel/04PSmkCTdhzP41w0xvmc7Jgab0vJ0oXU4knXIyKsLeq
+-BkL6fevPW4fdaU+ppXBvpsgWfACk/WZs+DyhPndcX7JNrcnYIIAJy75wivqw2RDB
+-m59XNhoDwbR21EkcZnlQL59pv4ASA7DrJs+tFoGqsCs7DyEioePNp6ZraSkCAwEA
+-AaMSMBAwDgYDVR0PAQH/BAQDAgSwMA0GCSqGSIb3DQEBCwUAA4IBAQBMbPmIekCi
+-TMLtclXtkhKUefb9hoALhABwRbTbzPjz+MGJX2BMwLt8bAs6AMY8jEazvfm9+G0m
+-1liBAGWFojSzAykNIq/zAG2tgDVolQp3x4JcyFDJ0cuR8DIdll2CCnLM2jP8Nek8
+-wSyuWDsm1U5kmos/dP/ialCvvCLHULoSCBhsyBFKmH2ViXdW09Wg4jSQ4RIToBBn
+-w/VbObeKA8NBUW6/7w6MS1oeFL3PlZJ205zVrZ68nqm/ckYyaBAdlQNTmlThNSQ5
+-eL7w2QgfYDM72Sk4/rjZsW0kH+V0ZqmIuyVBE6jo5EulGPLo2eQEfPmhEdbo5rFi
+-foV+QKM8z3K0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+ -----END CERTIFICATE-----
+--- puma-5.6.5.orig/examples/puma/client-certs/client_unknown.key
++++ puma-5.6.5/examples/puma/client-certs/client_unknown.key
+@@ -1,27 +1,27 @@
+ -----BEGIN RSA PRIVATE KEY-----
+-MIIEpQIBAAKCAQEApCj297dcjl+IoTkAojdCbtp4bDK4hHlEGjnw1rixoFJ8Jopm
+-83DO4SKYo3pLhKFSVXR6ArAKz8q/NuFAmkjFWwtAIawBAPF04Y/UXKLNC/MOHMvs
+-ELYj8OncDlXq5eTGjWpOqgF1Nh4n+Z0hWBntuBOdR265j0oStT+6BHwxupnJB6X/
+-Tg9KaQJN2HM/jXDTG+ZzsmBpvS8nShdTiSdcjIqwt6oGQvp9689bh91pT6mlcG+m
+-yBZ8AKT9Zmz4PKE+d1xfsk2tydgggAnLvnCK+rDZEMGbn1c2GgPBtHbUSRxmeVAv
+-n2m/gBIDsOsmz60WgaqwKzsPISKh482npmtpKQIDAQABAoIBAQCOZybN/pbgvojU
+-apFdJpiPdx8tpNYhvNxR7983NOKJU+R0vmzOUxZzgEJu1cC63gKBNNg+ip3mYVd8
+-cOxMqkHhV6IbU41PVyXwIYezkFpVOlQMsO0oFgiZjRSiru9k3A9NT2HL4hXei0xc
+-IW1ycpOfsgwmkiuP3E7cQdrI1z+AQVG0VKaETHg8acqrC7Dp4VGuz9t5bXjZKU2+
+-GjZ/bNFfuHHeDndZ6xKb+4nVCf0HouxwGzGArMMrI0XXStoR5w6DSn35j5AaqX1a
+-FzEHn+VolmdAJnK9kH/1tPmLYAzlnnpF4MmiPQhaQZFCGa+Slg71fFmHdKEqnFCO
+-Q24S2faNAoGBANJgTZ/KDHaXCd4qjVTVp1dXhnY2SAxCBGdftRiuviF+ZwJPNx1B
+-vhtBYOccneMv5AZ7DhXXLRhCcEN8F/FxQd+coZWgZU7TjW+9fLgHJDvQKUUmrQmn
+-fanhEmdkHT4bte/uQ0+GUbi7uTxVi9b2keSWvEmYsb30IXruvABAGVsDAoGBAMfC
+-005AW6kBluxmS1e0uC4vMCvp9ICFRonBk+ZXrt2wCDJjfnsl3tCyP31DxWpw/P51
+-PtTxAnHsYwDvIjsoCghGECfvSmzdx32zzSLZ9maf5GF95tMgYnxwQN/nG5DLEjHF
+-kizkXYAjt1bjEy+Ih/52x42gtzMph9BJFNvIJL1jAoGAGRvhZ+bnoefZB6kwgSWW
+-+Xe61rUX2E6w0926cZ25l6nMhZwKyfUkyX/+HtdtiMYYgyWAwt6RxUl4uLVA7lJE
+-OHorVv5z2Pqq8OE+14AStQjdRCGfmX1iJDp2xdxPGTCZgG+BnSY87r2JGEhljlyT
+-gSL0ihwtaqyOqmuACM+dtx0CgYEAhi6SLcABUfclX8oe1d0o0q0T2IuglyvvA92p
+-8VH4viTefKpkbWg00U7KYuRBGYyoBGzRNcxmbgvxPNFk1wPAKWqWs5yDC7m1pPQ/
+-2Sc74heJGwutHyhjv17P1RayZ4JgyFoEJG+JdueG4bBKVOWLJBy5UqMgLBe7iOdu
+-QWuhci0CgYEAxYbtLUBarxuOe6B2WIGm7ovuT/R5jZVND3hBPjEDbcIZVVEzljkI
+-Kp4nq973guCc2qSPFvMpw4T66G2GrQ+xEoaGSTPVB3l//7w6gJki9gJQ08PzMmsc
+-GXI1TsTqxRY6tw3tKnyWd6n3k/gSOKw9sF4+imvkpZqZmsHKNsfEUng=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+ -----END RSA PRIVATE KEY-----
+--- puma-5.6.5.orig/examples/puma/client-certs/server.crt
++++ puma-5.6.5/examples/puma/client-certs/server.crt
+@@ -1,19 +1,19 @@
+ -----BEGIN CERTIFICATE-----
+ MIIDBDCCAeygAwIBAgIBBzANBgkqhkiG9w0BAQsFADA4MRMwEQYKCZImiZPyLGQB
+-GRYDbmV0MRQwEgYKCZImiZPyLGQBGRYEcHVtYTELMAkGA1UEAwwCQ0EwHhcNMjAw
+-ODAxMDAwMDAwWhcNMjQwODAxMDAwMDAwWjA/MRMwEQYKCZImiZPyLGQBGRYDbmV0
++GRYDbmV0MRQwEgYKCZImiZPyLGQBGRYEcHVtYTELMAkGA1UEAwwCQ0EwHhcNMjYx
++MDAxMDAwMDAwWhcNMzAxMDAxMDAwMDAwWjA/MRMwEQYKCZImiZPyLGQBGRYDbmV0
+ MRQwEgYKCZImiZPyLGQBGRYEcHVtYTESMBAGA1UEAwwJbG9jYWxob3N0MIIBIjAN
+-BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXOg3gTrGJfVft9cSrfGRnEZezDB
+-L93fcLwJAoaXGxbEg1RW/fOrSpSNemuqOvbzczV7m5eYTf1lHPBJsndbYyijIR1+
+-Fp4tjFDp76SC3hxCIc3uYXIz0qQwSOAi1z15zobS4xF29jlsXWtfBl9fivjzdj/f
+-pbZ+JPYOrlcJAf6Xmr3xh//13rOI0ytBMlWf51z/iAZBLm2wvbt+nR7B6koAdTgM
+-Coe+gOtcLWYY5ApJ4qB9knGdxWoF5p7guHHw2aGTM0jyhgBowfVkFRiE2JUmODae
+-g+dHsd8ogWbqhGyZTredJF/NRrLKU0h+t7ldKHvXEZy4qyqQlvKoTpODqQIDAQAB
+-oxIwEDAOBgNVHQ8BAf8EBAMCBLAwDQYJKoZIhvcNAQELBQADggEBAI/bcQP4Hu9O
+-OtaaIjVxN8+9jXUOrMpSogmZ4bRKImispt9SA+sbxec7iOMM2pG3Py2yi0hWGzii
+-hSebWIsM1JuPj7ks9l8nGRxpGeInJwTkJorG4ZLEypoS2wW3fQZGx3o4da5V+U2Z
+-HEY0wQTbPBqqnyeZ16ZFNVCzw8y9l7y7CEFjvUO3sq0pne9r7Z+XVgjGyBdBYkJS
+-0kcqPBXFCMHrWH5UlacYlM5cqgoVztOp2STGmR3XR7a34oueeA10QSP+jzeYvWA1
+-wTYA762uU2ReCdujfNbf8V1tZWAH36KldM3hhDNWeveAGxxj1h2R9T/k2kHl/a7D
+-I3VdS59vjJY=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+ -----END CERTIFICATE-----
+--- puma-5.6.5.orig/examples/puma/client-certs/server.key
++++ puma-5.6.5/examples/puma/client-certs/server.key
+@@ -1,27 +1,27 @@
+ -----BEGIN RSA PRIVATE KEY-----
+-MIIEpQIBAAKCAQEAvXOg3gTrGJfVft9cSrfGRnEZezDBL93fcLwJAoaXGxbEg1RW
+-/fOrSpSNemuqOvbzczV7m5eYTf1lHPBJsndbYyijIR1+Fp4tjFDp76SC3hxCIc3u
+-YXIz0qQwSOAi1z15zobS4xF29jlsXWtfBl9fivjzdj/fpbZ+JPYOrlcJAf6Xmr3x
+-h//13rOI0ytBMlWf51z/iAZBLm2wvbt+nR7B6koAdTgMCoe+gOtcLWYY5ApJ4qB9
+-knGdxWoF5p7guHHw2aGTM0jyhgBowfVkFRiE2JUmODaeg+dHsd8ogWbqhGyZTred
+-JF/NRrLKU0h+t7ldKHvXEZy4qyqQlvKoTpODqQIDAQABAoIBAQCCtt8NkNMs2sYB
+-jdc97mKtg6eTKeaBQlLCk9qblYV4uVLJUk3bVl6fTLP4/YQsvurmWMZ6ajQ5y1YS
+-i3At5NB3MDitxo2SyXyfzcw6/oUU/uZaMJ4DOiqrcYGnJo6jd9UtPDURWqF77c7o
+-/gZIfVGMr4w70IJc8fdDRUqH26Fpb7Gp0+RNUXtM9tSovkX/yICje7Hp4IIiJJ0t
+-KGepdHfddshR4OIALh0k3jC9zfbYfSdIKZuGBf7bmjJTByLavjcG6HFLyt7aZBt3
+-136hXAOvMO780WW2vQ8xAYkd+8bf4db4fjUpw3NWJ5wVdQhI9jhkAc9LhhxiDVoI
+-g9IyaSUBAoGBAObajQ24JlNg11ZZffPZwmvMlMDyZ8pZ5dk/Up9nOvCp1J2+7ef/
+-6wjkOhrSyIPpvJCmftOn0c9IkV7tk5673Kjmly33QiIwiEeEG3lNN6GytiXIGqFV
+-ScPGznO/rNeKUsMFu3SXZNYs7aYqr9OCadwATuh+IzTQAx3T3prno4F5AoGBANIW
+-kJRF2Pl4yWc7MRjF+WnGfhJHv7VOcLlmFD1fa/IIM9xuBRgikiBWHtFwLoXknsY8
+-y2VqNrPEkjCp+qLpXLC8l3dzpNU33Z42h/tUfoTmgSgDUQXGggjzbcS8cf+1D55z
+-KuPazKAndyiuhIENk1gE+5RKdNyjYP2sI4+L5jexAoGBANxx2rw9GywHj9n/P006
+-pnO2Ol49nGsYiWp5E3bwZtIl+shf6GLgeRpWhj3TBnMhIlWnB/kpiiq8i0Tw7URo
+-9H+9IqRcNqTbX2ebeXjOCc+5DkLp4LQq83OmRsM1R+HTTtC4ipb9cucqpA1HOftp
+-z5isGq3ctdXaxP8YsLuPcw1RAoGAXZx0W70ryy2JAJidbd55Hiq17ktOHumOzO2x
+-Qw+Lt9Lz2NqlJnXxCruVC9miwUJ3hPl93/iN21hRk6GJ7qFxDcda7nz3C5LTCzZd
+-LR4fKfTTxBKGPb6QHpDpbmpRmZECHqZOjCzoVMyBCf2JST/VUbkWqKLso4uhIidb
+-yRCbSmECgYEAp+IuwpnMxVPxP52/xPFVcAxH2pDfmn5TJLJCNuKEUAS9ncZuz7rh
+-jJxtbC4AoGsS0+TdxnlMBvBpZE3QddQmjvey77yu/OvRUX2m/J/d+I2duTaHGR9Z
+-9VMxtlFY+DbDkJI2HVVxu5XfLKMJSEsMza8K64Ntx3XY3dJLCHrR1EY=
++MIIEogIBAAKCAQEAnihQ8P6kgn066bN+g+i76KYdFo9gsHwmxYZrZroK8E496Npt
++IpmFpRe7lwRQNcCVYVfi/tSCh/UgI5gD8isvMl6wj0aR4RT+5xGmiql0J8yOqrIQ
++h3pkWIEeH2Yj04IAS3fOLjEPzSKFRmk9ji3fzdOBM67EFRX4ETU47zVRaQsLdFd/
++TkxZ0PNW4RC6U9YFtG157hPQZ+f4absQx83cI5aFCzSPnsK5vQUK4hMP2fYyDaID
++giWtmDc+nHzrUfzs5tavxIqj2FDLucM9bln4XrdedOzLUun39J6Ywcz+VQPc02yR
++6zSFRsW5Q9RgloPMKFSa0kHvGxW0qSR1ckOFgQIDAQABAoIBAAmNOcY0Os8+rO4s
++Tvm8dozIa31PT3GZLeZEBfyAQ+TbdNW5S1oJl46u7j9inU2BwgPNAQKO5ws6/KPp
++rGNVxFXwbg1ZH7pOQE7IPBynu0IkEoGwm1rzQ1gtBBq1WniNo2Lra2JSyDeFXDMy
++a+tITfnqSiVK6sCzQPYZFsUrnS0Qy01QE70AkDVYpIYMiDA2X9f5J6x0I9nvwL6z
++bcGETAYIYe1aJanBX09HXGxlJt/0LI9oSiYL9BHdHzce6q/mQEARyKs82nH4hMKE
++7fSio7et3rP1u51r6asAU/FRzcdnOIJOYn15B48tFAeA96s6wI3j5Y7GA9k3RvDW
++WoOFeLkCgYEA20UgaliksNT3I7ournSN+vKbSCA60uvmAbLHBEwZpbFa6ZbjBXmq
++fuXEENfbUBxCyqYRYiZZJTE8Qi5l9bAz6koeSREGqYjv+/v40C/I9/dXZqOKbHzH
++W6fM1rvh6RWHzhoBVNIxDtuR064kBhGHr3rUzb3HAXp7sKFf50Iv7gsCgYEAuKaG
++DUH08CMgK3maoBGQvNxnfy+GcJu53fpWdfp4vNQAXR7v8BXkjAkkiYOVUn2635r+
++nRFpTrhmJ32aqJxru7QAqikA9VdWBwoh15rjxJ6jNamDg3/iP7/y0ARAxsdgHy7y
++oBDlIEC7YuUuA5P2kEhP2EpzQYBRkKKnwCDQLiMCgYBl0VOcDk1rT3jzPiEvITBM
++txskAtNN3fyQDVQcyrmeFx0AGvCQOk7RXiANMi7EpFrffv3Tdbsvag1xLdpqm8d/
++o6ssgpt1XgESIY8IHShU/KW5I3fDqK1qAiE8FUJx2W2WZrz3hiMBozOz98kCiGFZ
++OtBWOSmPpjCJdGX0HOfkwQKBgEjAK1671uJqJHmcjsR0Rz9x40EkG2bwpBmGUVxo
++U/up137Y+pXwOjzGOWQIuONocCE7cwe1XXVLh8wVW8ME5hltQTnJr/v57gYWAuFs
++wEKucgVphUxhLWYKnYNBubfXw9Jlb+iK34uGlY3QWAHG4UVViEfihWiQQxKmU0uK
++YhtbAoGAfE+DG/9juBEAbKdSerQBK5B6ewuF3CYsEhFb0QiYz+l5X5wxXKfAyry1
++4G8gakLmBLJr58BS4u444n5jcVLWSjfix/Xvdqqr1UDibAxIPmSwweMbN/goi5xp
++V29Gc3BJlre0U24YwMYX80eWlRg2gR+2AQJKf9+VB66HvFYZpDY=
+ -----END RSA PRIVATE KEY-----
+--- puma-5.6.5.orig/examples/puma/client-certs/unknown_ca.crt
++++ puma-5.6.5/examples/puma/client-certs/unknown_ca.crt
+@@ -1,19 +1,19 @@
+ -----BEGIN CERTIFICATE-----
+ MIIDEDCCAfigAwIBAgIBETANBgkqhkiG9w0BAQsFADA5MRMwEQYKCZImiZPyLGQB
+-GRYDbmV0MRQwEgYKCZImiZPyLGQBGRYEcHVtYTEMMAoGA1UEAwwDQ0FVMB4XDTIw
+-MDgwMTAwMDAwMFoXDTI0MDgwMTAwMDAwMFowOTETMBEGCgmSJomT8ixkARkWA25l
++GRYDbmV0MRQwEgYKCZImiZPyLGQBGRYEcHVtYTEMMAoGA1UEAwwDQ0FVMB4XDTI2
++MTAwMTAwMDAwMFoXDTMwMTAwMTAwMDAwMFowOTETMBEGCgmSJomT8ixkARkWA25l
+ dDEUMBIGCgmSJomT8ixkARkWBHB1bWExDDAKBgNVBAMMA0NBVTCCASIwDQYJKoZI
+-hvcNAQEBBQADggEPADCCAQoCggEBAJXBTI7itz3JCkNRpR3Jdas/HK2+WLoy3cck
+-taH0OUHPxSEDteNCRlwR07cEWThl6QMQROHEJLCVPIjCLXmu2uwJ6SjPb7keRXJb
+-mOHWo0ZXyc0xnLIv8anWXFAlMconvtpSoYgyNUFwYQdhWTv3I9HrdqCrez70+DXy
+-q3gsTgvixwUIUm+/kWs6zfIHCtwiAusM2Xjrc9Aa/+5JTa3rsdXUXxyrakoKr2ED
+-0BrhWRmopM+xf7V42dNpwuFnrtqDfmyPKtzZbv5J8w6oq7BGC2+CL7MYo1fnonWP
+-kxRZCYzp/qtkhotHHypnpZuQh2puOwnisGykA8rSX/hltCklx5ECAwEAAaMjMCEw
++hvcNAQEBBQADggEPADCCAQoCggEBALIp4dTrRiijv2sILN7SgCAR3bOdWzCL/Yew
++AplM1qkwPB0KYa+6dXndtxVb5TdV5P83t74evZ7wHfPbdvDKgpIPDsjgbRd8O1i0
++9Itp9iUv6BpErqThtM0SPqcvr5dHlZStjvOzbDWApv5S1usgcnDRxNObYGPQ2MTK
++0OgpflMkPCVvFX05DEP2BPXmJOLfWVHSHPKYfl0lba7tTbTa74xhiULhgS7wCL7X
++UVHY6RlzfLGrA5B9TL6xsWPX+WUYUbuD9mxeCtxyXnNGjXAfzW37swEteJXxtHCP
++8BwJ9afz6wp0vLeniOIpSKNWrAtOhtqZrg0i/wo+z4llX9DzVjkCAwEAAaMjMCEw
+ DwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQELBQAD
+-ggEBAFH23fStJpmaYUwqIhuWfId4a75eJvp5zpedU4e9Adl+a87u+iNrppa34fPs
+-Ni1XhrGYbh4gTSRmy39R1JW3O5LUDJ6LlDkZOgduiMyLvVksmD70MPuyaBrPmIWE
+-mauOzk3TtvKI4+wBEzLAdYUhliAtMyRJaUN5Bbe+q3P9tL7Hsh9uKusJ5jyMetI7
+-8lLZqKHvE4MDV3AqS6OLLlTC1WdTKR9fqdHYwyh8+DFMBm7PuZjFP9tjDiQwhfEX
+-zbj9J8ba94BA8jmh3Z8a/S0rzcF33KPn+DWyrnyLWWSWKTLHN9TpVHRlhQ4OEOYZ
+-LVu0+VBx8eIwdLZplDfQ9sGUjCs=
++ggEBAGrpVgbp+YSXCBX7KnNe3fpBFOEPJECvI0XzFTNKeYCm8R6I3Qmketel3TxZ
++1Ff7yjZxvdIl51Xw41yC5aSCWDhxh4YkzvgOdCOexWsHUt2LGDQptSnyKCC28syz
++WP4lCwneVdzEVrorNDEnPQ/sYMhdYp5QD7u/enUnyDvAu5licur/m0sWPlpRasE7
++/bcJr/Pa3mGC4iXZ0gauK8i0M4B/3HVm6gL7TOCJImV4aQ7CyDXqK+FJLO+sjcOI
++GXuJf/YLjIvhZarRccW1bDt5AbKudgzXGTjXDGC40uahaPJZMLm9jundBbGD1mPW
++JGDp4c/0dMVyKK3MMiEn6QQvDT0=
+ -----END CERTIFICATE-----
+--- puma-5.6.5.orig/examples/puma/client-certs/unknown_ca.key
++++ puma-5.6.5/examples/puma/client-certs/unknown_ca.key
+@@ -1,27 +1,27 @@
+ -----BEGIN RSA PRIVATE KEY-----
+-MIIEowIBAAKCAQEAlcFMjuK3PckKQ1GlHcl1qz8crb5YujLdxyS1ofQ5Qc/FIQO1
+-40JGXBHTtwRZOGXpAxBE4cQksJU8iMItea7a7AnpKM9vuR5FcluY4dajRlfJzTGc
+-si/xqdZcUCUxyie+2lKhiDI1QXBhB2FZO/cj0et2oKt7PvT4NfKreCxOC+LHBQhS
+-b7+RazrN8gcK3CIC6wzZeOtz0Br/7klNreux1dRfHKtqSgqvYQPQGuFZGaikz7F/
+-tXjZ02nC4Weu2oN+bI8q3Nlu/knzDqirsEYLb4IvsxijV+eidY+TFFkJjOn+q2SG
+-i0cfKmelm5CHam47CeKwbKQDytJf+GW0KSXHkQIDAQABAoIBAAHmslIeDrV6F+dC
+-4hW+uP+zjWmnQPkcLDSbArNLpm5vdNE2etinvrzsfQOVyowsvwiK7FTxaIXVXy9d
+-R7aDwcO9XHhoKcLv33HUN9ymHOyHsMgqGRMqCKdfUUyzLC6k0odzBRn1iTeLda/i
+-TH+2Y34GvzrK8oWaFoyYyBR+e38rHOMBF5gmQSkwHZ+8qOsHuI7ajukLioRXLElq
+-ivrOdeaiNmTfofXiDakZm5/SKJ2pXbzQkeibqLkTXeU/p3ltjVrg0GbgF1l5SjmK
+-OyFUeTRjmA8KAFpPri2WggZ6rW9N58u7iF1+hIxRua42lHQ3UXvza41cLX0IjxkT
+-dL0e5QECgYEAxC7kswPej/Omo8T0hZtWHAB6eyas43VzCyypdrDKyfKJGbVWBC61
+-YsOI7L2K1biKsx7gyidOVlNdp3ycmgyyBuH4vn8UhEzOpLLnEw1HX9KDfKQL9yjG
+-f7GYUiHIOE1ah0X45PMpuk/FI0JvFdQCG3MKe7ypM7h2QV2wSM43n3cCgYEAw2p0
+-Dc8AmkEIOP2ZtB4jadD/XTZpxotd6rqZkGt0YWW4fkzdJGjeDhs+W4pT6tG85fFW
+-Bmxz80YsbG9ktHiUTZAS89ixxUnmecudsp4xlTGsGaIboQLPwST8S7iA2AXq0fgW
+-rZX/OiKM+IVbszBWrVpCNHKGPnfiO6PE3GiU4zcCgYBZXTcGKIQQNJ+6x/POjIS7
+-+qfQQzzL2+tMssp662tkdFtpX4XQH+q2E3XiyTBdzFM55p3k1+TCQ/VMXuIC9jd+
+-FR82vzJ8VXRn56qEri7OAlmsxBlDO8q3zhEhkIvgwbO0HPaUbAOc/8tAFXn+inVv
+-RYcH+Fdm3ObZPbEYaP9DXwKBgF14JqiQMbaWkotH6eP4YnHzsKFyLGf2M2bZ+CfW
+-7eTEVdm7hC8tJcFTkKESag8wYQ0PQVlzOIbNMuRu55lW74CmABq4tFcsgNwS44wT
+-FJ5LEwlzu4lpIdw9h5vkVWR+eBIUeyxuSZUR/6HDj9gGr/7c5DvX55QrnX9vVvMh
+-5s1DAoGBAICs0BjCHmAOcEXIHzt3gTju6oj2sQ/Fob03XsEKcfR6Ci32sBQekdqA
+-rpkNiJKzrHjo79nDDcioXGvDD5Duv0fTxFmYME2lTm6nvKS8QF4b+K8C/UKzhpmt
+-zAvwVTOtLnMpHNcKvadSPKFMWNl8M12oi8ELGGPouuh24zX4eyAe
++MIIEpAIBAAKCAQEAsinh1OtGKKO/awgs3tKAIBHds51bMIv9h7ACmUzWqTA8HQph
++r7p1ed23FVvlN1Xk/ze3vh69nvAd89t28MqCkg8OyOBtF3w7WLT0i2n2JS/oGkSu
++pOG0zRI+py+vl0eVlK2O87NsNYCm/lLW6yBycNHE05tgY9DYxMrQ6Cl+UyQ8JW8V
++fTkMQ/YE9eYk4t9ZUdIc8ph+XSVtru1NtNrvjGGJQuGBLvAIvtdRUdjpGXN8sasD
++kH1MvrGxY9f5ZRhRu4P2bF4K3HJec0aNcB/NbfuzAS14lfG0cI/wHAn1p/PrCnS8
++t6eI4ilIo1asC06G2pmuDSL/Cj7PiWVf0PNWOQIDAQABAoIBABATRdhhiyDHF5In
++eG75dMyP+B5I/C2e7/cCe1WMMJEu9DmVkndZ3lgq2GZhtoad5i3d/+L0YJ0a4sT6
++QBrdVtcpaybWUxmLoMox95+tpaM41ZsrJ8viPp9DPmp028XNVHKID24vOfwA2fB4
++FoK8GH9T+guyyQlwkmJ9P0i3V7nWFDj1/vRpo+lfyEm7FXU0oftU/lp5LjyysXKy
++v9Vt4Ugpjw25XJPjD7TsjTNysBoXTmR+xp5tiWQv7rRL4H+3eCxBDn8xzZVQthIp
++6gJhHpdBlCUB8uiISVG2+cUl0TB8SwRZuSznupZLBsJZP0yUX22lr+PxuhRlCtF5
++kWsGm7UCgYEA583dFZzngw1aH8P4hgGSXpJXzPrfeuJq8AFcq9dFAcUN6AU+iuq1
++ZlAYxEYvVdkzF/h8EsaW1YZPWSuPvllf2rr3jEUxphe0iH9juQm/HODsTyGdMluN
++YxjCfJltnhKNAbEDxwZ3RVdl/+Av9mAVDpf5Ngi3/2DOC1ADTPsmgwUCgYEAxMKq
++sNa22SnOvwr4bL7bhenfhb/UmoAGJjXBRShU+E7GRSft0s9YA+rXnKnTb95sz/e+
++pTv4M6yRR0sZn8tg2GwnNROEM13VRdZGSXYTljlCi22dBxNoxcG6DokiH5JOraoQ
++NeDxxXONlpuaZxmq1MPOlarA/5d4AkA6btl6lKUCgYBvg7HgO+OEQGAi9/wPO6JW
++rMBgdDAexd38KCuU37Lq7wmJnTxBSDiMR+wiQEF1Y1AZMAlAXxkhD8QMedBlGknq
++yBde+8quxKitIduvoOi309zbFKizGSgjjD3EA2ugp/v93FKc5JdsXGdNeWSZeg+n
++PaU+QWODD+cPuiZcWlZkoQKBgQCfORC77eUls0lVG+GQzpoCshFpwKShKjzPquxt
++tIeeMNENoZQ45gVJlj9Izb0GaC4R1V/3gqIF3v3pfYKM5x3FxS+tKc/vaV1vGEjk
++paKQDGInRlquISzF61FO9fYhKlp0+owHrbK4oBvR5rV5/TFa3+FLCFUKAF7jI2ql
++zWP+6QKBgQCtQzcwp3cf+/MPycimNeePSKXXbl3zIASzBxNKW/dooROeqKySyfDn
++DxlhgeDUpWeBWZ5O1w4HFgRukjV8PnGNwDMOYQi2PLw8n3jK3xuSV5GVN2A92tMa
++BUY9ZvrQGh6CdJpJ8nsgi3OBwukPh6nRQ3R4f8BIwLx8/Vnv+JfAdQ==
+ -----END RSA PRIVATE KEY-----
+--- puma-5.6.5.orig/examples/puma/puma_keypair.pem
++++ puma-5.6.5/examples/puma/puma_keypair.pem
+@@ -1,27 +1,27 @@
+ -----BEGIN RSA PRIVATE KEY-----
+-MIIEpAIBAAKCAQEAv2lrSC+U13CB7+5pk0TmFPIEsfd5DN124ZxiOhLLoBWBpvwz
+-yzk7tE8wQM5FXrFG4Z82BEjjQqTHgTzDmJwdKn1a6awSLkWsohwhe22q4t1wGRQS
+-r03+Y9VkCWDkmvkh4/NZp8zSBN0qVHUs39QdxVowda3j8rPaNr3CVSFoqXLv5QbU
+-l0eFDXKsBVVRMs31hPxVOTJoHXX4rSYql28dzIW4HjIFy8J3iIZIip/vCOUQhGnw
+-9r0Lq1HyACUKLgA+XOaeBih3fBtcCESmyO9JcJYJ14coP/ACAHPVpsDjI2dIiFvg
+-oUWQYyf4XvhmN4Jk3bzuXP/XyBAufTrcRdUogQIDAQABAoIBAQC3fm3UE5kSNs65
+-ncoj3cbbiW8q1Fx9EslmWq5nkaEW48cYt2lHhqRPpCJT3enubu/OVvxHe0AxoRmI
+-MSIo6G+lTeqbW9NJ/I0UEveeBXHube2KfQ20dIZMWkK+It7EGdR9W8o07ErhUsvD
+-j1jnccbgbCdMiNiez/9+vsbPKWnWFaok28+k3SHzsxVQm9zW3X9RVEACcoWeUW1O
+-6SWUwdEttP9+X+zAOONGtuzbR4lYwI7rl0DDoQ1oY6oROLU9XTXEs5hlSSvxQQLV
+-u4AHogcUlnNPbd31NnjYtsBeh/TKJ4njYqooCTHjtkUtYbOCt8X6Yd7U4KwtViNd
+-RIrTSxHJAoGBAOi33Bbbnty03gm2tYO16RgVTsPnzruJsCWOJbviNW/NIzB85j8a
+-S1OCH+10/MBUEOl/Q7S7xFsBVvmNA9pyw1RiRHGxRVTRl4XbpPhDhDCo/m3U4/6Y
+-MyLAprOcUJP/b6pbNzjnowuQDqvFm/I60tazSPobhMoxo06NbOFiNqF7AoGBANKP
+-qXKI8P06TQ+gK+DfXwAslcHtQzTPEoVl5GuvUcL+HOMzR7zQwLVOwA0FCyBtYewd
+-byOhsDqOQFyQCGCk9JUmvbrzx5fg5IWWz245pvwIrQ0X2H7YemeRsGS5DGQXpuvi
+-2aQWbXdI27v83OTCDZbo27mNTCPqy7MLKa+Wp+czAoGAO+z8c7ZiFhtNAdtWqm/x
+-cg4qli/fAFPYVBNijBsX/44nfZjsAVvYAc0EQ7VYUH5VTItE+AlR6s1RhDlXwKzE
+-t7oGPfCUFd9S0VlaBcP9Cjq6KbYkb67pnA1X3/Bkn3erXYbXlYOwbI3P+VONcLbN
+-DBRmumDTtO1LTDMG0pLj1nkCgYEAvo+mGzI0Z/lLpMig7XM61z2Ci2/fUvvVF0WP
+-5KVWqdKw8i6GzitfPLd4uE/IMiDMbpR08Rp0E4qKVTtFWbHwaMwXCgt2p82xA/Xo
+-5SjoJ1DyzNa36JSisvj3WzDeNffx6an0rrxddYdK1meSwrWc9ubndJacQiVNFU0U
+-/QSsEGECgYBinPeuJEPabDpvTsAvtuQHoh1jLAVZutvCdFUvG0Ozf2GJQ0evDYml
+-UqWG9YElKfTN8NDLQehNANuUMRjDIqNF7B6Y0/dg2HJJjv5OXoYUDhGzV7RitFyV
+-qfdp99aSQpIsmevzUMbHa/0Uh5e3bnnIH+9QYQJSaI7D/8oD2OhBVQ==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+ -----END RSA PRIVATE KEY-----
--- /dev/null
+0004-puma.gemspec-drop-git-usage.patch
+0011-disable-minitest-extensions.patch
+0012-disable-cli-ssl-tests.patch
+0013-fix-test-term-not-accepts-new-connections.patch
+0014-disable-test-failing-on-amd64.patch
+CVE-2023-40175.patch
+CVE-2024-21647.patch
+CVE-2024-45614.patch
+CVE-2026-47736_37.patch
+new-certs-generated.patch
--- /dev/null
+.TH PUMA "1" "January 2020" "PUMA 3.12" "User Commands"
+
+.SH NAME
+puma \- fast, concurrent web server for ruby and rack
+
+.SH USAGE
+.BI "puma [options...]" " [rackup file]"
+.PP
+.B puma [\-h | \-\-help | \-V | \-\-version]
+
+.SH OPTIONS
+.PP
+The following options are available:
+.TP
+.BI "\-b, \-\-bind " URI
+URI to bind to (tcp://, unix://, ssl://).
+.TP
+.BI "\-C, \-\-config " PATH
+Load given path as a config file.
+.TP
+.BI "\-\-control " URL
+DEPRECATED alias for \fB\-\-control\-url\fR.
+.TP
+.BI "\-\-control\-token " TOKEN
+The \fITOKEN\fR to use as authentication for the control server.
+.TP
+.BI "\-\-control\-url " URL
+The bind \fIURL\fR to use for the control server and app. Use \fIauto\fR to
+use a temp unix server. This requires to use a \fB\-\-control\-token\fR, which
+needs to be given with every request to the control server (\fItoken=foo\fR).
+.TP
+.B \-d, \-\-daemon
+Demonize the server into the background.
+.TP
+.B \-\-debug
+Show low level debugging information.
+.TP
+.BI "\-\-dir " DIR
+Change to given directory before starting.
+.TP
+.BI "\-e, \-\-environment " ENVIRONMENT
+The environment to run the Rack app on. Default \fIdevelopment\fR.
+.TP
+.BI "\-I, \-\-include " PATH
+Specify \fB$LOAD_PATH\fR directories.
+.TP
+.BI "\-p, \-\-port " PORT
+Define the TCP port to bind to. Use \fB\-b\fR for more advanced options.
+.TP
+.BI "\-\-pidfile " PATH
+Use the given path as PID file.
+.TP
+.B \-\-preload
+Preload the application. This loads all the application code prior to forking.
+Preloading reduces total memory usage of an application and is only available
+in cluster mode.
+.TP
+.B \-\-prune\-bundler
+Prune out the bundler env if possible.
+.TP
+.B \-q, \-\-quiet
+Do not log requests internally. Default: \fItrue\fR.
+.TP
+.B \-v, \-\-log-requests
+Log requests as they occur.
+.TP
+.BI "\-R, \-\-restart\-cmd " CMD
+The \fBpuma\fR command to run during a hot restart. Default: \fIinferred\fR.
+.TP
+.BI "\-S, \-\-state " PATH
+Where to store the state details.
+.TP
+.BI "\-t, \-\-threads " INT
+Min:max threads to use. Puma will automatically scale the number of threads,
+from the minimum until it caps out at the maximum, based on how much traffic
+is present. Default: \fI0:16\fR.
+.TP
+.B \-\-tcp\-mode
+Run the app in raw TCP mode instead of HTTP mode.
+.TP
+.B \-\-early-hints
+Enable early hints support.
+.TP
+.BI "\-w, \-\-workers " COUNT
+Activate cluster mode and define number of worker processes to create. In this
+mode workers are forked from a master process. Each child process still has
+its own thread pool and the \fB\-t\fR setting is per worker.
+.TP
+.BI "\-\-tag " NAME
+Additional text to display in process listing.
+.TP
+.BI "\-\-redirect\-stdout " FILE
+Redirect \fBSTDOUT\fR to a specific file.
+.TP
+.BI "\-\-redirect\-stderr " FILE
+Redirect \fBSTDERR\fR to a specific file.
+.TP
+.B \-\-[no\-]redirect\-append
+Append to redirected files.
+.TP
+.B \-h, \-\-help
+Show help.
+.TP
+.B \-V, \-\-version
+Print the version information.
+
+.SH EXAMPLES
+.PP
+The following examples show how to bind TCP or sockets:
+.PP
+Bind Puma to a socket with the -b (or --bind) flag:
+.RS
+.B puma -b tcp://127.0.0.1:9292
+.RE
+.PP
+To use a UNIX Socket instead of TCP:
+.RS
+.B puma -b unix:///var/run/puma.sock
+.RE
+.PP
+To change the permissions of the UNIX socket, add a umask parameter:
+.RS
+.B puma -b 'unix:///var/run/puma.sock?umask=0111'
+.RE
+.PP
+In need of a bit of security use SSL sockets:
+.RS
+.B puma -b 'ssl://127.0.0.1:9292?key=path_to_key&cert=path_to_cert'
+.RE
+.PP
+The following example show how to Create a control server and use
+.BR pumactl (1)
+to interact with the control server to restart \fBpuma\fR.
+.RS
+.B puma --control-url tcp://127.0.0.1:9293 --control-token foo
+.br
+.B pumactl --control-url 'tcp://127.0.0.1:9293' --control-token foo restart
+.RE
+.PP
+
+.SH "CONFIGURATION FILE"
+.B puma
+will look for a configuration file at \fIconfig/puma.rb\fR. If an environment
+is specified, either via the \fB\-e\fR and \fB\-\-environment\fR flags, or
+through the \fIRACK_ENV\fR or the \fIRAILS_ENV\fR environment variables, it
+looks for configuration at \fIconfig/puma/<environment_name>.rb\fR.
+.PP
+The \fB\-C\fR flag allows one to pass on a custom configuration location. If
+the value specified is a dash (\fI\-\fR) \fBpuma\fR won't look for any
+configuration file:
+.PP
+.RS
+.B puma -C \(dq\-\(dq
+.RE
+
+.SH "SEE ALSO"
+.PP
+There is extensive documentation at <\%https://puma.io/puma/\%> and
+<\%https://github.com/puma/puma\%>.
+
+.SH AUTHOR
+.PP
+This manual page was written by \fBDaniel Leidert\fP
+<\%dleidert@debian\.org\%>, for the Debian GNU/Linux system (but may be used by
+others).
--- /dev/null
+examples/*
--- /dev/null
+# this is one of several sub-directories; no need to rename it
+repeated-path-segment puma usr/share/doc/puma/examples/puma/
--- /dev/null
+debian/puma.1
+debian/pumactl.1
+
--- /dev/null
+.TH PUMA "1" "January 2020" "PUMA 3.12" "User Commands"
+
+.SH NAME
+pumactl \- command line client for puma
+
+.SH USAGE
+.B pumactl [options...] [commands]
+.PP
+.B pumactl [\-h | \-\-help | \-V | \-\-version]
+
+.SH COMMANDS
+.TP
+.B halt
+Halt the server.
+.TP
+.B restart
+Restart the server.
+.TP
+.B phased-restart
+Restart server but phase out old workers while starting new workers one at a
+time.
+.TP
+.B start
+Start the server.
+.TP
+.B stats
+Show stats about the server.
+.TP
+.B status
+Show server status.
+.TP
+.B stop
+Stop server.
+.TP
+.B reload-worker-directory
+Reload the worker directory.
+.TP
+.B gc
+Start garbage collector.
+.TP
+.B gc-stats
+Show information about garbage collector.
+
+.SH OPTIONS
+.PP
+The following options are available:
+.TP
+.BI "\-F, \-\-config\-file " PATH
+Load given path as a config file.
+.TP
+.BI "\-T, \-\-control\-token " TOKEN
+The \fITOKEN\fR to use as authentication for the control server.
+.TP
+.BI "\-C, \-\-control\-url " URL
+The bind \fIURL\fR to use for the control server and app. Use \fIauto\fR to
+use a temp unix server. This requires to use a \fB\-\-control\-token\fR, which
+needs to be given with every request to the control server (\fItoken=foo\fR).
+.TP
+.BI "\-p, \-\-pid " PID
+Define the TCP port to bind to. Use \fB\-b\fR for more advanced options.
+.TP
+.BI "\-P, \-\-pidfile " PATH
+Use the given path as PID file.
+.TP
+.B \-Q, \-\-quiet
+Don't display messages.
+.TP
+.BI "\-S, \-\-state " PATH
+Where the state file is.
+.TP
+.B \-H, \-\-help
+Show help.
+.TP
+.B \-V, \-\-version
+Print the version information.
+
+.SH EXAMPLES
+Create a control server and use
+.BR pumactl (1)
+to interact with the control server to restart \fBpuma\fR.
+.RS
+.B puma --control-url tcp://127.0.0.1:9293 --control-token foo
+.br
+.B pumactl --control-url 'tcp://127.0.0.1:9293' --control-token foo restart
+.RE
+.PP
+
+.SH "SEE ALSO"
+.PP
+.BR puma (1)
+.PP
+There is extensive documentation at <\%https://puma.io/puma/\%> and
+<\%https://github.com/puma/puma\%>.
+
+.SH AUTHOR
+.PP
+This manual page was written by \fBDaniel Leidert\fP
+<\%dleidert@debian\.org\%>, for the Debian GNU/Linux system (but may be used by
+others).
--- /dev/null
+require 'gem2deb/rake/testtask'
+
+Gem2Deb::Rake::TestTask.new do |t|
+ t.libs = ['test']
+ if ENV['AUTOPKGTEST_TEST_PUMA_SERVER_SSL']
+ ENV['OPENSSL_CONF'] = '' # https://github.com/puma/puma/issues/2147
+ t.test_files = FileList['test/test_*_ssl.rb']
+ else
+ t.test_files = FileList['test/**/*_test.rb'] + FileList['test/**/test_*.rb'] - FileList[
+ 'test/test_*ssl.rb',
+ 'test/test_integration_systemd.rb',
+ 'test/test_integration_cluster.rb',
+ 'test/test_integration_pumactl.rb',
+ 'test/test_worker_gem_independence.rb',
+ 'test/test_preserve_bundler_env.rb',
+ 'test/test_request_invalid.rb',
+ 'test/test_busy_worker.rb',
+ ]
+ end
+ t.verbose = true
+end.tap do |t|
+ exclude = %w[
+ test_application_logs_are_flushed_on_write
+ test_hot_restart_does_not_drop_connections
+ test_logs_all_localhost_bindings
+ test_multiple_requests_waiting_on_less_busy_worker
+ test_term_not_accepts_new_connections
+ ]
+ t.options << ' ' << "-e'/" << exclude.join('|') << "/'"
+end
--- /dev/null
+#!/usr/bin/make -f
+
+export GEM2DEB_TEST_RUNNER = --check-dependencies
+export DH_RUBY = --gem-install
+export DH_RUBY_GEM_INSTALL_EXCLUDE = benchmarks/* docs/* win_gem_test/* tools/* bin/puma-wild
+export LANG = C.UTF-8
+
+%:
+ dh $@ --buildsystem=ruby --with ruby
+
+override_dh_installchangelogs:
+ dh_installchangelogs History.md
--- /dev/null
+---
+include:
+ - https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/salsa-ci.yml
+ - https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/pipeline-jobs.yml
--- /dev/null
+3.0 (quilt)
--- /dev/null
+# no signed tarballs by upstream
+puma source: debian-watch-does-not-check-gpg-signature
--- /dev/null
+Test-Command: export AUTOPKGTEST_TEST_PUMA_SERVER_SSL=1 && gem2deb-test-runner --check-dependencies --autopkgtest
+Depends: @, @builddeps@
+Restrictions: allow-stderr
+Features: test-name=ssl
--- /dev/null
+---
+Archive: GitHub
+Bug-Database: https://github.com/puma/puma/issues
+Bug-Submit: https://github.com/puma/puma/issues
+Changelog: https://github.com/puma/puma/tags
+Repository: https://github.com/puma/puma.git
+Repository-Browse: https://github.com/puma/puma
--- /dev/null
+version=4
+opts="searchmode=plain, \
+ filenamemangle=s/.+\/v@ANY_VERSION@/@PACKAGE@-$1\.tar\.gz/" \
+https://api.github.com/repos/puma/puma/releases \
+https://api.github.com/repos/puma/puma/tarball/v@ANY_VERSION@
projects / puma.git / commitdiff